Privacy Policy

This Privacy Policy ("Policy") is issued by vin388, operated under the domain vin388.cam ("Platform", "we", "us", "our"). It sets out how we collect, use, disclose, store and protect personal data relating to users ("you", "User", "Player") of the vin388 Platform, in accordance with applicable data protection principles and the operator's privacy framework.

vin388 is an English-language online casino and sports betting information platform serving users including those located in Pakistan. Our platform provides educational content, betting market access, live casino games and related entertainment services. In the course of providing these services, we necessarily process certain personal data about registered users and platform visitors.

This Policy applies to all personal data collected through vin388.cam, including data submitted during account registration, deposited via the cashier, shared with support teams or collected automatically through your use of the Platform. It does not apply to third-party websites or services that may be linked to or from the Platform.

The following definitions apply throughout this Privacy Policy:

vin388 collects two broad categories of personal data: data you provide directly to us, and data collected automatically through your use of the Platform.

Data you provide directly:

• Full legal name, date of birth and nationality — collected at account registration and KYC verification;
• Residential address — required for identity verification and compliance purposes;
• Email address and, where provided, a contact phone number — used for account communications and security notifications;
• Government-issued identification documents, such as a Pakistani CNIC or Passport — required to complete KYC verification before withdrawal processing;
• Payment method details — bank account reference numbers, mobile wallet identifiers (such as those associated with Easypaisa or JazzCash accounts) or cryptocurrency wallet addresses, used exclusively for processing deposits and withdrawals. We do not store full payment card numbers on our servers;
• Communications submitted to support teams via live chat or email — retained for quality assurance and dispute resolution purposes.

Data collected automatically:

• IP address and approximate geographic location at time of access;
• Device type, operating system and browser version;
• Session duration, pages visited, features accessed and navigation patterns within the Platform;
• Login timestamps and session activity logs — retained for security monitoring and fraud prevention;
• Cookie and similar tracking technology data, as described in Section 10.

Personal data is collected through the following mechanisms:

vin388 processes personal data for the following specific and legitimate purposes:

• Account Administration: Creating and maintaining your registered account, processing login sessions and managing account security settings;
• Identity Verification (KYC): Verifying that you meet the minimum age and eligibility requirements and confirming your identity in accordance with operator compliance obligations;
• Transaction Processing: Processing deposits, withdrawals and bonus credits in PKR or equivalent currency, and maintaining accurate transaction records;
• Fraud Prevention & Security: Detecting suspicious activity, preventing unauthorised account access, investigating potential fraud and complying with anti-money laundering (AML) obligations;
• Responsible Gambling: Monitoring account activity to identify patterns indicative of problem gambling, administering self-exclusion requests and applying player protection measures;
• Customer Support: Responding to account queries, resolving disputes and investigating formal complaints;
• Legal & Regulatory Compliance: Meeting obligations imposed by the operator's applicable gaming licence and any mandatory reporting requirements;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, user experience and content relevance;
• Marketing Communications: Sending promotional offers and relevant account communications to users who have opted in to such messaging. You may unsubscribe at any time via your account settings or by contacting support.

vin388 will not process your personal data for any purpose incompatible with those listed above without seeking your prior consent or without a valid legal basis for doing so.

The processing of personal data by vin388 is carried out under one or more of the following legal bases:

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal.

vin388 does not sell personal data to third parties. We may share personal data with the following categories of recipients, strictly for the purposes described:

• Payment Processors: Third-party payment service providers who process deposit and withdrawal transactions on our behalf. These processors act as data processors under contractual obligations and are bound by appropriate data protection terms;
• KYC & Identity Verification Providers: Third-party identity verification services used to validate documentation submitted during the KYC process. Such providers process identification data under confidentiality and data protection agreements;
• Game Content Providers: Game studios and sports data suppliers who provide game content and odds data may receive anonymised session identifiers necessary for game delivery. These providers do not receive personally identifiable information beyond what is operationally required;
• Regulatory & Legal Authorities: Where required by applicable law, gaming regulation or a valid legal order, we may be obligated to disclose personal data to regulatory bodies, law enforcement or courts. We will inform you of such disclosures where legally permitted to do so;
• Anti-Fraud & AML Screening Services: Third-party services used for risk scoring and transaction monitoring in connection with our AML obligations;
• Professional Advisers: Legal counsel, auditors and other professional advisers engaged by the operator, subject to professional confidentiality obligations.

vin388 is an internationally operated Platform. Personal data collected from users — including those in Pakistan — may be transferred to, stored in or processed in jurisdictions outside the user's country of residence, including the jurisdiction in which the operator holds its gaming licence.

