At 389win, we understand that your personal data is exactly that — personal. This Privacy Policy explains in plain terms what information we collect from Pakistani players, why we collect it, how it is stored and protected, who it may be shared with, and what rights you have over your own data. We are committed to handling your information responsibly and transparently.
A plain-language summary of the most important privacy commitments 389win makes to every Pakistani player. The complete legal text follows below.
Registration details (name, CNIC, date of birth, Pakistani mobile number), payment data, device and browser information, gameplay history, and communication records. We collect only what is necessary to operate the platform and meet our licensing obligations.
Your data is used to operate your 389win account, process PKR deposits and withdrawals, verify your identity via KYC, personalise your experience, fulfil our AML obligations, and communicate important account notifications with you.
389win does not sell your personal data to third parties. Data is shared only with regulated payment processors (JazzCash, EasyPaisa, HBL, etc.), KYC and identity verification providers, fraud prevention systems, and regulatory authorities where legally required.
All 389win player data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to personal data within 389win is restricted on a strict need-to-know basis. We conduct regular security audits and penetration testing.
You have the right to access, correct, or request deletion of your personal data. You may also request data portability, object to certain processing activities, and withdraw marketing consent at any time. Contact 389win support to exercise any of these rights.
389win uses essential cookies required for platform operation, performance cookies to improve the experience, and analytics cookies to understand how Pakistani players use the site. You can manage non-essential cookie preferences at any time.
This Privacy Policy ("Policy") describes how 389win ("389win", "we", "us", "our") collects, uses, stores, and shares personal data relating to individuals who access the 389win platform ("you", "Player", "User"). This Policy forms part of your agreement with 389win and should be read alongside the Terms & Conditions. By using 389win, you confirm that you have read and understood this Policy.
1.1 389win operates as an internationally licensed online casino and sports betting platform. The 389win entity holding the applicable gaming licence acts as the data controller in respect of personal data collected through the Platform.
1.2 As the data controller, 389win is responsible for determining the purposes and means by which your personal data is processed. We are committed to processing personal data in accordance with applicable data protection laws and the principles of transparency, data minimisation, and purpose limitation.
1.3 This Policy applies to all data processing activities carried out by 389win in connection with the operation of the Platform, including account registration, payment processing, customer support interactions, marketing communications, and regulatory compliance activities.
2.1 389win collects personal data across several categories depending on your interaction with the Platform:
389win does not store full payment card numbers or full bank account credentials on its own servers. Payment data is handled by our regulated payment processor partners and is subject to their own security standards and data protection obligations.
3.1 389win relies on the following legal bases when processing your personal data:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract |
| Processing PKR deposits and withdrawals | Performance of contract |
| KYC identity verification | Legal obligation (licensing requirement) |
| AML monitoring and fraud detection | Legal obligation / legitimate interests |
| Customer support communications | Performance of contract / legitimate interests |
| Responsible gaming monitoring | Legal obligation / legitimate interests |
| Marketing and promotional communications | Consent (opt-in) |
| Platform analytics and improvement | Legitimate interests |
4.1 389win uses the personal data it collects for the following specific purposes:
5.1 389win does not sell your personal data to any third party. We share personal data only in the limited circumstances described below:
No 389win employee or agent is authorised to share your personal data with any party not described in this Policy. If you receive a communication claiming to be from 389win and requesting sensitive personal or financial information outside of the standard KYC process, treat it as suspicious and contact 389win live support immediately.
6.1 389win is operated by an internationally licensed entity. As a result, your personal data may be processed and stored on servers located outside of Pakistan. When data is transferred internationally, 389win ensures that appropriate safeguards are in place to protect your data to the same standard as required under our gaming licence's data protection obligations.
6.2 These safeguards may include the use of standard contractual clauses, the selection of data processors operating under internationally recognised data protection frameworks, or the use of adequacy decisions where applicable.
7.1 389win retains your personal data for as long as necessary to fulfil the purposes described in this Policy, and in particular for as long as your account remains active.
7.2 Following account closure, 389win is required by its international gaming licence to retain certain categories of data for a minimum of five (5) years. This includes KYC documents, transaction records, and AML monitoring data. This retention is a legal obligation and cannot be waived by individual data deletion requests in relation to these specific categories.
