3patti Privacy Policy

Who We Are & Scope of This Policy

This Privacy Policy is issued by 3patti, the operating entity behind the online gaming platform accessible at https://3patti.buzz ("the Platform"), which holds an international gaming license. In this document, "3patti," "we," "us," and "our" refer to the same licensed operating entity.

This Policy applies to all personal data collected, processed, stored, or transmitted in connection with your use of the 3patti platform, whether you access it via desktop browser, mobile browser, or any other interface. It covers data collected during the account registration process, during gameplay, during financial transactions in PKR, and during interactions with our customer support team.

This Policy should be read alongside the 3patti Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference into the overall framework governing your relationship with 3patti. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy.

Data We Collect

3patti collects personal data across several categories, depending on how you interact with the platform. The following table sets out the categories of data we collect, along with the primary source of that data:

2.1 Data We Do Not Collect

3patti does not collect sensitive personal data beyond what is strictly required for identity verification and anti-money laundering compliance. We do not collect racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data, or health data beyond what may be voluntarily disclosed in a responsible gaming context. We do not collect full payment card numbers — card payment processing is handled entirely by PCI-DSS certified third-party payment processors who do not share full card data with 3patti.

How We Use Your Data

3patti uses personal data for the specific, defined purposes set out below. Data is never used for purposes that are incompatible with those for which it was originally collected.

3.1 Account Operation & Service Delivery

Your identity data, contact data, and account activity data are used to create and maintain your 3patti account, authenticate your logins, display your PKR balance, process your bets and game results, and deliver customer support. This is the primary purpose for which data is collected and is a necessary condition of the service.

3.2 Financial Transactions & AML Compliance

Financial data — including JazzCash and EasyPaisa transaction references, bank transfer details, and PKR deposit and withdrawal records — is used to process your cashier transactions, verify that deposits and withdrawals are routed to verified payment methods registered in your name, and comply with anti-money laundering (AML) and counter-financing of terrorism (CFT) obligations under 3patti's international gaming license. This processing is a mandatory legal obligation and cannot be opted out of.

3.3 Identity Verification (KYC)

Identity data including your full name, date of birth, and government-issued identification is processed to verify your eligibility to hold a 3patti account — including verification that you meet the 21+ age requirement — and to fulfil the Know Your Customer requirements of 3patti's gaming license.

3.4 Responsible Gaming

Account activity data — including session frequency, bet volumes, loss patterns, and self-exclusion records — is processed to support 3patti's responsible gaming programme. This includes monitoring for indicators of problem gambling and triggering responsible gaming interventions where appropriate. This processing is carried out in your vital interest and as a licensing requirement.

3.5 Platform Security & Fraud Prevention

Technical data including IP addresses, device fingerprints, and login patterns is used to detect and prevent fraudulent activity, unauthorised account access, duplicate account registration, bot usage, and other forms of platform abuse. This is a legitimate interest of both 3patti and its user community.

3.6 Marketing Communications

With your explicit consent, 3patti may use your contact data (mobile number and email address) to send you promotional offers, bonus notifications, and platform news relevant to your account. You can withdraw consent for marketing communications at any time via your account settings or by contacting support. Withdrawal of marketing consent does not affect the lawfulness of communications sent prior to withdrawal.

Legal Basis for Processing

3patti processes your personal data on the following legal bases, consistent with internationally recognised data protection principles:

• Contract Performance: Processing your identity, contact, and financial data is necessary to perform the contract between you and 3patti — i.e., to operate your account and deliver gaming and betting services.
• Legal Obligation: AML/CFT transaction monitoring, KYC identity verification, and the retention of certain financial records are required by 3patti's gaming license and applicable law. This processing cannot be avoided.
• Legitimate Interests: Platform security, fraud prevention, responsible gaming monitoring, and internal analytics are carried out on the basis of 3patti's legitimate interests, provided those interests are not overridden by your rights.
• Consent: Marketing communications are sent only on the basis of your explicit, freely given consent. You may withdraw this consent at any time with immediate effect.
• Vital Interests: In certain responsible gaming contexts — specifically where there is a risk of serious self-harm related to gambling — 3patti may process relevant data on the basis of protecting your vital interests.

Data Sharing & Third Parties

3patti does not sell, rent, or trade your personal data to any third party. Data may be shared with carefully selected third parties only in the following specific circumstances:

5.1 Payment Service Providers

Transaction data is shared with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payment processors solely to the extent necessary to process your deposit and withdrawal instructions. These providers operate under their own privacy policies and are subject to their own regulatory obligations regarding the handling of financial data.

5.2 Identity Verification Partners

In order to fulfil KYC obligations, 3patti may share identity data with approved third-party identity verification service providers. These providers are contractually bound to handle your data only for the specified verification purpose and to apply equivalent data protection standards.

5.3 Live Casino & Game Providers

Where you play live dealer games or third-party slot titles, limited account session data may be passed to the relevant game provider to operate the game session. Game providers do not receive your full identity data, financial data, or contact information.

5.4 Regulatory & Law Enforcement Authorities

3patti is required by its international gaming license to cooperate with regulatory authorities and, where legally compelled, with law enforcement agencies. In such cases, 3patti may be required to disclose account data, transaction records, or communications data without prior notice to the user.

5.5 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of 3patti's business, user data may be transferred to the acquiring entity. Users will be notified of any such transfer and the applicable privacy commitments of the successor entity.

