At 388in, protecting the personal data of our members across Pakistan — from Karachi and Lahore to Islamabad and Faisalabad — is a foundational obligation, not an afterthought. This Privacy Policy explains exactly what personal information 388in collects when you use the platform, why we collect it, how it is stored and protected, who we may share it with, and what rights you hold over your own data. Please read it carefully alongside our Terms & Conditions.
Six core commitments that define how 388in approaches your personal data — summarised here before the full legal text below.
All personal data submitted to 388in is protected by 256-bit SSL/TLS encryption in transit and stored on access-controlled, encrypted servers. 388in applies the principle of minimum necessary access — only staff with a legitimate operational need may access Member data.
388in does not sell, rent, or trade your personal data to third-party marketing organisations. Your information is used exclusively to operate your account, comply with licensing obligations, and deliver the 388in service. Full stop.
You have the right to access, correct, and — subject to legal retention requirements — request deletion of your personal data held by 388in. We will respond to all valid data rights requests within 30 days of receipt.
388in collects only the personal data required to operate a licensed gambling platform — identity verification, payment processing, AML compliance, and responsible gaming obligations. We do not collect data for collection's sake.
If you have opted into 388in marketing communications, you may withdraw your consent at any time by updating your account preferences or contacting support. Self-excluded Members are automatically removed from all marketing lists.
388in retains personal data only for as long as required by licensing, legal, and anti-money-laundering obligations. The specific retention periods for each data category are disclosed in the full policy below.
The personal data 388in collects falls into the following categories, each collected for a specific, lawful purpose tied to platform operation or licensing requirements.
Full legal name, date of birth, CNIC number, nationality, and residential address. Collected at registration for identity verification, age verification, and KYC compliance as required by 388in's international gaming licence.
Mobile phone number, email address, and any contact details provided during support interactions. Used for account management, security alerts, transaction notifications, and — with your consent — marketing communications.
JazzCash and EasyPaisa account references, bank account details where provided, transaction history, deposit and withdrawal records. Collected for payment processing, AML compliance, and financial crime prevention as required by our licence.
Bet history, game session records, wager amounts, win/loss records, and bonus usage. Collected to operate your account, fulfil payouts, resolve disputes, and monitor for responsible gaming obligations and match-fixing detection.
IP address, device type, operating system, browser type, session timestamps, and approximate geolocation. Collected automatically for fraud prevention, security monitoring, platform optimisation, and regulatory reporting.
Records of live chat conversations, email correspondence, and support ticket history. Retained for quality assurance, dispute resolution, and to provide continuity of service in follow-up interactions with 388in support staff.
As a 388in member, you hold the following rights with respect to your personal data. To exercise any of these rights, contact 388in support via live chat or email.
You may request a copy of the personal data 388in holds about you at any time. We will provide this within 30 days of receiving a valid request, in a commonly used electronic format.
If any personal data 388in holds about you is inaccurate or incomplete, you have the right to request correction. Some corrections may require supporting documentation for verification purposes.
You may request deletion of your personal data, subject to 388in's legal and licensing obligations to retain certain records — particularly financial transaction data required for AML compliance.
You may request that 388in restrict processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested or a complaint is under review.
Where technically feasible, you may request a structured, machine-readable export of personal data you have directly provided to 388in for transfer to another service provider.
You may object to 388in processing your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to 388in's overriding legal obligations.
How to Exercise Your Rights: To submit a data rights request, contact 388in support via live chat on the platform or by email at [email protected]. We will acknowledge your request within 5 business days and aim to fulfil it within 30 calendar days. We may need to verify your identity before processing the request.
1.1 This Privacy Policy is issued by the operator of the 388in platform ("388in", "we", "us", "our") and applies to all personal data collected from individuals who visit, register on, or use any feature of the 388in platform accessible at 388in.net.
1.2 This Policy should be read alongside the 388in Terms & Conditions, which govern the overall relationship between 388in and registered Members.
