388wih Privacy Policy

Who We Are

388wih ("we," "us," "our") operates the online casino and sports betting platform available at 388wih.net, including all associated sub-domains, mobile interfaces, and related services. 388wih is operated under an international gaming license and is committed to protecting the personal data of all players and site visitors in accordance with applicable data protection principles.

This Privacy Policy applies to all personal data collected and processed by 388wih in connection with your use of the platform, whether you are a registered player, a visitor to the website, or an individual who has contacted our support team. For the purposes of applicable data protection legislation, 388wih acts as the data controller in respect of the personal data it collects directly from you.

If you have questions or concerns about how your personal data is handled, you may contact our data protection team at any time using the contact details provided in Section 17 of this Policy.

Personal Data We Collect

388wih collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data we collect and the typical context in which they arise:

388wih does not collect sensitive special categories of personal data (such as racial or ethnic origin, political opinions, health data, or religious beliefs) unless specifically required by law or regulation for AML compliance purposes, in which case collection is strictly limited to what is necessary.

How We Collect Your Data

388wih collects personal data through the following means:

• Direct collection: Information you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automated collection: Technical data collected automatically when you access the 388wih platform, including IP addresses, device identifiers, browser information, and session activity logs. This data is collected via cookies, web server logs, and similar tracking technologies described in Section 9.
• Third-party sources: Identity verification agencies, payment processors (including JazzCash, EasyPaisa, and Pakistani banking institutions), fraud prevention services, and regulatory or law enforcement bodies where such disclosure is required or permitted by law.
• Publicly available sources: In limited circumstances, we may supplement account information with data available from public government records or sanctions lists for AML compliance purposes.

Legal Basis for Processing

388wih processes your personal data on the following legal bases:

• Performance of a contract: Processing is necessary to register and maintain your account, process deposits and withdrawals in PKR, deliver gaming services, and fulfil our contractual obligations to you under the Terms & Conditions.
• Legal obligation: Processing is required to comply with our obligations under applicable gaming regulations, AML legislation, KYC requirements, and any directions issued by regulatory or law enforcement authorities.
• Legitimate interests: We process certain data — including technical data and gaming activity records — on the basis of our legitimate business interests in operating a secure, fair, and compliant platform, preventing fraud, detecting prohibited conduct, and improving our services.
• Consent: Where we rely on your consent as the legal basis for processing — particularly in relation to marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

How We Use Your Personal Data

388wih uses the personal data we collect for the following purposes:

• To create, maintain, verify, and manage your player account on the 388wih platform.
• To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, Raast / 1LINK, HBL, UBL, Meezan Bank, and other supported payment methods.
• To conduct identity verification (KYC) and due diligence checks in accordance with our AML obligations, including the verification of government-issued identification documents such as Pakistani CNICs and passports.
• To detect, investigate, and prevent fraud, money laundering, bonus abuse, multi-accounting, and other forms of prohibited conduct as defined in the 388wih Terms & Conditions.
• To provide customer support, respond to queries, and resolve disputes.
• To comply with legal obligations, regulatory requirements, and any orders from courts, law enforcement agencies, or regulatory authorities.
• To send you service communications, including account notifications, transaction confirmations, security alerts, and updates to our policies.
• To send marketing communications — including bonus offers, promotions, and platform updates — where you have provided consent or where we have a legitimate interest in doing so, subject to your right to opt out at any time.
• To analyse platform usage, monitor performance, conduct research, and develop improvements to the 388wih platform and user experience.
• To administer responsible gaming tools including deposit limits, loss limits, session reminders, and self-exclusion requests in accordance with our Responsible Gaming Policy.

Data Sharing & Disclosure

388wih does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your data with the following categories of recipients where necessary and lawful:

• Payment processors and financial institutions: JazzCash, EasyPaisa, Raast / 1LINK, HBL, UBL, Meezan Bank, and other financial intermediaries as required to process transactions in your 388wih Wallet.
• Identity verification and KYC providers: Third-party services engaged by 388wih to verify the identity documents and personal details of players in accordance with our AML and KYC obligations.
• Game content providers: Software providers whose games are made available through the 388wih platform may receive limited gaming activity data necessary for game operation, outcome verification, and audit purposes.
• Fraud prevention and security services: Specialist providers engaged to detect and prevent fraudulent activity, account compromise, and prohibited conduct.
• Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, we may be obligated to disclose your personal data to relevant governmental, regulatory, or law enforcement bodies, both within Pakistan and internationally.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers retained by 388wih in connection with the operation of the platform, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of 388wih's business, your personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

All third parties with whom 388wih shares personal data are required to process that data lawfully and in accordance with applicable data protection standards. 388wih does not authorise third parties to use your data for any purpose beyond what is strictly necessary for the service they provide to us.

