Your privacy matters to win388. This policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what rights you have as a win388 player based in Pakistan.
These six principles summarise the win388 approach to data privacy. The full legal detail is in the policy document below.
win388 collects only the personal data that is strictly necessary to operate your account, process transactions in PKR, comply with KYC obligations under our international gaming licence, and deliver the services you expect from Pakistan's trusted gaming platform.
All data stored and transmitted by win388 is protected using SSL/TLS encryption, secure server infrastructure, and access controls that limit data exposure to authorised personnel only. Your win388 account credentials are stored using hashed, salted formats — we cannot read your password.
win388 does not sell, rent, or trade your personal data to any third party for their independent marketing purposes. Data sharing with third parties is limited to what is required for payment processing, fraud prevention, regulatory compliance, and platform operation — as described fully in this policy.
As a win388 player you have the right to access, correct, restrict, and request deletion of your personal data, subject to legal retention obligations. You can also withdraw marketing consent at any time. win388 takes these rights seriously and processes requests within a reasonable timeframe.
win388 does not use hidden data practices. Every category of data we collect, every purpose for which it is used, and every third party with whom it is shared is disclosed in this Privacy Policy in plain, readable English — not buried in dense legalese that nobody actually reads.
win388 does not retain personal data indefinitely. Retention periods are defined by legal and regulatory requirements — typically five (5) years for financial and KYC records under international gaming licence obligations — and data is securely deleted or anonymised once the applicable retention period has elapsed.
win388 ("we," "us," "our," "the Company") operates the online gaming platform accessible at win388.bio ("the Platform"). This Privacy Policy describes how win388 collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," "the Player") who register an account, visit the Platform, or otherwise interact with win388's services.
win388 operates under an international gaming licence framework and takes its data protection obligations seriously. This policy has been prepared to reflect internationally recognised data protection standards and applies to all players accessing win388 from Pakistan, including those in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities across the country.
This Privacy Policy should be read alongside the win388 Terms & Conditions and Responsible Gaming Policy, both of which form part of your overall agreement with win388.
When you create a win388 account, we collect the following information:
As required under our international gaming licence obligations, win388 collects KYC documentation that may include:
win388 records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or cryptocurrency), transaction timestamps, and transaction reference numbers. This data is retained for regulatory compliance and fraud prevention purposes.
win388 logs all gaming activity on the Platform, including games played, bet amounts, session durations, win and loss records, bonus usage, and responsible gaming tool activations. This data is used for account management, dispute resolution, and responsible gaming monitoring.
When you access the win388 Platform, we automatically collect certain technical data, including:
When you contact win388 customer support via live chat, email, or any other channel, we retain records of that correspondence, including the content of messages, timestamps, and the outcome of any support interaction. This data is used for training, quality assurance, and dispute resolution purposes.
win388 collects personal data through the following means:
win388 uses the personal data it collects for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, KYC documents |
| Processing deposits and withdrawals in PKR | Financial transaction data, KYC documents |
| Age and identity verification (21+ compliance) | Date of birth, KYC documents |
| Fraud detection and prevention | Technical data, financial data, gaming activity |
| Regulatory compliance and audit | All categories of data as required by licence obligations |
| Customer support and dispute resolution | Communications data, gaming activity, financial data |
| Responsible gaming monitoring | Gaming activity, session data, self-exclusion records |
| Platform improvement and analytics | Technical data, anonymised gaming activity |
| Direct marketing (where consent given) | Email address, phone number, gaming preferences |
| Security and access control | Technical data, login records, IP address |
win388 processes your personal data on the following legal bases:
The majority of data processing by win388 is necessary to perform the contract between win388 and you as a registered player. This includes operating your account, processing PKR transactions, verifying your identity, and delivering gaming services.
win388 is required by its international gaming licence to collect and retain certain categories of data, including KYC documentation and financial transaction records. Processing for this purpose is mandatory and cannot be refused without affecting your ability to use the Platform.
win388 processes certain data on the basis of legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and the improvement of our services. Where we rely on this basis, we have assessed that our interests do not override your fundamental data protection rights.
Where win388 processes your personal data for marketing communications — including promotional emails, SMS messages, and push notifications — we do so only on the basis of your explicit consent. You may withdraw this consent at any time, as described in Section 13 of this policy.
win388 does not sell your personal data. We share your data only with the following categories of third parties, and only to the extent necessary for the stated purpose:
win388 shares transaction-relevant data with payment processing partners — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and cryptocurrency processing services — to facilitate deposits and withdrawals. These providers process data solely to execute financial transactions and are bound by confidentiality obligations.
win388 may share KYC documentation with third-party identity verification services to fulfil our age-verification and anti-money-laundering obligations under our gaming licence framework. These providers act as data processors under win388's instruction.
win388 may share technical and transaction data with fraud detection and cybersecurity service providers to protect the Platform and its players from financial crime, account takeovers, and other security threats.
win388 is legally obligated to disclose personal data to gaming regulatory bodies, financial intelligence units, or law enforcement agencies when required to do so by applicable law, court order, or regulatory mandate. win388 will not notify you of such disclosures where prohibited from doing so by law.
win388 uses third-party cloud hosting, analytics, and software services to operate the Platform. These providers may process personal data on win388's behalf under contractual data processing agreements that restrict their use of data to the provision of services to win388.
