Privacy Policy — How ww388 Handles Your Data

Introduction

This Privacy Policy ("Policy") sets out the data protection practices of ww388 ("Platform", "we", "us", "our") in relation to personal data collected from users ("User", "you", "your") who access or use the ww388 website at ww388.cam and any associated services, features and functionalities (collectively, the "Service").

ww388 is committed to protecting the privacy and security of all Users, including those accessing the Platform from cities across Pakistan such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. This Policy explains what personal data we collect, why we collect it, how we process it and what rights you have in relation to it.

By registering an account, making a deposit, placing a wager or otherwise using any part of the Service, you acknowledge that you have read and understood this Policy and you consent to the processing of your personal data as described herein. If you do not agree to the terms of this Policy, you must not use the Platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, both of which are incorporated by reference.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:

Personal Data We Collect

ww388 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Account and Registration Data

• Full legal name as it appears on your government-issued identity document;
• Date of birth (required to verify minimum age eligibility);
• Email address and, where provided, a mobile telephone number;
• Residential address (city, postal code and country — including Pakistan-based addresses);
• Username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identity documents — typically a Pakistani CNIC (front and back) or a valid passport;
• Proof of residential address where required (e.g., a utility bill or bank statement);
• Selfie or liveness check image for facial verification purposes;
• Any additional documentation requested during enhanced due diligence.

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts (denominated in PKR or other accepted currencies), timestamps and method references;
• Payment method details necessary to process transactions — note that full card or account numbers are not stored by ww388 directly but may be handled by the relevant payment processor;
• Records of bonus claims, wagering activity, wins and losses.

3.4 Technical and Usage Data

• IP address, device identifiers and approximate geolocation derived from IP;
• Browser type, operating system, screen resolution and device type;
• Pages visited, session duration, clickstream data and interaction logs;
• Login timestamps and session records.

3.5 Communications Data

• Records of support chat interactions, email correspondence and any complaints submitted to the Platform;
• Survey or feedback responses, where voluntarily provided.

How We Collect Personal Data

ww388 collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support or respond to communications from us;
• Automatically — through cookies, server logs and similar tracking technologies when you browse or use the Platform;
• From third-party service providers — including identity verification agencies, payment processors and fraud-detection services that provide data to us in the course of their contracted functions;
• From publicly available sources — where permitted by law and necessary for compliance or fraud-prevention purposes.

Purpose of Data Processing

ww388 processes personal data for the following purposes:

Legal Basis for Processing

Where data protection law requires a legal basis for the processing of personal data, ww388 relies on the following grounds:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing and KYC verification;
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations imposed by the operator's licensing authority;
• Legitimate interests: Processing necessary to pursue the legitimate interests of ww388, including fraud prevention, platform security and aggregate analytics, where such interests are not overridden by your fundamental rights;
• Consent: Processing activities — such as optional marketing communications or non-essential cookies — for which we rely on your freely given, specific consent.

Where processing is based on consent, you have the right to withdraw that consent at any time by contacting support or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

Data Sharing and Disclosure

ww388 does not sell, rent or trade your personal data to third parties for their commercial benefit. We may, however, share personal data in the following circumstances:

7.1 Service Providers and Processors

We engage third-party service providers to perform functions on our behalf, including payment processing, identity verification, fraud detection, customer support infrastructure and analytics. These providers act as Data Processors and are contractually bound to process your data only on our instructions, for specified purposes and with appropriate security measures in place.

For context, payment processing for Pakistani users may involve routing through familiar payment network infrastructure. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for user context only — these providers do not endorse or affiliate with ww388 or gambling services.

7.2 Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, regulatory bodies, courts or other public authorities where we are required to do so by applicable law, a valid court order or a binding regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring or sale of all or substantially all of our business assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer that materially affects the processing of your personal data.

7.4 Fraud Prevention and AML

Where required by our AML compliance programme or where fraud is suspected, we may share relevant personal data with fraud-prevention organisations, financial intelligence bodies or law enforcement. This is a legal obligation, not discretionary.

