3patta Privacy Policy

About This Privacy Policy

This Privacy Policy ("Policy") describes how 3patta ("the Company," "we," "us," "our"), the operator of the online gambling platform available at 3patta.net, collects, uses, stores, shares, and protects the personal data of individuals ("Players," "you," "your") who access or use our platform, including all casino games, sports betting markets, payment services, and customer support channels.

3patta is committed to protecting the privacy and personal data of all players, with particular attention to the context of Pakistani users who interact with our platform through mobile devices, JazzCash, EasyPaisa, and Pakistani banking channels. We recognise that personal data shared in the context of financial transactions and online gambling carries a heightened expectation of confidentiality, and we take that responsibility seriously.

This Policy must be read alongside our Terms and Conditions and our Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with 3patta. In the event of any inconsistency between this Policy and another document, this Policy shall govern in matters relating to data privacy.

If you have any questions about how 3patta handles your personal data, or if you wish to exercise any of your rights described in Section 9 of this Policy, please contact our Data Protection team at the address provided in Section 13.

Data We Collect

3patta collects personal data from you directly, automatically through your use of our platform, and in some cases from third-party verification providers. The categories of personal data we collect are described below:

3patta does not knowingly collect sensitive special-category data such as racial or ethnic origin, religious beliefs, health information, or biometric data, except where a copy of a CNIC is required for age and identity verification purposes, in which case it is used solely for that purpose and stored securely.

How We Use Your Data

3patta uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create and maintain your 3patta account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Payment Processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To fulfil our obligations under applicable anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and any reporting obligations imposed by our licensing authority.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Platform Personalisation: To tailor your 3patta experience based on your game preferences, betting history, and platform usage patterns, including displaying relevant promotions and game recommendations.
• Customer Support: To respond to your queries, resolve complaints, and maintain records of your support interactions for quality assurance and dispute resolution purposes.
• Responsible Gaming: To monitor usage patterns that may indicate problem gambling behaviour, to apply responsible gaming tools you have requested, and to communicate responsible gaming information where appropriate.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregate and anonymised usage data for the purposes of improving the 3patta platform, fixing technical issues, and developing new features.

Legal Basis for Processing

3patta processes your personal data on the basis of one or more of the following legal grounds, depending on the specific processing activity:

• Contractual Necessity: Processing that is required to fulfil the contract between you and 3patta — that is, to operate your account, process your transactions, and deliver the gambling services you have requested.
• Legal Obligation: Processing that is required to comply with applicable laws and regulations, including AML reporting obligations, KYC verification requirements, and record-keeping mandates imposed by our licensing authority.
• Legitimate Interests: Processing carried out for the legitimate interests of 3patta, including fraud detection, platform security, responsible gaming monitoring, and business analytics, where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing activities for which we have obtained your explicit, freely given, and informed consent — primarily marketing communications and the use of non-essential cookies. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Data

3patta does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, solely for the purpose of processing your deposits and withdrawals. These providers act as independent data controllers in respect of your payment data and are governed by their own privacy policies.
• Identity Verification Providers: Third-party KYC and age verification services engaged by 3patta to confirm player identity and satisfy regulatory requirements. These providers process your identity documents under strict contractual obligations of confidentiality.
• Game Software Providers: Licensed casino game developers whose software powers games available on the 3patta platform. These providers may receive anonymised session data for technical performance purposes but do not receive personally identifiable information without a separate legal basis.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order, or regulatory mandate, 3patta may disclose personal data to relevant governmental or law enforcement authorities. We will notify you of any such disclosure to the extent permitted by law.
• Fraud Prevention Agencies: Where we have reasonable grounds to suspect fraudulent activity, money laundering, or other prohibited conduct, we may share relevant data with specialist fraud prevention agencies or industry bodies to protect the integrity of the platform and the broader online gaming ecosystem in Pakistan.

All third parties with whom 3patta shares personal data are required to maintain appropriate technical and organisational security measures and to use the data solely for the specified purpose. 3patta remains responsible for the onward transfer of your personal data to third parties acting as data processors on our behalf.

Cookies & Tracking Technologies

3patta uses cookies and similar tracking technologies on our platform to enable core functionality, enhance your experience, and gather analytical insights. The categories of cookies we use are as follows:

• Essential Cookies: These cookies are strictly necessary for the platform to function. They maintain your login session, remember your language and currency preferences, and enable secure payment flows. These cookies cannot be disabled without impairing platform functionality.
• Analytical Cookies: These cookies allow us to understand how players navigate the 3patta platform, which games are most popular, and where technical errors occur. Data collected is aggregated and anonymised where possible. We use this information solely to improve the platform.
• Functional Cookies: These cookies remember your personalisation choices, such as preferred game categories and responsible gaming settings, so that you do not need to re-enter them on each visit.
• Marketing Cookies: Where you have consented, these cookies enable us to show you relevant promotional content within the 3patta platform based on your activity history. We do not use marketing cookies to track your activity on third-party websites.

