Privacy Policy – 388game Pakistan Data Protection Commitment

388game is an online gaming platform operating at 388game.biz, providing casino games, sports betting, and related entertainment services to players in Pakistan. For the purposes of this Privacy Policy, "388game", "we", "us", and "our" all refer to the operating entity behind the 388game platform.

388game acts as the data controller in respect of personal information collected through the platform. This means we determine why and how your personal data is processed. Where we engage third-party service providers to process data on our behalf, those providers act as data processors and are bound by contractual obligations to handle your data in accordance with this policy.

Our registered contact email for all data protection matters is support@388game.biz. If you have any questions, concerns, or requests relating to your personal data, please reach out to us using that address or through the live chat feature on the platform.

388game collects personal information from you in three main ways: information you provide directly, information generated automatically by your use of the platform, and information received from third-party sources such as payment processors and identity verification services.

2.1 Information You Provide Directly

2.2 Information Collected Automatically

When you access the 388game platform, our systems automatically collect certain technical data including your IP address, device type, browser type and version, operating system, screen resolution, referring URL, pages visited, time and duration of sessions, and game activity logs. This data is used to operate and improve the platform and to detect fraud or technical issues.

2.3 Information from Third Parties

Where you make a deposit or withdrawal, 388game may receive transaction confirmation data from payment processors including Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners. We may also receive identity verification results from KYC service providers. In all cases, 388game only receives the minimum data necessary to complete the relevant transaction or compliance check.

388game uses the personal information we collect for the following specific purposes:

• Account Management: Creating and maintaining your 388game account, verifying your identity, managing account security, and enabling you to log in, deposit, bet, and withdraw.
• Payment Processing: Executing deposits and withdrawal transactions via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Verifying that payment accounts belong to the registered account holder.
• Regulatory Compliance: Fulfilling KYC obligations, anti-money laundering (AML) monitoring, responsible gaming assessments, and any other legal or regulatory requirements applicable to 388game's operations.
• Platform Operation: Delivering game results, settling bets, crediting bonuses, calculating VIP points and cashback, and operating the 388game VIP Club.
• Customer Support: Responding to your queries, complaints, and account requests. Maintaining records of communications for quality assurance and dispute resolution.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, bonus abuse, money laundering, underage gambling, and other forms of prohibited conduct.
• Platform Improvement: Analysing usage patterns and technical performance to improve game quality, platform stability, payment speed, and the overall user experience for Pakistani players.
• Marketing (where consented): Sending promotional offers, bonus notifications, and platform updates. You can opt out at any time — see Section 10 for details.

388game processes your personal data on one or more of the following legal bases, depending on the specific purpose of the processing activity:

• Contract Performance: Processing necessary to fulfil the agreement you entered into when creating a 388game account — this covers account management, payment processing, and game operations.
• Legal Obligation: Processing required to comply with applicable law, including KYC verification, AML monitoring, and responsible gaming compliance.
• Legitimate Interests: Processing for fraud prevention, platform security, technical improvement, and customer support — where our legitimate interest does not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

388game does not sell your personal information to third parties. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

We engage carefully selected third-party service providers to perform functions on our behalf, including payment processing, KYC identity verification, fraud detection, cloud hosting, and customer support software. These providers are permitted to use your data only as necessary to perform the services we have engaged them for, and are contractually required to maintain appropriate data security standards.

5.2 Legal Requirements

388game may disclose personal data to regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, or where we have a good-faith belief that disclosure is necessary to protect the rights, property, or safety of 388game, its members, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of 388game's assets, personal data held by 388game may be transferred to the acquiring entity. In such circumstances, 388game will notify registered members via email prior to the transfer and will ensure that the acquiring entity agrees to honour this Privacy Policy or provides members with an opportunity to close their accounts before the transfer completes.

388game uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us operate the platform efficiently and improve your experience.

6.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function. These include session cookies that keep you logged in, security tokens, and cookies that remember your preferences. You cannot opt out of essential cookies while using 388game.
• Analytics Cookies: Help us understand how players use the platform — which pages they visit, how long they stay, and where they encounter issues. This data is aggregated and anonymised and is used solely to improve 388game.
• Functional Cookies: Remember your settings and preferences, such as preferred language, notification settings, and display preferences.
• Marketing Cookies: Used to deliver relevant promotional content to you and measure the effectiveness of our promotional campaigns. These are only placed with your consent.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 388game platform. For full cookie settings control, visit your account preferences or manage via your device's browser controls.

