3patt Privacy Policy

This Privacy Policy is issued by 3patt, the operator of the online gaming platform accessible at https://3patt.bio and any associated subdomains or applications (collectively, the "3patt Platform"). In this Policy, references to "3patt", "we", "us", or "our" refer to the 3patt operating entity. References to "you", "your", or "player" refer to any individual who accesses or uses the 3patt Platform in any capacity.

3patt is the data controller for personal data collected through the 3patt Platform. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the data protection standards applicable under our international gaming license.

For all privacy-related queries, requests to exercise your data rights, or concerns about how 3patt handles your personal data, please contact our Data Protection team at: [email protected] (displayed as plain text — not a clickable link). We aim to respond to all privacy-related communications within 5 business days and to resolve all valid requests within 30 calendar days.

3patt collects personal data that falls into the following categories. We collect only what is necessary for the purposes described in Section 4 of this Policy.

3patt collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to promotional communications, or interact with any feature of the 3patt Platform.
• Automatically through platform usage — when you access 3patt via your browser or mobile device, our systems automatically collect technical data including your IP address, device identifiers, session duration, and navigation patterns within the platform. This data is collected using server logs, cookies, and similar tracking technologies (see Section 10).
• From payment processors — when you initiate deposits or withdrawals through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or card networks, 3patt receives transaction confirmation data from these payment providers necessary to credit your account and maintain financial records.
• From identity verification services — 3patt may use third-party identity verification providers to assist with KYC processes. These providers cross-reference the identity documents you submit against authoritative databases to confirm authenticity. The verification result is shared with 3patt but your documents are processed under the third party's own data protection standards as well as this Policy.
• From fraud prevention and AML screening services — 3patt uses third-party services to screen accounts and transactions against sanctions lists, politically exposed person (PEP) databases, and fraud risk databases as required by our gaming license AML obligations.

3patt uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age, maintain your account settings, and manage your player profile on the 3patt Platform.
• Transaction processing: To process deposits via JazzCash, EasyPaisa, bank transfer, card, or USDT, and to process withdrawal requests to your verified payment method — all in Pakistani Rupees (PKR) where applicable.
• Gaming service delivery: To provide access to all 3patt gaming products including cricket and PSL betting, live casino, slots, Monster Dice, and e-sports betting — and to maintain accurate records of your gaming activity.
• Regulatory compliance: To fulfil obligations under 3patt's international gaming license, including KYC verification, AML record-keeping, responsible gaming monitoring, and mandatory reporting to regulatory authorities where required.
• Customer support: To respond to your queries, resolve complaints, and provide Urdu-language support via live chat and email.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and unauthorised account access on the 3patt Platform.
• Responsible gaming: To monitor gameplay patterns that may indicate problematic gambling behaviour, to administer responsible gaming tools (deposit limits, self-exclusion), and to enforce the 21+ age requirement.
• Platform improvement: To analyse aggregated usage data in order to improve platform performance, game selection, and user experience — always using anonymised or pseudonymised data where possible for this purpose.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent. You may withdraw marketing consent at any time through your account settings.

3patt processes your personal data on the following legal bases, depending on the specific purpose of processing:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the 3patt Terms & Conditions — including account management, transaction processing, and gaming service delivery.
• Legal obligation: Processing required to comply with 3patt's obligations under its international gaming license — including KYC verification, AML record-keeping, age verification, and responsible gaming monitoring.
• Legitimate interests: Processing necessary for 3patt's legitimate business interests, including fraud prevention, platform security, and improving platform performance — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, specifically for marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

3patt does not sell your personal data to any third party. We share your data only in the following limited circumstances and only to the extent strictly necessary for the stated purpose:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks, and cryptocurrency payment processors receive the minimum data necessary to process your transactions. Each processor operates under their own regulatory framework and data protection obligations.
• Identity verification providers: Third-party KYC service providers receive your identity document data solely for the purpose of verifying your identity and age as required by our gaming license.
• AML and fraud screening services: Aggregated transaction data and identity data may be shared with AML screening services to fulfil regulatory monitoring obligations under 3patt's gaming license.
• Game software providers: Third-party casino game studios and live dealer providers whose products are hosted on 3patt may receive anonymised session data necessary to operate their gaming software on our platform.
• Regulatory and law enforcement authorities: 3patt is legally obligated to disclose player data to relevant regulatory authorities, law enforcement agencies, or courts where required by a valid legal order, regulatory directive, or under the terms of our gaming license.
• Professional advisers: Legal, financial, and auditing advisers may access limited personal data under strict confidentiality obligations where necessary for their professional services to 3patt.

As an internationally licensed gaming platform serving Pakistani players, 3patt may store and process your personal data on servers located outside of Pakistan. Where your data is transferred to or processed in a country that may not provide the same level of data protection as Pakistan's applicable standards, 3patt ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses (standard contractual clauses) with all third-party data processors that receive your personal data in jurisdictions outside Pakistan.
• Selection of third-party processors that operate under equivalent data protection frameworks recognised under 3patt's gaming license jurisdiction.
• Encryption of all data in transit and at rest, regardless of the location of the processing server.

By creating a 3patt account and accepting the Terms & Conditions and this Privacy Policy, you acknowledge and consent to the transfer of your personal data to servers and processors in locations outside of Pakistan where such transfers are necessary to provide the 3patt services.