Cookies & Tracking Technologies

3patti uses cookies and similar tracking technologies on the platform to deliver a functional, personalised, and secure user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in, security tokens that protect against CSRF attacks, and cookies that store your language and currency preferences. These cannot be disabled.
• Functional Cookies: Used to remember your game preferences, last-played titles, and responsible gaming settings across sessions. These improve your experience but are not strictly required for basic platform operation.
• Analytics Cookies: Used internally by 3patti to understand how users navigate the platform, which games and features are most used, and where usability issues may exist. Analytics data is aggregated and anonymised where possible.
• Security Cookies: Used to detect suspicious login activity, multiple account registration attempts from the same device, and other fraud signals. These are a necessary component of the platform's security infrastructure.

You can manage non-essential cookies via your browser settings. Please note that disabling functional or analytics cookies may affect the quality of your experience on the 3patti platform but will not prevent you from accessing core gaming features.

Data Retention

3patti retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and licensing obligations. The following general retention principles apply:

• Account Data: Retained for the lifetime of your active account, plus a period of five (5) years following account closure, in order to comply with AML record-keeping requirements under 3patti's gaming license.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with standard AML/CFT regulatory requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or from the date of account closure, whichever is later.
• Customer Support Interactions: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance processes.
• Marketing Consent Records: Retained for the duration of consent plus three (3) years, to demonstrate the lawfulness of marketing communications sent during the consent period.
• Technical Logs: Retained for twelve (12) months, unless extended as part of a specific fraud investigation or regulatory inquiry.

When data is no longer required to be retained, it is securely deleted or anonymised in accordance with 3patti's data disposal procedures.

Security Measures

3patti implements technical and organisational security measures appropriate to the nature of the data processed and the risks associated with operating an online gaming platform. Key measures include:

• TLS/SSL Encryption: All data in transit between your device and the 3patti platform is encrypted using TLS 1.2 or higher. This protects your login credentials, session data, and PKR transaction details from interception.
• Password Hashing: Account passwords are stored as irreversible cryptographic hashes using industry-standard algorithms. 3patti staff cannot see or retrieve your password in plain text.
• Two-Factor Authentication: OTP-based verification is available on the 3patti platform for added account security. Players are encouraged to enable this feature.
• Access Controls: Access to personal data within 3patti's systems is restricted on a strict need-to-know basis. Staff access is logged, audited, and subject to regular review.
• Segregated Data Storage: Player financial data and identity data are stored in segregated, access-controlled environments with additional encryption at rest.
• Intrusion Detection: 3patti operates continuous monitoring systems to detect and respond to unauthorised access attempts, abnormal data access patterns, and potential security incidents.
• Third-Party Security Audits: 3patti undergoes periodic independent security assessments as part of its licensing and certification obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 3patti will notify affected users and the relevant regulatory authority within the timeframes required by applicable obligations. You will be contacted via the email address or mobile number registered to your account.

Your Rights

Subject to applicable law and certain conditions or limitations, you have the following rights in relation to your personal data held by 3patti. You may exercise any of these rights by contacting the 3patti support team at the details provided in Section 12.

To exercise any of these rights, contact the 3patti data team via the support email listed in Section 12. We will acknowledge your request within 72 hours and respond fully within 30 calendar days. We may require identity verification before actioning your request to protect against fraudulent data access claims.

Children & Minors

The 3patti platform is strictly for individuals aged 21 years and above. 3patti does not knowingly collect personal data from anyone under the age of 21. Age verification is an active part of the registration and KYC process, and accounts confirmed to belong to individuals under this age are closed immediately.

If you believe that a person under the age of 21 has registered an account on the 3patti platform or that their data has been inadvertently collected, please contact us immediately at the details provided in Section 12. Upon receipt of a substantiated report, 3patti will promptly close the relevant account, cease processing any data relating to the minor, and take appropriate steps under its licensing and legal obligations.

Parents and guardians who are concerned about underage access to online gaming platforms are encouraged to use internet filtering tools and to visit the Responsible Gaming page for guidance on parental controls and prevention resources.

Policy Updates

3patti reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing requirements. The date of the most recent revision is displayed prominently at the top of this document. Where changes are material — meaning they affect how your data is used in a way that is significantly different from what was previously disclosed — we will notify registered users via the email address or mobile number on file.

Continued use of the 3patti platform following the posting of an updated Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree to any material change, you should cease using the platform and request account closure in accordance with the Terms & Conditions.

You can view the full history of material changes to this Privacy Policy by contacting support and requesting a dated list of amendments. This service is provided to ensure full transparency regarding how 3patti's data handling practices have evolved over time.

Contact & Complaints

12.1 How to Contact Us

For all privacy-related inquiries, data subject rights requests, or questions about how 3patti handles your personal data, please contact the 3patti Data Protection team:

Email: [email protected]
Subject Line: Privacy Inquiry or Data Rights Request

Our support team is available 24 hours a day, 7 days a week. We aim to respond to all privacy inquiries within 72 hours, and to fulfil data rights requests within 30 calendar days.

12.2 How to Lodge a Complaint

If you believe that 3patti has processed your personal data in breach of applicable data protection principles, you have the right to lodge a complaint. We strongly encourage you to raise any concerns with our support team first so that we have the opportunity to investigate and resolve the matter directly with you.

If you remain dissatisfied following our internal response, you may escalate the complaint to the relevant regulatory authority under 3patti's gaming license. Details of the appropriate regulatory contact for data protection complaints will be provided to you upon request.

3patti treats all complaints seriously and will cooperate fully with any regulatory investigation into its data handling practices.