This Privacy Policy explains what personal information 386win collects from Pakistani players, how that information is used, who it may be shared with, how it is protected, and what rights you hold over your own data. By using 386win, you agree to the data practices described in this document.
These are the core principles that govern every data decision 386win makes. The full legal policy text is detailed in the sections below.
386win collects only the personal information that is strictly necessary for operating your account, complying with international gaming licensing requirements, and processing PKR transactions. We do not collect data for its own sake or to build unnecessary profiles.
386win does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is used to operate your account and comply with regulatory obligations — nothing more, nothing less.
All data transmitted between your device and 386win is protected by TLS 1.3 encryption. Stored personal and financial data is encrypted at rest using AES-256 standards. Your CNIC details, payment information, and account history are never stored in plain text.
As a 386win player, you have enforceable rights over your personal data — including the right to access it, correct it, request deletion, and object to certain uses. These rights are not conditional on maintaining an active account and can be exercised at any time.
386win does not retain personal data indefinitely. Each category of data has a defined retention period aligned with our licensing obligations and applicable anti-money-laundering regulations. When the retention period expires, data is securely deleted or anonymised.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 386win will notify affected players within 72 hours of becoming aware of the breach. We will inform you of what happened, what data was affected, and what steps we are taking.
386win ("we," "us," "our," or "the Platform") is an internationally licensed online casino and sports betting platform accessible at 386win.pro. 386win is the data controller in respect of all personal data collected from users who access, register on, or otherwise interact with the 386win platform. "Data controller" means the entity that determines the purposes and means by which personal data is processed.
386win has been operating since 2017, serving players across Pakistan including Karachi, Lahore, Islamabad, and Faisalabad. Our platform processes all transactions in Pakistani Rupees (PKR) and provides customer support in both Urdu and English. As a responsible operator holding an international gaming licence, 386win is bound by data protection obligations that form part of its licensing conditions.
For all data protection enquiries, players may contact 386win through the official support email: [email protected]
386win collects the following categories of personal data from players. Collection is limited to information that is genuinely necessary for one or more of the purposes described in Section 5 of this Policy.
| Data Category | Specific Examples | Collected At |
|---|---|---|
| Identity Data | Full legal name, date of birth, CNIC number, copy of national identity card or passport | Registration & KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence (e.g. Karachi, Lahore, Faisalabad) | Registration |
| Financial Data | JazzCash account number, EasyPaisa wallet number, HBL/UBL/Meezan bank account details, Visa/Mastercard partial number, deposit and withdrawal history | First deposit & payment verification |
| Transactional Data | All deposits, withdrawals, wagers placed, games played, amounts staked, winnings received, bonus usage | Ongoing platform use |
| Technical Data | IP address, device type and OS, browser type, session duration, login timestamps, geolocation (country level) | Ongoing platform use |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, self-exclusion requests, loss limits, session time settings, responsible gaming questionnaire responses | When tools are used |
386win does not seek to collect any special category data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless it is specifically necessary for responsible gaming purposes — for example, where a player discloses a gambling-related health concern when requesting self-exclusion. Such data is treated with the highest level of protection and access is restricted to trained responsible gaming personnel only.
386win collects personal data through the following means:
When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact customer support, respond to a promotion, or update your account settings, you provide data directly to 386win. This is the primary source of your identity, contact, and financial data.
When you access and use the 386win platform, we automatically collect technical and transactional data through our platform's server logs, gaming systems, and cookies (described further in Section 7). This includes your IP address, device fingerprint, session activity, and all wagering transactions. Automated collection is inherent to operating a licensed gaming platform and cannot be disabled without preventing your use of the service.
386win may receive supplemental data about you from the following third-party sources:
Under internationally recognised data protection principles, 386win relies on the following legal bases for processing your personal data:
386win uses the personal data we collect for the following specific purposes:
We use your identity and contact data to create and maintain your 386win account, verify your identity during login, process password resets, and update your account preferences. Accurate account data is essential for us to serve you correctly and to release funds to the right person.
Financial data and transactional data are used to process your PKR deposits and withdrawals through your chosen method — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, or Mastercard. We verify payment instrument ownership as part of our KYC obligations before releasing significant withdrawals.
Transactional data (wagering history, game activity) is used to operate the games you play, calculate and credit your winnings, apply bonus terms correctly, and maintain accurate account balance records. This data also feeds our responsible gaming monitoring systems, which flag unusual patterns that may indicate problem gambling behaviour.
Identity data, financial data, and technical data are used to fulfil 386win's obligations under its international gaming licence — including KYC verification, anti-money laundering (AML) screening, sanctions list checking, and regulatory reporting. Technical data is also used to detect and prevent fraud, collusion, bot activity, and other prohibited conduct described in our Terms & Conditions.
Communication data — including your live chat transcripts, email correspondence, and support ticket history — is used to resolve your queries, investigate complaints, and improve the quality of our Urdu and English support service. Support interactions are reviewed for quality assurance purposes by authorised 386win personnel.
Responsible gaming data (limits set, self-exclusion requests, session data) is used to implement and enforce the responsible gaming controls you have requested, to monitor for indicators of problem gambling, and to comply with responsible gaming obligations embedded in 386win's licensing framework.
Where you have provided explicit consent, 386win may use your contact data to send you promotional communications about new games, bonuses, PSL betting markets, and platform news. You can withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.
386win does not use fully automated decision-making processes that produce legal or similarly significant effects on you without human review. Where automated systems flag your account for investigation (e.g. fraud or AML screening), a trained 386win compliance team member reviews the flag before any action is taken on your account.
386win does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share your data only where necessary, only with appropriate parties, and only under binding confidentiality and data protection obligations. The categories of recipients are as follows:
We share financial data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard solely for the purpose of processing your PKR deposit or withdrawal. Each provider operates under its own privacy policy and data protection obligations.
We share identity data (CNIC copies, name, date of birth) with regulated identity verification service providers for the purpose of completing mandatory KYC verification. These providers are contractually bound to use your data only for the verification purpose and to delete it thereafter.
Our game library is powered by third-party game providers including Evolution Gaming and Pragmatic Play. Minimal transactional data (session ID, stake, game result) is shared with these providers to operate the games you play. These providers do not receive your identity or payment data.
386win will disclose personal data to regulatory bodies, gaming licence authorities, financial intelligence units, or law enforcement agencies where required to do so by applicable law, court order, or our licensing obligations. 386win will notify affected players of such disclosures where legally permitted to do so.
Identity and financial data may be shared with regulated fraud prevention and anti-money laundering screening services for the purpose of verifying that you are not on international sanctions lists or linked to known fraudulent activity. This sharing is a mandatory licensing requirement.
All third parties who receive personal data from 386win are required to enter into formal Data Processing Agreements (DPAs) that bind them to process your data only as directed by 386win, to maintain appropriate technical and organisational security measures, and to delete or return your data upon termination of the service relationship.
386win uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit 386win. They serve the following functions:
These cookies are essential for the 386win platform to function. They maintain your login session, remember your account preferences, ensure the security of your session, and enable core platform functionality. These cookies cannot be disabled without preventing your use of the platform.
Functional cookies remember choices you have made on the platform — such as your preferred language (Urdu or English), your responsible gaming settings, and your game display preferences — to provide a more personalised experience during subsequent visits.
386win uses aggregate analytics data to understand how players use the platform — which games are most popular, which features are used, and where players encounter difficulties. This data is processed in anonymised, aggregated form and does not identify individual players. You may opt out of analytics cookies through your account settings.
You may control cookie settings through your web browser's privacy settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the 386win platform. Disabling functional or analytics cookies may affect your experience but will not prevent basic platform access.
386win implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These measures include, but are not limited to:
While 386win takes all reasonable technical steps to protect your data, you are responsible for maintaining the confidentiality of your account login credentials. Use a strong, unique password and enable two-factor authentication where available. Never share your password with anyone — including persons claiming to be 386win support agents, who will never request your password through any channel.
386win retains personal data for the periods set out below. These periods are determined by our contractual obligations to you, our international gaming licensing requirements, and applicable anti-money laundering regulations, which typically mandate the retention of financial and identity records for a minimum of five years from the closure of an account.
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Data | 5 years from account closure | AML licensing obligation |
| Financial & Transaction Data | 5 years from account closure | AML & financial record requirements |
| Technical & Log Data | 12 months from collection | Fraud prevention & security |
| Customer Support Records | 3 years from last interaction | Dispute resolution & quality assurance |
| Marketing Consent Records | Duration of consent + 3 years | Proof of lawful marketing |
| Responsible Gaming Data | 5 years from account closure | Licensing & player welfare |
Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction methods or, where deletion is not technically feasible, permanently anonymised so that it can no longer be associated with any individual.
