3patt Privacy Policy – How We Handle Your Data

1Who We Are

This Privacy Policy applies to the 3patt online gaming platform, accessible at 3patt.biz, and any associated services, mobile-optimised pages, or applications operated under the 3patt brand. When we say "3patt", "we", "our" or "us" in this document, we mean the entity responsible for operating the 3patt platform.

3patt is a gaming and sports betting platform built specifically for Pakistani players. The platform is operated in the Pakistani market with all transactions denominated in Pakistani Rupees (PKR). This Privacy Policy is written in English in accordance with our platform language, and it is intended to be read and understood by players in Pakistan.

As the operator of 3patt, we act as the data controller for all personal information collected through the platform. This means we determine what data is collected, why it is collected, and how it is processed. We take those responsibilities seriously and this policy explains exactly how we fulfil them.

2Data We Collect

3patt collects only the personal information we genuinely need to operate your account, process your transactions, and comply with our legal obligations. The table below gives a clear breakdown of the categories of data we collect and what they are used for:

We do not collect sensitive personal data such as biometric identifiers, religious beliefs, or medical information. We do not collect location data beyond the country-level identification provided by your IP address.

3How We Use Your Data

Personal data collected by 3patt is used for the following specific purposes. We do not use your data for any purpose not listed here without first obtaining your consent or having a valid legal basis to do so.

• Account creation and management: Processing your registration, verifying your identity and age, maintaining your account settings, and providing access to all 3patt services in PKR.
• Payment processing: Facilitating PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, and card payments. Confirming that payments come from accounts registered in your name.
• Fraud prevention and security: Using technical data including IP addresses and device fingerprints to detect unusual account activity, unauthorised login attempts, and patterns consistent with fraud or bonus abuse.
• Responsible gaming monitoring: Analysing your gaming activity data to identify potential signs of problem gambling and, where appropriate, triggering responsible gaming interventions as described in our Responsible Gaming Policy.
• Customer support: Using your account and activity data to help our support team resolve queries, disputes, and complaints quickly and accurately.
• Legal and regulatory compliance: Retaining records to meet our obligations under applicable laws and to respond to lawful requests from regulatory or law enforcement authorities.
• Marketing communications (with consent only): Sending promotional SMS, email, or push notifications about bonuses, new games, and offers. You only receive these if you opted in, and you can withdraw consent at any time.
• Platform improvement: Using anonymised, aggregated technical data to understand how players use 3patt, identify performance issues, and improve the user experience. This data cannot be linked back to any individual player.

4Legal Basis for Processing

Every processing activity at 3patt is grounded in one of the following legal bases:

• Contract performance: Processing your identity, contact, and payment data is necessary to provide the services you signed up for. Without this data we cannot operate your account or process your PKR transactions.
• Legal obligation: Retaining identity verification and financial transaction records is required by applicable Pakistani law and any other regulations that apply to our operations. We cannot waive these obligations at a player's request.
• Legitimate interests: Processing technical data for fraud prevention and security protects both you and the integrity of the platform. We have assessed that this does not override your rights and freedoms.
• Consent: Marketing communications, optional personalisation features, and non-essential cookies are processed only where you have given clear, informed, and freely withdrawable consent.

5Who We Share Your Data With

3patt does not sell, rent, or trade your personal data. We share data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners receive only the minimum data required to complete your PKR transactions. These partners operate under their own privacy policies and are contractually obligated to protect your data.
• Identity verification services: Third-party KYC providers may receive identity data to perform age and identity verification checks. All KYC partners are contractually bound to use the data solely for verification purposes and to delete it once the check is complete.
• Game software providers: Some 3patt games are powered by licensed third-party software. These providers may receive anonymised session data for technical operation of the game but do not receive your identity or payment information.
• Cloud infrastructure providers: 3patt uses secure cloud infrastructure to host and operate the platform. Our infrastructure providers access data only as instructed by 3patt and are bound by strict data processing agreements.
• Regulatory and law enforcement authorities: We may disclose personal data to Pakistani regulatory bodies, law enforcement agencies, or courts when required to do so by law or valid legal process. We will notify you of such requests where we are legally permitted to do so.
• Fraud prevention networks: We may share anonymised or pseudonymised fraud signals with industry fraud prevention networks to protect players across the gaming industry. No directly identifiable personal data is shared in this context.

