a388win Privacy Policy —
How Your Data Is Protected in Pakistan

a388win is the data controller responsible for all personal data collected through the a388win platform at a388win.app. As data controller, a388win determines the purposes and means by which personal data is processed in connection with the provision of online casino, sports betting, live Cockfighting, jackpot slots, Texas Holdem, and related gaming services to registered players in Pakistan and other permitted jurisdictions.

For privacy-related enquiries, data access requests, or complaints about a388win's data processing practices, Pakistan players may contact a388win's Data Privacy team via live chat on the platform or by writing to [email protected] (displayed as plain text — not a clickable link). a388win aims to respond to all formal privacy enquiries within five (5) business days.

a388win collects personal data through the following channels:

• Registration form data: full name, date of birth, Pakistan mobile number, email address, and chosen username.
• KYC verification submissions: CNIC number, scanned copies of your CNIC front and back, and any supplementary identity documents requested by a388win's compliance team.
• Payment information: Easypaisa mobile wallet number, JazzCash mobile number, SadaPay account reference, Raast ID, or Pakistan bank account details (HBL, UBL, MCB) provided for PKR deposits or withdrawals.
• Support interactions: information you provide when contacting a388win via live chat, email, or any in-platform feedback mechanism.
• Responsible gaming preferences: deposit limits, session time limits, cool-off periods, and self-exclusion requests you submit through account settings.

• Technical data: IP address, device type, browser details, operating system, Pakistan mobile network identifier (4G/5G carrier), and screen resolution collected automatically when you access the a388win platform.
• Session data: login timestamps, session duration, pages visited, game sessions initiated, and logout events.
• Transaction data: all PKR deposits, wagers, bonus activations, and withdrawal requests are recorded automatically in a388win's transaction ledger.
• Cookies and tracking data: described in full in Section 7 of this Privacy Policy.

• KYC verification services: identity confirmation and CNIC cross-reference results from a388win's third-party KYC verification provider.
• Payment processors: transaction confirmation data from Easypaisa, JazzCash, SadaPay, and Pakistan banking partners confirming PKR deposit and withdrawal completions.
• Fraud detection services: risk signals and device reputation data from a388win's fraud prevention technology partners.

a388win uses the personal data collected from Pakistan players for the following purposes:

• Account creation and management: Creating and maintaining your a388win account, processing your a388win Login requests, verifying your identity, and managing your PKR wallet balance.
• Service delivery: Providing access to all a388win gaming products — casino games, sports betting on HBL PSL cricket, live Cockfighting, jackpot slots, and Texas Holdem — throughout your authenticated session.
• Payment processing: Executing PKR deposits via Easypaisa and JazzCash, processing withdrawal requests to your verified Pakistan payment method, and maintaining accurate transaction records.
• Legal compliance: Meeting KYC and AML obligations under a388win's international gambling licence, including identity verification, source of funds checks for large PKR transactions, and regulatory reporting requirements.
• Security and fraud prevention: Detecting and preventing unauthorised account access, identifying suspicious betting patterns, monitoring for AML red flags, and enforcing a388win's one-account-per-person policy.
• Responsible gaming: Monitoring for potential problem gambling indicators, administering deposit limits and self-exclusion requests, and contacting players showing behavioural risk patterns as part of a388win's duty of care to Pakistan players.
• Customer support: Responding to queries, resolving disputes, processing responsible gaming tool requests, and providing 24/7 English-language assistance.
• Marketing communications (with your consent): Sending PKR bonus offers, HBL PSL betting promotions, jackpot slot free spin alerts, and other a388win promotional communications — only to players who have opted in and have not subsequently withdrawn consent.
• Platform improvement: Analysing aggregated and anonymised usage data to improve a388win's game lobby, mobile experience, payment flows, and customer support quality.

a388win processes personal data on the following legal bases, applied in line with GDPR-aligned principles across all player jurisdictions including Pakistan:

• Contract performance: Processing necessary to enter into and perform the service contract created when you register an a388win account — including account management, PKR payment processing, and game access.
• Legal obligation: Processing required to comply with a388win's obligations under its international gambling licence — including KYC identity verification, AML transaction monitoring, and age verification to enforce the 18+ restriction.
• Legitimate interests: Processing necessary for fraud detection, account security monitoring, platform integrity maintenance, and aggregated service improvement analytics — where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies — only with your explicit opt-in consent, which may be withdrawn at any time without affecting other processing activities at a388win.

a388win does not sell, rent, or trade personal data. We share personal data only in the following controlled circumstances:

