388wim Privacy
Policy

1 Introduction

388wim ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who visit, register with, or interact with the 388wim online gaming platform at 388wim.net. This Privacy Policy has been prepared in accordance with internationally recognised data protection principles and applies to all players, including those accessing 388wim from Karachi, Lahore, Islamabad, Faisalabad, and other cities across Pakistan.

This policy describes:

• What personal data 388wim collects from you and why;
• The legal basis on which we process that data;
• How we store, protect, and — where applicable — share your data;
• How long we retain your data;
• The rights you hold in respect of your personal data and how to exercise them.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall use of the 388wim platform. Capitalised terms not defined in this policy carry the meanings assigned to them in the Terms & Conditions.

2 Data Controller

For the purposes of applicable data protection law, 388wim acts as the data controller in respect of personal data collected through the 388wim.net platform. As data controller, 388wim determines the purposes and means by which your personal data is processed.

If you have any questions about how 388wim processes your personal data, or if you wish to exercise any of your data rights as described in Section 10, you may contact our dedicated Data Privacy team at:

3 Data We Collect

388wim collects personal data from you through several channels: directly when you register or interact with the platform, automatically through your use of our services, and occasionally from third-party verification or payment providers. The categories of data we collect are set out in the table below.

388wim does not knowingly collect sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or biometric data used for identification) except where explicitly required for identity verification or responsible gaming compliance purposes.

4 How We Use Your Data

388wim processes your personal data only for clearly defined, legitimate purposes. We do not process your data in ways that are incompatible with the original purpose for which it was collected. Our primary purposes for processing personal data are as follows:

• Account Management: To create, maintain, and administer your 388wim account, including verifying your identity and age (21+ requirement) and processing your login credentials securely.
• Service Delivery: To provide access to 388wim's sports betting, casino, slot, cricket betting, kabaddi wagering, and lottery services, and to process your bets, wagers, and game results.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions.
• KYC & AML Compliance: To verify your identity and age in compliance with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under applicable international regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• Customer Support: To respond to your queries, complaints, and requests submitted via live chat, email, or other support channels.
• Responsible Gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, in order to offer timely responsible gaming interventions.
• Platform Improvement: To analyse usage data and improve the performance, design, and content of the 388wim platform.
• Legal Compliance: To comply with applicable legal, regulatory, and licensing obligations, including responding to lawful requests from regulatory or law enforcement authorities.
• Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, and updates about 388wim services. You may withdraw this consent at any time.

5 Legal Basis for Processing

388wim processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual Necessity: Processing required to fulfil our contract with you — i.e., to operate your account and deliver gaming services as described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and responsible gaming obligations under our international gaming licence.
• Legitimate Interests: Processing carried out for purposes of fraud prevention, platform security, and internal analytics, where those interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your explicit, freely given, informed, and unambiguous consent — specifically for direct marketing communications. You may withdraw consent at any time by updating your account preferences or contacting support.

6 Cookies & Tracking Technologies

6.1 What Are Cookies? Cookies are small text files placed on your device when you visit a website. 388wim uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform effectively, remember your preferences, and understand how players use our services.

6.2 Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the operation of the 388wim platform — for example, maintaining your login session and security tokens. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences such as language selection, display settings, and responsible gaming limits you have configured.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform, helping us identify areas for improvement. No personally identifying information is shared via these cookies.
• Security Cookies: Used to detect and prevent fraud, bot activity, and other security threats in real time.

6.3 Cookie Control. You may control cookie behaviour through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use key features of the 388wim platform. 388wim does not use third-party advertising cookies or retargeting pixels that track you across external websites.

7 Data Sharing & Disclosure

388wim does not sell, rent, or trade your personal data to third parties for marketing or commercial gain. We share your data only in the following limited and controlled circumstances:

• Payment Processors: We share the financial data necessary to process your PKR deposits and withdrawals with our authorised payment partners — JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. These providers are contractually bound to use your data solely for payment processing purposes.
• KYC & Identity Verification Providers: We may share identity documents and verification data with third-party KYC service providers who assist us in verifying your identity and age. These providers operate under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: We may disclose personal data to regulatory bodies, law enforcement agencies, or other governmental authorities where required to do so by law, court order, or as part of our licensing obligations.
• Fraud Prevention Agencies: In cases of suspected fraud, money laundering, or other prohibited conduct, we may share relevant data with industry fraud prevention organisations.
• Technology & Infrastructure Providers: We use third-party cloud hosting, database, and cybersecurity services to operate the 388wim platform. These providers act as data processors under our instruction and are prohibited from using your data for their own purposes.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of 388wim, player data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

In all cases of third-party data sharing, 388wim implements contractual safeguards to ensure that recipient parties handle your data with the same level of care and security as we apply internally.