7.3 Data retained solely for marketing and personalisation purposes (where processed under your consent) will be deleted promptly upon withdrawal of consent or account closure, subject to the mandatory retention periods described in 7.2.
8.1 389win implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include:
8.2 While 389win takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your 389win login credentials confidential and for notifying us immediately if you suspect unauthorised account access.
9.1 389win uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device when you visit the Platform. They help us operate the Platform, remember your preferences, and analyse usage patterns.
9.2 The categories of cookies used by 389win are as follows:
9.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the 389win Platform.
10.1 You have the following rights in relation to the personal data 389win holds about you. To exercise any of these rights, please contact the 389win support team via live chat or email:
11.1 The 389win Platform is strictly intended for individuals aged 21 years and above. 389win does not knowingly collect personal data from persons under 21. If 389win becomes aware that personal data has been collected from a person under 21, that account will be closed immediately and the data will be handled in accordance with our responsible gaming and licensing obligations.
11.2 If you are the parent or legal guardian of a person under 21 who you believe has registered with 389win, please contact our support team immediately via live chat so we can investigate and take appropriate action.
If you are a Pakistani parent or guardian concerned about underage access to online gambling platforms, we recommend activating parental control tools on shared devices and ensuring children understand the legal age restriction of 21+ that applies to 389win and similar platforms.
12.1 As an internationally licensed gambling platform, 389win is obligated to implement Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures. This involves the collection and processing of identity documents, financial transaction data, and account activity records for compliance purposes.
12.2 KYC verification is a mandatory condition for processing withdrawal requests from your 389win account. Players who have not completed KYC may not be able to withdraw PKR balances until verification is satisfactorily completed.
12.3 AML monitoring involves automated analysis of transaction patterns and betting behaviour to identify activity that may indicate money laundering or other financial crimes. Accounts flagged by AML systems may be temporarily suspended pending investigation. 389win is not able to provide detailed information about its AML detection methodologies as this information is confidential for operational security reasons.
12.4 389win may be legally required to report suspicious transaction activity to regulatory or law enforcement authorities. Where such reporting occurs, 389win may not be permitted by law to notify the account holder that a report has been made.
13.1 With your consent, 389win may send you marketing communications via SMS to your registered Pakistani mobile number or via email, informing you about promotions, bonuses, new games, sports betting offers for PSL and other cricket events, and other 389win news.
13.2 You may opt out of marketing communications at any time by:
13.3 Opting out of marketing communications does not affect the delivery of transactional messages, including account security alerts, withdrawal confirmations, KYC requests, and other service-related notifications, which are sent regardless of marketing preferences.
14.1 The 389win Platform does not include links to third-party websites unrelated to the operation of the Platform. In the event that any such link appears — for example, within a game studio's interface — 389win is not responsible for the privacy practices or content of any third-party website accessed via that link.
14.2 This Policy applies exclusively to personal data processed by 389win in connection with the operation of the Platform. The privacy practices of third-party payment processors (e.g., JazzCash, EasyPaisa) in relation to data processed on their own platforms are governed by their own respective privacy policies.
15.1 389win may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the structure of the Platform. The date of the most recent revision is displayed at the top of this page.
15.2 Material changes to this Policy will be communicated to registered players via the Pakistani mobile number or email address on file, or through a prominent notice on the Platform prior to the change taking effect.
15.3 Your continued use of the 389win Platform following notification of a material Policy change constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you may close your account and withdraw your PKR balance before the effective date.
16.1 If you have any questions about this Privacy Policy or wish to exercise any of your data rights, please contact the 389win Data Support team:
16.2 If you believe that 389win has handled your personal data in a manner inconsistent with this Policy or applicable data protection law, you have the right to lodge a complaint with the supervisory authority responsible for data protection under 389win's licensing jurisdiction.
If you have questions about any section of this Privacy Policy and prefer to discuss them in Urdu, 389win's Urdu-speaking support team is available around the clock via live chat and can explain any aspect of our data practices in plain terms.
Transparency is part of what makes 389win a trusted platform for Pakistani players. Your personal data is collected only what is necessary, protected with industry-standard encryption, and never sold to third parties.