w388 Privacy Policy

1Introduction & Scope

This Privacy Policy is issued by w388 ("w388", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at w388.lol and all associated subdomains and mobile interfaces. It applies to all personal data collected from individuals who visit, register on, or otherwise interact with the w388 platform ("you", "your", "the user").

By creating a w388 account, making a deposit, or otherwise using any feature of the w388 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. This Privacy Policy should be read together with the w388 Terms & Conditions.

w388 is committed to handling your personal information responsibly and transparently. The practices described in this policy reflect our obligations under applicable data protection and privacy laws and our own internal standards for user data governance.

2Personal Data We Collect

w388 collects the following categories of personal data from users. We collect only what is necessary for the specific purpose stated:

2.1 Registration & Account Data

When you create a w388 account, we collect: your full legal name, email address, date of birth, Pakistani mobile number, and the username and hashed password you choose. This information is required to establish and maintain your account and to verify that you meet the minimum age requirement of 21 years.

2.2 Identity Verification (KYC) Data

To process withdrawal requests and comply with anti-money-laundering obligations, w388 requires documentary proof of identity. This includes photographic images of your National Identity Card (CNIC) — both front and back — and may include a selfie or additional documents in cases where enhanced due diligence is required. KYC documents are handled by our compliance team under strict access controls.

2.3 Financial & Transaction Data

w388 records all deposit and withdrawal transactions associated with your account, including amounts, timestamps, payment methods used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, or USDT TRC20 wallet addresses), and transaction reference numbers. Full card or wallet credential numbers are never stored directly by w388 — payment processing is handled by our payment service providers.

2.4 Gaming Activity Data

w388 maintains a full log of your gaming activity on the platform, including games played, bet amounts, game outcomes, session durations, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, regulatory reporting, and platform improvement purposes.

2.5 Technical & Device Data

When you access w388, we automatically collect certain technical data: your IP address, browser type and version, device type, operating system, screen resolution, referring URL, pages visited on w388, and session timestamps. This data is used for security monitoring, fraud detection, platform optimisation, and geographic access controls.

2.6 Customer Support Data

When you contact w388 customer support via live chat or email, we retain records of the conversation, including any personal information you provide in the course of the interaction. These records are used to resolve your query, improve support quality, and maintain a history of communications relevant to your account.

3How We Use Your Personal Data

w388 uses the personal data collected from you for the following specific purposes:

• Account Management: Creating and maintaining your w388 account, processing your login, managing your account settings and preferences, and communicating with you about your account status.
• Identity & Age Verification: Confirming that you are at least 21 years of age and that the identity information you provided during registration is accurate and genuine, as required under our licensing and responsible gaming obligations.
• Payment Processing: Processing deposit and withdrawal transactions through your chosen payment method (JazzCash, EasyPaisa, bank transfer, or USDT TRC20), verifying payment receipts, and reconciling financial records.
• Anti-Money Laundering (AML) & Fraud Prevention: Monitoring transaction patterns and gaming behaviour for indicators of financial crime, conducting enhanced due diligence where required, and reporting suspicious activity to relevant authorities as legally required.
• Responsible Gaming: Monitoring your gaming activity for signs of problematic gambling behaviour, enforcing deposit limits, loss limits, and self-exclusion periods you have set, and reaching out proactively where our systems identify concerning patterns.
• Customer Support: Responding to your enquiries, resolving disputes, processing complaints, and maintaining a history of support interactions relevant to your account.
• Security & Fraud Detection: Monitoring login activity, detecting and responding to unauthorised access attempts, and protecting the integrity of the w388 platform and its users.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the w388 user experience, optimise game lobbies, improve loading performance on Pakistani mobile networks, and develop new features.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided your consent to receive such communications (see Section 12 for details and opt-out instructions).
• Regulatory Compliance: Meeting our obligations under applicable gaming licensing requirements, including record-keeping, player data reporting, and cooperation with regulatory investigations.

4Legal Basis for Processing

w388 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing your registration data, payment information, and gaming activity records is necessary for the performance of the contract between you and w388 (i.e., the Terms & Conditions you accepted upon registration).
• Legal Obligation: Processing your KYC documents, maintaining financial transaction records, and conducting AML monitoring are required for compliance with applicable legal and regulatory obligations under our operating licence.
• Legitimate Interests: Processing technical and device data for security monitoring, fraud detection, and platform improvement is based on w388's legitimate interest in maintaining a secure and functional platform, provided such interests are not overridden by your data privacy rights.
• Consent: Sending you marketing communications by email or SMS is based on your explicit consent provided during registration or subsequently through your account preferences. You may withdraw this consent at any time (see Section 12).

