x388 Privacy Policy

Welcome to the x388 Privacy Policy. x388 ("we", "us", "our") is committed to protecting and respecting the privacy of every player who accesses or uses the x388 platform at https://x388.bet. This Privacy Policy ("Policy") sets out in clear, plain language how we collect, use, store, share, and protect your personal data, and what rights you have in relation to that data.

This Policy applies to all personal data we process in connection with your use of the x388 website, mobile-optimised platform, customer support services, promotional communications, and any other services we provide to you as a registered player or site visitor. It applies to players based in Pakistan and all other jurisdictions where x388 accepts players.

By registering an account with x388, accessing the platform, or otherwise engaging with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, please discontinue use of the x388 platform immediately.

x388 collects the following categories of personal data from players and site visitors. We only collect data that is necessary, proportionate, and relevant to the purposes described in this Policy:

x388 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for mandatory identity verification under applicable gaming regulations.

x388 collects personal data through the following means:

• Direct Submission: When you register an account, complete your KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion on x388.
• Automated Collection: As you browse and interact with the x388 platform, we automatically collect Technical Data including your IP address, device identifiers, browser information, and session activity through cookies, log files, and similar tracking technologies (see Section 7).
• Payment Providers: When you transact via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, our payment processing partners may share transaction confirmation and reference data with x388 to reconcile your account.
• Identity Verification Services: Our third-party KYC partners may return verified identity data to x388 to confirm the authenticity of documents you submit during account verification.
• Fraud Prevention Systems: Automated risk-scoring systems may process your account activity to flag unusual patterns. This processing is carried out to protect both x388 and its players.

x388 uses your personal data only for legitimate, clearly defined purposes. The table below sets out each processing purpose alongside the legal basis on which we rely (detailed further in Section 5):

• Account Management: To create, maintain, and manage your x388 player account, including processing registration, verifying your identity, and managing account settings.
• Transaction Processing: To process deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank in PKR, and to maintain accurate financial records of all transactions.
• Regulatory Compliance & KYC: To fulfil our obligations under applicable gaming regulations, including age verification (21+), anti-money laundering (AML) checks, and Know Your Customer (KYC) procedures.
• Customer Support: To respond to your queries, resolve complaints, process responsible gaming requests such as self-exclusion and deposit limits, and communicate material account updates.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multiple account creation, and other forms of prohibited conduct on x388.
• Platform Improvement: To analyse player behaviour and technical performance in aggregate form to improve the x388 platform, betting products, cricket features, and user experience.
• Responsible Gaming: To monitor gaming patterns and intervene proactively where behaviour suggests potential problem gambling, and to enforce self-exclusion and limit requests in accordance with our Responsible Gaming policy.
• Marketing & Promotions: Where you have provided explicit consent, to send you personalised promotional communications about x388 bonuses, PSL match betting offers, World Cup promotions, and new game releases. You may withdraw consent at any time.

x388 processes personal data only where a valid legal basis exists under applicable data protection law. We rely on the following legal bases for the processing activities described in this Policy:

• Contractual Necessity: Processing required to perform the contract between x388 and you as a registered player — including account creation, transaction processing, game provision, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including gaming licence conditions, AML obligations, age verification requirements, and tax reporting.
• Legitimate Interests: Processing carried out in the legitimate interests of x388, including fraud detection, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications and non-essential cookies, where you have given clear, affirmative consent. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Where x388 relies on legitimate interests as the legal basis for processing, we have conducted a balancing test to ensure that our interests do not unduly override your privacy rights. You may request further information about these assessments by contacting us at [email protected].

x388 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited and controlled circumstances:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• KYC & Identity Verification Providers: Third-party identity verification services receive the identity documents you submit for the sole purpose of verifying your age, identity, and address on x388's behalf.
• Gaming Software Providers: Providers of the casino games, live dealer products, and slot titles available on x388 may receive session and gameplay data necessary to deliver, maintain, and audit game performance. These providers are contractually bound to process data only for the specified purpose.
• Fraud Prevention & AML Services: Specialist fraud detection and anti-money laundering screening services process account and transaction data to identify and flag suspicious activity.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or the lawful instruction of a regulatory authority, x388 may disclose personal data to the relevant body. We will notify affected players to the extent permitted by law.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of x388's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

x388 uses cookies and similar technologies (including web beacons and local storage objects) to operate and improve the platform. Cookies are small text files stored on your device when you visit x388. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the x388 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred payment method, and betting display options. These improve your experience on x388 but are not strictly required.
• Performance & Analytics Cookies: Collect aggregated, anonymised data about how players navigate x388 — which pages are visited most, where errors occur, and how long sessions last. This data helps us improve platform performance.
• Marketing Cookies: Where you have given consent, these cookies allow x388 to serve relevant promotional content — such as PSL match betting offers or World Cup bonus campaigns — based on your browsing behaviour and gaming preferences.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and be notified when new cookies are set. Please note that disabling cookies may affect certain features of the x388 platform.

x388 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. Our standard retention schedules are as follows:

• Active Account Data: Retained for the full duration of your x388 account plus a minimum of five (5) years following account closure, to comply with AML and gaming regulatory obligations.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction in accordance with standard financial record-keeping requirements.
• KYC Identity Documents: Retained for the duration of the account relationship plus five (5) years following closure, subject to any extended period required by a regulatory authority.
• Customer Support Communications: Retained for three (3) years from the date of the final communication, unless the subject matter involves an unresolved dispute or legal claim.
• Marketing Preferences and Consent Records: Retained for three (3) years from the date of last interaction or until consent is withdrawn, whichever is earlier.
• Technical Logs (IP, Device): Retained for twelve (12) months unless flagged in connection with a fraud or security investigation, in which case retention is extended for the duration of the investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for analytical purposes.

x388 takes the security of your personal data seriously and implements industry-standard technical and organisational measures to protect it against unauthorised access, loss, destruction, or disclosure. Our security framework includes:

• Encryption: All data transmitted between your device and x388 servers is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including financial records and identity documents, is stored using AES-256 encryption.
• Access Controls: Access to personal data within x388 is restricted on a strict need-to-know basis. Staff with access to player data undergo regular security training and are bound by confidentiality obligations.
• Password Security: Player passwords are stored as salted cryptographic hashes. x388 staff cannot view your password in plain text. We encourage players to use strong, unique passwords and to enable SMS two-factor authentication where available.
• Penetration Testing: x388 conducts regular independent security assessments and penetration tests to identify and remediate vulnerabilities in the platform before they can be exploited.
• Incident Response: x388 maintains a formal data breach response procedure. In the event of a breach affecting your personal data, we will notify the relevant supervisory authority and affected players within the timeframe required by applicable law.

Subject to applicable law, you hold the following rights in relation to the personal data x388 holds about you. To exercise any of these rights, contact us at [email protected] with your account username, registered email, and a description of your request. We will respond within thirty (30) days: