338win Privacy Policy – How We Protect Your Personal Data in Pakistan

1 Introduction

At 338win, we take the privacy of our players seriously. We know that when you create an account, deposit Pakistani Rupees, and share your personal details with us, you're putting trust in us to handle that information responsibly. This Privacy Policy explains what we do with that trust.

This Policy applies to all personal data collected by 338win through the 338win.biz website, any mobile-optimised version of the platform, and any communications between you and the 338win support team. It covers data collected during registration, during gameplay, during financial transactions, and through our use of cookies and similar tracking technologies.

By registering an account at 338win, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not register or continue to use the platform. If you have questions about anything in this document, our support team is available 24/7 via live chat in Urdu and English — they'll explain anything you need clearly, without rushing you.

2 Who We Are

338win is an online gaming and sports betting platform operating at 338win.biz, primarily serving players based in Pakistan. For the purposes of this Privacy Policy, "338win", "we", "us", and "our" refer to the operator of the 338win platform.

For any data-related queries, the primary point of contact is our support team, reachable at support@338win.biz. All formal data access, correction, and deletion requests should be sent to this address with the subject line "Privacy Request".

We are the data controller for all personal data collected through the 338win platform. This means we determine the purposes and means of processing your personal data, and we are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

3 What Personal Data We Collect

338win collects personal data in several ways — some of it you provide directly, some of it is generated automatically as you use the platform. Here is a complete breakdown of what we collect and when.

3.1 Data You Provide During Registration

• Full name (as it appears on your CNIC or valid identification document)
• Date of birth (for age verification — must confirm you are 18 or over)
• Email address or mobile phone number
• Account password (stored in encrypted, hashed form — never in plain text)
• Preferred username for the platform

3.2 Identity Verification Data (KYC)

To process withdrawals above certain thresholds, or when our compliance team requires identity verification, we may ask for:

• Copy of your CNIC (Computerised National Identity Card) or valid Pakistani passport
• Proof of address (recent utility bill or bank statement in your name)
• Proof of payment method ownership (screenshot of registered Easypaisa or JazzCash account)

3.3 Financial Transaction Data

• Deposit and withdrawal amounts and dates
• Payment method identifiers (mobile wallet numbers, masked card numbers — full card numbers are never stored at 338win)
• Transaction reference numbers from payment processors

3.4 Gameplay Data

• Bets placed — game type, stake amount, outcome, timestamp
• Session durations and frequency of play
• Sports betting selections, odds accepted, and settlement results
• Bonus claims and wagering progress

3.5 Technical and Device Data

• IP address at time of login and at time of transactions
• Device type, operating system, and browser version
• Cookies and similar tracking identifiers (see Section 9)
• Approximate geographic location (derived from IP — not GPS)

3.6 Communications Data

• Content of support conversations (live chat transcripts, emails)
• Responsible gaming requests and self-exclusion preferences
• Complaints and their resolutions

4 How We Use Your Personal Data

Every piece of data 338win collects has a specific, documented purpose. The table below summarises the main uses:

338win does not use your personal data for targeted advertising on third-party platforms, does not build marketing profiles for sale or licence, and does not use your gameplay data to personalise odds or game outcomes in a way that disadvantages you as an individual player.

5 Legal Basis for Processing

338win processes your personal data on one or more of the following legal bases, depending on the type of data and the purpose of processing:

• Contract performance: Processing necessary to provide the gaming and betting services you have registered for — account management, bet settlement, payment processing.
• Legal obligation: Processing required to comply with applicable law — age verification, identity verification under anti-money laundering obligations, responding to lawful authority requests.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where our legitimate business interest is not overridden by your rights.
• Consent: Where required — for example, for optional marketing communications. You may withdraw consent at any time by contacting support@338win.biz.

6 How We Share Your Data

338win does not sell, rent, or licence your personal data to any third party, ever. Your information is not shared with advertisers, data brokers, marketing companies, or any commercial third party for their own use.

There are limited, specific circumstances in which 338win shares data with third parties, all of which are necessary to operate the platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, banks handling IBFT transfers, and Visa/Mastercard network processors receive only the transaction data necessary to process your specific payment. They are contractually bound to handle this data securely and only for the purpose of payment processing.
• Game providers: Where 338win uses third-party certified game engines, anonymised session data may be shared with the provider for the purpose of game integrity and RNG audit. No personally identifiable information is shared with game providers.
• Identity verification services: During KYC checks, your CNIC details may be verified through a secure third-party verification service. This service is contractually bound to handle your data confidentially and not retain it beyond the verification process.
• Law enforcement and regulatory authorities: 338win will share player data with law enforcement, courts, or regulatory bodies when required to do so by a lawful order or legal obligation. We will notify you of such a disclosure where we are legally permitted to do so.
• Business transfers: In the event that 338win's business is acquired or merged with another entity, player data may form part of the transferred assets. In such a case, the acquiring entity would be bound by this Privacy Policy or required to obtain fresh consent from players.