Where personal data is transferred internationally, the operator takes reasonable steps to ensure that appropriate safeguards are in place to protect the data in accordance with applicable data protection standards. These safeguards may include:

• Contractual clauses binding the recipient to data protection obligations equivalent to those applied by vin388;
• Transfers to jurisdictions recognised as providing an adequate level of data protection under applicable frameworks;
• Technical and organisational security measures applied to data in transit and at rest.

By using the vin388 Platform and submitting personal data, you acknowledge that your data may be transferred internationally as described in this section.

vin388 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected or to satisfy applicable legal and regulatory requirements. The following general retention principles apply:

At the end of the applicable retention period, personal data is either permanently deleted or anonymised such that it can no longer be linked to an identifiable individual.

vin388 uses cookies and similar technologies — including session tokens, local storage and analytics identifiers — to operate the Platform and deliver a consistent user experience. The categories of cookies used are described below:

Non-essential cookies are only placed on your device with your consent, which you may provide or withdraw through your browser settings or the Platform's cookie management tool. Blocking strictly necessary cookies will impair or prevent basic Platform functionality including login sessions.

Most browsers allow you to refuse, delete or manage cookies through the browser's settings panel. Instructions for managing cookies in common browsers are available through the browser provider's help documentation.

Subject to applicable data protection law and the operator's legitimate interests, you have the following rights with respect to your personal data held by vin388:

To exercise any of the above rights, contact the vin388 support team using the details in Section 15. We will respond to all verifiable data subject requests within a reasonable timeframe, typically within thirty (30) days of receipt of a complete request. We may require identity verification before processing requests relating to personal data access or deletion.

vin388 implements appropriate technical and organisational measures to protect personal data from accidental loss, unauthorised access, disclosure, alteration or destruction. These measures include, but are not limited to:

• Encryption of data in transit using industry-standard TLS protocols;
• Encryption of sensitive data fields at rest on secure servers;
• Access controls limiting internal access to personal data on a need-to-know basis, with documented access logs;
• Password hashing using cryptographic functions — plaintext passwords are not stored;
• Regular security reviews of infrastructure and application-level vulnerabilities;
• Incident response procedures for identifying, containing and reporting data breaches in accordance with applicable notification obligations.

While we take reasonable steps to protect your personal data, no system of data transmission or storage is entirely immune from interception or unauthorised access. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect that your account has been compromised.

We do not knowingly collect personal data from individuals under the age of 18. During account registration and KYC verification, we take steps to verify that users meet the minimum age requirement. Where we become aware or have reasonable grounds to believe that a user is under the minimum age, we will suspend the account, investigate the matter and, where confirmed, permanently close the account and return any real-money deposits less any applicable fees, in accordance with operator policy.

If you are a parent or guardian and believe that your minor child has created an account on vin388 without your knowledge, please contact our support team immediately using the contact details in Section 15. We will investigate and take appropriate action promptly.

vin388 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When material changes are made, we will notify registered users via email or through a prominent notice on the Platform prior to the changes taking effect.

The date at which the Policy was last reviewed is displayed at the top of this page. We encourage you to review this Policy periodically to remain informed about how we handle your personal data. Continued use of the Platform following notification of amended terms constitutes acceptance of the revised Policy.

If you disagree with any amendments to this Policy, you are entitled to close your account and request deletion of your data subject to applicable retention obligations. Please contact support to initiate an account closure request.

For any questions relating to this Privacy Policy, to exercise your data subject rights, or to submit a formal data request, please contact the vin388 support team through the channels below. Email addresses are provided as plain text — please type them directly into your email client. No clickable links are provided for security purposes.

When submitting a data access, rectification or erasure request, please include your registered username, the email address associated with your account and a clear description of the request. We may require identity verification before processing requests that involve access to or deletion of account data.