Privacy Policy

This Privacy Policy (the "Policy") describes how 388wan (hereinafter "388wan", "we", "us" or "the Operator") collects, processes, stores, shares and protects the personal data of individuals who access or use the 388wan platform at 388wan.cam and any associated services (collectively, the "Platform").

This Policy applies to all registered users, visitors and any other individuals whose personal data is processed by 388wan in connection with the Platform. It should be read alongside the Terms & Conditions, which govern the overall use of the Platform.

By accessing the Platform or creating an Account, you acknowledge that you have read, understood and agree to the data practices described in this Policy. If you do not agree with any aspect of this Policy, you should discontinue use of the Platform and contact us to request closure of your Account.

For the purposes of this Policy, the following terms shall have the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including names, contact details, financial information, device identifiers and behavioural data.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing Personal Data — in this case, 388wan.
• "Data Processor" means a third party that processes Personal Data on behalf of the Data Controller.
• "User" / "Player" / "You" means any registered account holder or visitor to the 388wan Platform.
• "KYC" means Know Your Customer — the identity verification process conducted to confirm a user's identity and age eligibility.
• "AML" means Anti-Money Laundering — regulatory procedures applied to detect and prevent financial crime.
• "Cookies" means small data files stored on your device by the Platform for session management, security and analytics purposes.

388wan acts as the Data Controller in respect of Personal Data collected through the Platform. As Data Controller, 388wan determines the purposes for which your Personal Data is processed and the means by which that processing takes place.

For all data protection enquiries, access requests or complaints, you may contact the 388wan data team using the contact details set out in Section 12 of this Policy.

388wan collects Personal Data through several channels: directly from you during registration and account use, automatically through technical systems, and from third-party verification and payment providers. The categories of data collected are set out in the table below.

We do not intentionally collect special categories of sensitive Personal Data (such as health, religious or political information) unless directly relevant to a responsible gambling assessment or a regulatory obligation.

388wan uses Personal Data for the following purposes:

• Account Management: To create, maintain and administer your Account, verify your identity and eligibility, and manage your preferences and settings.
• KYC & AML Compliance: To verify your identity, age and the source of your funds in compliance with applicable licensing and anti-money laundering obligations.
• Payment Processing: To process deposits and withdrawals via available payment methods, including familiar Pakistani payment rails where applicable.
• Platform Delivery: To provide access to betting markets, casino games, live dealer tables and other features of the 388wan Platform.
• Responsible Gambling: To monitor play patterns for indicators of problem gambling, to enforce responsible gambling limits you have set, and to administer self-exclusion requests.
• Security & Fraud Prevention: To detect, investigate and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting and other prohibited conduct.
• Customer Support: To respond to your queries, complaints and formal requests submitted via Live Chat, the Help Centre or email.
• Legal Compliance: To comply with applicable legal, regulatory and licensing obligations, including responding to lawful requests from competent authorities.
• Service Improvement: To analyse aggregated and anonymised Platform usage data to improve features, performance and user experience.
• Communications: To send you transactional notifications relevant to your Account (e.g., deposit confirmations, withdrawal updates, security alerts).

Where applicable data protection frameworks require a lawful basis for processing Personal Data, 388wan relies on the following bases:

• Contract Performance: Processing necessary to perform the contract between you and 388wan — including account management, payment processing and service delivery.
• Legal Obligation: Processing required to comply with applicable legal and licensing obligations, including KYC, AML, regulatory reporting and data retention requirements.
• Legitimate Interests: Processing for fraud prevention, security monitoring, Platform improvement and responsible gambling oversight, where our interests or the interests of third parties are not overridden by your privacy rights.
• Consent: Where required by applicable law for specific processing activities such as marketing communications or non-essential cookies. Consent may be withdrawn at any time without affecting processing based on other legal bases.

7.1 Categories of Recipients

388wan may share Personal Data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: Third-party payment processors and financial institutions required to process your deposits and withdrawals. This includes — by way of familiar reference only — mobile wallet operators and bank transfer services. None of these providers are affiliated with or endorsing 388wan.
• KYC / Identity Verification Providers: Third-party services used to verify your identity, age and document authenticity as part of the KYC process.
• Technology and Infrastructure Providers: Cloud hosting, security, analytics and software providers who process data on our behalf as Data Processors under contractual data protection agreements.
• Game and Content Providers: Third-party game developers whose products are available on the Platform may receive session and gameplay data for technical and audit purposes.
• Legal and Regulatory Authorities: Competent law enforcement, regulatory or licensing authorities where disclosure is required by law, court order or regulatory direction.
• Fraud Prevention Services: Industry fraud detection and responsible gambling databases where sharing is required under the Operator's licensing obligations.

