ww388 Privacy Policy

This Privacy Policy is issued by the operator of the ww388 platform, accessible at ww388.net and all associated subdomains and mobile interfaces (collectively, the "Platform"). ww388 operates under an international gaming licence and serves players in Pakistan and other permitted jurisdictions.

For the purposes of data protection law, ww388 acts as the data controller in respect of the personal data it collects and processes about registered players and visitors to the Platform. As data controller, ww388 determines the purposes and means by which personal data is processed and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

All data protection enquiries, access requests, and complaints may be directed to the ww388 support team via live chat at ww388.net or by written communication to the support address provided in Section 15 of this Policy.

This Privacy Policy applies to all personal data collected and processed by ww388 in connection with:

• Registration and maintenance of a player account on the ww388 Platform.
• Deposits, withdrawals, and payment transactions conducted through the Platform.
• Participation in casino games, live dealer tables, slots, and sports betting markets available on ww388.
• Communications between the player and ww388, including support interactions via live chat.
• Visits to ww388.net by unregistered users or prospective players.
• Marketing communications from ww388, where you have consented to receive them or where we have a legitimate interest to contact you.

This Policy should be read alongside the ww388 Terms & Conditions, which govern your use of the Platform and incorporate this Privacy Policy by reference.

ww388 collects personal data in the following categories:

ww388 collects personal data through the following channels:

• Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and any form submissions on the Platform.
• Automated collection: Technical and usage data collected automatically when you visit or interact with the ww388 Platform, including via cookies, session logs, and server-side analytics tools. See Section 10 for full details of our cookie practices.
• Payment processors: Transaction confirmation data received from payment service providers (e.g. JazzCash, EasyPaisa, HBL payment gateways) when you make deposits or withdrawals.
• Identity verification providers: Data received from third-party KYC and age verification services where we use such providers to assist with document validation during the verification process.
• Fraud prevention services: Data received from fraud detection and anti-money laundering service providers where ww388 uses such services to protect the Platform and its players.

ww388 processes your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account balance, and provide access to all Platform services.
• Processing transactions: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Visa in Pakistani Rupees.
• Regulatory compliance: To fulfil our obligations under our international gaming licence, including KYC, anti-money laundering (AML), and responsible gaming requirements.
• Platform security: To detect, investigate, and prevent fraud, collusion, money laundering, unauthorised access, and other prohibited conduct on the Platform.
• Customer support: To respond to your support queries, resolve complaints, and improve the quality of our customer service.
• Responsible gaming: To monitor gambling patterns, enforce deposit limits and self-exclusion arrangements, and identify players who may require responsible gaming intervention.
• Platform improvement: To analyse aggregated usage data to improve Platform features, game offerings, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and news about ww388 — where you have consented to receive such communications or where we have a legitimate interest to contact existing players.

ww388 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil the contract between you and ww388 — including account registration, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and our gaming licence conditions, including KYC verification, AML obligations, and age verification requirements.
• Legitimate interests: Processing carried out in pursuit of ww388's legitimate business interests — including fraud prevention, Platform security, responsible gaming monitoring, and improvement of Platform services — where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — including the sending of marketing communications. Where consent is the legal basis, you may withdraw it at any time by contacting ww388 support.

ww388 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Visa — to process deposits and withdrawals in your account currency (PKR).
• KYC and identity verification providers: Third-party verification services used to validate identity documents and confirm age eligibility during the registration and verification process.
• Game software providers: Third-party game studios and live casino operators (such as Evolution Gaming and Pragmatic Play) — who may process limited technical and session data to deliver game content to your device.
• Fraud and AML service providers: Specialist providers used to detect fraud, money laundering, and other illegal activity, as required under our licensing obligations.
• Regulatory and licensing authorities: The relevant international gaming licensing authority and any other competent regulatory body where disclosure is required by law or licence condition.
• Law enforcement agencies: Where we are required by law, court order, or competent authority to disclose personal data.
• IT and infrastructure providers: Cloud hosting, data centre, and platform infrastructure providers who process data on our behalf under binding data processing agreements.

All third parties who process personal data on behalf of ww388 are contractually required to apply appropriate data security standards and to process the data only for the specific, authorised purposes set out in their agreements with ww388.

Given that ww388 operates under an international gaming licence and uses globally distributed third-party service providers, your personal data may be transferred to and processed in countries outside of Pakistan. Such transfers may occur in connection with our payment processing infrastructure, game software delivery, and cloud hosting arrangements.

