win388 Privacy Policy

1. Who We Are & Scope of This Policy

This Privacy Policy ("Policy") applies to win388, the online casino and sports betting platform operated at https://win388.vip ("win388", "we", "us", "our"). win388 is the data controller responsible for your personal data collected through the platform and any associated communications.

This Policy applies to all personal data collected from individuals who visit the win388 website, register a player account, use any of our gaming or betting services, participate in promotions, or communicate with our support team. This Policy does not apply to third-party websites or services that may be linked from win388 — those parties have their own independent privacy policies.

win388 is committed to handling personal data in compliance with applicable data protection principles, including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. Pakistani players interacting with win388 can do so with full confidence that their data is handled responsibly.

By creating a win388 account or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not create an account or continue to use win388.

2. Data We Collect

2.1 Registration Data

When you create a win388 account, we collect the information you provide during the registration process, which includes:

• Full legal name;
• Date of birth (to verify you are 18 or older);
• Email address;
• Mobile phone number;
• Residential address (city, country — e.g., Karachi, Lahore, Islamabad);
• Chosen username and password (stored as a one-way hash — we never store your password in plain text).

2.2 Identity Verification (KYC) Data

In accordance with our Know Your Customer ("KYC") and Anti-Money Laundering ("AML") obligations, win388 may collect copies of identity documents including a government-issued photo ID (CNIC, passport, or driving licence), proof of address, and in certain cases, source of funds documentation. These documents are processed and stored securely and are used solely for verification purposes.

2.3 Financial & Transaction Data

win388 collects data related to your deposits and withdrawals, including payment method type (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, USDT TRC20, Visa/Mastercard), transaction amounts, transaction timestamps, and associated reference numbers. win388 does not store full payment card numbers — card data is tokenised by our payment processor.

2.4 Gameplay & Betting Data

win388 collects records of your gaming and betting activity on the platform, including games played, bets placed and settled, session durations, win/loss records, and bonus usage. This data is used to provide the service, resolve disputes, comply with regulatory reporting requirements, and monitor for responsible gaming indicators.

2.5 Technical & Device Data

When you access win388, our servers automatically collect certain technical data including your IP address, browser type and version, operating system, device type, referring URL, pages visited, time and date of access, and session duration. This data is used for security monitoring, fraud prevention, platform optimisation, and aggregate analytics.

2.6 Communications Data

If you contact win388's support team via live chat, email, or any other channel, we collect and retain records of those communications for quality assurance, training, and dispute resolution purposes.

3. How We Use Your Data

win388 uses your personal data for the following purposes:

• Account Management: Creating and managing your win388 player account, processing login requests, and maintaining account security;
• Service Delivery: Enabling you to access games, place bets, receive winnings, and use all features of the win388 platform;
• Payment Processing: Facilitating deposits and withdrawals via your chosen payment method and maintaining transaction records;
• Identity Verification: Verifying your age (18+ requirement) and identity in compliance with our KYC obligations;
• Legal Compliance: Meeting our obligations under applicable anti-money laundering, gaming regulation, and data protection law;
• Fraud Prevention & Security: Detecting and preventing fraud, money laundering, account hacking, and other unauthorised or illegal activity;
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling and administering responsible gaming tools including deposit limits and self-exclusion;
• Customer Support: Responding to your queries, complaints, and requests via live chat, email, and other support channels;
• Marketing Communications: Sending you promotional offers and bonus notifications where you have consented to receive such communications. You may opt out at any time;
• Platform Improvement: Analysing aggregated usage data to improve the win388 platform's performance, game selection, and user experience.

4. Legal Basis for Processing

win388 processes personal data on the following legal bases depending on the nature and purpose of the processing activity:

• Contractual Necessity: Processing required to fulfil our contract with you as a registered win388 player — including account management, payment processing, and service delivery;
• Legal Obligation: Processing required to comply with applicable laws, including KYC/AML obligations, regulatory reporting requirements, and court or government orders;
• Legitimate Interests: Processing carried out for our legitimate business interests where these interests are not overridden by your rights — including fraud detection, security monitoring, platform analytics, and responsible gaming monitoring;
• Consent: Processing based on your freely given consent — principally marketing communications and certain non-essential cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

win388 does not sell your personal data. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Financial institutions and payment service providers (including JazzCash, Easypaisa, and card networks) necessary to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and identity verification services used to authenticate player identities and conduct AML screening;
• Game Software Providers: Certified game providers such as Pragmatic Play, PG Soft, and Evolution Gaming receive limited technical data (player ID, session token) to deliver game functionality. These providers do not receive your personal identity data;
• Regulatory Authorities: win388's gaming licence regulator and any government or law enforcement authority where disclosure is required by applicable law, court order, or regulation;
• Fraud Prevention Services: Third-party fraud detection platforms that help identify and prevent suspicious account activity or financial crime;
• Professional Advisors: Legal, accounting, and auditing professionals where necessary for compliance or legal proceedings, subject to strict confidentiality obligations.

All third parties with whom win388 shares personal data are required to process that data only for the specified purpose and to maintain appropriate technical and organisational security measures.

6. Data Retention

win388 retains personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The following general retention periods apply:

• Active player account data is retained for the lifetime of the account and for a minimum of 5 years following account closure, in compliance with AML and gaming regulatory requirements;
• Financial transaction records are retained for a minimum of 7 years following the transaction date;
• KYC/identity verification documents are retained for 5 years following the end of the business relationship or as required by applicable law, whichever is longer;
• Customer support communications are retained for 3 years from the date of the last interaction;
• Technical and device log data is retained for 12 months from the date of collection for security monitoring purposes.

Upon expiry of the applicable retention period, win388 will securely delete or anonymise your personal data unless a longer retention period is required or permitted by applicable law.

7. Your Data Rights

As a win388 player you hold the following rights in respect of your personal data. To exercise any of these rights, please contact win388 at [email protected]. We will respond to all valid requests within 30 days.

8. Cookies & Tracking Technologies

win388 uses cookies and similar technologies (including local storage and session tokens) to operate the platform and improve your experience. The categories of cookies used by win388 are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly, including maintaining your login session, security tokens, and game state. These cannot be disabled;
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how players use win388 — such as pages visited, session duration, and error rates — to help us improve the platform;
• Functional Cookies: Remember your preferences such as language, currency display, and other settings to personalise your win388 experience;
• Marketing Cookies: Used where you have consented to receive targeted promotional communications. These track activity to make marketing more relevant. You can withdraw consent at any time via your browser settings.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the win388 platform. For most Pakistani players accessing win388 on Chrome for Android, cookie settings are accessible via Chrome Settings → Privacy and Security → Cookies and other site data.

9. Security Measures

win388 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and win388 servers;
• Industry-standard bcrypt password hashing — your password is never stored in recoverable plain text;
• Optional two-factor authentication (2FA) via SMS for an additional layer of account security;
• IP-based suspicious login detection with automated alerts to your registered email address;
• Access controls limiting internal staff access to player data to authorised personnel only on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent third-party specialists;
• Automatic session timeout for inactive accounts to prevent unauthorised access on shared or public devices.

Notwithstanding the above, no system is entirely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, win388 will notify you and the applicable regulatory authority within the timeframes required by applicable law.

10. Changes to This Policy & How to Contact Us

win388 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players via their registered email address or via a prominent notice on the win388 platform. The "Last Updated" date at the top of this Policy indicates when it was most recently revised.

Your continued use of win388 following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, please close your win388 account and discontinue use of the platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by win388, please contact our Data Protection team: