Game 388 Privacy Policy — How We Handle Your Personal Data in Pakistan

Game 388 operates the online gaming and sports betting platform accessible at game388.bet. As part of running this platform and providing services to players based in Pakistan, game 388 processes personal data in the course of account registration, identity verification, payment processing, customer support and responsible gaming compliance.

This Privacy Policy ("Policy") describes the categories of personal data that game 388 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures applied to protect it, and the rights that players have in relation to their own personal data held by game 388.

Game 388 is committed to handling personal data with care, transparency and respect for the individuals to whom it belongs. This Policy reflects that commitment and is designed to give Pakistani players a clear and honest picture of data practices at game 388 — not a document designed to obscure what's really happening with your information.

Game 388 collects personal data from players across several categories. The data collected depends on which features of game 388 you use and the stage of your account lifecycle.

Game 388 does not collect data beyond what is required to provide a safe, compliant and functional gaming service. Where data is no longer necessary for the purpose it was collected, it is deleted or anonymised in accordance with the retention schedules described in Section 8 of this Policy.

Game 388 uses the personal data it collects for the following specific purposes. No data is used for purposes beyond those listed here without prior notification and, where required by applicable privacy standards, your explicit consent.

• Account creation and management: Registering your game 388 account, verifying your identity, maintaining account security and processing login requests.
• Payment processing: Facilitating PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard. Financial data is used strictly for transaction processing and is not retained beyond what is required for regulatory and reconciliation purposes.
• Customer support: Responding to queries, resolving disputes, processing complaints and maintaining records of communications between players and the game 388 support team.
• Responsible gaming: Monitoring account behaviour to identify patterns consistent with problematic gaming — such as rapidly escalating bet sizes, extended unbroken sessions or repeated self-exclusion requests — and taking appropriate supportive action as described in the Responsible Gaming policy.
• Legal and regulatory compliance: Fulfilling Anti-Money Laundering (AML) obligations, Know Your Customer (KYC) verification requirements, fraud prevention and responding to lawful requests from competent authorities.
• Platform improvement: Using anonymised and aggregated behavioural data to improve game 388's user interface, game selection, payment flows and other platform features. This data cannot be used to identify individual players.
• Marketing communications: Sending promotional offers and platform updates to players who have opted in to receive them. Players can withdraw marketing consent at any time by contacting support or updating their account preferences.

Game 388 processes personal data under the following legal grounds, depending on the nature and purpose of the processing activity:

• Contractual necessity: Processing required to fulfil the agreement between you and game 388 — including account management, payment processing and customer support — is carried out on the basis that it is necessary to deliver the service you have signed up for.
• Legal obligation: Processing carried out to comply with applicable laws — including AML regulations, KYC requirements and fraud prevention obligations — is necessary for game 388 to operate lawfully.
• Legitimate interests: Processing carried out for purposes such as platform security, responsible gaming monitoring and anonymised analytics is based on game 388's legitimate interest in maintaining a safe, functional and fair platform, balanced against the privacy interests of players.
• Consent: Processing for marketing communications is carried out only where the player has given clear, affirmative consent. This consent can be withdrawn at any time without affecting the player's ability to continue using game 388.

All financial transactions at game 388 are conducted in Pakistani Rupees (PKR). The payment methods available — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT and Visa/Mastercard — each involve the transmission of financial identifiers (wallet IDs, account numbers or card details) through secure, encrypted channels.

Game 388 does not store complete card numbers or full payment credentials on its own servers. Payment data necessary for transaction processing is handled by PCI-compliant payment processing partners and retained only for the periods required by financial regulations and reconciliation obligations.

• Easypaisa & JazzCash: Mobile wallet identifiers associated with your account are retained for transaction verification and AML compliance. They are not used for any purpose other than processing your requested transactions at game 388.
• IBFT bank transfers: Bank account details submitted for withdrawals are verified and used solely for the requested transfer. They are retained for the period required by financial recordkeeping obligations.
• Transaction history: Your full deposit and withdrawal history at game 388 is accessible from within your account and is retained for a minimum of five years for regulatory compliance purposes.

Game 388 uses cookies and similar tracking technologies to provide a functional, personalised and secure platform experience. Cookies are small text files stored by your browser when you visit game388.bet. They help game 388 remember your preferences, maintain your session and understand how the platform is being used.

The following categories of cookies are used at game 388:

• Essential cookies: Required for basic platform functionality — session management, login persistence, security tokens and payment flow integrity. These cannot be disabled without breaking core platform features.
• Functional cookies: Remember your preferences such as language settings, notification choices and display options across sessions at game 388.
• Analytics cookies: Collect anonymised data about how players navigate game 388 — which pages are visited most, where players encounter difficulties and how the betting interface is used. This data is used in aggregate only and cannot be linked to individual player identities.
• Marketing cookies: Used only where you have given consent for marketing communications. These help game 388 deliver relevant promotional content based on your game 388 activity.

You can manage cookie preferences through your browser settings. Blocking essential cookies will affect your ability to use game 388 normally. Blocking other cookie categories will not prevent you from using the platform but may affect personalisation features.

Game 388 does not sell, rent or trade your personal data to any third party for commercial purposes. This is an absolute commitment — your data exists to power your game 388 account, not to generate revenue for us or any partner through data commercialisation.

Data is shared with the following categories of third parties only where strictly necessary and subject to appropriate contractual data protection obligations:

• Payment processors: Easypaisa, JazzCash, NayaPay and other payment providers receive the minimum data necessary to process your requested transaction. These providers are contractually bound to use your data only for payment processing purposes.
• Identity verification providers: KYC verification services may receive identity data (name, CNIC, date of birth) for the purpose of verifying your identity as required by compliance obligations. Results are returned to game 388 and the underlying data is handled by the verification provider under their own privacy standards.
• Technology infrastructure providers: Cloud hosting, database and security service providers who process data on game 388's behalf under strict data processing agreements that prohibit any use beyond delivering services to game 388.
• Regulatory and law enforcement authorities: Game 388 will disclose personal data to competent authorities where required by applicable law, a valid legal order, or where disclosure is necessary to prevent serious harm or fraud. Game 388 will notify affected players of such disclosure where legally permitted to do so.

Game 388 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable legal, regulatory or contractual obligations. The following retention periods apply as a general guide:

• Account data: Retained for the lifetime of your game 388 account plus a minimum of 5 years following account closure, as required by financial and AML regulations.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction in accordance with financial recordkeeping requirements.
• KYC verification records: Retained for a minimum of 5 years following account closure or the completion of the business relationship with game 388.
• Customer support records: Chat transcripts, emails and complaint records are retained for 3 years from the date of the interaction, or for the duration of any ongoing dispute resolution process if longer.
• Technical and session data: IP logs and technical session data are retained for 12 months and then deleted or anonymised.
• Marketing consent records: Records of marketing consent and withdrawal of consent are retained for 3 years from the date of the last consent action.

At the end of each applicable retention period, data is securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Game 388 does not retain data beyond what is required under these schedules without a specific legal justification.

Game 388 implements technical and organisational security measures proportionate to the sensitivity of the personal data processed and the risks associated with its processing. These measures are reviewed and updated regularly as the threat landscape evolves and as game 388's platform infrastructure develops.

• Encryption in transit: All communication between your device and game388.bet is encrypted using TLS (Transport Layer Security). This ensures that data exchanged between you and game 388 cannot be intercepted by third parties.
• Encryption at rest: Sensitive data stored in game 388's infrastructure — including identity data, financial records and authentication credentials — is encrypted at rest.
• Password security: Passwords are never stored in plain text at game 388. Only cryptographically hashed versions are stored, meaning that even game 388 staff cannot view your password.
• Access controls: Access to personal data within game 388's internal systems is restricted to staff who require it to perform their job functions. Access is logged and reviewed regularly.
• Two-factor authentication: Game 388 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of protection beyond the password.
• Incident response: Game 388 maintains a data security incident response process. In the event of a data breach that poses a risk to player rights, game 388 will notify affected players promptly and take all available steps to contain and remediate the incident.

As a player at game 388 you have the following rights in relation to your personal data. Game 388 will respond to all privacy rights requests within 30 days. To exercise any of these rights, contact support@game388.bet with the subject line "Privacy Rights Request".

Game 388 is strictly an 18+ platform and does not knowingly collect personal data from individuals under the age of 18. Registration requires confirmation of age, and identity verification processes are used to confirm that players meet the minimum age requirement.

If game 388 becomes aware or has reasonable grounds to suspect that personal data has been collected from an individual under 18, that data will be deleted immediately, the associated account will be suspended, and any funds will be handled in accordance with the procedures described in the Terms and Conditions.

If you are a parent or guardian and believe that a minor has created an account on game 388, please contact support@game388.bet immediately. Game 388 will take urgent action to investigate and resolve the matter.

Game 388 may update this Privacy Policy from time to time to reflect changes in how data is processed, new services offered on the platform, changes in applicable law or other relevant developments. The current version of the Policy will always be available at game388.bet/privacy-policy with the date of the most recent update clearly displayed at the top of the page.

For material changes — those that significantly affect how your personal data is used or your rights in relation to it — game 388 will provide advance notice to registered players via their registered email address or through an in-platform notification before the changes take effect. For minor, non-material updates (such as clarifications of existing practices or formatting changes), the updated Policy will simply be published without specific notification.

Your continued use of game 388 after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated policy. If you disagree with any material change to this Policy, please contact game 388 before the change takes effect to discuss your options.

If you have any questions, concerns or requests relating to this Privacy Policy or to how game 388 handles your personal data, please contact us through any of the following channels. All privacy-related communications are handled with priority and treated confidentially.

• Email: support@game388.bet — use the subject line "Privacy Policy Query" or "Privacy Rights Request"
• Live Chat: Available 24/7 on game388.bet — request to speak with the privacy team
• WhatsApp & Telegram: Available via the Help section of your game 388 account after login

Game 388 commits to acknowledging all privacy-related written requests within 48 hours and providing a substantive response within 30 days. Where a request is complex or involves a large volume of data, game 388 will notify you if the 30-day period needs to be extended and explain the reason for the extension.