5Cookies & Tracking Technologies

w388 uses cookies and similar tracking technologies on its platform to enhance your experience, maintain session security, and analyse platform performance. The following categories of cookies are used:

5.1 Essential Cookies

These cookies are strictly necessary for the w388 platform to function. They enable your login session to persist, maintain your account state during gameplay, and ensure security features (such as CSRF protection) operate correctly. Essential cookies cannot be disabled without breaking core platform functionality. No consent is required for essential cookies as they are technically necessary to provide the service you have requested.

5.2 Analytical Cookies

w388 uses analytical cookies to understand how users interact with the platform — which pages are visited most frequently, where users experience navigation difficulties, and which game categories are most popular. This data is used in aggregated and anonymised form to improve the w388 platform. Where you have not consented to analytical cookies, w388 will not deploy them on your device.

5.3 Preference Cookies

Preference cookies remember settings you have customised on w388, such as language preferences, display settings, and responsible gaming limits. These cookies improve your experience by ensuring your preferences are applied consistently across sessions.

6Third-Party Data Sharing

w388 does not sell, rent, or trade your personal data. We share your data with third parties only in the following specific and limited circumstances:

6.1 Payment Service Providers

To process your deposits and withdrawals, w388 shares necessary transaction data with payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT network operators. These providers receive only the data necessary to execute and verify your specific transaction and are contractually prohibited from using your data for their own independent purposes.

6.2 Identity Verification Partners

w388 may use third-party KYC verification services to assist with the review and validation of identity documents submitted by users. These partners operate under strict data processing agreements and handle your KYC data solely for the purpose of identity verification on behalf of w388.

6.3 Game Content Providers

w388's game library includes titles from third-party game studios and software providers. These providers may receive anonymised gameplay session data (e.g., game round outcomes, session IDs) for technical integration and RTP certification purposes. Game providers do not receive your personal identification data.

6.4 Regulatory & Law Enforcement Authorities

w388 may disclose your personal data to gaming regulatory authorities, financial intelligence units, law enforcement agencies, or courts where we are legally required or compelled to do so. w388 will comply with all lawful requests while taking reasonable steps to protect user privacy to the extent permissible.

6.5 Professional Advisers

w388 may share personal data with legal advisers, accountants, auditors, and insurers in the course of obtaining professional advice or in connection with legal proceedings, subject to professional obligations of confidentiality.

7International Data Transfers

w388 operates as an international online gaming platform and may process or store your personal data in countries outside of Pakistan. Where personal data is transferred internationally, w388 ensures that appropriate safeguards are in place to protect your data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection;
• Use of standard contractual clauses or equivalent mechanisms with data processors located in countries without an adequacy assessment;
• Ensuring that all international data processors are bound by contractual obligations that require them to implement appropriate technical and organisational security measures.

Pakistani users should be aware that data transferred internationally remains subject to the protections described in this Privacy Policy and any applicable contractual safeguards, regardless of where it is physically stored or processed.

8Data Retention

w388 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal, regulatory, and contractual obligations. The general retention principles applied by w388 are as follows:

• Account Data: Retained for the duration of your active account relationship with w388, plus a period of up to seven years following account closure to satisfy regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five years from the date of submission, or longer where required by anti-money-laundering regulations applicable to our operating jurisdiction.
• Financial Transaction Records: Retained for a minimum of seven years from the date of the transaction to satisfy financial record-keeping obligations.
• Gaming Activity Logs: Retained for a minimum of three years to support dispute resolution, responsible gaming reviews, and regulatory compliance.
• Marketing Consent Records: Retained for three years from the date of last consent or last interaction, whichever is later, to demonstrate compliance with marketing consent obligations.
• Technical & Security Logs: Retained for up to 12 months for security monitoring and fraud investigation purposes, unless specific data is required for longer as part of an active investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised so that it can no longer be associated with any individual user.