7 Payment Data Security at 338win

Financial data deserves special attention — and at 338win, it gets it. Here is exactly how your PKR payment information is handled:

• Full Easypaisa/JazzCash account numbers and full bank account numbers are never stored on 338win servers in complete form. We store only masked identifiers (e.g., the last four digits of a wallet number).
• Card payments processed through Visa/Mastercard are handled entirely by PCI-DSS Level 1 certified payment processors. 338win never handles or stores full card numbers, CVV codes, or card expiry dates.
• All financial transactions between your device and 338win are encrypted using TLS 1.2 or higher. This means your payment data cannot be intercepted in transit.
• Deposit and withdrawal transaction records are stored in encrypted form in our database and are accessible only to authorised 338win personnel with a documented operational need.
• 338win will never ask you to share full payment credentials — full card numbers, full mobile wallet PINs, or bank passwords — via live chat, email, or phone. If you receive such a request from someone claiming to be 338win support, do not comply and report it to us immediately.

8 How Long We Keep Your Data

338win does not retain personal data indefinitely. Retention periods are set based on the purpose for which data was collected and any legal obligation to retain it. The following periods apply:

• Account data and transaction records: Retained for a minimum of 5 years from the date of your last transaction or account closure, to meet anti-money laundering record-keeping obligations.
• KYC documents (CNIC, address proof): Retained for 5 years from the date of verification or account closure, whichever is later.
• Gameplay and betting records: Retained for 5 years. After this period, records are anonymised rather than deleted, to support statistical analysis of platform performance without retaining personally identifiable data.
• Support chat transcripts: Retained for 2 years from the date of the conversation, to support the resolution of any future disputes or complaints.
• Cookie and tracking data: Session cookies are deleted when you close your browser. Persistent cookies expire at the intervals described in Section 9. Analytics data is retained in aggregated, anonymised form for up to 2 years.

When data is no longer required and has passed its retention period, it is securely deleted from 338win systems. Where full deletion is not technically possible for specific data types (such as database backup archives), we ensure the data is isolated and protected until it can be fully deleted during the next scheduled archive purge.

9 Cookies and Tracking Technologies

338win uses cookies and similar technologies on the 338win.biz platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the platform. Here is what we use and why:

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies entirely. Note that blocking strictly necessary cookies will prevent you from logging into your 338win account.

10 Your Privacy Rights

As a player at 338win, you have the following rights over your personal data. You can exercise any of these rights by contacting support@338win.biz with the subject line "Privacy Request". We will respond within 30 days.

• Right of Access: You have the right to request a copy of all personal data 338win holds about you. We will provide this in a structured, readable format within 30 days of your request at no charge.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For example, if your name was entered incorrectly at registration, we will correct it upon verification of your identity.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. We will comply where we have no legal obligation to retain the data. Note that financial transaction records must be retained for 5 years under applicable law — this portion of your data cannot be deleted on request until the retention period expires.
• Right to Restrict Processing: You may request that we stop using your data for specific purposes — for example, for platform improvement analytics — while retaining it for other necessary purposes.
• Right to Data Portability: You may request your personal data in a machine-readable format (CSV or JSON) for transfer to another service provider.
• Right to Object: You may object to processing based on our legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your rights.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

If you are dissatisfied with how 338win handles a privacy request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.

11 Children's Privacy

338win is strictly an adult platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires players to confirm their date of birth, and we verify age as part of our KYC process before any withdrawal is processed.

If we discover that we have inadvertently collected personal data from a person under 18, we will delete that data immediately and close the associated account. Any funds in the account will be returned to the payment source after verification.

Parents or guardians who believe a minor may have registered at 338win should contact us immediately at support@338win.biz. We will investigate and take appropriate action within 24 hours.

12 How We Keep Your Data Secure

338win implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key measures include:

• TLS 1.2+ encryption for all data transmitted between your device and 338win servers
• AES-256 encryption for sensitive data stored in our databases
• Passwords stored using bcrypt hashing — never in plain text
• Multi-factor authentication available for player accounts (strongly recommended)
• Access controls ensuring that only authorised staff can access personal data, on a need-to-know basis
• Regular penetration testing and security audits of platform infrastructure
• Automatic account lockout after repeated failed login attempts
• IP-based anomaly detection to flag unusual login patterns for review

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, 338win will notify affected players within 72 hours of becoming aware of the breach, and will take all steps within our power to contain and remediate it.

13 Changes to This Privacy Policy

338win may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The "Last Updated" date at the top of this page will be revised whenever the Policy changes.

For minor clarifications that do not materially affect how we handle your data, we may update the Policy without individual notice. For material changes — such as a new category of data collection or a new type of third-party sharing — we will notify registered players by email or in-platform notification at least 14 days before the change takes effect.

If you object to any material change to this Policy, you may close your account and withdraw your balance before the change takes effect by contacting support@338win.biz. Continued use of the 338win platform after the effective date of a Policy change constitutes your acceptance of the updated Privacy Policy.

14 Contact Us About Privacy

For any question, concern, or formal request relating to your personal data at 338win, please contact us using one of the following methods:

• Live Chat: Available 24/7 at the bottom right of every page on 338win.biz — fastest response for urgent privacy concerns.
• Email: support@338win.biz — use the subject line "Privacy Request" for data access, correction, deletion, or complaint requests. We aim to respond within 30 days.

Our support team includes Urdu-speaking agents who can assist with privacy queries in Urdu if that is your preferred language. Simply state your preference at the start of the conversation.

For formal legal correspondence relating to data protection, please use the email above with the subject line "Legal Notice – Privacy". We treat all such correspondence seriously and will respond within the timeframe required by applicable law.