8 International Data Transfers

388wim operates as an internationally licensed platform, and some of the third-party service providers we work with may be located outside of Pakistan. Where personal data is transferred internationally, 388wim ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring recipient organisations to apply data protection standards equivalent to those described in this policy;
• Transfer only to jurisdictions or organisations that maintain adequate data protection frameworks;
• Regular review of international data transfer arrangements to ensure ongoing compliance.

If you would like more specific information about the safeguards applied to international transfers of your personal data, please contact us at [email protected].

9 Data Retention

388wim retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active account relationship with 388wim, plus a minimum of five (5) years following account closure — in compliance with AML and regulatory record-keeping requirements.
• Transaction & Betting Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with financial regulation and licensing requirements.
• KYC Documents: Retained for a minimum of five (5) years following your account closure date.
• Customer Support Records: Retained for up to three (3) years following resolution of the relevant support query.
• Marketing Consent Records: Retained for as long as you maintain a 388wim account, and for up to two (2) years following account closure, for evidence of consent.
• Technical & Server Logs: Retained for up to twelve (12) months, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible.

10 Your Data Rights

As a 388wim player, you hold the following rights in respect of the personal data we hold about you. To exercise any of these rights, please contact us at [email protected] with the subject line "Data Rights Request". We will respond within seven (7) business days of receiving a verified request.

• Right of Access: You may request a copy of all personal data 388wim holds about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that we correct or complete it.
• Right to Erasure ("Right to be Forgotten"): Subject to our legal retention obligations, you may request that 388wim delete your personal data. We will process verified erasure requests within thirty (30) days.
• Right to Restriction of Processing: In certain circumstances, you may request that we restrict the processing of your data — for example, while we investigate a dispute about its accuracy.
• Right to Data Portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Object: You have the right to object to processing carried out on the basis of our legitimate interests, including profiling. You also have an unconditional right to object to direct marketing processing at any time.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

388wim will not charge a fee for processing data rights requests unless a request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. We reserve the right to verify your identity before acting on any data rights request.

11 Security Measures

388wim implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your device and 388wim servers is encrypted using 256-bit SSL/TLS encryption.
• At-Rest Encryption: Sensitive data stored in our databases — including financial records and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to player data within 388wim is granted on a strict role-based, need-to-know basis. All internal data access is logged and subject to regular audit.
• Two-Factor Authentication: 388wim strongly encourages all players to enable two-factor authentication (2FA) on their accounts to protect against unauthorised access.
• Penetration Testing: 388wim engages independent security specialists to conduct regular penetration tests and vulnerability assessments of our platform infrastructure.
• Incident Response: In the event of a data security incident that poses a risk to players, 388wim will notify affected individuals and relevant authorities within the timeframes required by applicable law.

While 388wim implements robust security measures, no system is entirely immune from risk. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us immediately if you suspect any unauthorised access to your 388wim account.

12 Children's Privacy

The 388wim platform is strictly intended for adults aged 21 years and over. 388wim does not knowingly collect, process, or store personal data belonging to individuals under the age of 21. Registration by minors is prohibited, and any account found to belong to an individual under 21 will be immediately suspended and deleted, with all associated data processed in accordance with our legal obligations.

If you are a parent or guardian and believe that a minor has registered with 388wim, please contact us immediately at [email protected]. We will investigate and take appropriate action as a matter of priority. For guidance on responsible gaming and protecting minors from online gambling harm, please visit our Responsible Gaming page.

13 Updates to This Privacy Policy

388wim reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform services. When material changes are made, we will notify registered players via email and/or a prominent notice on the 388wim platform at least seven (7) days prior to the changes taking effect.

The "Effective Date" at the top of this policy will be updated to reflect the date on which the current version came into force. We encourage you to review this Privacy Policy periodically to stay informed about how 388wim protects your data. Your continued use of the platform following any update constitutes acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are available upon written request to our Data Privacy team.

14 Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or the way 388wim handles your personal data, please do not hesitate to get in touch. Our Data Privacy team is part of our broader 24/7 support operation and will respond to all privacy-related enquiries promptly.

For information about the full rules governing your 388wim account, please read our Terms & Conditions. For tools to manage your gaming behaviour and wellbeing, visit our Responsible Gaming page.