3patte Privacy Policy

3patte ("we", "us", "our", "the Platform") is an internationally licensed online casino and sports betting platform operating at the domain 3patte.pro. We provide casino games, live dealer tables, sports betting markets — including PSL and international cricket — instant win titles, and related gaming services to registered players in Pakistan and other permitted jurisdictions.

For the purposes of this Privacy Policy, 3patte is the data controller responsible for determining how and why your personal data is collected and processed. This means we decide what data is collected, the purposes for which it is used, and the legal basis upon which processing is carried out. Where we engage third-party processors — such as KYC verification services or payment gateways — we remain responsible for ensuring that such processors handle your data in accordance with applicable data protection standards.

3patte collects personal data through several channels: directly from you when you register an account or interact with the platform, automatically through your use of the website and app, and from third-party service providers who assist in verifying your identity and processing payments.

3patte uses personal data only for well-defined, specific purposes. We do not process your data in a manner incompatible with the purposes for which it was originally collected. The primary purposes for which we process personal data are as follows:

• Account Registration and Management: To create, maintain, verify, and administer your 3patte player account, including processing your login credentials, updating profile information, and managing account settings.
• Identity Verification (KYC): To verify your identity in compliance with anti-money laundering (AML) and Know Your Customer (KYC) regulations, including confirming your age to enforce our 21+ policy and verifying the ownership of payment methods used for deposits and withdrawals.
• Payment Processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and USDT TRC20, and to process withdrawal requests back to verified payment methods in Pakistani Rupees (PKR) or cryptocurrency where applicable.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover attempts, bonus abuse, and other prohibited conduct in accordance with our Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, investigate complaints, and provide technical assistance through live chat, email, and in-platform messaging.
• Responsible Gaming: To monitor gameplay patterns and identify indicators of potential problem gambling behaviour, to enforce self-exclusion and cooling-off requests, and to administer deposit and loss limits set by you through the player dashboard.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates by email or SMS — but only where you have given explicit consent to receive such communications. You may withdraw marketing consent at any time through your account settings or by emailing support.
• Platform Improvement: To analyse aggregated and anonymised usage data for the purpose of improving the 3patte platform, optimising the user experience, and developing new features or game offerings relevant to players in Pakistan.
• Legal and Regulatory Compliance: To comply with applicable legal obligations, respond to lawful requests from regulatory or law enforcement authorities, and maintain records as required under AML legislation and our international gaming licence conditions.

Every instance of personal data processing at 3patte is carried out on one or more of the following recognised legal bases under internationally accepted data protection principles:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide the 3patte gaming services you have registered to use. This covers account management, payment processing, and game delivery.
• Legal Obligation: Processing is required to comply with applicable laws, including AML/KYC regulations, age verification requirements, and obligations to cooperate with law enforcement and regulatory bodies.
• Legitimate Interests: Processing is necessary for 3patte's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and improving our services — provided those interests are not overridden by your data protection rights.
• Consent: Where processing is based on consent — specifically for marketing communications and non-essential analytics cookies — we will obtain your explicit, informed consent before processing begins. You may withdraw consent at any time without affecting the lawfulness of prior processing.

3patte does not sell your personal data. We share personal data only where strictly necessary and only with the categories of recipient described below, each of whom is contractually bound to process data solely for the purposes specified and in accordance with applicable data protection standards.

• KYC and Identity Verification Providers: Licensed third-party KYC service providers who verify the authenticity of identity documents and confirm that players satisfy our age (21+) and identity requirements. These providers process identity data on our behalf as data processors.
• Payment Processors: Authorised payment service providers who facilitate transactions via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Allied Bank, and cryptocurrency networks. Financial data is shared only to the extent necessary to process the relevant transaction.
• Fraud Prevention and AML Services: Specialist risk and fraud detection platforms that analyse transactional and behavioural data to identify potential money laundering, bonus abuse, or account fraud. These services process data on our behalf as processors.
• Game Software Providers: Licensed casino game software suppliers whose titles are made available on the 3patte platform. These providers may receive anonymised session data necessary to render and operate their games. They do not receive personally identifiable information beyond what is technically required for game delivery.
• Regulatory and Law Enforcement Authorities: Where we are under a legal obligation to do so — for example in response to a court order, regulatory investigation, or suspicious activity report filed under AML obligations — we will disclose relevant personal data to the appropriate authority.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of 3patte's business, personal data may be transferred to the acquiring entity, subject to equivalent data protection safeguards and notification to affected players where required.

3patte uses cookies — small text files stored on your device — and similar technologies such as pixel tags, local storage, and session tokens to operate, secure, and improve the platform. Cookies are categorised by their purpose as follows:

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features. 3patte does not use cookies for cross-site behavioural advertising or serve advertising through third-party ad networks.

3patte retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Active Account Data: Retained for the full duration of your registered account relationship with 3patte, plus a minimum of five years following account closure. This is required under international AML record-keeping standards applicable to licensed gaming operators.
• KYC and Identity Documents: Retained for a minimum of five years from the date of the last transaction on your account, in accordance with financial crime compliance requirements. Original documents are stored in encrypted form.
• Financial Transaction Records: Deposit, withdrawal, and bet history is retained for five years following account closure for AML and audit purposes. Anonymised aggregated transaction data may be retained indefinitely for statistical purposes.
• Support Communications: Live chat transcripts, email correspondence, and complaint records are retained for three years from the date of the interaction to support dispute resolution and quality assurance.
• Marketing Consent Records: Records of consent and opt-out are retained for the duration of your account plus three years to demonstrate compliance with marketing communication obligations.
• Technical and Usage Logs: Server logs and session data are retained for 90 days for security and fraud investigation purposes, after which they are automatically purged or anonymised.

As a data subject whose personal data is processed by 3patte, you hold a number of rights under applicable data protection principles. These rights are described below along with the applicable limitations and how to exercise them.

• Right of Access: You may request a copy of all personal data that 3patte holds about you, together with information about how it is being processed. We will respond to access requests within 30 days. Requests may be submitted by email to the Data Protection contact address.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or supplement it. You may update basic profile details directly through your account settings dashboard.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where you object to processing and we have no overriding legitimate grounds. This right is subject to legal obligations that require us to retain certain records — for example, AML retention requirements.
• Right to Restriction of Processing: You may ask 3patte to temporarily restrict processing of your data — for example, while accuracy is contested, or while an objection to processing is being considered.
• Right to Data Portability: Where processing is based on consent or contract and is carried out by automated means, you may request a structured, machine-readable copy of the personal data you have provided to 3patte, for the purpose of transferring it to another service provider.
• Right to Object: You may object at any time to processing of your data for direct marketing purposes. You may also object to processing carried out on the basis of legitimate interests, though we may be able to demonstrate compelling grounds to continue processing in certain circumstances.
• Right to Withdraw Consent: Where processing is based solely on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

3patte operates a strict 21+ age restriction. The platform is not intended for, directed at, or accessible to any person under the age of 21. We do not knowingly collect personal data from individuals under 21 years of age.

• All registration attempts are subject to age verification checks. Where a player's stated date of birth indicates they are under 21, registration will be declined and no personal data will be retained beyond what is necessary to log the failed attempt for fraud prevention purposes.
• Where 3patte has reasonable grounds to believe that a registered account is being operated by or on behalf of a person under 21, the account will be immediately suspended, subjected to mandatory KYC verification, and — if underage access is confirmed — closed with all deposits returned and any winnings forfeited.
• 3patte employs third-party age verification technology as part of its KYC process to cross-reference provided identity information against government-issued records where technically available.

3patte's platform infrastructure and certain service providers operate across multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside Pakistan. Where such transfers occur, 3patte ensures that appropriate safeguards are in place to protect your data to a standard equivalent to internationally recognised data protection principles.

• Data transfers to third-party processors operating outside Pakistan are governed by contractual data processing agreements that impose data protection obligations on the recipient equivalent to the standards set out in this Privacy Policy.
• Where data is transferred to jurisdictions with adequacy determinations recognised by major international data protection frameworks, no additional safeguards beyond standard contractual terms are required.
• 3patte's primary data hosting infrastructure uses encrypted, access-controlled cloud storage with data centres located in jurisdictions with robust data protection and cybersecurity legal frameworks.
• You may request information about the specific safeguards governing international transfers of your personal data by contacting our Data Protection team.

3patte implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include but are not limited to:

• Encryption in Transit: All data transmitted between your device and 3patte's servers is encrypted using TLS 1.3 with 256-bit AES encryption. This applies to all platform pages, login processes, payment flows, and API communications.
• Encryption at Rest: Personal data and financial records stored in 3patte's databases are encrypted at rest using AES-256 encryption. Encryption keys are managed separately from encrypted data and rotated on a defined schedule.
• Access Controls: Access to production systems and player data is restricted to authorised personnel only, based on role-specific permissions. All internal access to player data is logged and auditable. Multi-factor authentication is required for all administrative system access.
• Penetration Testing: 3patte's platform undergoes periodic security assessments and penetration testing by independent cybersecurity professionals to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 3patte maintains a documented data breach response plan. In the event of a security incident that is likely to result in a risk to player rights, affected players will be notified as required under applicable notification obligations.

The 3patte platform may contain links to third-party websites or services — for example, links to payment provider portals when initiating a deposit or withdrawal transaction. This Privacy Policy applies solely to data processed by 3patte on the 3patte.pro domain and associated platform infrastructure.

• 3patte is not responsible for the privacy practices or content of any third-party website or service that you access via a link from the 3patte platform.
• We recommend reviewing the privacy policy of any third-party site before providing personal data to that site.
• Payment provider portals — such as those operated by JazzCash, EasyPaisa, or HBL — operate under their own privacy policies and are independent data controllers for the data they collect during the payment process.

3patte reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we offer. When we make material changes to this Policy, we will notify registered players by email to the address on file and display a prominent notice on the platform for a reasonable period following the change.

• The effective date at the top of this page will be updated to reflect the date of the most recent revision.
• Continued use of the 3patte platform following the publication of a revised Privacy Policy constitutes acceptance of the updated terms, to the extent permitted by applicable law.
• If you disagree with any changes to this Privacy Policy, you should stop using the platform and contact our support team to close your account. Any data collected before the policy change will continue to be processed in accordance with the version of the policy in effect at the time of collection.
• Previous versions of this Privacy Policy are available on request by contacting [email protected].

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 3patte processes your personal data, please reach out to our team through the following channels:

• Live Chat: The fastest way to reach us — available 24/7 directly on the 3patte platform. Suitable for general privacy queries and urgent data concerns.
• Email: For formal data rights requests or detailed privacy enquiries, write to [email protected] with the subject line "Privacy Enquiry" or "Data Rights Request". We aim to respond within 30 calendar days.
• In-Platform Messaging: Log in to your account via 3patte Login and use the in-platform support messaging system to send a private message to our Data Protection team.