3patt retains your personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods mandated by our regulatory obligations:

• Account and KYC data: Retained for a minimum of 5 years from the date of account closure, as required under AML regulations applicable to our gaming license.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, including all deposit and withdrawal records, in compliance with financial record-keeping requirements under our license.
• Gaming activity records: Retained for a minimum of 3 years from the date of each session, for regulatory audit purposes and responsible gaming monitoring.
• Support communications: Retained for 2 years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for 2 years following account closure or withdrawal of consent, whichever is later, as evidence of lawful marketing processing.

Upon expiry of the applicable retention period, 3patt will securely delete or anonymise your personal data such that it can no longer be linked to your identity. Where anonymisation is not practicable, data will be securely destroyed.

Depending on the data protection laws applicable to your circumstances, you may have some or all of the following rights in relation to the personal data 3patt holds about you:

• Right of Access: You may request a copy of the personal data 3patt holds about you. We will provide this within 30 calendar days of a valid request.
• Right to Rectification: Where the data we hold about you is inaccurate or incomplete, you have the right to request correction. Many details can be updated directly in your 3patt account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances, you may request that 3patt delete your personal data. Note that this right is subject to our regulatory retention obligations — 3patt cannot delete data that we are legally required to retain under our gaming license.
• Right to Restrict Processing: You may request that 3patt restrict the processing of your data in certain circumstances, such as where you contest its accuracy or object to its processing.
• Right to Data Portability: Where processing is based on your consent or contractual necessity, and is carried out by automated means, you may request that 3patt provide your data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where 3patt relies on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our Data Protection team at [email protected]. We will verify your identity before processing any data rights request. Response timelines are 5 business days for acknowledgment and 30 calendar days for resolution.

3patt uses cookies and similar tracking technologies to operate the platform, enhance your experience, maintain your session security, and — where you have consented — to analyse platform usage patterns. The following categories of cookies are used on the 3patt Platform:

• Strictly Necessary Cookies: These are essential for the 3patt Platform to function. They enable core features such as maintaining your logged-in session, securing your account, and processing transactions. These cookies cannot be disabled without disabling the platform itself.
• Functional Cookies: These cookies remember your preferences (such as language settings and previously used payment methods) to improve your experience. They do not track your activity for advertising purposes.
• Analytics Cookies: Where you have provided consent, 3patt uses analytics cookies to understand how players use the platform — which games are accessed most frequently, where users encounter difficulties, and how to improve the platform experience. This data is processed in aggregated, anonymised form where possible.
• Security and Fraud Prevention Cookies: 3patt uses cookies to detect and prevent fraudulent activity, identify suspicious account access patterns, and verify that you are a human user rather than an automated bot.

You can control cookie settings through your browser preferences. Disabling certain categories of cookies may affect the functionality of the 3patt Platform. Strictly Necessary Cookies cannot be disabled without preventing access to the platform entirely.

3patt implements technical and organisational security measures appropriate to the nature of the personal data we process and the risks associated with its unauthorised access, disclosure, or loss. These measures include:

• Industry-standard SSL/TLS encryption for all data in transit between your device and 3patt's servers.
• Encryption at rest for sensitive data categories including identity documents, financial records, and authentication credentials.
• Role-based access controls ensuring that 3patt personnel can only access personal data necessary for their specific operational function.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Multi-factor authentication requirements for administrative access to systems that store personal data.
• Incident response procedures enabling 3patt to detect, contain, and notify affected players in the event of a personal data breach within timeframes required by our regulatory obligations.

While 3patt takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to keep your 3patt account credentials confidential. If you suspect any unauthorised access to your account, contact 3patt support immediately at [email protected].

The 3patt Platform is strictly intended for individuals aged 21 years and above. 3patt does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

Where 3patt becomes aware or has reasonable grounds to suspect that an account belongs to or has been accessed by an individual under 21 years of age, that account will be immediately suspended, all associated gaming activity will be voided, all deposited funds will be returned to the originating payment method following verification, and all personal data will be deleted from 3patt's systems to the extent permitted by our regulatory obligations.

If you are a parent or guardian and believe that a minor under your care has created a 3patt account or otherwise provided personal data to 3patt, please contact us immediately at [email protected] so that we can take immediate action.

3patt reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When material changes are made to this Policy, 3patt will notify registered players via email or platform notification with reasonable advance notice where practicable.

The updated Policy will be published on this page with a revised Effective Date at the top of the document. Where a change to this Policy requires your consent (e.g., where we propose to process your data for a new purpose that requires consent as its legal basis), we will seek that consent before the new processing commences.

We encourage you to review this Privacy Policy periodically. Continued use of the 3patt Platform after any amendment to this Policy constitutes your acknowledgment of the updated Privacy Policy terms.

For all privacy-related matters — including requests to exercise your data rights, questions about this Policy, concerns about how your personal data is handled, or to report a suspected data security incident — please use the following contact channels:

• Data Protection Email: [email protected] (displayed as plain text — not a clickable link). Please include "Privacy Request" or "Data Protection" in your subject line to ensure your query reaches the correct team.
• Live Chat Support: Available 24/7 on the 3patt Platform, with Urdu-language support available at all hours. Live chat is suitable for general account queries but formal data rights requests should be submitted via email to ensure a written record.
• FAQ: Visit our FAQ page for answers to common questions about your account, privacy, and data protection on 3patt.

3patt will acknowledge all privacy-related communications within 5 business days and provide a full response or resolution to valid data rights requests within 30 calendar days. In complex cases where more time is required, we will notify you of the extended timeline and the reason for the delay within the initial 30-day period.