388wn Privacy Policy

388wn acts as the data controller in respect of all personal data collected from players and visitors to the 388wn platform. As data controller, 388wn determines the purposes and means by which your personal data is processed. This Privacy Policy applies to all personal data collected through the 388wn website, mobile-optimised site, and any associated support channels including live chat and email correspondence.

If you have any questions about how 388wn processes your personal data, or wish to exercise any of your data rights described in Section 9, you may contact our Data Protection team directly at: [email protected] — please write "Data Privacy Request" in the subject line to ensure your message is routed to the correct team.

388wn collects personal data in the following ways: directly from you when you register, verify your account, make deposits or withdrawals, contact support, or interact with promotions; automatically through technical systems when you use the platform; and from third parties such as payment processors and identity verification services where required by our KYC obligations.

The categories of personal data we collect are set out in the summary table above. In particular, please note the following regarding sensitive data categories:

• CNIC Documents: Your Computerised National Identity Card copy is collected exclusively for the purpose of satisfying our KYC and anti-money-laundering obligations under our gaming licence. CNIC data is stored in an encrypted, access-controlled environment and is never used for any marketing or commercial profiling purpose.
• Financial Account Details: JazzCash wallet numbers, EasyPaisa account details, and bank account information provided for deposit and withdrawal purposes are used solely for payment processing. 388wn does not store full card or bank account numbers in plain text.
• Biometric Data: 388wn does not collect biometric data (such as fingerprints or facial recognition data) from players.
• Automatically Collected Data: When you visit the 388wn platform, our systems automatically record your IP address, device type, operating system, browser version, session start and end times, and pages visited. This data is used for security monitoring and platform performance purposes only.

388wn processes your personal data only for the specific, legitimate purposes described below. We do not repurpose your data for uses that are incompatible with the original purpose for which it was collected without first obtaining your explicit consent:

• Account Management: To create, maintain, and administer your 388wn player account, including verifying your identity, processing your deposits and withdrawals in PKR, and communicating with you about your account activity.
• Regulatory Compliance: To meet our obligations under our gaming licence, including age verification (21+ minimum), anti-money-laundering screening, source-of-funds checks, and reporting to relevant regulatory and law enforcement authorities where legally required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited activities. Technical data including IP addresses and device identifiers is central to this purpose.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling behaviour, apply deposit limits and self-exclusion restrictions requested by players, and connect at-risk players with our responsible gaming support team.
• Customer Support: To respond to your support queries, process complaints, and maintain a record of our communications with you for quality assurance and audit trail purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data in order to improve the platform's features, games, and banking options for all Pakistani players.
• Marketing (Consent Only): To send you promotional offers, bonus notifications, and PSL cricket betting alerts — but only where you have explicitly opted in to receive such communications. You may withdraw marketing consent at any time.

388wn does not sell or rent your personal data to any third party. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, Raast, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. Each payment processor operates under its own privacy policy and data processing agreements with 388wn.
• Identity Verification Providers: Third-party KYC providers may process your CNIC and address documents on our behalf to perform automated identity checks. These providers are bound by strict data processing agreements and may not use your data for any other purpose.
• Game Providers: Software providers whose games appear on the 388wn platform may receive your player ID and gameplay data for the purpose of game delivery, technical support, and RNG audit purposes. Game providers do not receive your financial or identity documents.
• Regulatory Authorities: 388wn may be legally required to disclose player data to gaming regulators, financial intelligence authorities, or law enforcement agencies in connection with AML investigations, sports integrity enquiries, or court orders.
• Professional Advisers: In limited circumstances, 388wn's legal advisers, auditors, and compliance consultants may access personal data to the extent required to provide professional advice. All such advisers are bound by confidentiality obligations.
• Business Transfers: If 388wn is acquired, merged, or its assets transferred, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such change via the email address on your account.

388wn retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account relationship with 388wn, plus a minimum of five (5) years following account closure, as required by our anti-money-laundering obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with financial record-keeping requirements under our gaming licence.
• KYC Documents: Retained for five (5) years following account closure or the last transaction on the account, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication, or until the resolution of any related dispute or legal claim, whichever is later.
• Technical and Log Data: Typically retained for thirteen (13) months from the date of collection for security monitoring purposes, after which it is anonymised or deleted.
• Marketing Data: Retained until you withdraw your marketing consent, after which your marketing preferences are flagged as opted-out and no further promotional communications will be sent. Consent withdrawal records are retained indefinitely for compliance purposes.

388wn implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes the following controls:

• 256-bit SSL/TLS Encryption: All data in transit between your browser or mobile device and 388wn's servers is encrypted using industry-standard TLS protocols. This includes login sessions, deposit flows, and all account management actions.
• Encrypted Data at Rest: Sensitive personal data — including CNIC copies, financial details, and identity verification records — is stored in encrypted form on access-controlled servers. Encryption keys are managed under strict key management procedures.
• Access Controls: Access to personal data within 388wn's organisation is granted on a strict need-to-know basis. Staff members can access only the categories of data required to perform their specific role. All access is logged and audited.
• Two-Factor Authentication: Internal 388wn systems that hold player data are protected by multi-factor authentication for all staff users. Players are also strongly encouraged to enable two-factor authentication on their own 388wn accounts.
• Penetration Testing: 388wn engages independent security professionals to conduct regular penetration testing of its platform infrastructure. Identified vulnerabilities are remediated on a priority basis.
• Incident Response: In the unlikely event of a data breach that affects your personal data, 388wn will notify affected players and, where required by law, relevant regulatory authorities, within the timeframes mandated by applicable data protection law.

