3 Patti Privacy Policy —
How We Handle Your Personal Data

1 Who We Are

3 Patti is an online sports betting and gaming platform operating at 3patti.vin, built for players based in Pakistan. This Privacy Policy applies to all data collected through the 3 Patti website, the Android app and any other interface through which you interact with the platform.

For the purpose of this policy, "we", "us" and "our" refer to 3 Patti. "You" and "your" refer to any registered or prospective player who accesses or uses the 3 Patti platform. "Personal data" means any information that identifies you or could be used to identify you, directly or in combination with other data.

This policy is written to be read alongside the Terms and Conditions and the Responsible Gaming page. All three documents together form the agreement between you and 3 Patti.

2 Data We Collect

We collect personal data through several channels — directly from you during registration and account use, automatically through your interactions with the platform, and in some cases from third-party service providers such as payment processors. Here is a breakdown of what we collect and why:

2.1 Registration and Account Data

When you create a 3 Patti account you provide:

• Full name
• Date of birth (to confirm you are 18 or over)
• Email address and/or mobile number
• City or region (Pakistan)
• Username and password (password is stored in hashed form — we cannot read it)

2.2 Identity Verification Data

Before your first withdrawal or when deposit thresholds are reached, we may ask you to verify your identity. This typically involves:

• A copy of your CNIC (Computerised National Identity Card)
• A selfie or photograph for document matching
• Proof of payment method ownership (e.g. a screenshot of your JazzCash or Easypaisa account showing your name)

Verification documents are stored securely and used solely for identity confirmation. They are not shared with third parties except where required by applicable law or fraud prevention obligations.

2.3 Transaction and Financial Data

Each time you deposit or withdraw funds in PKR, we record:

• Transaction amount, date and time
• Payment method used (JazzCash, Easypaisa, Raast, bank transfer, card or mobile wallet)
• Transaction reference numbers issued by the payment provider
• Account balance movements

Full card numbers are never stored on our servers. Card transactions are processed through a PCI DSS-compliant gateway that handles and tokenises card data independently.

2.4 Platform Usage Data

When you use the 3 Patti platform we automatically collect:

• IP address and approximate location (country/city level)
• Device type, operating system and browser version
• Session start and end times
• Pages and features accessed
• Bets placed, games played and betting history
• Bonus activity and wagering progress

2.5 Communications Data

If you contact our support team by email or live chat, we retain records of those conversations. This helps us resolve follow-up queries and monitor service quality. We also retain records of notifications sent to you — including promotional emails, security alerts and transaction confirmations — along with whether they were opened or clicked.

3 How We Use Your Data

Personal data collected by 3 Patti is used for the following purposes. We do not use your data for any purpose that is incompatible with what is listed here without first informing you and, where required, obtaining your consent.

4 Legal Basis for Processing

Every time 3 Patti processes your personal data, we do so on one of the following grounds:

• Contract performance: Processing your registration data, payment information and betting activity is necessary to deliver the services you have signed up for. Without this data, we cannot operate your account.
• Legitimate interests: We process platform usage data, device information and behavioural data to detect fraud, prevent multi-accounting, ensure platform security and improve the product. These interests do not override your privacy rights — we keep this data use proportionate and limited to what is genuinely necessary.
• Legal obligation: In certain circumstances we are required to process and retain data to comply with applicable law — for example, retaining financial transaction records or responding to law enforcement requests backed by proper legal authority.
• Consent: For optional data processing activities — primarily marketing communications — we rely on your consent. You can withdraw this consent at any time without any penalty to your account or services.

5 Payment Data and Financial Security

All deposits and withdrawals on 3 Patti are conducted in PKR through supported Pakistan payment channels: JazzCash, Easypaisa, Raast, bank transfer, debit/credit cards and other supported mobile wallets. The following data handling practices apply to payment transactions:

• Card payments: Card transactions are processed via a PCI DSS-compliant payment gateway. The gateway handles card data directly and returns a payment token to our systems. We store only the token, the last four digits of the card and the card type — never the full card number, CVV or expiry date.
• JazzCash and Easypaisa: These wallets authenticate transactions entirely within their own apps. When you initiate a deposit through JazzCash or Easypaisa on 3 Patti, we receive only a transaction confirmation and reference number — your wallet PIN, password or linked bank details are never passed to or stored by 3 Patti.
• Bank transfers and Raast: For bank transfer deposits, we collect only the information needed to match your payment to your account — typically the transfer reference and amount. We do not access or store your bank login credentials.
• Transaction records: All transaction records are retained for a minimum period as required for financial record-keeping and fraud investigations. These records are stored in encrypted form and access is restricted to authorised staff.

6 Cookies and Tracking Technologies

The 3 Patti website and app use cookies and similar tracking technologies to operate correctly and to improve your experience. Here is what we use and why:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your language preferences and keep your bet slip active. You cannot opt out of essential cookies while using the platform.
• Analytics cookies: We use anonymised analytics to understand how players navigate the platform — which pages are visited most, where players drop off and how features are used. This data is aggregated and does not identify individuals.
• Security cookies: Short-lived cookies are used to protect against cross-site request forgery and other common web security threats.
• Preference cookies: These remember your settings between sessions — such as your preferred deposit method or notification preferences — so you do not have to re-enter them each time.

You can manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not prevent you from using core platform features, but some convenience functions may not work as expected.

