Privacy Policy — 388 Online Gaming Platform

1. Overview

388 is an online sports betting and casino gaming platform operated for users in Pakistan. When you create an account, make a deposit, place a bet or contact support, you share certain information with us. This Privacy Policy explains what that information is, why we need it and how it is handled throughout its life on our systems.

We collect only what we actually need to run the platform properly. We do not sell your personal data to advertisers or unrelated third parties. Where data is shared with third parties, it is only with service providers who help us operate the platform — and they are bound by data handling agreements.

This policy applies to all users of the 388 platform, including visitors who browse without registering and registered account holders who actively use the platform for sports betting, casino games, deposits and withdrawals.

2. Data We Collect

The types of personal information we collect depend on how you use the platform. Below is a breakdown of the main categories:

3. How We Collect Your Data

Your data reaches us through different channels depending on how you interact with the 388 platform:

• Direct input: Information you provide when registering, updating your profile, depositing funds or contacting support.
• Automated systems: Technical data collected automatically when you visit the platform — IP address, device identifiers, session timestamps and browser type.
• Payment providers: When you make a deposit or withdrawal via JazzCash, Easypaisa, Raast or a bank, those providers may share transaction confirmation data with us for reconciliation.
• Game providers: Third-party game studios that supply titles in the 388 game lobby may share session data — such as bet amounts and game results — for account crediting purposes.
• Cookies and tracking: Basic session and analytics data collected through cookies when you browse the platform. See the Cookies section below for details.

4. How We Use Your Data

Your personal data is used for the following purposes on the 388 platform. We only process data where there is a legitimate purpose for doing so:

• Creating and maintaining your 388 account, including authentication and profile management.
• Processing PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer and other methods.
• Verifying your identity to meet standard age verification and account security requirements before processing withdrawals.
• Providing access to sports betting markets, the game lobby, live casino, fish games and bingo.
• Calculating and crediting winnings, bonuses and promotional rewards to your account.
• Detecting and preventing fraud, suspicious account activity and breaches of the platform's Terms and Conditions.
• Providing customer support and responding to queries or complaints.
• Sending account-related communications — including deposit confirmations, withdrawal updates and security alerts.
• Sending promotional communications about bonuses, offers and platform updates, where you have not opted out of marketing.
• Improving the platform based on usage patterns and user feedback.
• Complying with legal and financial security obligations applicable to online gaming platforms.

5. Sharing Your Data

388 does not sell personal data to third parties. Your information may be shared in the following limited circumstances:

• Game providers: To enable access to specific game titles, session data may be passed to the relevant game provider. These providers are contractually required to handle your data securely and not use it for unrelated purposes.
• Payment processors: Transaction data is shared with JazzCash, Easypaisa, Raast, banks and card processors as required to complete deposits and withdrawals.
• Identity verification services: Where 388 uses a third-party service to verify CNIC or other identity documents, the relevant data is shared with that provider under a data processing agreement.
• Fraud prevention services: Technical and account data may be shared with services that help detect and prevent fraudulent activity across online platforms.
• Legal obligations: 388 may be required to disclose account information in response to a lawful request from a competent authority. We will not voluntarily disclose user data to any party without a legal basis for doing so.
• Business transfers: In the event that 388 is involved in a merger or acquisition, user account data may be transferred as part of that transaction. Users will be notified if such a transfer occurs.

6. Payment Data

When you deposit or withdraw funds on the 388 platform in PKR, payment data is handled through secure integrations with your chosen payment method. Full payment credentials — such as your JazzCash PIN or complete bank account details — are never stored on 388 servers. We hold only the reference information necessary to match a transaction to your account.

For deposits via JazzCash, Easypaisa or Raast, the transaction is initiated and authenticated on the respective payment provider's own infrastructure. 388 receives only a transaction confirmation and the associated PKR amount. This means your mobile wallet credentials are processed by the payment provider, not by 388 directly.

7. Cookies

The 388 platform uses cookies — small data files stored in your browser — to maintain your session, remember your preferences and analyse how the platform is being used. Cookies do not give us access to your device beyond the information they store themselves.

The main types of cookies used on 388 are:

• Session cookies: Keep you logged in during your visit. These are deleted when you close your browser.
• Preference cookies: Remember settings such as language or display preferences across visits.
• Analytics cookies: Help us understand which parts of the platform are most used and where performance can be improved. Data collected is aggregated and does not identify individual users.
• Security cookies: Help detect suspicious activity and protect your account from unauthorised access attempts.

Most browsers allow you to control or disable cookies through their settings. Disabling session cookies will prevent you from logging in to your account. Disabling analytics cookies will not affect your ability to use the platform.

8. Data Security

388 applies technical and organisational security measures to protect personal data against unauthorised access, loss or misuse. These measures include encrypted data storage, secure connections (HTTPS) for all platform communications, access controls that restrict which team members can view user data, and regular security reviews of platform infrastructure.

No online platform can guarantee absolute security. However, 388 takes its data security obligations seriously and addresses vulnerabilities as they are identified. If you suspect your account has been accessed by someone else, contact support immediately and change your password.

9. Data Retention

We retain your personal data for as long as your account is active and for a reasonable period following closure, as required to meet financial record-keeping obligations, resolve any disputes and support fraud investigation if required.

• Account data is retained while your account is active and for a defined period after closure.
• Transaction records — including PKR deposits and withdrawals — are retained for an extended period to meet standard financial record requirements.
• Support communications are kept for a period sufficient to resolve any ongoing query or complaint.
• Technical and usage data used for analytics is typically aggregated and anonymised after a shorter retention period.

Once data is no longer needed for any of the purposes listed above, it is securely deleted or anonymised so it can no longer be linked to your identity.

10. Your Rights Over Your Data

You have a number of rights in relation to the personal data 388 holds about you. These rights can be exercised by contacting the support team through your account:

• Access: You can request a summary of the personal data 388 holds about you.
• Correction: If any of your data is inaccurate or out of date, you can ask us to update it.
• Deletion: You can ask us to delete your account and personal data. Note that some data may be retained after deletion where required by financial record-keeping obligations.
• Objection to marketing: You can opt out of promotional communications at any time without affecting your ability to use the platform.
• Portability: You can request a copy of the data you have provided to 388 in a structured, machine-readable format.
• Restriction: In certain circumstances, you can ask us to limit how we process your data while a query or complaint is being resolved.

11. Minors

388 is strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. If we become aware that an account has been registered by a person under 18, the account will be closed immediately and any associated data will be deleted, subject to any legal record-keeping requirements.

If you believe a minor has registered at 388, please contact support immediately so the account can be reviewed and closed.

12. Changes to This Policy

388 may update this Privacy Policy from time to time. When material changes are made, registered users will be notified through their account or via a notification at login. The "Last updated" date at the top of this page reflects when the most recent version was published. We encourage you to review this policy periodically to stay informed about how your data is handled.

Continued use of the platform after a policy update has been published constitutes acceptance of the revised terms. If you do not agree with a change, you may close your account by contacting support.

13. Contact Us About Privacy

If you have a question, concern or request related to how 388 handles your personal data, contact the support team through your account. Our support team is available 24/7 and will direct privacy-related queries to the appropriate team member.

For data rights requests — such as access, correction or deletion — please include your registered account email and a clear description of what you are requesting so we can process it efficiently.