Data Retention

ww388 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. General retention principles are as follows:

• Account data: Retained for the duration of the active account relationship and for a defined period following account closure, as required by the operator's regulatory regime.
• KYC and identity documents: Retained for the minimum period mandated by applicable AML regulations, typically measured from the date of account closure or the last relevant transaction.
• Financial transaction records: Retained for the period required by the operator's licensing obligations and applicable financial record-keeping requirements.
• Support communications: Retained for a reasonable period sufficient to resolve disputes and meet regulatory audit requirements.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, whichever is earlier.

Following the applicable retention period, personal data will be securely deleted or anonymised in a manner that renders re-identification impossible.

Data Security

ww388 implements and maintains appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest, including identity documents and payment credentials;
• Role-based access controls restricting employee and contractor access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability monitoring of Platform infrastructure;
• Incident response procedures for the identification, assessment and notification of data security incidents.

While ww388 takes all reasonable steps to protect your data, no data transmission over the internet is entirely risk-free. You are responsible for maintaining the confidentiality of your own account credentials and for promptly notifying support if you suspect any unauthorised use of your account.

Cookies and Tracking Technologies

ww388 uses cookies and similar tracking technologies (including web beacons and session storage) to support platform functionality and improve the user experience. The categories of cookies we may use are:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the Platform. Disabling other categories will limit certain features but will not prevent access to core functionality.

Your Data Rights

Subject to applicable data protection law and the limitations described below, you may have the following rights in relation to the personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you and information about how it is processed;
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your account;
• Right to erasure: You may request deletion of your personal data in certain circumstances — for example, where it is no longer necessary for the purposes for which it was collected. Note that legal and regulatory retention obligations may limit our ability to fulfil erasure requests in full;
• Right to restrict processing: You may request that we limit the processing of your data while a complaint or accuracy dispute is pending;
• Right to data portability: Where processing is based on consent or contractual necessity, you may request that we provide your personal data in a structured, machine-readable format;
• Right to object: You may object to processing based on legitimate interests or to direct marketing communications at any time;
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact our support team via the live chat on the Platform or at the email address shown in Section 15. We will respond to requests within a reasonable timeframe as required by applicable law. We may ask you to verify your identity before processing any rights request.

Minors and Age Restriction

The ww388 Platform is strictly restricted to adults aged 18 years or older, or the higher minimum age required by the operator's license jurisdiction. We do not knowingly collect personal data from individuals under the applicable minimum age.

If we discover or are notified that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account. Any deposits made by a minor will be returned, and wagers placed will be voided.

If you believe that a minor has registered an account or submitted data to the Platform, please contact support immediately so that we can investigate and act without delay.

International Data Transfers

The ww388 Platform operates internationally. Your personal data may be transferred to, stored in and processed by systems located in countries outside Pakistan, including countries in which the operator's servers, service providers or data processors are based.

Where personal data is transferred to jurisdictions that may not provide a level of data protection equivalent to that applicable in your own jurisdiction, we rely on appropriate safeguards such as contractual data protection clauses to govern those transfers.

By using the Platform, you acknowledge that your personal data may be subject to such international transfers. If you have concerns about specific transfers, please contact us through the details provided in Section 15.

Changes to This Privacy Policy

ww388 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or the Platform's features and services. The most current version of this Policy will always be available at ww388.cam/privacy-policy and will display the date of the most recent update.

Where changes are material — for example, changes to the categories of data collected, new purposes of processing, or changes to your rights — we will notify you via a notice on the Platform or by email to your registered address. Continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights or need to report a data protection concern, please contact the ww388 support team through the following channels:

• Live Chat: Available through the Platform as operator-provided support (presented as 24/7 availability, subject to operator hours). This is the fastest channel for urgent account or data queries.
• Email (plain text — not a clickable link): [email protected]
• Languages: English (primary support language); Urdu available on request via live chat.

When contacting us about a data request, please include your registered account email address and a clear description of your request. Where identity verification is required before we can respond to your request, we will ask you to provide appropriate documentation through the secure verification portal.

For responsible gambling queries — including self-exclusion requests, deposit limit adjustments or session control activation — please visit our Responsible Gambling page or contact support directly via live chat.