At 388win, your privacy is not a legal formality — it is a core platform commitment. This Privacy Policy explains in plain terms what personal data 388win collects, why we collect it, how we use and protect it, who we may share it with, and what rights you hold as an account holder. We believe Pakistani players deserve complete transparency about how their information is handled. Please read this document carefully.
All personal data transmitted between your device and 388win's servers is encrypted using 256-bit SSL technology — the same standard used by international banks. Your login credentials, payment details, and personal information are never transmitted or stored in plaintext under any circumstances.
388win does not sell, rent, lease, or otherwise commercially share your personal data with third-party advertisers, data brokers, or marketing companies. Data sharing with service partners — such as payment processors and KYC providers — occurs strictly on a need-to-know basis under binding data protection agreements.
As a 388win account holder, you hold meaningful rights over your personal data — including the right to access, correct, restrict processing, and request deletion of your information. These rights are honoured by 388win in line with internationally recognised data protection principles and are explained in full within this policy.
388win collects only the minimum personal data necessary for operating the platform, meeting regulatory obligations, and providing you with a personalised and secure experience. We do not collect data speculatively or for purposes we cannot clearly identify and justify within this policy.
388win retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Financial transaction records are retained for a minimum of five years for AML compliance. Account data is deleted within 90 days of confirmed account closure where no legal hold applies.
Promotional emails, SMS notifications, and platform push messages from 388win are entirely optional. You may opt out of all marketing communications at any time via your account notification settings or by contacting our support team — without any impact on your ability to use the platform or withdraw funds.
1.1 This Privacy Policy is issued by 388win ("388win", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://388win.one (the "Platform"). 388win is the data controller responsible for the personal data of all registered users and visitors to the Platform.
1.2 388win serves players primarily in Pakistan, including users across Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities and territories. Our data handling practices are designed to meet internationally recognised standards of personal data protection applicable to our operating licence and to the reasonable expectations of Pakistani users.
1.3 Questions about this Privacy Policy or any data-related matter may be directed to our support team at any time via the contact details set out in Section 15 of this document.
2.1 388win collects the following categories of personal data about you, depending on the nature of your interaction with the Platform:
2.2 388win does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued photo ID is provided for KYC purposes — in which case the photograph is used solely for identity verification and is not retained beyond the verification process.
3.1 Data You Provide Directly. We collect personal data that you voluntarily provide when you:
3.2 Data Collected Automatically. When you access or use the 388win Platform, we automatically collect certain technical and usage data through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser information, and the actions you take within the Platform.
3.3 Data from Third Parties. 388win may receive limited personal data about you from third-party service providers, including:
388win adheres to a data minimisation approach — we collect only what is genuinely necessary for the identified purpose. We do not collect personal data speculatively or "just in case." Where data is no longer required for its original purpose, we move promptly to anonymise or delete it.
4.1 388win uses personal data for the following clearly defined purposes:
Account Management & Platform Operation
Regulatory Compliance & Security
Responsible Gaming
Marketing & Communications (with consent)
5.1 388win processes your personal data on one or more of the following legal bases:
Where 388win processes your data on the basis of your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing that took place prior to withdrawal, nor will it affect any processing carried out on a different legal basis.
6.1 388win does not sell, rent, or commercially transfer your personal data to any third party for their own marketing or commercial purposes. Data sharing with external parties occurs only in the specific, limited circumstances described below.
6.2 Service Providers (Data Processors)
388win engages trusted third-party service providers who process personal data strictly on 388win's instructions and under binding data processing agreements. These include:
6.3 Regulatory and Law Enforcement Disclosure
388win may disclose personal data to governmental authorities, regulatory bodies, law enforcement agencies, or our gaming licence authority where we are legally required to do so, or where disclosure is necessary to protect the rights, property, or safety of 388win, its users, or the public.
6.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of 388win's business, personal data held by 388win may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection safeguards.
388win will never sell your personal data to advertisers. We will never share your data with social media platforms for targeting purposes. We will never transfer your data to parties who have not agreed to binding data protection terms. These are not aspirational statements — they are operational rules enforced within 388win's data governance framework.
7.1 388win uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small data files stored on your device when you visit the 388win website.
7.2 Types of Cookies Used
7.3 388win does not use third-party advertising cookies or tracking technologies that share your browsing data with external advertising networks.
7.4 You may manage or disable non-essential cookies via your browser settings at any time. Note that disabling strictly necessary cookies will impact the availability of certain Platform features, including account login functionality.
8.1 388win operates internationally, and your personal data may be processed and stored on servers located outside of Pakistan. Where such transfers occur, 388win ensures that appropriate safeguards are in place to protect your data at a standard equivalent to the protections provided within Pakistan.
8.2 Safeguards used by 388win for international data transfers include: binding contractual clauses with data processors that require equivalent data protection standards; hosting agreements that mandate server security specifications including encryption at rest and in transit; and engagement only with service providers who operate in jurisdictions with recognised data protection frameworks.
8.3 If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact 388win's support team using the details in Section 15.
9.1 388win retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidance:
9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in such a way that it can no longer be attributed to an identifiable individual.
