388com Privacy Policy

1 Who We Are

388com is an internationally licensed online gaming and sports betting platform accessible at https://388com.org. We operate under an international gaming licence and serve players across Pakistan, including major cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and Multan. 388com offers a comprehensive suite of gaming products including cricket betting, live casino games, slot titles, and fishing arcade games, all denominated in Pakistani Rupees (PKR).

For the purposes of data protection law, 388com is the data controller responsible for the personal information collected through the 388com platform. Our designated data protection contact can be reached at [email protected] for all privacy-related queries and requests.

2 Scope of This Policy

This Privacy Policy applies to all personal data collected by 388com through the following channels and contexts:

• Registration and account creation on the 388com platform.
• Use of any 388com gaming product, including sports betting, live casino, slots, and fishing arcade titles.
• Deposits, withdrawals, and all financial transactions conducted through your 388com PKR wallet.
• Communications with 388com customer support via email, live chat, or any other support channel.
• Participation in 388com promotions, bonuses, tournaments, or loyalty programmes.
• Browsing the 388com website, including pages you visit and features you interact with.
• Responses to 388com surveys, feedback requests, or marketing communications where you have provided consent.

This Policy does not apply to third-party websites, payment processors, or gaming software providers that may be linked to or integrated within the 388com platform. Those third parties operate under their own independent privacy policies, which we encourage you to review separately.

3 Data We Collect

388com collects the following categories of personal data from registered players and website visitors. The specific data points collected depend on your level of engagement with the platform — a visitor who does not register will have a more limited data profile than a fully verified 388com account holder.

4 How We Collect Your Data

388com collects personal data through three primary mechanisms:

• Direct Collection: Data you provide directly when registering a 388com account, completing KYC verification, making deposits or withdrawal requests via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, contacting our support team, or responding to surveys and promotional campaigns.
• Automated Collection: Technical and usage data collected automatically as you browse and interact with the 388com platform, including through cookies, web beacons, server logs, and similar tracking technologies. This data collection begins as soon as you visit the 388com website, whether or not you are logged in to an account.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification service providers, payment processors, and fraud prevention partners. We may also receive data from advertising partners that helps us understand how you came to discover 388com, subject to applicable data protection requirements.

5 How We Use Your Data

388com uses the personal data we collect for the following specific purposes:

• Account Management: Creating and maintaining your 388com account, verifying your identity, managing your PKR wallet, and processing your deposits and withdrawals via JazzCash, EasyPaisa, and Pakistani bank transfers.
• Service Delivery: Providing access to all 388com gaming products including cricket betting, live casino, slots, and fishing arcade games; processing your wagers; and settling your winning bets.
• Legal Compliance: Meeting our obligations under our international gaming licence, including KYC identity verification, anti-money laundering (AML) screening, responsible gaming monitoring, and regulatory reporting requirements.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, duplicate account registrations, bonus abuse, money laundering, underage gambling, and other prohibited activities on the 388com platform.
• Customer Support: Responding to your support queries, resolving disputes, and maintaining records of communications for quality assurance and training purposes.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour; administering deposit limits, cooling-off periods, and self-exclusion programmes; and providing appropriate support resources where necessary.
• Platform Improvement: Analysing usage patterns and technical performance data to improve the 388com platform, optimise the player experience, and develop new products and features.
• Marketing Communications: Sending you personalised promotional offers, bonus notifications, and platform updates via email or SMS, strictly only where you have provided your prior consent to receive such communications.

6 Legal Bases for Processing

388com processes your personal data under the following legal bases, which vary depending on the specific purpose of processing:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered 388com player — including account creation, payment processing, game delivery, and bet settlement. Without this processing, we cannot provide you with 388com services.
• Legal Obligation: Processing required to comply with applicable laws and our international gaming licence requirements, including KYC identity verification, AML screening, responsible gaming obligations, and regulatory reporting.
• Legitimate Interests: Processing conducted for 388com's legitimate business interests, including fraud prevention, platform security, abuse detection, and platform analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

388com does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial marketing purposes. We may share your personal data with the following categories of authorised recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, and Mastercard, for the purpose of processing your PKR deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age as part of our regulatory KYC obligations.
• Fraud Prevention Partners: Industry fraud screening services that help us detect duplicate accounts, bonus abuse, and other prohibited activities.
• Gaming Software Providers: The third-party providers of specific game titles and live casino platforms integrated within 388com may receive limited technical data necessary for game operation.
• Regulatory Authorities: We may be required to disclose player data to our licensing authority, law enforcement agencies, financial intelligence units, or other governmental bodies where legally required.
• IT Infrastructure Providers: Cloud hosting, data storage, and security service providers that form part of the 388com technical infrastructure, subject to strict data processing agreements.

8 International Data Transfers

As an internationally licensed gaming platform, 388com may process and store your personal data on servers located outside Pakistan. Where your personal data is transferred to, or accessed from, a jurisdiction with different data protection standards, 388com takes the following safeguards to ensure adequate protection:

• Standard contractual data protection clauses incorporated into agreements with all third-party data processors located in other jurisdictions.
• Technical security measures — including encryption, access controls, and audit logging — applied consistently across all servers and processing environments regardless of geographic location.
• Vendor due diligence assessments conducted prior to engaging any new international data processor, with ongoing monitoring of their data protection practices.

By registering a 388com account and using our platform, you acknowledge and consent to your personal data being transferred to and processed in jurisdictions outside Pakistan where the 388com platform infrastructure operates.