You may manage your cookie preferences at any time through your browser settings. Please note that disabling essential cookies will affect your ability to use certain features of the 3patta platform. For a full list of cookies used and their retention periods, please contact our support team.

Data Security

3patta implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our key security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and 3patta's servers is encrypted using industry-standard Transport Layer Security protocols.
• Encrypted Data Storage: Sensitive data including payment credentials and identity documents is stored in encrypted form in secured database environments with strict access controls.
• Multi-Factor Authentication: Access to administrative systems containing player data requires multi-factor authentication. Player accounts are also protected by OTP-based login verification via registered Pakistani mobile numbers.
• Access Controls: Personal data is accessible only to 3patta personnel who require it to perform their specific job functions. All staff with access to personal data are subject to contractual confidentiality obligations.
• Regular Security Audits: 3patta conducts periodic security assessments and penetration testing to identify and remediate potential vulnerabilities in our systems before they can be exploited.
• Incident Response: In the event of a personal data breach, 3patta has a documented incident response procedure that includes assessment, containment, regulatory notification where required, and communication to affected players without undue delay.

Data Retention

3patta retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable regulatory, legal, and licensing obligations. Our general retention principles are as follows:

• Active Account Data: Personal data associated with an active 3patta account is retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial Transaction Records: Records of deposits, withdrawals, and wagers are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• KYC and Identity Documents: Copies of identity documents provided for age and identity verification are retained for the duration of the account relationship plus five (5) years following account closure.
• Customer Support Records: Records of support interactions are retained for three (3) years from the date of the interaction, or longer where the interaction relates to an unresolved dispute or regulatory investigation.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for as long as they remain relevant to ensure we respect your communication preferences.

When personal data is no longer required for any of the purposes described in this Policy and no legal retention obligation applies, 3patta will securely delete or anonymise it. Anonymised data that cannot be re-associated with any individual may be retained indefinitely for aggregate analytical purposes.

Your Rights

As a player on the 3patta platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact our Data Protection team using the details in Section 13. We will respond to all valid requests within 30 days of receipt.

• Right of Access: You have the right to request a copy of the personal data 3patta holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data we hold about you that is inaccurate or incomplete. You may also update certain details directly within your account settings panel.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, for example where the data is no longer necessary for the purpose for which it was collected. This right is subject to any overriding legal retention obligations described in Section 8.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while the accuracy of the data is being contested.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where it is carried out on the basis of legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

Children & Minors

The 3patta platform is strictly intended for adults aged 21 years and above. 3patta does not knowingly collect personal data from individuals under the age of 21. Our registration process includes mandatory age verification steps designed to prevent minors from creating accounts.

If 3patta becomes aware that personal data has been collected from a person under the age of 21 — whether as a result of a verification check, a third-party report, or any other means — the relevant account will be immediately suspended. All deposits will be returned to the original payment method following an anti-fraud review, and all associated personal data will be deleted from our systems as soon as is legally permissible.

If you believe that a minor may have accessed or registered on the 3patta platform, please notify us immediately at [email protected] so that we can take prompt action.

International Data Transfers

3patta operates globally and may transfer your personal data to servers or processors located outside of Pakistan in order to provide our services, including cloud hosting, identity verification, and game software provision. Where such transfers occur, 3patta ensures that appropriate safeguards are in place to protect your personal data to at least the standard required under applicable data protection principles.

Safeguards for international transfers may include contractual clauses that impose equivalent data protection obligations on the recipient, or reliance on the recipient's adherence to internationally recognised data protection frameworks. Details of the specific safeguards applicable to any particular transfer are available upon request from our Data Protection team.

Changes to This Privacy Policy

3patta reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or platform features. When material changes are made, we will notify registered players by email to the address associated with their account, or via a prominent notice displayed upon login, at least 7 days before the updated Policy takes effect — except where changes are required on shorter notice for urgent legal or regulatory compliance reasons.

The effective date at the top of this Policy will always reflect when it was last updated. We encourage you to review this page periodically to remain informed about how 3patta protects your personal data. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, or if you wish to exercise any of your data rights described in Section 9, please contact our Data Protection team through the following channel:

Email: [email protected]

Please include your registered username, a clear description of your request or concern, and any relevant reference numbers in your communication. We will acknowledge all data-related requests within 5 business days and provide a substantive response within 30 days. Where a request is particularly complex or we have received a high volume of requests, we may extend this period by a further 30 days, with prior notice to you.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority or the dispute resolution body designated by 3patta's licensing authority. Details of the applicable escalation mechanism are available on request.