We do not share data with advertising networks, data brokers, social media platforms, or any other third party for purposes unrelated to running your 3patt account.

6Cookies & Tracking Technologies

3patt uses cookies and similar technologies to make the platform work, improve your experience, and – where you have consented – to understand how players use the site. The table below explains the types of cookies we use:

* The toggles above are illustrative of 3patt's cookie preference interface available in your account settings. Changes made here do not affect your actual cookie preferences on this browser session.

You can manage cookie preferences at any time through your browser settings or through the cookie preference centre in your 3patt account settings. Note that disabling performance or preference cookies may affect some features of the platform.

7Data Security

3patt applies industry-standard security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• TLS 1.3 encryption in transit: All data transmitted between your device and 3patt servers is encrypted. The padlock in your browser's address bar confirms an active encrypted connection.
• Encryption at rest: Sensitive stored data – including identity documents and payment reference numbers – is encrypted using AES-256. Access is restricted to authorised personnel only.
• Two-factor authentication: All player accounts support two-factor authentication via SMS OTP to your registered Pakistani mobile number. We strongly recommend enabling this in your account settings.
• Access controls: Internal access to player data is granted on a strict need-to-know basis. Staff access is logged, audited, and regularly reviewed. Former employees lose access immediately upon departure.
• Vulnerability management: The 3patt platform is tested regularly for security vulnerabilities. Critical patches are applied as a priority. Third-party software components are monitored for known vulnerabilities.
• Incident response: In the event of a data breach that affects your rights and freedoms, 3patt will notify affected players as quickly as possible and report to relevant authorities as required by applicable law.

8Data Retention

3patt retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law.

• Active accounts: All account data is retained for the duration of the account relationship. You can request deletion of marketing preferences and non-essential profile data at any time.
• Closed accounts: Following account closure, identity and financial transaction records are retained for five years to meet regulatory compliance requirements. After five years, data is permanently and securely deleted.
• Self-excluded accounts: If you request self-exclusion, your account data is retained to prevent re-registration during the exclusion period. After the exclusion period ends and the account is permanently closed, the standard five-year retention applies.
• Marketing data: If you withdraw consent for marketing communications, we will remove your details from active marketing lists within 10 business days. A suppression record is retained to ensure we do not accidentally add you back.
• Technical logs: Server and security logs are retained for 12 months and then automatically deleted. Anonymised aggregated analytics data has no fixed deletion schedule as it cannot be linked to any individual.

9Your Data Rights

As a 3patt player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@3patt.biz with the subject line "Data Rights Request". We will respond within 30 days.

10Children's Privacy

3patt is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a minor has registered an account, we will close that account immediately, return any deposited funds to the originating payment method, and permanently delete the associated personal data.

If you are a parent or guardian and believe your child has registered an account with 3patt, please contact us immediately at support@3patt.biz. We will take prompt action and keep you informed throughout the process.

We also encourage parents and guardians to use parental control software to restrict access to online gaming platforms on devices accessible to children. Our Responsible Gaming page provides further guidance on protecting younger family members.

11Changes to This Privacy Policy

3patt reviews and updates this Privacy Policy periodically to reflect changes in how we operate the platform, changes in applicable law, or in response to feedback from our players.

When we make material changes to this policy – changes that significantly affect how your data is collected, used, or shared – we will:

• Display a prominent notice on the 3patt homepage for at least 7 days before the changes take effect
• Send a notification to your registered mobile number or email address, provided you have not opted out of all communications
• Update the "Last Updated" date at the top of this page

Minor changes such as typographical corrections or clarifications that do not affect your rights will be made without prior notice. The current version of this policy is always the authoritative version and supersedes all previous versions.

Continued use of the 3patt platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not accept the changes, you should close your account before the effective date of the updated policy.

12Contact Us & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how 3patt has handled your personal data, please contact us through any of the following channels:

• Email (data requests): support@3patt.biz – subject line "Data Rights Request" or "Privacy Complaint"
• Live Chat: Available 24/7 through the chat icon on any 3patt page
• Response time: Data rights requests are handled within 30 days. General privacy queries are answered within 24 hours via live chat.

If you are not satisfied with how 3patt has handled your data or responded to your request, you have the right to raise a complaint with the relevant data protection authority in your jurisdiction.