LEGAL REFERENCE

How We Protect Your Account and Privacy

At win388, your account security and data privacy are foundational to how we operate. We collect only the information needed to verify your identity, process your JazzCash, Easypaisa...

Encryption for all account flowsPakistan-compliant data handlingNo third-party data sales
Browse Lobby Read FAQ
win388 How We Protect Your Account and Privacy

What Information We Collect and Why

When you open your win388 account, we ask for your name, email, phone number, and national identification details to comply with local verification requirements in supported regions. We collect payment data — your JazzCash, Easypaisa, SadaPay or Raast account details — only to process your deposits and withdrawals securely. We log your login history, device type, IP address, and gameplay sessions to

detect fraud and enforce our terms. We do not sell your personal data to marketers or outside companies. Your information stays within win388's systems and our trusted payment processors where local law permits.

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

POLICY QUESTIONS

Contact Us About Your Privacy

Email Support Write to our privacy team at [email protected] with...
Account Settings Log into your win388 account and visit Settings...
Legal Requests If you need to request a copy of...
SECURITY MEASURES

How We Keep Your Data Safe

SSL Encryption

Every transaction between your device and win388 travels through SSL 256-bit encryption. Your passwords and payment details are never stored in plain text on our servers.

Fraud Detection

We monitor all account activity for unusual login patterns, suspicious withdrawals, and unauthorized access attempts. Anomalies trigger immediate account alerts and verification steps.

Payment Processor Compliance

JazzCash, Easypaisa, SadaPay and Raast partners comply with local Pakistan financial regulations. We share only the minimal data required to settle your deposits and payouts.

Access Controls

Only authorized win388 staff with verified roles can access your personal data. We audit these access logs monthly and revoke permissions when employees leave.

Data Retention Policy

We retain your account data for seven years after closure to meet regulatory and tax requirements in supported regions. You may request earlier deletion within legal limits.

Incident Response

If a data breach occurs, we notify affected account holders within 72 hours and provide guidance on account protection steps. We maintain cyber-liability insurance.

How Our Privacy Approach Compares

Data Minimization
We ask only for information required to verify your identity and process payments through JazzCash, Easypaisa, SadaPay and Raast — not demographic surveys or marketing profiles.
No Tracking Networks
Unlike many online platforms, win388 does not share your browsing behaviour with ad networks or data brokers outside the gaming ecosystem.
Transparent Retention
Our data deletion schedule is published in this policy. You know exactly how long we keep your records and can request removal where permitted.
User Rights Priority
You can download your data, correct errors, restrict processing, or close your account and request erasure. We do not delay these requests beyond legal compliance windows.
Pakistan-First Governance
We follow local payment regulations and data protection norms for supported regions, not generic offshore policies that ignore local privacy expectations.
No Forced Consent
Your privacy choices are separate from your ability to play. Opting out of marketing emails or location tracking does not affect your gaming access or withdrawal speed.
Regular Audits
We conduct annual privacy and security audits by external advisors and publish our findings. This policy is reviewed every six months and updated when regulations shift.

Key Privacy Features Built Into Your Account

Private Session Mode

Log into a private browser session on shared devices. Your login credentials and account activity are not cached or visible to other device users after you disconnect.

Two-Factor Authentication

Enable 2FA in Account Settings to require a second verification step before any login or withdrawal. We support SMS codes and authenticator apps for added security.

Payment Method Masking

Your JazzCash, Easypaisa, SadaPay and Raast account numbers are masked in transaction history. Only the last four digits and payment method type are visible on your statements.

Withdrawal Verification

Every payout over a threshold amount requires you to confirm the recipient bank details via email or SMS before the transfer clears, preventing unauthorized cash-outs.

Activity Logs

View every login, withdrawal, and sensitive account change in real time. If you spot unfamiliar activity, report it immediately through the security centre to freeze your account.

Automated Session Timeout

Your account logs out automatically after 30 minutes of inactivity to prevent accidental access on public devices. You can adjust this timeout in Privacy Settings if you prefer.

Privacy Policy Questions Answered

We retain your account data for seven years to comply with Pakistan tax and regulatory requirements, then delete it. You may request manual deletion earlier for personal reasons; contact [email protected] with your account email and identity proof. Marketing data is purged immediately.

We share only the minimum information required to process your deposit or withdrawal: your account reference, amount, and timestamp. We do not share your full banking credentials, personal ID, or gaming history with payment partners. They handle data under their own privacy policies.

Yes. Unsubscribe from marketing at any time in Account Settings → Communication Preferences. You will still receive essential security alerts, withdrawal confirmations, and policy updates. Your gameplay and withdrawals are not affected.

Passwords are hashed with bcrypt encryption and never stored in plain text. We do not email you passwords; instead, we send password-reset links that expire after 15 minutes. Enable two-factor authentication for additional protection.

Primary account data and transaction records are housed on servers in supported Pakistan regions in compliance with local data residency norms where applicable. Backup copies are encrypted and stored in secure data centres for disaster recovery.

Contact [email protected] immediately or use the Security Centre in your account to freeze access and change your password. We will review your login history, block suspicious devices, and reset your 2FA settings within two hours.

We use essential cookies to keep you logged in and to prevent fraud. We do not use third-party tracking pixels or retargeting cookies for advertising. You can manage cookie preferences in your browser settings without losing core platform access.