vin388 Privacy Policy

This Privacy Policy ("Policy") describes how vin388 ("vin388," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("Player," "User," "you") who access, register on, or interact with the vin388 online gaming platform at vin388.net.

vin388 is committed to maintaining the privacy, security, and integrity of your personal information. This Policy is designed to be transparent and straightforward — we want every Pakistani player on our platform to clearly understand what data we hold, why we hold it, and what rights you have over it.

This Privacy Policy is incorporated by reference into the vin388 Terms & Conditions. By creating a vin388 account, you confirm that you have read and understood this Policy and that you consent to the processing of your personal data as described herein. If you do not agree with the terms of this Policy, you should not use the vin388 platform.

For the purposes of applicable data protection legislation, vin388 acts as the data controller in respect of the personal data collected from players through the vin388.net platform. As data controller, vin388 determines the purposes and means by which your personal data is processed.

vin388 operates under an internationally recognised gaming licence. Our licensing obligations impose rigorous data protection standards that align with internationally accepted principles of data privacy, including purpose limitation, data minimisation, storage limitation, integrity, and confidentiality.

Where vin388 engages third-party service providers to process personal data on its behalf (for example, payment processors such as JazzCash and EasyPaisa, identity verification services, or fraud prevention systems), those providers act as data processors and are contractually bound to handle your data only in accordance with vin388's instructions and applicable data protection standards.

vin388 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of personal data collected and the primary purpose for which each category is used.

vin388 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when creating your vin388 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the vin388 platform, including through cookies, server logs, and similar tracking technologies.
• Third-party sources: Identity and fraud-risk information received from authorised third-party identity verification services, payment processors (including JazzCash and EasyPaisa), and credit reference or AML screening agencies as part of our regulatory compliance obligations.
• KYC documentation: Documents submitted during account verification that may contain identity, address, and financial information as required by our licensing obligations.

Where vin388 collects data from third-party sources, we will inform you of this at the time of collection or as soon as reasonably practicable thereafter, unless doing so would compromise a fraud prevention or regulatory investigation.

vin388 processes your personal data only where a lawful basis exists for doing so. The following sets out the primary purposes for which we process your data and the corresponding lawful basis for each:

• Account creation and management — necessary for the performance of the contract between you and vin388 as established by accepting the Terms & Conditions.
• Processing deposits and withdrawals — necessary for the performance of the contract, and for compliance with anti-money laundering legal obligations.
• KYC and identity verification — necessary for compliance with our international gaming licence obligations and applicable anti-money laundering regulations.
• Fraud detection and platform security — based on vin388's legitimate interests in protecting the integrity of the platform and the interests of all players.
• Responsible gaming monitoring — based on our legitimate interests and legal obligations to protect vulnerable players, including enforcing the 21+ age policy.
• Customer support — necessary for the performance of the contract and based on our legitimate interest in resolving player disputes and complaints efficiently.
• Marketing communications — based on your explicit consent, where you have opted in to receive promotional communications from vin388. You may withdraw this consent at any time.
• Platform analytics and improvement — based on vin388's legitimate interests in improving the player experience and the performance of the platform.
• Legal compliance and regulatory reporting — necessary for compliance with applicable laws and our licensing obligations, including reporting obligations to gaming regulators and financial intelligence authorities.

vin388 does not sell your personal data. We share personal data only in the following limited and defined circumstances:

• Payment processors: We share necessary financial and identity data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network operators solely for the purpose of processing your transactions. These providers are bound by strict data processing agreements and applicable financial regulations.
• Identity verification services: We share identity data with licensed third-party KYC and AML service providers as required by our gaming licence obligations. These providers process data only for verification purposes.
• Game software providers: Certified game studios and software providers may receive limited technical and gameplay data necessary to operate and maintain the games you play on vin388. These providers do not receive your full personal profile.
• Regulatory authorities: We are legally obligated to share certain player data with our gaming regulator, financial intelligence units, and law enforcement agencies where required by applicable law or judicial order.
• Group entities: Where vin388 operates as part of a group of companies, personal data may be shared within the group for purposes consistent with this Policy and subject to equivalent data protection standards.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of vin388's business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and any change to this Privacy Policy that results from it.

vin388 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain your account in an active or dormant state, and to comply with our legal, regulatory, and licensing obligations.

In general, the following retention principles apply:

• Account and identity data is retained for the duration of your vin388 account plus a minimum of five (5) years after account closure, as required by our anti-money laundering compliance obligations.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction in compliance with applicable financial regulations.
• KYC documentation is retained for the period required by our gaming licence and applicable AML regulations, which is generally a minimum of five (5) years from the date of last account activity.
• Customer support communications are retained for up to three (3) years to support dispute resolution and quality assurance processes.
• Marketing consent records are retained for as long as you remain a registered vin388 player and for a reasonable period thereafter to demonstrate compliance with consent obligations.

When personal data is no longer required and no legal or regulatory obligation requires its continued retention, vin388 will securely delete or anonymise the data in a manner that prevents reconstruction of the original personal information.

vin388 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and vin388 servers.
• AES-256 encryption for sensitive data stored at rest in our databases, including financial records and identity documents.
• Two-factor authentication (2FA) via SMS OTP for account login, providing an additional layer of protection beyond your password.
• Role-based access controls ensuring that vin388 staff can only access the player data required to perform their specific job functions.
• Regular penetration testing and security audits conducted by independent cybersecurity firms to identify and remediate vulnerabilities.
• Fraud detection systems that monitor account activity in real time for patterns indicative of unauthorised access, identity fraud, or financial crime.

While vin388 takes all reasonable measures to protect your data, no online system can guarantee absolute security. In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, vin388 will notify you and the relevant regulatory authorities as required by applicable law.

vin388 uses cookies and similar tracking technologies (including session tokens, local storage, and analytics pixels) to operate the platform, remember your preferences, maintain your login session, detect fraud, and analyse platform usage. The following categories of cookies are used on vin388.net:

• Strictly necessary cookies: Required for the vin388 platform to function. These include session management cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, default game views, and responsible gaming tool configurations. These improve your vin388 experience but are not essential to platform operation.
• Analytics cookies: Collect aggregated, anonymised data about how players use vin388 — which pages are visited, how long is spent on each section, and which features are most used. This data is used to improve the platform. vin388 uses privacy-respecting analytics tools and does not share raw analytics data with third parties for advertising purposes.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, protect player accounts, and enforce platform integrity.

You can manage cookie preferences through your browser settings. Please note that disabling certain categories of cookies may affect the functionality of the vin388 platform. Instructions for managing cookies are available in your browser's help documentation.

As an internationally licensed operator, vin388 may process and store your personal data on servers located outside of Pakistan. Where personal data is transferred to jurisdictions outside of Pakistan, vin388 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to applicable data protection principles.

Such safeguards include contractual data protection clauses with the receiving entities (such as standard contractual clauses), ensuring the recipient jurisdiction has adequate data protection laws in place, or relying on the legitimate interests of vin388 and the player in maintaining the operational integrity of the platform.

Specifically, payment processors such as JazzCash and EasyPaisa operate under Pakistani regulatory frameworks and process data within Pakistan. Where other service providers operate internationally, vin388 has entered into data processing agreements that require equivalent data protection standards to be maintained.

As a vin388 player, you hold the following rights in relation to your personal data. You may exercise any of these rights by contacting vin388 support through the live chat channel or via email at [email protected]:

• Right of Access: You have the right to request a copy of the personal data vin388 holds about you. We will provide this within a reasonable timeframe, subject to identity verification.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Please notify us promptly of any changes to your contact details or other account information.
• Right to Erasure ("Right to be Forgotten"): You may request that vin388 delete your personal data. This right is subject to our legal and regulatory retention obligations — certain data categories must be retained for defined periods regardless of a deletion request.
• Right to Restriction of Processing: You may request that vin388 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being verified, or where processing is unlawful but you prefer restriction over deletion.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where it is based on vin388's legitimate interests. You also have an absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

vin388 strictly enforces a 21+ age policy across all registered accounts. The vin388 platform is not intended for, and should not be accessed by, persons under the age of 21. vin388 does not knowingly collect or process personal data from individuals under 21 years of age.

Where vin388 has reasonable grounds to believe that a person under the age of 21 has registered an account or is using the platform, we will immediately suspend the account, conduct an age verification review, and if confirmed, close the account and purge all associated personal data from our systems to the extent permitted by our regulatory obligations.

If you are a parent or guardian and believe that your child may have registered on the vin388 platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

vin388 recommends that parents and guardians use parental control tools to prevent minors from accessing online gaming platforms. Several free parental control tools are available through mobile network providers in Pakistan, including through major operators serving Karachi, Lahore, Islamabad, and Faisalabad.

vin388 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be published on vin388.net with an updated effective date.

Where changes to this Policy are material — meaning they affect your rights or the way in which your personal data is processed in a significant way — vin388 will provide advance notice to registered players via their registered contact details (email or SMS) at least 14 days before the revised Policy takes effect.

For minor, non-material changes, continued use of the vin388 platform following the publication of the updated Policy constitutes acceptance of the revised terms. We recommend reviewing this Policy periodically to remain informed about how vin388 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by vin388, please contact us through the following channels:

• 24/7 Live Chat: Available directly on the vin388.net website — the fastest channel for urgent data or privacy queries.
• Email: [email protected] — please include "Privacy Request" in your subject line for efficient routing. Responses are provided within 4 hours under normal operating conditions.

When submitting a data rights request, please include your full registered name, the email address or mobile number associated with your vin388 account, and a clear description of the request you are making. vin388 may need to verify your identity before processing your request to protect against unauthorised data access.