1.3 By using the 388in platform, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not use the 388in platform.
1.4 388in is committed to handling personal data lawfully, fairly, and transparently in accordance with applicable data protection legislation and the data protection requirements of its international gaming licence.
2.1 The data controller responsible for the personal data of 388in Members is the entity that holds the international gaming licence under which the 388in platform operates. Details of the licensing entity are available on the 388in platform's licensing information page.
2.2 For all data protection enquiries, rights requests, and complaints, Members may contact 388in using the details provided in Section 15 of this Policy.
3.1 388in collects personal data through the following mechanisms:
3.2 The specific categories of data collected are set out in the summary table above and in greater detail across Sections 4 and 5 of this Policy.
3.3 Special Category Data. 388in does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where a Member voluntarily provides such information in the context of a responsible gaming self-exclusion request or a support interaction involving player welfare.
4.1 388in processes your personal data for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity data, contact data, login credentials |
| Age and identity verification (KYC) | Identity data, CNIC copy, date of birth, address |
| Processing deposits and withdrawals | Financial data, payment method details, transaction history |
| Operating betting and casino Services | Gaming activity data, PKR wallet balance |
| Fraud prevention and AML compliance | Identity data, financial data, technical data, gaming activity |
| Responsible gaming monitoring | Gaming activity data, deposit/loss patterns, self-exclusion records |
| Customer support and dispute resolution | Contact data, support communication records, account history |
| Platform security and abuse prevention | Technical data, IP address, device fingerprint, session logs |
| Marketing communications (with consent) | Contact data, gaming preferences, promotional opt-in status |
| Regulatory reporting and licence compliance | Identity data, financial data, gaming activity data |
5.1 388in processes personal data on the following legal bases:
Note on Withdrawal of Consent: Withdrawing consent for marketing communications does not affect the lawfulness of processing already carried out before withdrawal, nor does it affect processing carried out on other legal bases such as contractual necessity or legal obligation.
6.1 388in does not sell, rent, or trade Member personal data to third parties for their own marketing or commercial purposes.
6.2 388in may share Member personal data with the following categories of third parties, strictly for the purposes described:
6.3 All third parties with whom 388in shares personal data are contractually required to process that data only for the specified purpose, to maintain adequate security measures, and to comply with applicable data protection law.
7.1 388in uses cookies and similar tracking technologies on the platform for the following purposes:
7.2 388in does not use third-party advertising cookies or cross-site tracking technologies that would allow external parties to track your activity outside the 388in platform.
7.3 You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the core 388in platform but may affect certain personalisation features.
8.1 388in retains personal data for no longer than necessary to fulfil the purpose for which it was collected, subject to any overriding legal or regulatory retention obligation. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | AML / Licensing obligation |
| Financial transaction records | 5 years after transaction date | AML / Legal obligation |
| Betting and gaming history | 5 years after account closure | Licensing / Dispute resolution |
| Support communication records | 3 years after last interaction | Legitimate interest / Legal claim |
| Technical / device logs | 12 months from collection | Security / Fraud prevention |
| Marketing opt-in records | Duration of consent + 3 years | Consent compliance |
| Self-exclusion records | Minimum 5 years from exclusion | Responsible gaming / Licence |
8.2 Upon expiry of the relevant retention period, personal data will be securely deleted or anonymised in accordance with 388in's data destruction procedures.
9.1 388in implements a range of technical and organisational security measures to protect Member personal data against unauthorised access, loss, destruction, or disclosure. These measures include but are not limited to:
9.2 Notwithstanding these measures, no method of internet transmission or electronic storage is completely secure. 388in cannot guarantee the absolute security of your personal data and Members use the platform at their own risk in this regard.
Report a Security Concern: If you believe your 388in account has been compromised or you have identified a potential security vulnerability on the platform, please contact 388in support immediately via live chat or at [email protected]. Do not attempt to exploit any vulnerability — responsible disclosure is appreciated and expected.