7.2 No Sale of Data

388wan does not sell, rent, license or trade your Personal Data to any third party for commercial purposes. Data shared with third parties is limited to what is necessary and is governed by appropriate contractual safeguards.

7.3 International Transfers

Personal Data may be transferred to and processed in countries outside Pakistan or the country in which you are located. Where such transfers occur, 388wan applies appropriate safeguards to ensure that your data receives a comparable level of protection to that required under applicable data protection frameworks.

388wan retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory and licensing retention obligations. The following general principles apply:

• Active Accounts: Personal Data is retained for the full duration of your Account and for a minimum period thereafter as required by applicable law — typically no less than five (5) years from the date of Account closure.
• Transaction Records: Financial and transaction records are retained for a minimum period as required by AML and licensing obligations, which may extend to seven (7) years or longer in certain jurisdictions.
• KYC Documents: Identity and verification documents are retained for the period required by applicable regulatory frameworks from the end of the business relationship.
• Support Communications: Correspondence with the support team is retained for a reasonable period to facilitate dispute resolution and quality assurance.
• Self-Exclusion Records: Responsible gambling and self-exclusion records are retained to prevent re-registration and to fulfil regulatory obligations.

When Personal Data is no longer required for its stated purpose and there is no legal obligation to retain it, 388wan will securely delete or anonymise the data in accordance with its data retention procedures.

Subject to applicable law and legal retention requirements, you may exercise the following rights in respect of Personal Data held by 388wan. To submit a request, contact [email protected] with your account details and the specific right you wish to exercise. We aim to respond within 30 days.

• Right of Access (Subject Access Request): You may request confirmation of whether 388wan processes your Personal Data and, if so, a copy of that data along with information about the purposes and recipients of processing.
• Right to Rectification: Where your Personal Data is inaccurate or incomplete, you may request that it be corrected or supplemented. Some data corrections may require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to legal retention obligations that may prevent immediate deletion of certain records.
• Right to Restriction of Processing: You may request that 388wan restrict processing of your data in specific circumstances — for example, while the accuracy of data is contested or an objection is pending.
• Right to Data Portability: Where processing is based on consent or contract performance and is carried out by automated means, you may request a structured, machine-readable copy of the Personal Data you have provided to 388wan.
• Right to Object: You may object to processing of your Personal Data for direct marketing purposes or profiling related to direct marketing at any time. You may also object to other forms of processing based on legitimate interests, subject to our demonstrating compelling grounds for continued processing.
• Rights in Relation to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce significant legal or similarly significant effects, subject to applicable exceptions.

10.1 What Are Cookies?

Cookies are small text files placed on your device when you access a website. They allow the website to recognise your device, maintain session state and collect usage information. 388wan uses cookies and similar technologies (including local storage and session storage) on the Platform.

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function correctly. These enable session management, login authentication and security features. They cannot be disabled without impairing Platform functionality.
• Performance Cookies: Used to collect anonymised data about how users navigate the Platform, which pages are visited most frequently and where errors occur. This data informs Platform improvements and does not identify individual users.
• Functional Cookies: Used to remember your preferences, language settings and responsible gambling configurations between sessions.
• Security Cookies: Used to support fraud detection, bot prevention and account security monitoring systems.

10.3 Managing Cookies

Most browsers allow you to control cookies through their settings. You may block or delete cookies, but doing so may impair the functionality of the Platform, including your ability to log in and maintain a session. 388wan does not use third-party advertising cookies or cross-site tracking technologies for commercial profiling purposes.

388wan implements appropriate technical and organisational security measures to protect Personal Data against unauthorised access, disclosure, alteration or destruction. These measures include:

• HTTPS/SSL encryption for all data transmitted between your device and 388wan servers.
• Encryption at rest for sensitive Personal Data stored in 388wan systems.
• Access controls limiting internal access to Personal Data on a need-to-know basis.
• Regular security assessments and vulnerability monitoring of Platform infrastructure.
• Two-factor authentication options available to users to protect Account access.
• Staff training on data protection obligations and security best practices.

While 388wan takes security seriously, no online system can guarantee absolute protection against all threats. You should also take responsibility for your own Account security by using a strong, unique password, enabling two-factor authentication and not sharing your login credentials with others.

For any queries relating to this Privacy Policy, to exercise your data rights, to raise a data protection concern or to submit a formal complaint, please contact the 388wan support team using the following details:

We aim to acknowledge all privacy-related requests within 5 business days and to respond in full within 30 calendar days. For complex requests, we may require additional time and will notify you accordingly. 388wan may request proof of identity before processing access or deletion requests.

This Privacy Policy was last updated on 1 January 2026. 388wan reserves the right to update this Policy at any time. Material changes will be communicated to registered users by email or prominent Platform notice prior to taking effect.