7 Data Sharing and Third Parties

3 Patti does not sell, rent or trade your personal data. We share data only in the following specific circumstances:

• Payment processors: Transaction data is shared with payment gateways and processors (including JazzCash, Easypaisa and card processors) to complete deposits and withdrawals in PKR. These providers operate under their own privacy policies and data security standards.
• Identity verification providers: Where we use a third-party KYC (Know Your Customer) service to verify your CNIC and identity documents, that provider processes your documents on our behalf under a data processing agreement that restricts them from using your data for any other purpose.
• Game providers: Slot and live casino games on 3 Patti are supplied by third-party game studios. When you play a game, your player ID and game session data are shared with the relevant provider to run the game. Full account details and payment information are not passed to game providers.
• Fraud prevention and security services: We may share limited technical data (such as IP addresses and device fingerprints) with fraud detection services to identify suspicious activity, multi-accounting or payment fraud.
• Legal and regulatory requirements: We may disclose personal data where required by law, court order or a formal request from a competent authority acting within its jurisdiction. We will always seek legal advice before complying with such requests where the legal basis is unclear.

All third-party service providers with whom we share personal data are contractually required to process that data only for the specific purpose it was shared, to maintain appropriate security standards and to refrain from any further disclosure.

8 Data Retention

We retain personal data for as long as it is needed to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for as long as your account remains open and active on 3 Patti.
• Transaction records: Financial transaction records are retained for a minimum of five years from the date of the transaction, in line with standard financial record-keeping requirements.
• Identity verification documents: CNIC copies and verification records are retained for as long as your account is active and for a period after account closure as required by applicable regulations.
• Support communications: Customer support conversations are retained for up to two years to support follow-up queries and service quality review.
• Closed accounts: When an account is closed — whether by you or by 3 Patti — some personal data is retained for a defined period to comply with legal obligations, resolve any outstanding disputes and prevent re-registration in cases of self-exclusion or banned accounts.

Once the applicable retention period has passed, personal data is securely deleted or anonymised so that it can no longer be linked back to you.

9 Security Measures

Protecting your personal data is a priority for 3 Patti. We implement a range of technical and organisational security measures to keep your information safe:

• Encryption in transit: All data transmitted between your device and 3 Patti servers is encrypted using TLS (Transport Layer Security). This means your login credentials, payment details and personal information cannot be intercepted in transit.
• Encryption at rest: Sensitive data stored on our servers — including identity verification documents and financial records — is encrypted using industry-standard encryption algorithms.
• Password hashing: Your account password is stored as a one-way cryptographic hash. This means 3 Patti staff cannot read your password, and if our database were ever compromised, your plain-text password would not be exposed.
• Access controls: Access to systems containing personal data is restricted to authorised 3 Patti staff who need it to perform their roles. Access is logged, reviewed and revoked promptly when no longer required.
• Two-factor authentication: We strongly encourage all players to enable 2FA on their accounts for an additional layer of login security. The option is available in your account security settings.
• Security monitoring: Our systems are monitored for unusual access patterns, failed login attempts and other indicators of potential security incidents. Suspected breaches are investigated promptly.

While we take all reasonable steps to protect your data, no online system can guarantee absolute security. If you suspect your account has been compromised, contact 3 Patti support immediately so we can help secure your account.

10 Your Privacy Rights

As a 3 Patti player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team with your request and we will respond as quickly as possible — typically within 30 days.

• Access: You can request a copy of all personal data we hold about your account, including your registration details, transaction history and betting activity.
• Correction: If any of the personal data we hold about you is inaccurate or out of date, you can request that we correct it. You can also update basic account information directly from your profile settings.
• Deletion: You can request that we delete your personal data. Note that we may be required to retain certain records — particularly financial transaction data — for legal compliance purposes even after account closure. We will inform you of any such limitations when processing a deletion request.
• Portability: You can request that we provide your personal data in a structured, machine-readable format so that it can be transferred to another service.
• Restriction: In certain circumstances you can ask us to restrict how we use your data — for example, while a correction request is being resolved.
• Opt out of marketing: You can unsubscribe from promotional emails and notifications at any time. This can be done via your account preferences or by contacting support.

11 Children and Minors

3 Patti is strictly an adults-only platform. Registration is not permitted for anyone under the age of 18. We do not knowingly collect personal data from minors.

During registration, you are required to confirm your date of birth. Where there is any doubt about a player's age, we reserve the right to request identity verification — including a copy of your CNIC — before allowing access to deposit, betting or gaming features.

If we become aware that personal data has been collected from a person under 18, we will close the account and delete the associated data as promptly as possible. If you are a parent or guardian and believe your child has registered on 3 Patti, please contact our support team immediately so we can take action.

12 Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, the platform's features or applicable regulations. When material changes are made, registered players will be notified through their account notification centre. The revision date at the top of this page will always reflect when the policy was last updated.

Continuing to use 3 Patti after a Privacy Policy update has been notified to you constitutes acceptance of the revised policy. We encourage you to review this page periodically. If you do not agree with a material change to the policy, you should stop using the platform and contact support to discuss your account.

13 Contact Us

If you have any questions about this Privacy Policy, want to exercise your data rights or wish to raise a concern about how 3 Patti handles your personal information, please reach out to our support team:

You can also visit our FAQ page for answers to common questions, or review our Terms and Conditions for the full platform usage agreement.