International Data Transfers

The 388wih platform is operated by an entity holding an international gaming license, and as a result, your personal data may be transferred to, stored in, or processed in countries outside Pakistan. Where such transfers occur, 388wih takes steps to ensure that your data receives an adequate level of protection consistent with the principles set out in this Privacy Policy.

International transfers may take place where: (a) 388wih's servers or those of its infrastructure providers are located outside Pakistan; (b) third-party service providers such as KYC agencies, game studios, or fraud prevention services operate from outside Pakistan; or (c) regulatory or legal obligations require the sharing of data with international authorities.

Where personal data is transferred to countries that do not provide a level of data protection equivalent to that available within Pakistan, 388wih implements appropriate safeguards — such as contractual clauses, data processing agreements, or equivalent legal mechanisms — to protect your data throughout the transfer and storage process.

Data Retention

388wih retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law. The following retention principles apply:

• Account data: Personal data associated with your 388wih player account is retained for the duration of your account relationship with us and for a minimum of five (5) years following account closure, to comply with our AML record-keeping obligations.
• Transaction and financial records: Records of all deposits, withdrawals, and gaming transactions are retained for a minimum of five (5) years in accordance with applicable financial regulation requirements.
• KYC documentation: Identity verification documents submitted in connection with your account are retained for a minimum of five (5) years following the conclusion of the account relationship.
• Communications data: Support correspondence, including live chat transcripts and email records, is retained for up to two (2) years from the date of the most recent communication.
• Technical and log data: Server logs and automated tracking data are retained for up to twelve (12) months for security, fraud prevention, and performance analysis purposes.
• Marketing data: Where you have provided consent for marketing communications, your preferences are retained until you withdraw consent or close your account.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Cookies & Tracking Technologies

388wih uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the website. They allow us to recognise your device, maintain your session, and personalise your experience.

The following categories of cookies are used on the 388wih platform:

• Strictly necessary cookies: Essential for the operation of the platform, including session management, authentication, and security. These cookies cannot be disabled without affecting core platform functionality.
• Functional cookies: Enable personalisation features such as remembered language preferences, account settings, and game lobby configurations.
• Analytics cookies: Used to collect anonymised data about how visitors interact with the 388wih platform, including pages visited, session duration, and navigation paths. This data is used solely to improve the platform experience.
• Marketing cookies: Used to track visits to the platform and, where consent has been obtained, to deliver relevant promotional communications. These cookies do not track activity on third-party websites.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 388wih platform, including your ability to maintain a logged-in session. As 388wih does not operate any third-party advertising networks, no cookies from external advertising platforms are used on this site.

Security Measures

388wih implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the 388wih platform.
• Encryption at rest for sensitive personal and financial data stored on 388wih servers.
• Access controls and role-based permissions restricting internal access to personal data to staff with a legitimate operational need.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Intrusion detection systems and monitoring to identify and respond to anomalous activity in real time.
• Staff training on data protection obligations and information security best practices.

While 388wih takes all commercially reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 388wih will notify you without undue delay in accordance with our legal obligations.

You are also responsible for maintaining the security of your own account. Do not share your 388wih login credentials with any third party, and notify our support team immediately if you suspect your account has been accessed without your authorisation.

Your Data Protection Rights

Subject to applicable data protection legislation and certain legal exceptions, you have the following rights in respect of the personal data 388wih holds about you:

• Right of access: You have the right to request a copy of the personal data we hold about you and information about how it is used. We will respond to verified access requests within 30 days.
• Right to rectification: You have the right to request the correction of inaccurate or incomplete personal data. Some data fields can be updated directly through your account settings; others require verification by our support team.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where the processing is unlawful. This right is subject to our legal obligation to retain certain data — particularly AML and KYC records — for the minimum periods specified in Section 8.
• Right to restrict processing: You may request that we limit the processing of your personal data in certain circumstances, for example where you contest its accuracy or where the processing is unlawful but you prefer restriction over erasure.
• Right to data portability: Where processing is based on your consent or on a contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where your data is used for direct marketing purposes. Objections to marketing will be actioned immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact the 388wih data protection team using the contact details in Section 17. We may require you to verify your identity before processing any data rights request. We will not charge a fee for routine requests, though we reserve the right to charge a reasonable fee for requests that are manifestly unfounded or excessive.

