388wim Privacy Policy

1 Who We Are

388wim is an online casino and sports betting platform operated by an internationally licensed gaming entity (referred to throughout this policy as "388wim", "we", "us", or "our"). The platform is accessible at 388wim.com and is principally directed at adult players in Pakistan aged 21 and above.

For the purposes of this Privacy Policy, 388wim acts as the data controller — meaning we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to assist with operational functions (such as payment processing or identity verification), those parties act as data processors under our instruction and are bound by contractual data protection obligations consistent with this policy.

If you have any questions about this policy or wish to exercise any of your data rights, the first point of contact is our support team, reachable at [email protected]. Support is available 24/7 in both English and Urdu.

2 What Personal Data We Collect

388wim collects personal data across several categories, depending on how you interact with the platform. The table below summarises the main data types collected:

We do not collect any special category data (such as health information, religious beliefs, or political opinions) unless you voluntarily disclose such information in the course of a support interaction, in which case it will be used only to assist with your specific query and will not be stored beyond the resolution of that query.

3 How We Collect Your Data

388wim collects personal data through the following channels:

• Direct input: Information you provide during registration, KYC verification, payment processing, support requests, or by updating your account profile.
• Automated technical collection: Data gathered automatically when you visit or interact with the platform, including IP addresses, cookie identifiers, and device fingerprints via our server logs and analytics systems.
• Payment processors: Confirmation data returned by JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and retail cash agents following deposit and withdrawal transactions. We receive transaction references and status codes — we do not receive or store full payment credentials such as PINs or banking passwords.
• Identity verification providers: Where third-party KYC services are used to validate government-issued identity documents, those providers return a verification status and risk score to 388wim. The underlying document images are processed by the provider under a separate data processing agreement.
• Fraud and AML monitoring systems: Automated risk-scoring systems may flag account activity patterns for review. These systems process usage and financial data already held on the platform.

We do not purchase personal data lists from third-party brokers or data vendors. All data we hold about you originates from your direct interactions with 388wim or from the operational service providers listed above.

4 Why We Use Your Personal Data

388wim uses personal data for the following purposes:

• Account management: Creating and maintaining your player account, authenticating your identity at login, and enabling account recovery.
• Transaction processing: Executing deposits and withdrawals via your chosen payment method, reconciling accounts, and issuing transaction confirmations.
• KYC and regulatory compliance: Verifying your identity and age as required by our international gaming licence obligations, and fulfilling AML and counter-terrorism financing (CTF) reporting duties.
• Platform security: Detecting and preventing fraud, unauthorised account access, collusion, bot activity, and other prohibited conduct described in our Terms & Conditions.
• Customer support: Responding to queries, complaints, and dispute resolution requests in a timely and informed manner.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling behaviour, and applying deposit limits, cooling-off periods, or self-exclusion measures where appropriate.
• Marketing communications: Sending promotional emails or SMS messages about bonuses, new games, and platform updates — but only where you have opted in to receive such communications. You may withdraw consent at any time via your account settings.
• Platform improvement: Using aggregated, anonymised usage data to analyse player behaviour patterns and improve the platform's design, game selection, and performance.

5 Legal Basis for Processing

388wim processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to perform the agreement between you and 388wim — including account creation, transaction execution, and the provision of gaming services — is carried out on the basis that it is necessary for the performance of our contract with you.
• Legal obligation: Processing carried out to comply with applicable laws, including KYC identity verification, AML reporting, and data retention requirements mandated by our licensing authority.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and business analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing carried out for direct marketing communications, and for the use of non-essential cookies, is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where we rely on legitimate interests as our legal basis, we conduct an internal balancing test to ensure that the processing is necessary, proportionate, and does not unduly interfere with your reasonable privacy expectations as a 388wim player.

6 Sharing Your Personal Data

388wim does not sell your personal data. We share it only in the following limited circumstances:

• Payment processors: JazzCash, EasyPaisa, Raast, 1LINK, HBL, UBL, Meezan Bank, and retail cash agents receive the minimum personal data necessary to execute your requested transaction (typically your account reference and transaction amount).
• KYC and identity verification providers: Third-party providers receive identity document images and personal details solely for the purpose of verifying your eligibility to hold a 388wim account. These providers are contractually prohibited from using your data for any other purpose.
• Fraud prevention and AML agencies: Where required by law or by our licensing obligations, 388wim may share account activity data with financial intelligence units, regulatory authorities, or law enforcement agencies investigating financial crime.
• IT and infrastructure providers: Cloud hosting, database, and cybersecurity providers who process data on our behalf under strict data processing agreements. These providers do not have independent access to your data for their own purposes.
• Legal and regulatory disclosures: Where 388wim is required by a court order, regulatory directive, or applicable law to disclose personal data, we will comply with that obligation and, where legally permissible, notify you of the disclosure.

7 Cookies & Tracking Technologies

388wim uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit a website. The cookies we use fall into the following categories:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, notification preferences, and last-used payment method, to improve your experience on return visits.
• Analytics cookies: Used to understand how players navigate and use the platform, enabling us to identify performance bottlenecks and improve the user experience. Analytics data is processed in aggregated, anonymised form wherever possible.
• Responsible gaming cookies: Track session duration and display responsible gaming reminders based on the thresholds you have set in your account settings.