As a 386win player, you hold the following rights in respect of your personal data. These rights are not absolute and are subject to 386win's overriding legal obligations — for example, we cannot delete financial records that we are required to retain by our gaming licence. Where we cannot fulfil a rights request in full, we will explain the reason clearly and in writing.
You may request a copy of all personal data 386win holds about you. We will provide this within 30 days of a verified request, in a commonly used electronic format.
If any personal data 386win holds about you is inaccurate or incomplete, you may request that we correct or complete it. Minor corrections (e.g. phone number updates) can be made directly in your account settings.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. This right is subject to 386win's regulatory data retention obligations.
You may request that 386win restricts processing of your data in certain circumstances — for example, while an accuracy dispute is being resolved, or where processing is unlawful but you prefer restriction to deletion.
Where processing is based on your consent or a contract, you may request your personal data in a structured, commonly used, machine-readable format to transfer to another service provider.
You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though 386win may continue such processing where it has compelling legitimate grounds that override your interests.
To exercise any of these rights, please contact 386win at [email protected] with the subject line "Data Rights Request" and include sufficient information to verify your identity. We will respond within 30 calendar days.
386win strictly prohibits the use of its platform by any person under the age of 21. 386win does not knowingly collect, store, or process personal data belonging to individuals under the age of 21.
Age verification is conducted during the registration process and is reinforced through KYC document checks. Where 386win discovers, or has reasonable grounds to believe, that an account is operated by a person under 21 years of age, the account will be immediately suspended, all data will be reviewed, any funds on the account will be returned to the payment source, and the matter may be referred to relevant authorities.
Parents and guardians in Pakistan are strongly encouraged to use parental control and content filtering software to prevent minors from accessing online gambling platforms. If you believe a minor may have registered on 386win, please contact our support team immediately at [email protected].
386win operates a zero-tolerance policy toward underage gambling. Protecting minors from gambling harm is a core responsibility that takes precedence over all commercial considerations. We take every report of potential underage access seriously and investigate all such reports within 24 hours.
386win may send you promotional communications about bonuses, new games, PSL cricket betting markets, platform promotions, and other 386win news where you have provided explicit, affirmative consent to receive such communications at the time of registration or subsequently through your account settings.
Marketing communications may be sent by SMS to your registered Pakistani mobile number or by email to your registered address. 386win will never send unsolicited marketing communications to players who have not opted in.
You may withdraw your marketing consent at any time by:
Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent prior to withdrawal. It also does not affect transactional communications — 386win will continue to send you account-related notifications (deposit confirmations, withdrawal updates, security alerts) regardless of your marketing preferences, as these are necessary for the operation of your account.
386win will never send marketing communications to players who have self-excluded under our responsible gaming programme. Self-excluded players are immediately removed from all marketing lists and will not receive any promotional material for the duration of their exclusion.
386win reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, changes in applicable law, or changes in our licensing obligations. Amendments will be published on this page with an updated "Effective Date" at the top of the Policy.
Where amendments are material — meaning they significantly affect how we collect, use, or share your personal data — 386win will provide advance notice to registered players via SMS or email at least seven days before the amendment takes effect. For non-material amendments (such as clarifications of existing practices or corrections of typographical errors), notice will be provided by publication of the updated Policy on this page only.
Your continued use of the 386win platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you must cease using the platform and may request account closure in accordance with Section 13.1 of the Terms & Conditions.
If you have any questions, concerns, or complaints regarding this Privacy Policy or 386win's data practices, please contact our data protection team through the following official channel:
If you are not satisfied with 386win's response to your privacy complaint, you have the right to escalate the matter to the relevant data protection supervisory authority under 386win's licensing jurisdiction, or to raise a dispute through the formal dispute resolution mechanism described in Section 15 of our Terms & Conditions.
386win is committed to resolving all privacy complaints fairly, promptly, and transparently. We treat every data rights request and privacy concern with the same seriousness as any financial or account dispute.
This Privacy Policy should be read in conjunction with the 386win Terms & Conditions and the Responsible Gaming Policy, which together form the complete framework governing your relationship with 386win.
We've been protecting Pakistani players' data since 2017. Play with confidence — your privacy is as important to us as your winnings.