Privacy Policy for 388k

01 About This Policy

This Privacy Policy ("Policy") describes how 388k ("the Platform", "we", "us", "our") collects, uses, stores, and protects the personal information of individuals ("you", "your", "the Player") who register for and use the 388k online casino and sportsbook platform located at 388k.bet. This Policy applies to all services offered by 388k, including the website, any associated mobile interfaces, live chat support, email communications, and all account-related transactions.

By registering an account on 388k, making a deposit, or otherwise using our Services, you confirm that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you must not use the 388k platform.

388k is committed to handling personal data responsibly and in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. We review and update this Policy periodically; the effective date at the top of this document reflects the most recent revision.

02 Information We Collect

388k collects personal information through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from trusted third-party verification partners. The categories of personal data we collect are described below.

• Registration Data: Full legal name, date of birth, gender, residential address (including division/district within Bangladesh, e.g., Dhaka, Chittagong, Sylhet, Khulna), email address, and mobile phone number.
• Identity Verification (KYC) Documents: Copies of your national ID card, passport, or birth certificate when requested as part of our Know Your Customer process.
• Financial Data: Mobile financial service account identifiers (e.g., bKash, Nagad, Rocket, Upay numbers), bank account details for bank transfer withdrawals, deposit and withdrawal transaction history denominated in BDT.
• Support Communications: The content of messages you send to our support team via live chat or email at [email protected], including any attachments or screenshots you voluntarily share.
• Responsible Gaming Preferences: Deposit limit settings, cool-down periods, self-exclusion requests, and session time reminder preferences you configure on the platform.

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and mobile network information.
• Usage & Behavioural Data: Pages visited, session duration, games played, bet amounts, betting patterns, bonus usage, and navigation path through the platform.
• Cookie Data: Session identifiers, authentication tokens, and aggregate analytics data collected via cookies and local storage. See Section 6 (Cookies) for full details.
• Transaction Logs: Timestamps and amounts for all deposits, withdrawals, wagers, and bonus credits/debits associated with your account.

03 How We Use Your Data

388k uses the personal data it collects exclusively for legitimate operational, legal, and safety purposes connected with the delivery of the platform's services to Bangladeshi players. We do not use your data for purposes that are incompatible with those for which it was originally collected. The specific purposes for which we process your data are set out below.

• Account Management: To create, maintain, and administer your 388k player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
• Payment Processing: To facilitate deposits and withdrawals in BDT via your chosen payment method (bKash, Nagad, Rocket, Upay, or bank transfer), to reconcile transactions, and to investigate any disputed payments.
• Legal & Regulatory Compliance: To meet our obligations under applicable anti-money laundering (AML), Know Your Customer (KYC), and counter-terrorist financing (CTF) requirements, including verifying the identity and age of all registered players.
• Fraud Detection & Platform Security: To monitor account activity, detect unusual betting patterns, identify duplicate accounts, prevent bonus abuse, and protect the platform and its players from fraudulent or harmful activity.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via our 24/7 live chat and email support channels.
• Responsible Gaming: To implement and enforce the responsible gaming tools you have activated on your account, including deposit limits, cool-down periods, and self-exclusion, and to monitor for signs of problem gambling behaviour.
• Platform Improvement: To analyse aggregate, anonymised usage data to improve platform performance, user experience, game selection, and payment flows.
• Communications: To send you transactional communications (account confirmations, deposit receipts, withdrawal notifications), and where you have opted in, promotional communications about relevant 388k offers and seasonal promotions (e.g., BPL, Eid, Pohela Boishakh specials).

04 Legal Basis for Processing

388k processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

Where 388k relies on your consent as the legal basis for processing (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

05 Sharing Your Information

388k does not sell, rent, or share your personal data with third parties for their own marketing purposes. Personal data may be disclosed to the following limited categories of recipient where strictly necessary for the operation of the platform:

In order to process your deposits and withdrawals in BDT, 388k shares the minimum necessary financial data with your chosen payment provider (bKash, Nagad, Rocket, Upay, Dutch-Bangla Bank, City Bank, or BRAC Bank). These providers process your payment data under their own privacy policies and security frameworks. 388k does not retain your full mobile financial service PIN or bank login credentials.

388k may use third-party identity verification service providers to assist with KYC checks. These partners receive only the document images and personal details required to confirm your identity and age. They are contractually prohibited from using your data for any other purpose.

Games on the 388k platform are supplied by third-party studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These studios may receive anonymised session identifiers to power game functionality and detect game-level fraud. They do not receive your name, contact details, or payment information.