9Your Data Rights

As a user of the w388 platform, you have the following rights in relation to your personal data. To exercise any of these rights, contact the w388 support team via live chat or email, providing sufficient information to verify your identity:

10Children & Minors

The w388 platform is strictly intended for adults aged 21 years and above. w388 does not knowingly collect personal data from any person under the age of 21. The registration process includes an age verification step, and w388 conducts KYC checks that include date of birth verification against identity documents. Any account found to have been created by or on behalf of a person under 21 will be closed immediately, all balances will be forfeited, and any personal data collected in connection with that account will be deleted (save where retention is required for regulatory purposes such as AML compliance).

If you become aware that a minor has created a w388 account or accessed the platform, please notify our support team immediately at [email protected]. We take underage access extremely seriously and will act on any such report promptly.

11Data Security

w388 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the w388 platform is encrypted in transit using industry-standard TLS protocols. The w388 website is served exclusively over HTTPS.
• Password Hashing: Your account password is never stored in plain text by w388. Passwords are hashed using a cryptographically secure one-way hashing algorithm with individual salting, meaning that even w388 staff cannot read your password.
• Access Controls: Access to personal data stored by w388 is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular access reviews. KYC documents are accessible only to authorised compliance personnel.
• Two-Factor Authentication (2FA): w388 offers 2FA for all user accounts via Pakistani mobile number OTP verification. We strongly recommend all users enable 2FA to add an additional layer of protection to their account beyond password-only authentication.
• Intrusion Detection & Monitoring: w388 maintains continuous security monitoring of its platform infrastructure. Unusual login patterns, access from new devices, and suspicious transaction behaviour trigger automated alerts and, where appropriate, temporary account holds pending user verification.
• Data Breach Response: In the event of a personal data breach that poses a risk to the rights and freedoms of affected users, w388 will notify affected users and relevant regulatory authorities within the timeframes required under applicable data protection law.

Despite these measures, no system connected to the internet is 100% immune to security threats. You also play a role in securing your personal data: use a strong, unique password for your w388 account, enable 2FA, do not share your login credentials, and log out from shared or public devices after each session.

12Marketing Communications

w388 may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, upcoming PSL cricket betting events, and other platform news. We send marketing communications only where you have provided your consent to receive them, either during the account registration process or subsequently through your account communication preferences.

12.1 Opting Out of Marketing

You may withdraw your consent to receive marketing communications from w388 at any time by:

• Updating your communication preferences in the w388 account settings dashboard;
• Clicking the "unsubscribe" link included in any marketing email sent by w388;
• Contacting w388 customer support via live chat or email and requesting removal from marketing communications.

After processing your opt-out request, w388 will cease sending marketing communications to you. Please note that opting out of marketing does not affect transactional communications necessary for account management — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification updates — which are sent regardless of your marketing preferences.

12.2 Profiling for Marketing

w388 may use your gaming activity and account data to personalise promotional offers — for example, offering slot-focused promotions to players who primarily play slots, or cricket betting enhanced odds to users who regularly bet on cricket. This profiling is conducted within the w388 platform using your own account data and does not involve sharing your data with external marketing platforms. You may object to profiling for marketing at any time by contacting our support team.

13Changes to This Privacy Policy

w388 reserves the right to update or amend this Privacy Policy at any time. We will review and update this policy when our data practices change, when new services or features are introduced, or when required to reflect changes in applicable law or regulatory guidance.

When material changes are made to this Privacy Policy, w388 will provide notice through one or more of the following channels: a notification displayed on the w388 platform upon your next login, an email notification to your registered address, or a prominent announcement on the w388 homepage. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the w388 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must stop using the platform and contact our support team to request account closure.

14Contact & Data Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how w388 handles your personal data, please contact us through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week directly within your w388 account. English-speaking agents can assist with most data enquiries in real time.
• Email: Written data enquiries and formal requests to exercise your data rights may be submitted to [email protected]. Please mark your email "Data Privacy Enquiry" in the subject line to ensure it is routed to our compliance team. We aim to respond to all written data enquiries within five business days.

If you are dissatisfied with w388's response to a data privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. For Pakistani users, enquiries regarding data protection may also be directed to the Pakistan Telecommunication Authority (PTA) or other relevant consumer protection bodies.

For all other platform-related enquiries, including account help, payment issues, and responsible gaming support, our full FAQ is available at w388 FAQ.