w388 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how w388 ("w388", "we", "us", "our"), the operator of the online gaming platform at w388.biz ("the Platform"), collects, processes, stores, and protects personal data relating to individuals who visit, register on, or use the Platform ("you", "your", "the Player").

We take our data protection obligations seriously. This Policy is designed to give you a clear and honest understanding of our data practices so that you can make an informed decision about using the w388 Platform. By creating an account or using any feature of the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy.

2. Data Controller

w388 is the data controller in respect of the personal data processed under this Policy. This means w388 determines the purposes for which, and the means by which, your personal data is processed. All data protection enquiries should be directed to w388 via the contact details at Section 15 of this Policy.

3. Personal Data We Collect

w388 collects the following categories of personal data, depending on your level of interaction with the Platform:

3.1 Registration Data. When you create a w388 account, we collect your full name, date of birth, residential address, email address, and mobile number. This information is mandatory for account creation and identity verification.

3.2 Identity Verification Data. For KYC (Know Your Customer) compliance purposes, w388 may collect copies of government-issued identity documents (such as your CNIC or passport), proof of address documentation, and, where applicable, source-of-funds documentation. For Pakistani players, a valid Computerised National Identity Card (CNIC) is the primary accepted identity document.

3.3 Financial Data. When you make a deposit or request a withdrawal, we collect your JazzCash or Easypaisa account details, bank account details (IBAN, account title, bank name), card details (where applicable), and USDT TRC20 wallet addresses. Full card numbers are not stored by w388 — card tokenisation is handled by our PCI-DSS compliant payment processor.

3.4 Transaction Data. We maintain records of all deposits, withdrawals, bets placed, games played, bonus claims, and account balance changes.

3.5 Technical Data. We automatically collect IP addresses, browser type and version, device type, operating system, referring URLs, and session duration data when you visit or use the Platform.

3.6 Communications Data. If you contact w388 support via live chat or email, we retain records of those communications for service quality, dispute resolution, and compliance purposes.

4. How We Collect Personal Data

w388 collects personal data through the following means:

• Directly from you — during account registration, identity verification, deposit and withdrawal requests, support interactions, and survey participation.
• Automatically — through cookies, log files, and similar tracking technologies when you interact with the Platform (see Section 10).
• From third parties — from identity verification service providers, fraud detection agencies, and payment processors in the course of processing transactions and verifying your identity.

5. How We Use Your Personal Data

w388 uses your personal data for the following purposes:

• Creating and managing your w388 account
• Processing deposits, withdrawals, and in-account transactions in PKR
• Verifying your identity and age in compliance with KYC obligations
• Detecting, investigating, and preventing fraud, money laundering, and other criminal activity
• Enforcing the w388 Terms & Conditions, including responsible gaming restrictions
• Providing customer support and resolving disputes
• Sending transactional communications (deposit confirmations, withdrawal status updates, security alerts)
• Sending promotional communications where you have given your consent
• Personalising your gaming experience and improving the Platform through analytics
• Complying with applicable legal and regulatory obligations

6. Legal Basis for Processing

w388 processes your personal data on the following legal bases:

6.1 Contractual necessity. Processing is necessary to perform the contract between you and w388 — specifically, to operate your account, process bets, and handle financial transactions.

6.2 Legal obligation. w388 is required by applicable law to collect and retain certain data, including for AML/KYC compliance, fraud prevention, and age verification purposes.

6.3 Legitimate interests. w388 processes some data on the basis of its legitimate interests, including fraud prevention, Platform security, and business analytics, where those interests are not overridden by your rights.

6.4 Consent. Where processing is based on consent (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing

w388 does not sell your personal data to third parties. We may share your data with the following categories of recipients where necessary:

• Payment processors — JazzCash, Easypaisa, and bank and card payment processors require transaction data to process deposits and withdrawals.
• Identity verification providers — third-party KYC services that assist in verifying identity documents and conducting age verification checks.
• Fraud prevention agencies — agencies that help detect and prevent fraudulent transactions and multi-accounting.
• Regulatory and law enforcement authorities — where required by applicable law or a lawful court order, w388 will disclose data to relevant authorities.
• Technology and infrastructure providers — hosting, cloud storage, security monitoring, and analytics providers operating under strict data processing agreements.

All third-party service providers are contractually obligated to process your data only for the specified purpose and in accordance with applicable data protection requirements.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including countries where data protection laws may differ from those in your jurisdiction. Where such transfers occur, w388 implements appropriate safeguards — including contractual data transfer mechanisms and, where applicable, standard contractual clauses — to ensure your data receives a comparable level of protection.

9. Data Retention

w388 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable legal and regulatory obligations. In general:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Identity verification documents are retained for the period mandated by applicable KYC regulations.
• Support communications are retained for up to two (2) years for dispute resolution and quality assurance purposes.
• Technical and analytical data is retained for no longer than thirteen (13) months.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

10. Cookies and Tracking Technologies

w388 uses cookies and similar technologies on the Platform. Cookies are small text files placed on your device that help us recognise you and remember your preferences.

Strictly necessary cookies are essential for the Platform to function and cannot be disabled. They enable core functions such as account login session management and security.

Functional cookies remember your preferences (language, currency display, layout settings) to provide a more personalised experience.

Analytics cookies collect anonymised information about how visitors interact with the Platform, helping us identify pages that perform well and areas requiring improvement. This data does not identify you personally.

You can control cookies through your browser settings. Please note that disabling functional or analytics cookies will not prevent you from using the Platform, but some features may not behave as expected.

11. Your Data Protection Rights

Subject to applicable law, you have the following rights in respect of your personal data held by w388:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to restriction — you may request that we restrict processing of your data in certain circumstances, such as where you contest its accuracy.
• Right to data portability — you may request a copy of data you have provided to us in a structured, machine-readable format.
• Right to object — you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact w388 support using the details at Section 15. We will respond to verified requests within thirty (30) days. We may require proof of identity before processing any request.

12. Children and Minors

The w388 Platform is strictly intended for adults aged 18 and over. w388 does not knowingly collect or process personal data from any individual under the age of 18. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately using the details in Section 15.

13. Data Security

w388 implements industry-standard technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data transmissions, server-side encryption for stored sensitive data, role-based access controls limiting staff access to personal data on a need-to-know basis, regular penetration testing and vulnerability assessments, and incident response procedures for data breaches.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, w388 will notify you and the relevant supervisory authority in accordance with applicable legal obligations.

Whilst w388 takes every reasonable precaution to protect your data, no internet transmission or electronic storage is completely secure. You use the Platform at your own risk and are encouraged to protect your account by using a strong, unique password and enabling two-step verification.

14. Changes to This Policy

w388 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will provide advance notice via the Platform or by email to your registered address. The date of the most recent revision appears at the top of this Policy. Your continued use of the Platform following the effective date of any revision constitutes your acknowledgement of the updated Policy. If you do not agree to any revision, you must cease using the Platform and may request account closure.

15. Contact Us

For data protection enquiries, to exercise your rights, or to raise a concern about how w388 handles your personal data, please contact us at:

Email: [email protected]

w388 aims to respond to all data protection requests within thirty (30) days. Where a request is complex or numerous, this period may be extended by a further two months, and you will be informed accordingly.