388wim does not use third-party advertising or retargeting cookies. You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

8 Data Retention

388wim retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active account data (identity, contact, financial, and usage data) is retained for the duration of your account's active status plus a minimum of five years following account closure, to satisfy AML and licensing authority record-keeping requirements.
• KYC identity documents are retained for a minimum of five years from the date of verification, as mandated by international AML standards applicable to licensed gaming operators.
• Transaction records are retained for a minimum of five years to support financial audits, dispute resolution, and regulatory compliance.
• Support and communication records are retained for three years from the date of the last interaction, to support complaint resolution and quality assurance.
• Marketing consent records are retained for three years from the date of consent or until withdrawal of consent, whichever is earlier, to demonstrate compliance with consent obligations.
• Technical logs (IP addresses, session data) are retained for 12 months and then purged automatically.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents reconstruction of any link to the individual player.

9 International Data Transfers

As an internationally operated platform, 388wim may process and store your personal data on servers located outside Pakistan. Where data is transferred to a jurisdiction that does not provide an equivalent level of data protection to your home jurisdiction, 388wim ensures that appropriate safeguards are in place, including:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with all international service providers.
• Vendor due diligence assessments confirming that receiving parties maintain information security standards at least equivalent to those described in this policy.
• Data minimisation — transferring only the minimum personal data necessary for the specific processing purpose to each international recipient.

By using the 388wim platform, you acknowledge that your personal data may be transferred, stored, and processed in jurisdictions outside Pakistan as described above. If you have concerns about international transfers of your specific personal data, please contact us at [email protected].

10 Your Data Rights

388wim respects your rights over your personal data. Depending on your jurisdiction and the circumstances of the processing, you may have the following rights:

• Right of access: Request a copy of the personal data 388wim holds about you, along with information about how it is being used.
• Right to rectification: Request correction of inaccurate or incomplete personal data held in your account.
• Right to erasure: Request deletion of your personal data, subject to 388wim's legal retention obligations. We cannot delete data that we are required by law to retain.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances, for example while a correction request is pending.
• Right to data portability: Request a copy of certain personal data in a structured, machine-readable format, allowing you to transfer it to another service provider.
• Right to object: Object to processing carried out on the basis of legitimate interests, including profiling for responsible gaming purposes, where you believe your rights override our legitimate interests.
• Right to withdraw consent: Withdraw consent for any processing based on consent (e.g., marketing communications) at any time, without affecting past processing.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Rights Request". We will acknowledge your request within 3 business days and provide a substantive response within 30 days. We may ask you to verify your identity before processing the request.

11 Security Measures

388wim implements a multi-layered security programme to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our key security measures include:

• Transport layer security (TLS): All data in transit between your device and 388wim servers is encrypted using industry-standard TLS protocols.
• Encryption at rest: Sensitive data categories — including identity documents, payment references, and account credentials — are stored in encrypted form using AES-256 or equivalent standards.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff access is governed by role-based permissions, and all access events are logged for audit purposes.
• Two-factor authentication (2FA): Available to all players for account login. 388wim staff with access to production systems are required to use 2FA.
• Regular security assessments: The platform undergoes periodic vulnerability assessments and penetration testing by qualified cybersecurity professionals.
• Incident response: In the event of a data breach that poses a risk to players, 388wim will notify affected players and relevant regulatory authorities within the timeframes required by applicable law.

While we apply all reasonable technical and organisational measures, no online system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for securing the devices you use to access 388wim.

12 Children & Underage Players

388wim is strictly an adult platform. The minimum age to register and use 388wim is 21 years. We do not knowingly collect personal data from any individual under this age.

During the registration process, players are required to confirm their age. At the KYC verification stage, date of birth is cross-referenced against government-issued identity documents. Any account found to belong to a person under 21 will be immediately suspended, all balances will be frozen pending investigation, and the account will be permanently closed.

Parents and guardians who share devices with minors are strongly advised to use device-level parental controls and to ensure that their 388wim account credentials are never stored in a location accessible to underage individuals.

13 Updates to This Privacy Policy

388wim reviews this Privacy Policy periodically and will update it when required by changes in applicable law, regulatory guidance, or our operational practices. The "Last updated" date at the top of this page and in the table of contents sidebar reflects the date of the most recent revision.

Where a change is material — for example, a change that introduces a new category of data collection, a new sharing arrangement, or a significant modification to your rights — 388wim will notify registered players by email to the address on file at least 14 days before the change takes effect. Continued use of the platform after the effective date of a revised policy constitutes acceptance of that revision.

If you do not agree with a material change to this policy, you have the right to close your account and withdraw your balance before the change takes effect. Please contact our support team if you wish to do so.

14 Contact Us About Privacy

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 388wim handles your personal data, please contact our dedicated privacy support team using the details below:

• Email: [email protected]
• Subject line for rights requests: "Data Rights Request – [Your Account Username]"
• Response time: Acknowledgement within 3 business days; full response within 30 days
• Support languages: English and Urdu, available 24/7

388wim is committed to resolving privacy concerns fairly and promptly at the first point of contact. If you remain dissatisfied after engaging with our support team, the matter may be escalated to the independent dispute resolution mechanism designated by our licensing authority — details of which will be provided upon request.