388k may disclose personal data to law enforcement agencies, regulatory bodies, or other competent authorities where required by law or where disclosure is necessary to protect the rights, safety, or property of 388k, its players, or the public. We will inform you of any such disclosure where legally permitted to do so.

In the event of a merger, acquisition, or sale of all or a material portion of 388k's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed before the transfer takes effect.

06 Cookies & Tracking Technologies

388k uses cookies and similar local storage technologies to operate the platform securely and to understand how players use our services so we can improve them. This section explains the types of cookies we use and how you can manage them.

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your preferences and actions over time, distinguish you from other users, and deliver a consistent, personalised experience across sessions. Cookies do not contain executable code and cannot access other data on your device.

You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive alerts when new cookies are set. Please note that disabling strictly necessary cookies will prevent you from logging in to or using the 388k platform. Disabling analytics cookies will not affect your ability to use any feature of the platform but will limit our ability to improve the service based on usage patterns.

388k does not use third-party advertising cookies, cross-site tracking pixels, or social media tracking scripts. Your browsing activity on 388k is not shared with any advertising networks or social media platforms.

07 Data Retention

388k retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following retention periods apply to the main categories of personal data we hold:

When your personal data is no longer required for the purposes for which it was collected, 388k will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data (from which you can no longer be identified) may be retained indefinitely for aggregate statistical analysis and platform improvement purposes.

If you close your 388k account voluntarily, your personal data will be retained for the periods described above. You will not be able to reactivate the same account after deletion, but a new account may be opened subject to the eligibility criteria in our Terms & Conditions.

08 Your Rights & Choices

As a registered 388k player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact our support team via live chat or in writing at [email protected]. We will respond to all verified requests within 30 calendar days.

• Right of Access: You have the right to request a copy of the personal data 388k holds about you. We will provide this in a commonly used electronic format (e.g., PDF or CSV) at no charge for standard requests.
• Right to Rectification: If any of the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You may also update certain details (such as your email address or phone number) directly through your account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where the data has been processed unlawfully. Note that we may not be able to fulfil erasure requests where retention is required by law (e.g., AML/KYC records).
• Right to Restriction: You may ask us to restrict the processing of your personal data in certain circumstances — for example, while a correction request is being verified or while you contest the legal basis for processing.
• Right to Data Portability: Where we process your data on the basis of your consent or contractual necessity, and where processing is automated, you have the right to receive your data in a structured, machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, including profiling for fraud detection. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where you have given consent as the basis for processing (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

09 Data Security

388k implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our primary security controls include:

• All data in transit between your browser or device and 388k servers is encrypted using 256-bit SSL/TLS protocols. The platform enforces HTTPS exclusively — unencrypted HTTP connections are not permitted.
• Sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 encryption within our secured server infrastructure.
• Access to personal data is restricted on a strict need-to-know basis. Internal staff access is controlled through role-based access management, multi-factor authentication, and activity logging.
• 388k's platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Our fraud detection systems monitor account activity in real time, with automated alerts triggered by unusual login locations, abnormal betting patterns, or multiple rapid deposit/withdrawal cycles.
• 388k maintains an incident response plan. In the event of a data breach that presents a risk to players, affected individuals will be notified promptly with details of what happened, what data was involved, and what steps are being taken to address it.

While 388k takes every reasonable step to secure your personal data, no online platform can guarantee absolute security. You are also responsible for keeping your account credentials (username and password) confidential. Do not share your password with anyone, including individuals claiming to represent 388k — we will never ask for your password. If you suspect your account has been compromised, contact our 24/7 support team immediately via live chat or at [email protected].

10 Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data 388k holds about you, please contact our support team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.

When submitting a privacy enquiry or data rights request by email, please include your registered 388k username and the email address associated with your account so we can verify your identity and locate your records promptly. Do not include your password or full financial account numbers in any email communication.

388k reserves the right to amend this Privacy Policy at any time. Material changes — those that significantly affect your rights or the way we use your data — will be communicated to you via a notice on the platform or by email to your registered address at least 14 days before the changes take effect. Your continued use of the 388k platform after any such notice period constitutes your acceptance of the updated Privacy Policy.

If you are not satisfied with the way 388k has handled your personal data or responded to a privacy request, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction. Players based in Bangladesh may contact the Bangladesh Telecommunication Regulatory Commission (BTRC) or seek independent legal advice on their data protection rights.