Marketing Communications

With your consent, 388wih may contact you via SMS and/or email to inform you of promotions, bonuses, platform updates, and new game releases available on the 388wih platform. Marketing messages will be sent to the mobile number or email address registered on your account.

You can opt out of marketing communications at any time by:

• Updating your communication preferences in the Account Settings section of your 388wih dashboard.
• Contacting the 388wih support team via live chat or email and requesting removal from marketing lists.
• Following the unsubscribe instructions included in any email marketing communication.
• Replying STOP to any marketing SMS received from 388wih.

Opting out of marketing communications does not affect your receipt of service-critical communications such as transaction confirmations, security alerts, policy update notifications, and account management messages, which are sent on the basis of contractual necessity and cannot be disabled while your account is active.

Children's Privacy

The 388wih platform is strictly intended for adults aged 21 years and above. 388wih does not knowingly collect, process, or store personal data from individuals under the age of 21. If you are under 21 years of age, you are not permitted to register an account, access the platform, or use any of the services offered by 388wih.

If 388wih becomes aware that personal data has been collected from an individual under the age of 21 without the knowledge or consent of a parent or guardian, such data will be deleted from our records as soon as reasonably practicable, and the associated account will be permanently closed in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor in their care has registered or attempted to register an account on 388wih are encouraged to contact our support team immediately so that the matter can be investigated and resolved without delay.

Third-Party Links

The 388wih platform may contain references to third-party services such as payment method providers, software game suppliers, or other services accessed in the course of using the platform. This Privacy Policy applies solely to personal data collected and processed by 388wih directly. It does not govern the data practices of any third-party services, platforms, or applications.

388wih is not responsible for the privacy practices of third-party service providers. When you interact with a third-party service — such as completing a JazzCash or EasyPaisa transaction via their respective apps or portals — you are subject to that provider's own privacy policy. 388wih encourages you to review the privacy notices of any third-party services you interact with in connection with your use of the platform.

AML Compliance & Regulatory Disclosure

As a licensed gaming operator, 388wih is subject to Anti-Money Laundering (AML) obligations under applicable regulations. In fulfilling these obligations, 388wih may be required to:

• Conduct enhanced due diligence on high-value accounts or accounts exhibiting unusual activity patterns.
• File Suspicious Transaction Reports (STRs) with relevant financial intelligence authorities where transactions give rise to a reasonable suspicion of money laundering or terrorist financing.
• Retain records of player identity, account activity, and transaction history for the minimum periods required by law — typically five years from the end of the account relationship.
• Disclose player information to law enforcement, regulatory bodies, or financial intelligence units upon receipt of a lawful request, court order, or statutory notice.

Where 388wih is legally required to make disclosures under AML legislation, we may be prohibited by law from notifying the affected player that such a disclosure has been made ("tipping off" restrictions). In such circumstances, the normal data transparency obligations under this Privacy Policy are suspended to the extent required by the applicable legal framework.

Updates to This Privacy Policy

388wih reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or the features and services available on the platform.

Material updates to this Privacy Policy will be communicated to registered players by notification to the email address or mobile number associated with their account, and the revised Policy will be published on the 388wih platform with an updated effective date. The effective date at the top of this page indicates the date on which the current version came into effect.

Continued use of the 388wih platform following the effective date of any amendments constitutes your acceptance of the revised Privacy Policy. If you do not agree to any update, you must discontinue use of the platform and may request account closure by contacting the support team.

We encourage all players to review this Privacy Policy periodically to remain informed about how 388wih protects and processes your personal data.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or require clarification on how 388wih processes your personal data, you may contact our data protection team using the following channels:

• Email: [email protected] (mark subject line: "Data Protection Query" for priority handling)
• Live Chat: Available 24/7 via the chat widget on the 388wih platform — our support agents can direct privacy and data rights queries to the appropriate team.

We aim to respond to all data protection queries within 30 days of receipt. In cases where requests are complex or voluminous, we may extend this period by a further 60 days, in which case you will be notified of the extension and the reasons for the delay within the initial 30-day period.

If you are not satisfied with our response to a data protection query or complaint, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.