388wn uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and maintain the security of your session. The following categories of cookies are used on the 388wn website:

• Strictly Necessary Cookies: These cookies are essential for the 388wn platform to function. They manage your login session, maintain your account state, and enable secure navigation between pages. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the 388wn platform — which pages are visited most frequently, how long sessions last, and where errors occur. This data is used solely to improve platform performance and is never linked back to individual players in identifiable form.
• Functional Cookies: These cookies remember your preferences, such as language settings, display preferences, and recently played games, to provide a more personalised experience on return visits.
• Security Cookies: These cookies support 388wn's fraud detection systems by helping to identify unusual patterns of behaviour, such as login attempts from unfamiliar locations or devices.

You may manage your cookie preferences through your browser settings. Please note that disabling cookies categorised as strictly necessary may impair your ability to use the 388wn platform. 388wn does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements.

388wn may send you promotional communications — including bonus offers, PSL cricket betting promotions, casino game launches, and loyalty programme updates — only where you have given your explicit consent to receive such communications during or after registration. The following terms govern marketing communications from 388wn:

• Opt-In Consent: Marketing consent is collected at the point of registration via a clearly labelled, unticked opt-in checkbox. Pre-ticked consent checkboxes are not used. Consent is recorded with a timestamp and the specific channels consented to (email, SMS, or both).
• Withdrawal of Consent: You may withdraw your marketing consent at any time by clicking the "Unsubscribe" link in any 388wn promotional email, by updating your communication preferences in your account settings, or by contacting our support team.
• Transactional Communications: Consent is not required for transactional communications directly related to your account, such as deposit confirmations, withdrawal notifications, security alerts, and changes to our Terms & Conditions or this Privacy Policy.
• No Third-Party Marketing: 388wn does not share your contact details with third-party companies for their marketing purposes. Any promotional communication you receive that purports to be from 388wn but originates from an unrecognised sender should be treated as fraudulent and reported to our support team immediately.

As a 388wn player, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team at [email protected] with the subject line "Data Rights Request". We will respond to all verified requests within 30 calendar days:

The 388wn platform is strictly intended for adults aged 21 years and above. 388wn does not knowingly collect personal data from individuals under the age of 21. The following age protection measures are in place:

• Age Declaration at Registration: All players must confirm their date of birth during registration. The system automatically blocks registration by individuals whose stated date of birth indicates they are below 21 years of age.
• KYC Age Verification: CNIC verification at the point of first withdrawal confirms the player's age against official identity documents. Accounts where the CNIC indicates the holder is under 21 are immediately and permanently closed.
• Suspected Underage Accounts: If 388wn has reasonable grounds to suspect that a player is under the age of 21, the account will be suspended immediately pending identity verification. All funds in the account will be frozen until verification is completed.
• Data Deletion for Underage Registrations: If it is confirmed that personal data has been collected from an individual under 21 years of age, that data will be deleted from 388wn's systems within 72 hours of confirmation, except where retention is required by law.

Due to the global nature of 388wn's technology infrastructure and third-party service providers, your personal data may be transferred to and processed in countries outside Pakistan. Where such international transfers occur, 388wn ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or exceeding the protections described in this Privacy Policy. These safeguards include:

• Contractual Safeguards: 388wn uses Standard Contractual Clauses or equivalent contractual mechanisms with all international service providers who process player data outside Pakistan, ensuring a consistent level of data protection regardless of the processing location.
• Adequacy Assessments: Before engaging any new international data processor, 388wn conducts a data transfer impact assessment to evaluate the legal and regulatory environment in the destination country and confirm that adequate protections are in place.
• Processor Obligations: All third-party processors — whether located domestically or internationally — are bound by data processing agreements that prohibit them from using your data for any purpose other than delivering services to 388wn, and require them to implement security measures equivalent to those described in Section 6 of this Policy.

388wn reserves the right to update or amend this Privacy Policy at any time in order to reflect changes in applicable law, regulatory requirements, or our internal data processing practices. The following process applies whenever this Privacy Policy is revised:

• Version Dating: Every version of this Privacy Policy carries an effective date at the top of the document. The current version became effective on 1 January 2026. Prior versions are available on request from our Data Protection team.
• Material Changes: Where a proposed change is material — meaning it significantly affects your rights or the way your data is processed — 388wn will notify all active players via the email address registered on their account at least 14 days before the change takes effect.
• Minor Updates: Non-material updates, such as corrections of typographical errors or clarifications that do not alter the substance of any provision, will be reflected in the document with an updated effective date but will not trigger individual player notification.
• Continued Use: Your continued use of the 388wn platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with a material change, you may close your account before the change takes effect.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 388wn handles your personal data, please get in touch with our Data Protection team using any of the following channels. We are committed to resolving all data privacy enquiries promptly and transparently:

• Email: Send your query to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request" for fastest routing to our Data Protection team.
• Live Chat: Our 24/7 live chat support team — available in both English and Urdu — can assist with general privacy questions and escalate formal data rights requests on your behalf. Average response time is 3–5 minutes.
• Response Timeframe: 388wn aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the extended timeline promptly.
• Regulatory Complaints: If you are not satisfied with 388wn's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection or gaming regulatory authority applicable under our licence jurisdiction.