9 Cookies & Tracking Technologies

388com uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that enable the platform to recognise your browser, remember your preferences, and collect usage analytics data. 388com uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the basic operation of the 388com platform — including maintaining your login session, remembering your account preferences, and enabling secure payment processing. These cookies cannot be disabled without significantly impairing your use of the platform.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate and use the 388com platform. This data helps us identify technical issues, improve page performance, and optimise the overall player experience.
• Functionality Cookies: Enable enhanced platform features such as remembering your preferred language, game settings, and display preferences between sessions.
• Marketing Cookies: Used to track your interactions with 388com promotional content and, where you have provided consent, to serve you relevant 388com offers. These cookies are only placed where you have expressly consented.

10 Data Retention

388com retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, subject to the following minimum retention obligations:

• Active Account Data: Retained for the full duration of your 388com account and for a minimum of 5 years following permanent account closure, in compliance with our international gaming licence anti-money laundering record-keeping requirements.
• Financial Transaction Records: PKR deposit and withdrawal records are retained for a minimum of 7 years from the transaction date, in accordance with financial record-keeping obligations.
• KYC Verification Documents: Identity verification documents are retained for a minimum of 5 years following account closure or the date of the last verification review, whichever is later.
• Customer Support Records: Support ticket and live chat transcripts are retained for 3 years from the date of the relevant interaction.
• Marketing Consent Records: Records of your marketing consent or withdrawal of consent are retained for the duration of your account plus 3 years following account closure.
• Self-Exclusion Records: Permanent self-exclusion records are retained indefinitely to ensure compliance with our responsible gaming obligations and to prevent re-registration by self-excluded players.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 388com's internal data governance procedures.

11 Data Security

388com implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security programme includes:

• SSL/TLS Encryption: All data transmitted between your device and the 388com platform is protected by industry-standard SSL/TLS encryption, visible via the HTTPS protocol in your browser address bar.
• Password Hashing: Account passwords are never stored in plain text. All 388com passwords are stored as salted cryptographic hashes using modern hashing algorithms.
• Two-Factor Authentication (2FA): 388com supports 2FA on all player accounts. We strongly recommend enabling 2FA through your account security settings for an additional layer of protection.
• Access Controls: Access to personal data within 388com's internal systems is restricted on a strict need-to-know basis, with all internal access events logged and audited.
• Penetration Testing: The 388com platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities.
• Incident Response: 388com maintains a documented data breach response procedure. In the event of a security incident that poses a risk to your rights and freedoms, affected players will be notified promptly in accordance with applicable notification obligations.

12 Your Rights

As a data subject, you hold the following rights in relation to the personal data that 388com holds about you. You may exercise any of these rights by contacting us at [email protected] with a clear description of your request:

• Right of Access: You may request a copy of the personal data that 388com holds about you, along with information about how that data is used and with whom it is shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your 388com account. You may also update many data fields directly through your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 388com's overriding legal retention obligations outlined in Section 10.
• Right to Restriction: You may request that 388com restricts the processing of your personal data in certain circumstances — for example, while a rectification request is being assessed.
• Right to Data Portability: Where technically feasible, you may request a copy of personal data you have provided to 388com in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data where that processing is based on legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent — particularly in relation to marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

388com will respond to all valid data subject requests within 30 days of receipt. Complex requests may require additional time, in which case we will notify you of the expected resolution timeline. We may ask you to verify your identity before processing your request to protect against unauthorised data access.

13 Children's Privacy

The 388com platform is strictly for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. If 388com becomes aware that personal data has been collected from an underage individual, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and have reason to believe that a person under 21 in your care has registered a 388com account, please contact us immediately at [email protected] so that we can take appropriate action. We take underage gambling prevention extremely seriously and maintain active age verification protocols as part of our licensing obligations.

14 Marketing Communications

388com may send you promotional communications — including bonus offers, PSL-season promotions, new game announcements, and platform updates — via email or SMS, but only where you have provided your prior, explicit consent to receive such communications at the time of account registration or subsequently through your account preferences.

• You may opt out of marketing communications at any time by clicking the "unsubscribe" link included in any 388com marketing email, or by updating your communication preferences in your account settings.
• Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, and account security alerts — which are sent regardless of your marketing preference settings.
• Players who have self-excluded from 388com will not receive any marketing communications for the duration of their self-exclusion period, including permanently self-excluded players.
• 388com does not engage in unsolicited SMS marketing to individuals who have not provided explicit consent for this communication channel.

15 Updates to This Privacy Policy

388com reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or our licensing requirements. The date of the most recent update is displayed at the top of this document. When material changes are made to this Privacy Policy, 388com will notify registered players via their registered email address with a minimum of 7 days' prior notice.

The current version of this Privacy Policy is always available at /privacy-policy. We encourage you to review this page periodically to stay informed about how 388com protects your personal data. Your continued use of the 388com platform following the effective date of any update constitutes your acknowledgement of the revised Privacy Policy.

16 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data that 388com holds about you, please contact our data protection team using the details below. We are committed to addressing all privacy-related queries promptly and transparently.

Email: [email protected]

Please include "Privacy Request" in the subject line of your email, along with your registered 388com username and a clear description of your query or request. This will help our team route your message to the appropriate personnel and respond as efficiently as possible.

For further information about your data rights, or if you feel that your privacy concerns have not been adequately addressed by 388com, you may also contact the data protection supervisory authority in the jurisdiction that applies to your circumstances.