This Privacy Policy explains what personal data x388 collects, why we collect it, how we process and protect it, and what rights you have over your information. Please read this document carefully alongside our Terms & Conditions before using the Platform.
Privacy at a Glance
These highlights summarise our approach. They do not replace or override the full Privacy Policy text below, which you should read in full.
x388 collects personal data only to the extent required to operate your account, process transactions, verify your identity, comply with AML obligations and improve the Platform experience. We do not collect data unnecessarily.
All data transmitted between your device and x388 servers is encrypted via SSL/TLS. Sensitive documents submitted during KYC are stored with access controls and handled only by authorised personnel. We do not store payment card data on our own servers.
x388 does not sell, rent or trade your personal data to third-party advertisers or data brokers. Data shared with service providers is shared only on a need-to-know basis and under appropriate data-processing agreements.
Subject to applicable law and our legal obligations, you have the right to access, correct, port or request deletion of your personal data. Certain retention obligations (e.g., AML record-keeping) may limit the scope of deletion requests.
x388 uses cookies and similar technologies to maintain session state, detect fraud and analyse Platform usage. Essential cookies are required for the Platform to function. Analytical and preference cookies may be managed via your browser settings.
Where you have opted in to receive promotional emails or SMS messages from x388, you may withdraw that consent at any time by contacting our support team or using the unsubscribe mechanism in any marketing communication.
This Privacy Policy ("Policy") is issued by x388 (the "Operator", "we", "us" or "our") and applies to all personal data collected and processed in connection with your use of the x388 online gaming platform, accessible at https://x388.cam (the "Platform").
x388 is committed to protecting the privacy and security of personal data belonging to its users ("User", "you" or "your"). This Policy explains the categories of personal data we collect, the purposes and legal bases for which we process that data, the circumstances in which we may share it with third parties, and the rights available to you in respect of your personal data.
This Policy should be read in conjunction with our Terms & Conditions. By accessing or using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any aspect of this Policy, please discontinue your use of the Platform.
Pakistani Users — Important Note: This Policy is written in accordance with the data protection principles applied in the operator's licensing jurisdiction. x388 does not represent that this Policy satisfies the requirements of any specific Pakistani legislation, including the Personal Data Protection Bill or related regulations. Pakistani users are encouraged to review applicable local data-privacy law independently.
For the purposes of this Privacy Policy, the following terms have the meanings set out below:
x388 acts as the Data Controller in respect of all Personal Data collected through the Platform. As Data Controller, x388 determines why and how your personal data is processed. For any queries relating to this Policy or to the exercise of your data rights, please refer to the contact details in Section 15 of this Policy.
Where x388 engages third-party service providers to process Personal Data on its behalf (for example, payment processors, identity verification providers or cloud infrastructure providers), those parties act as Data Processors and are bound by appropriate data-processing agreements restricting their use of personal data to the specific purposes for which it was shared.
x388 collects personal data that is necessary and proportionate to the purposes described in Section 6 of this Policy. The categories of personal data we collect include:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, CNIC or passport number, CNIC/passport image, selfie or liveness-check data | Registration; KYC verification |
| Contact Data | Email address, mobile number, residential address (city/province — e.g., Karachi, Lahore, Islamabad) | Registration; KYC verification |
| Account Data | Username, encrypted password, account preferences, responsible gambling limit settings | Registration; account use |
| Financial Data | Transaction history, deposit and withdrawal amounts (PKR), payment method type (e.g., mobile wallet reference, bank account type), KYC-related payment ownership documentation | Deposits; withdrawals; KYC |
| Gambling Activity Data | Bet history, game session logs, wagering totals, sportsbook markets accessed (e.g., cricket, PSL, football, UFC) | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, session timestamps, geolocation data (country/region level) | Platform access; session activity |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS; bonus participation history | Registration; account settings |
Payment Method References: Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are mentioned in the context of payment activity data only as examples of familiar Pakistani payment reference types. We do not store full payment provider credentials. None of these providers endorse or affiliate with x388.
We collect personal data that you provide directly when you register an Account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions. This includes the information you enter into registration forms, identity verification uploads and support communications.
When you access the Platform, we automatically collect certain technical data including your IP address, browser type, device information and session activity. This data is collected via server logs, cookies and similar tracking technologies described in Section 9 of this Policy.
In the course of KYC verification, x388 may receive data about you from third-party identity verification providers (for example, the result of a document-authenticity check or a facial-matching score). We may also receive limited data from payment processors confirming the success or failure of a transaction. We do not purchase personal data from data brokers or list aggregators.
x388 processes personal data only where we have a valid legal basis to do so. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis for each purpose:
| Purpose of Processing | Legal Basis |
|---|---|
| Account registration and maintenance | Performance of contract |
| Processing deposits and withdrawals | Performance of contract |
| KYC identity and age verification | Legal obligation; legitimate interests (fraud prevention) |
| Anti-money laundering (AML) compliance and transaction monitoring | Legal obligation |
| Responsible gambling monitoring, limit management and self-exclusion enforcement | Legal obligation; legitimate interests (player protection) |
| Fraud detection and prevention | Legitimate interests |
| Customer support and complaint handling | Performance of contract; legitimate interests |
| Sending promotional communications (where consented) | Consent |
| Platform analytics and performance improvement | Legitimate interests |
| Compliance with regulatory and legal obligations | Legal obligation |
x388 may use automated processes to detect fraud, identify unusual betting patterns or flag accounts for review. Where such automated processing produces a decision that materially affects you (for example, account suspension), you have the right to request human review of that decision by contacting our support team.
x388 may share personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual protections:
x388 does not sell, rent or disclose personal data to third-party advertisers, marketing companies or data brokers for commercial purposes. Any third party that receives personal data from x388 is bound by contractual obligations restricting its use to the specific purpose for which it was disclosed.
In the event of a merger, acquisition, asset sale or restructuring of x388, personal data held at the time of the transaction may be transferred to the acquiring or succeeding entity. Affected users will be notified of any such transfer and any resulting material changes to this Policy prior to their data being subject to different privacy terms.
x388 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any mandatory retention requirements imposed by applicable law. The following indicative retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.
x388 uses the following categories of cookies and similar technologies on the Platform:
You can manage most cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies or be notified when a new cookie is set. Note that disabling strictly necessary cookies will impair your ability to use the Platform. Analytical and functional cookies may be disabled without loss of core functionality.
x388 does not use third-party advertising networks or retargeting cookies. We do not share browsing data with advertising platforms or social media companies for the purpose of displaying targeted advertisements to you elsewhere on the internet.
x388 implements technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction or alteration. These measures include:
No data transmission over the internet can be guaranteed to be completely secure. While x388 takes all reasonable steps to protect your personal data, you also have a responsibility to maintain the security of your own device and account credentials.
Security Reminder: x388 staff will never ask you to share your password via live chat, email or any other channel. If you receive a request for your password claiming to be from x388, please contact support immediately to report it.
Subject to applicable law and the limitations described below, you have the following rights in respect of your personal data held by x388. To exercise any of these rights, please contact us using the details in Section 15.
You may request a copy of the personal data we hold about you and information about how it is being processed.
If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated.
You may request the deletion of your personal data. This right is subject to our legal retention obligations under AML and other applicable law.
In certain circumstances you may request that we restrict the processing of your data while a dispute or review is in progress.
Where processing is based on your consent or a contract, you may request a structured, machine-readable copy of your personal data.
You may object to processing based on legitimate interests, including profiling for fraud detection purposes. We will assess your objection against our legitimate grounds.
Where a decision materially affecting you is made solely by automated means, you have the right to request human review of that decision.
Where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
x388 will respond to rights requests within a reasonable timeframe in accordance with applicable law. We may need to verify your identity before processing a rights request. In certain cases, we may decline a request where we have overriding legal grounds — for example, where erasure of data is prevented by AML record-keeping obligations. We will explain our reasoning in any such case.
The x388 Platform is strictly for adults aged 18 years or older, or the higher minimum age required by the applicable license jurisdiction. x388 does not knowingly collect, process or retain personal data relating to individuals under the applicable minimum age. If we discover or have reason to believe that an Account has been registered by a person below the minimum age, we will immediately suspend the Account, void any balances and request the deletion of all associated personal data to the extent permitted by law.
Parents and guardians who suspect that a minor may have accessed or registered on the x388 Platform are urged to contact our support team immediately so that appropriate action can be taken without delay.
x388 may process or transfer personal data to service providers located in countries outside your country of residence, including countries that may not have data-protection frameworks equivalent to those applicable in your jurisdiction. Where such transfers occur, x388 takes steps to ensure that appropriate safeguards are in place, such as data-processing agreements incorporating standard contractual clauses or equivalent protective mechanisms.
Pakistani users should be aware that their personal data may be processed in the jurisdiction where x388 holds its operating licence and/or where its cloud infrastructure providers are located. x388 cannot guarantee that international data transfers will satisfy every requirement of Pakistani data-protection law, which continues to develop. Users who have concerns about international data transfers should consider this before registering on the Platform.
x388 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our data-processing practices or the Platform's features and services. Material changes to this Policy will be notified to registered users via their registered email address and/or a prominent notice on the Platform prior to the changes taking effect.
The date at the top of this page indicates the date of the most recent review. We encourage you to review this Policy periodically to stay informed about how we handle your personal data. Your continued use of the Platform following any amendment constitutes your acknowledgement of the revised Policy.
If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern or complaint about how x388 processes your personal data, please contact us through the following channels:
Where you believe that x388 has failed to address your privacy concern adequately, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in the jurisdiction applicable to x388's operations. x388 will cooperate with any such investigation.
Explore x388
You have reviewed how x388 handles your data. Head to the homepage to explore cricket and PSL betting, live casino and slots — or check our Terms & Conditions for the full platform rules. 18+ only.
18+ only. Or the higher minimum required by the operator/license jurisdiction. Local laws may restrict gambling. Please play responsibly.