388game takes the security of your personal data seriously and has implemented a comprehensive set of technical and organisational security measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 388game servers is encrypted using industry-standard Transport Layer Security (TLS). The same standard used by major banks and financial institutions in Pakistan.
• Encrypted Data Storage: Sensitive personal and financial data is encrypted at rest in our databases. KYC documents are stored in encrypted format with access controls that limit who within 388game can view them.
• Access Controls: Access to personal data within 388game is restricted on a need-to-know basis. Staff with access to member data are subject to confidentiality obligations and receive regular data security training.
• Fraud Monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, unusual behaviour, or security threats. Suspicious activity triggers immediate alerts and investigation.
• Two-Factor Authentication (2FA): 388game supports and recommends enabling 2FA on your account for an additional layer of security beyond your password.
• Regular Security Reviews: Our platform and infrastructure undergo regular security assessments and penetration testing to identify and address vulnerabilities before they can be exploited.

388game retains your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. The following general retention principles apply:

• Active Accounts: Personal data associated with an active 388game account is retained for the duration of the account's existence plus a legally required post-closure retention period.
• Closed Accounts: Following account closure, 388game retains certain records (including KYC documents, transaction history, and account activity logs) for a minimum of five (5) years. This is required to comply with anti-money laundering regulations and to facilitate the resolution of any disputes that may arise after closure.
• Marketing Data: If you withdraw consent to marketing communications, we retain a suppression record to ensure we do not send you further marketing. The suppression record itself is retained indefinitely to prevent re-subscription without your consent.
• Support Communications: Chat transcripts and email correspondence are retained for up to three (3) years for quality assurance, training, and dispute resolution purposes.

When personal data is no longer required for any legitimate purpose, 388game securely destroys it using industry-standard data destruction procedures.

As a 388game member, you have meaningful rights over your personal data. Here is a clear summary of what those rights are and how to exercise them:

With your consent, 388game may send you promotional communications including bonus offers, tournament announcements, new game notifications, and VIP Club updates. These may be sent via SMS to your registered mobile number, email, or in-platform notifications.

You can withdraw your consent to marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from 388game
• Updating your notification preferences in your account settings
• Contacting 388game support via live chat or email and requesting removal from marketing lists

Withdrawal of marketing consent will not affect your ability to receive service-related communications such as withdrawal confirmations, security alerts, and account notifications. These operational communications are sent regardless of marketing preference as they are necessary for the proper management of your account.

388game will never send marketing communications to accounts that are under a self-exclusion order or cooling-off period. If you receive such a communication in error, please report it immediately to support@388game.biz.

The 388game platform is strictly for adults aged 18 and over. We do not knowingly collect personal information from anyone under the age of 18. If we discover or are notified that a person under 18 has registered an account on 388game, we will immediately close the account, return any real-money balance held, and delete all associated personal data to the extent required by law.

388game operates age verification checks during registration and as part of the KYC process. If you are a parent or guardian and you believe your child has registered on 388game, please contact us immediately at support@388game.biz. We will act on verified reports within 24 hours.

388game operates internationally and may store or process personal data on servers located outside Pakistan. Where personal data is transferred outside of Pakistan, 388game ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded in Pakistan.

These safeguards may include contractual data protection clauses with data processors, the use of providers who maintain internationally recognised security certifications, and other mechanisms appropriate to the nature and volume of the data being transferred. If you have concerns about international transfers of your personal data, please contact us at support@388game.biz.

388game may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or improvements to our platform. When we make material changes to this policy, we will notify registered members via email and by posting a prominent notice on the 388game platform at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page always reflects when the most recent version was published. We encourage you to review this policy periodically to stay informed about how 388game handles your personal information. Continued use of the platform after an updated policy takes effect constitutes acceptance of the revised terms.

If any update to this policy would result in 388game using your data in a way that requires fresh consent (for example, a new marketing use), we will seek your explicit consent at the relevant time before applying the change to your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 388game handles your personal data, please get in touch through any of the following channels:

• Email: support@388game.biz — please include "Privacy Request" in the subject line for faster routing. We respond within 5 business days for data rights requests and within 2 hours for urgent account matters.
• Live Chat: Available 24/7 through the 388game platform. Real human agents, typically connected within 2 minutes. Suitable for general questions and non-sensitive account matters.
• FAQ: Visit our FAQ page where common privacy, account, and payment questions are answered in plain language.

For formal data rights requests (access, deletion, correction, portability), please contact us by email so we have a written record of your request and can respond formally within the required timeframe. We will ask you to verify your identity before processing data rights requests — this is to protect you, not to create obstacles.