Records of self-exclusion requests are retained for the full duration of the exclusion period plus an additional 12 months. This retention is a responsible gaming measure — it allows 388win to prevent re-registration attempts before the exclusion period has genuinely concluded. These records cannot be deleted at a player's request during an active exclusion period.
10.1 As a 388win user, you hold the following rights with respect to your personal data. These rights may be exercised by contacting our support team as described in Section 15:
You have the right to request a copy of the personal data 388win holds about you, along with information about how it is being used. We will respond to verified access requests within 30 days.
If any personal data 388win holds about you is inaccurate or incomplete, you have the right to request that it be corrected or completed without undue delay.
You may request deletion of your personal data where it is no longer necessary for its original purpose, or where you withdraw consent and no other legal basis applies. Some data must be retained for legal compliance and cannot be deleted on request.
You may request that 388win restricts the processing of your data in certain circumstances — for example, while you contest the accuracy of data we hold or while a complaint is being investigated.
Where technically feasible and applicable, you may request that 388win provides your personal data in a structured, machine-readable format, or transfers it directly to another service provider at your request.
You have the right to object to processing of your personal data that is based on 388win's legitimate interests, or that is used for direct marketing purposes. Objections to direct marketing are always honoured without question.
10.2 388win will not charge a fee for exercising any of the above rights unless a request is manifestly unfounded or excessive. Where a fee applies, you will be informed before we proceed. 388win may request proof of identity before processing any data rights request to protect against fraudulent or unauthorised access to account data.
11.1 388win strictly prohibits the registration, use, or access of the Platform by any individual under the age of 21. The Platform is designed exclusively for adults and our services, content, and communications are directed solely at persons of legal gambling age.
11.2 388win does not knowingly collect, process, or retain personal data from individuals under 21 years of age. Where 388win becomes aware — through KYC verification, third-party screening, or any other means — that a user is under the age of 21, the relevant account will be immediately closed, all deposited funds returned, and all associated data deleted in accordance with our data minimisation obligations.
11.3 Age verification is conducted as part of the KYC process for all accounts, with additional scrutiny applied where account behaviour is inconsistent with adult usage patterns.
388win's 21+ age requirement is a hard regulatory and ethical obligation — not an advisory. If you are aware of any underage individual accessing 388win, please contact our support team immediately at [email protected]. We take all such reports seriously and investigate promptly.
12.1 388win implements a comprehensive, layered approach to personal data security, incorporating both technical and organisational measures designed to protect against unauthorised access, disclosure, alteration, or destruction of personal data.
12.2 Technical Safeguards
12.3 Organisational Safeguards
12.4 Despite these measures, no internet-based service can guarantee absolute security. You also play a role in protecting your account — please use a strong, unique password for 388win, enable two-factor authentication, and never share your login credentials with any person, including 388win support staff.
13.1 388win may send you promotional emails, SMS messages, push notifications, and in-platform messages about bonuses, new games, PSL cricket promotions, seasonal offers, and platform updates — but only where you have provided consent to receive such communications.
13.2 Consent for marketing communications is collected during the account registration process and can be updated at any time in your account notification settings. You may also opt out of any specific communication channel independently — for example, you may opt out of SMS notifications while retaining email communications.
13.3 To unsubscribe from all 388win marketing communications, you may: (a) use the unsubscribe link included in any promotional email; (b) update your preferences in account notification settings; or (c) contact our support team and request removal from all marketing lists. Unsubscribe requests are processed within 5 business days.
13.4 Please note that transactional and account-essential communications — such as deposit confirmations, withdrawal notifications, security alerts, and KYC verification requests — are not marketing communications and cannot be opted out of while your account is active.
388win does not send unsolicited marketing communications to individuals who have not opted in. We also maintain suppression lists of players who have self-excluded or activated responsible gaming restrictions — these players are automatically excluded from all promotional communications for the duration of their restriction.
14.1 388win reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, regulatory requirements, or our product and service offerings.
14.2 Where amendments are material — meaning they represent a significant change to how we collect, use, or protect your personal data — 388win will notify registered account holders via email to the registered address or via a prominent on-platform notification prior to the changes taking effect, with a minimum of 14 days' advance notice where practicable.
14.3 The effective date displayed at the top of this document will be updated to reflect the date on which any revised version takes effect. Your continued use of 388win following the effective date of any amendment constitutes your acknowledgement of the updated policy. If you do not agree with a material change, you should close your account by contacting our support team before the change takes effect.
14.4 Prior versions of this Privacy Policy are retained for a period of 24 months and may be requested from our support team for reference purposes.
15.1 For any questions, concerns, data rights requests, or complaints relating to this Privacy Policy or 388win's data handling practices, please contact us through the following channels:
15.2 388win takes all privacy complaints seriously. Where you submit a formal complaint about our data handling, we will: acknowledge receipt within 2 business days; investigate the matter thoroughly; provide a substantive written response within 30 days of receipt; and take appropriate remedial action where a breach of this policy or applicable data protection law is confirmed.
15.3 If you are not satisfied with 388win's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority or the independent dispute resolution body designated under 388win's gaming licence conditions.