Where personal data is transferred internationally, ww388 ensures that appropriate safeguards are in place to protect the data, including contractual data transfer agreements with service providers that impose obligations equivalent to applicable data protection standards. ww388 does not transfer personal data to jurisdictions that do not provide adequate data protection safeguards without first putting in place appropriate contractual or legal protections.

ww388 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following indicative retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to gaming operators.
• Transaction data: All deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction.
• KYC documentation: Identity and age verification documents are retained for the period required under applicable licensing conditions, typically five (5) years from account closure.
• Communications data: Support chat logs and correspondence are retained for up to two (2) years from the date of the communication.
• Technical and usage data: Session logs, IP records, and usage analytics data are typically retained for up to twelve (12) months.
• Responsible gaming records: Self-exclusion, deposit limit, and cooling-off records are retained for a minimum period to prevent re-registration in breach of an exclusion arrangement.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with ww388's data lifecycle management procedures.

ww388 uses cookies and similar session-based tracking technologies to operate the Platform and improve the player experience. A cookie is a small text file placed on your device when you visit ww388.net. ww388 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your ww388 account and security cookies that prevent cross-site request forgery. These cannot be disabled without disrupting platform functionality.
• Functional cookies: Used to remember your Platform preferences such as language settings and display preferences, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform — including pages visited, session duration, and navigation paths — to help ww388 improve its services. Analytics data is not linked back to individual player identities.

You may manage or disable cookies through your browser settings at any time. However, disabling strictly necessary cookies will prevent you from using core Platform features including account login. Continued use of the ww388 Platform without adjusting your cookie settings constitutes acceptance of the cookies described in this section.

Subject to applicable law and the limitations arising from ww388's legal and regulatory obligations, you hold the following rights in respect of your personal data:

• Right of access: You may request a copy of the personal data that ww388 holds about you, along with information about the purposes for which it is processed.
• Right of rectification: You may request that ww388 correct any personal data that is inaccurate or incomplete. For most account details, you may update your information directly within your ww388 account settings.
• Right of erasure: You may request that ww388 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations (e.g. AML record-keeping requirements).
• Right to restriction of processing: You may request that ww388 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to data portability: You may request that ww388 provide your personal data in a structured, machine-readable format where the processing was based on your consent or on a contractual basis.
• Right to object: You may object to the processing of your personal data where it is carried out on the basis of ww388's legitimate interests. You may also object at any time to the processing of your data for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting ww388 support. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal.

To exercise any of the above rights, please contact the ww388 support team via live chat at ww388.net. ww388 will respond to all data rights requests within 30 days of receipt. Where a request is particularly complex or where you have submitted multiple requests, ww388 may extend the response period by a further 30 days, in which case we will notify you of the extension within the initial 30-day period.

ww388 implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• TLS/SSL encryption for all data transmitted between your device and the ww388 servers.
• Encryption of sensitive data fields (including passwords and payment identifiers) at rest using industry-standard cryptographic methods.
• Role-based access controls ensuring that personal data is accessible only to ww388 personnel and authorised service providers who require it for their specific function.
• Regular security assessments and penetration testing of Platform infrastructure.
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access.
• Fraud monitoring systems that detect and flag suspicious transaction patterns in real time.

Notwithstanding the foregoing measures, no security system is impenetrable. ww388 cannot guarantee the absolute security of data transmitted over the internet. You are encouraged to maintain strong, unique passwords for your ww388 account and to enable two-factor authentication.

The ww388 Platform is strictly for adults aged 21 years and above. ww388 does not knowingly collect, store, or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered players, and accounts found to belong to underage individuals are closed immediately with any real-money balance returned to the source payment method.

If a parent or guardian becomes aware that their child has provided personal data to ww388 without appropriate consent, they should contact ww388 support immediately via live chat at ww388.net. ww388 will investigate and, where confirmed, delete the relevant data without delay.

ww388 also recommends that parents and guardians use appropriate parental control software to restrict access to online gambling platforms on devices used by minors. Information about parental control tools is available through the ww388 Responsible Gaming page.

ww388 may update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, ww388 will notify registered players by email to the address associated with their account or through a prominent notice on the Platform prior to the changes taking effect.

The most current version of this Privacy Policy is always available at ww388.net/privacy-policy. The "Last Updated" date at the top of this document indicates when the policy was most recently revised. Your continued use of the Platform after any amendment constitutes your acknowledgement of the updated Policy.

For all privacy-related enquiries, data rights requests, or complaints regarding ww388's handling of your personal data, please contact us through the following channels:

• Live chat: Available 24/7 directly on the ww388 Platform. This is the fastest route for all support and data enquiries.
• Email: [email protected] — please include your account username and a clear description of your request or concern in all correspondence.

ww388 will acknowledge all privacy enquiries and data rights requests within 24 hours of receipt and provide a substantive response within 30 days. Where an enquiry requires additional time to investigate, we will communicate the expected response timeline to you promptly.

If you are not satisfied with ww388's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority under the applicable gaming licensing jurisdiction, or seek independent legal advice regarding your data protection rights.