10.1 As an internationally licensed operator, 388in may transfer and process Member personal data in countries outside Pakistan. Where such transfers occur, 388in takes steps to ensure that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under applicable data protection law.
10.2 Safeguards used for international transfers may include contractual data transfer agreements with receiving parties, transfers to jurisdictions with adequacy determinations, or transfers to entities certified under recognised data protection frameworks.
10.3 Payment data relating to JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank transactions is processed by those respective Pakistani payment service providers in accordance with their own privacy notices and applicable Pakistani financial regulations.
11.1 The 388in platform is strictly for individuals aged 21 years and above. 388in does not knowingly collect personal data from any person under the age of 21.
11.2 If 388in discovers or is notified that it has collected personal data from an individual under 21, it will immediately suspend the associated account, delete or quarantine the relevant personal data, and, where appropriate, report the matter to its licensing authority.
11.3 If you believe that a person under the age of 21 has registered on 388in, please notify us immediately at [email protected].
Under-21 Protection: 388in employs age verification procedures at registration and during KYC review. Any account identified as belonging to a person under 21 will be closed immediately and all associated personal data handled in accordance with this Policy and applicable law.
12.1 To exercise any of the data rights described in this Policy — including access, rectification, erasure, restriction, portability, or objection — please submit a written request to 388in support via live chat or by email at [email protected].
12.2 388in will acknowledge your request within 5 business days and will fulfil it within 30 calendar days of receipt of a valid, verified request. In complex cases, this period may be extended by a further 30 days, in which case we will notify you of the extension and the reason for it.
12.3 To protect your personal data, 388in will verify your identity before processing any data rights request. You may be asked to provide government-issued identification or to confirm security information associated with your 388in account.
12.4 Data rights requests are free of charge. If a request is manifestly unfounded, repetitive, or excessive, 388in reserves the right to charge a reasonable administrative fee or to refuse the request, with written explanation provided.
Responsible Gaming & Data Rights: If you are exercising your right to erasure in connection with a self-exclusion request, please be aware that certain data — including self-exclusion records themselves — must be retained by 388in for a minimum period under responsible gaming obligations. Erasure of these records is not possible until the mandatory retention period has elapsed.
13.1 With your explicit consent at registration or via your account preferences, 388in may send you marketing communications by SMS, email, or in-platform notification. These communications may include information about promotions, new games, deposit bonuses, PSL cricket betting offers, and other 388in platform features.
13.2 You may withdraw your consent to receive marketing communications at any time by:
13.3 Withdrawal of marketing consent will take effect within 5 business days. You may continue to receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — regardless of your marketing preferences, as these are required for account operation.
13.4 Members who have activated self-exclusion are automatically removed from all 388in marketing lists for the duration of the exclusion period. 388in will not send promotional communications to self-excluded Members.
14.1 388in reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be published on the 388in platform with an updated effective date.
14.2 Where a change to this Policy is material — for example, a significant change to the categories of data collected or a new sharing arrangement with third parties — 388in will notify registered Members by in-platform notification or email prior to the change taking effect.
14.3 Continued use of the 388in platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms. If you do not agree with an updated Policy, please close your account before the effective date.
15.1 For all privacy-related enquiries, data rights requests, or concerns about how 388in handles your personal data, please contact us using the following channels:
15.2 If you are not satisfied with 388in's response to a privacy complaint, you have the right to escalate the matter to the data protection supervisory authority in the jurisdiction of 388in's licensing entity, or to the relevant gaming licence authority's dispute resolution mechanism.
We Take Privacy Seriously: 388in is committed to resolving all privacy concerns promptly and transparently. Our support team includes staff trained in data protection obligations. We aim to resolve all privacy complaints within 10 business days of receipt.
388in is built on transparency, security, and trust. Join thousands of Pakistani members who bet on cricket, play live casino, and spin slots — knowing their data is protected to the highest standard.
Create Your 388in Account Responsible Gaming