• Payment service providers: Easypaisa, JazzCash, SadaPay, Raast, HBL, UBL, MCB, and other Pakistan payment partners receive transaction references and PKR amounts necessary to process your financial requests. These providers operate under their own privacy policies and data processing agreements with a388win.
• KYC and identity verification providers: a388win's contracted KYC partner receives CNIC data and identity documents solely for the purpose of verifying your age and identity as required by a388win's licensing obligations.
• Game studios and content providers: Licensed studios including Pragmatic Play, Evolution Gaming, Microgaming, and others receive session identifiers and wagering data necessary to deliver certified game content through the a388win platform. These studios do not receive your CNIC, Pakistan mobile number, or financial account details.
• Fraud and security technology providers: Third-party fraud detection services receive device fingerprints, IP addresses, and behavioural signals to identify suspicious activity on a388win accounts. These providers process data under strict data processing agreements with a388win.
• Legal and regulatory authorities: a388win is legally obligated to disclose certain player data — including PKR transaction records and identity information — to regulatory authorities, law enforcement agencies, or courts when required by applicable law or a388win's licensing conditions. Players are not notified of such disclosures where law prohibits notification.

a388win's core platform infrastructure is hosted in secure data centres operating under internationally recognised security standards. Some personal data of Pakistan players may be transferred to and processed in countries outside Pakistan where a388win's technology partners — including game studios, KYC providers, and fraud detection services — are located.

Where personal data is transferred internationally, a388win ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations equivalent to the standards applied within a388win's primary operating jurisdiction. a388win does not transfer personal data to jurisdictions with inadequate data protection frameworks without implementing these contractual safeguards.

a388win uses cookies and similar tracking technologies on the a388win platform. These fall into the following categories:

• Strictly Necessary Cookies: Required for the a388win platform to function — including maintaining your login session, storing PKR wallet state between page loads, and enabling 2FA authentication flows. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your a388win preferences — language settings, game lobby view preferences, and responsible gaming tool settings — to personalise your experience without requiring you to re-enter preferences each session.
• Analytical Cookies: Collect aggregated, anonymised data about how Pakistan players navigate the a388win platform — which games are most accessed, where support queries originate, and how the mobile experience performs across Pakistan 4G networks. This data is used to improve a388win's platform quality.
• Marketing Cookies: Used only with your explicit consent to track whether you arrived at a388win via a specific promotional campaign and to avoid showing you repeated offers you have already seen. These cookies are not shared with third-party advertising networks.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the a388win platform from functioning correctly. Withdrawing consent for marketing cookies does not affect your access to a388win's casino games, sports betting, or any other platform features.

a388win implements the following technical and organisational security measures to protect your personal data:

• 256-bit SSL/TLS encryption for all data in transit between your device and a388win's platform servers.
• AES-256 encryption for all sensitive personal data stored at rest in a388win's database infrastructure.
• Role-based access controls ensuring that a388win staff can only access the personal data categories required for their specific job function — support agents, for example, cannot view CNIC documents unless they have verified compliance clearance.
• Two-factor authentication for all a388win internal system access, with privileged access requiring additional hardware token verification.
• Regular independent security audits and penetration testing of the a388win platform infrastructure.
• Automated intrusion detection systems monitoring for unauthorised access attempts across a388win's network perimeter.
• Segregated storage of KYC documentation in an isolated environment accessible only by a388win's compliance team.

a388win does not knowingly collect or process personal data from individuals under the age of 18. The a388win platform is restricted to adults aged 18 and over. CNIC verification is a mandatory part of the registration process specifically to confirm that all players meet this age requirement.

If a388win identifies or is notified that an account holder is under 18, we will immediately close the account, delete all associated personal data as soon as legally permissible, and take all appropriate steps to address the situation in accordance with a388win's terms and our licensing obligations. If you are aware of a minor having registered with a388win, please notify our support team immediately via live chat or at [email protected] (plain text — not a clickable link).

a388win reserves the right to update this Privacy Policy at any time. Updates become effective upon publication on the a388win platform. Where changes are material — for example, if we introduce a new data sharing arrangement or change the purposes for which we process your PKR transaction data — a388win will notify registered Pakistan players via their registered email address before the changes take effect, providing a minimum of 14 days notice.

Continued use of the a388win platform following notification of material changes constitutes acceptance of the updated Privacy Policy. If you do not accept a material change, you may close your account and request deletion of your personal data subject to a388win's legal retention obligations, by contacting our support team via live chat.

This Privacy Policy was last updated in January 2026 and applies to all personal data held by a388win about registered Pakistan players as of that date.