Cookies are small text files placed on your device when you visit the win388 Platform. They allow win388 to recognise your device, maintain your session, remember your preferences, and gather usage analytics that help us improve the Platform.
You can manage cookie preferences through the win388 cookie consent tool, available on first visit to the Platform. You may also configure your browser to reject non-essential cookies; however, this may impair the functionality of certain Platform features. Note that disabling strictly necessary cookies will prevent you from logging into your win388 account.
win388 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable regulatory and legal obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | Licence obligation |
| KYC / identity documents | 5 years from date of submission | AML / regulatory requirement |
| Financial transaction records | 5 years from transaction date | AML / regulatory requirement |
| Gaming activity logs | 3 years from activity date | Legitimate interest / dispute resolution |
| Customer support communications | 3 years from last interaction | Legitimate interest |
| Self-exclusion records | Indefinitely (to prevent re-registration) | Responsible gaming obligation |
| Marketing preferences and consent records | Until consent withdrawn + 1 year | Legal compliance |
| Technical and device logs | 12 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with win388's data disposal procedures.
win388 implements a multi-layered security framework to protect your personal data against unauthorised access, loss, alteration, or disclosure. Security measures in place include:
Notwithstanding these measures, no method of electronic data transmission or storage is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, win388 will notify affected players without undue delay and take all reasonable steps to contain and remediate the breach.
As a win388 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact win388 at [email protected].
Request a copy of the personal data win388 holds about you, along with information on how it is used and with whom it is shared.
Request correction of inaccurate or incomplete personal data that win388 holds about you. Some corrections require supporting documentation.
Request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal and regulatory retention obligations.
Request that win388 restricts processing of your data in certain circumstances, such as while the accuracy of data is being contested.
Request a structured, machine-readable copy of the data you provided to win388, where processing is based on consent or contract.
Object to processing of your data where it is based on legitimate interests, including profiling for direct marketing purposes.
win388 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex or high-volume cases, win388 may extend this period by a further sixty (60) days, with prior notification to the requesting player. win388 will not charge a fee for processing reasonable data rights requests.
The win388 Platform is strictly intended for individuals aged 21 and above. win388 does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory step in the win388 registration and KYC process.
If win388 discovers that personal data has been collected from a person under 21 — whether through registration, payment activity, or any other means — that account will be immediately suspended, all associated data will be securely deleted to the extent permitted by our legal obligations, and any balances held in the account will be returned to the payment source where possible.
Parents and guardians who believe that a minor may have registered on win388 should contact win388 support immediately at [email protected] so that the account can be investigated and closed without delay.
win388 operates under an international gaming licence framework, which means that certain aspects of Platform operation — including cloud hosting, KYC processing, and fraud detection — may involve the transfer of personal data to servers or service providers located outside Pakistan.
Where such transfers occur, win388 takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this policy. These safeguards may include contractual clauses requiring data processors to maintain confidentiality and security standards, or reliance on providers operating in jurisdictions that maintain recognised data protection standards.
By using win388, you acknowledge that your data may be processed in jurisdictions outside your country of residence, and you consent to such transfers for the purposes described in this policy.
With your prior consent, win388 may send you promotional communications about new games, bonuses, PSL betting markets, seasonal promotions, and other win388 offers. These communications may be delivered by email, SMS, or in-platform push notification.
You may withdraw your consent to receive marketing communications from win388 at any time by:
Withdrawing marketing consent will not affect your ability to use win388 or receive transactional communications — such as deposit confirmations, withdrawal notifications, or KYC requests — which are sent on the basis of contractual necessity rather than consent.
win388 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, updates to the Platform, or developments in applicable law. Where changes are material, win388 will notify registered players via the email address on file and/or via a prominent notice on the Platform at least fourteen (14) days before the changes take effect.
Continued use of the win388 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this document always reflects the most recent revision. win388 recommends that you review this policy periodically to stay informed of how we handle your data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by win388, please contact us through the following channels:
Sign in to win388 and enjoy cricket betting, live casino, slots, and colour game — all in PKR, with your privacy fully protected. Adults aged 21+ only. Please play responsibly.