At a Glance
Privacy at 3patt – The Short Version
These cards give you the key points. The full policy below is the binding version — please read it completely.
We Collect Only What We Need
3patt collects personal data that is necessary to operate the platform, verify your identity, process PKR transactions, and comply with legal obligations. We do not collect data gratuitously.
Your Data is Secure
All data on 3patt is protected with TLS 1.3 encryption in transit and AES-256 encryption at rest. Access to your data is restricted to authorised staff only, and all access is logged and audited.
We Never Sell Your Data
3patt does not sell, rent, or trade your personal information to advertisers or data brokers. Full stop. Your data exists to operate your account and nothing else.
You Are in Control
You can request a copy of your data, ask us to correct inaccuracies, or request deletion — all through a single email to our privacy team. We respond within 30 days of any data rights request.
Cookies You Can Control
3patt uses cookies for session management, security, and optional analytics. You can manage cookie preferences through your browser settings at any time without affecting core platform functionality.
No Data from Under-18s
3patt is strictly an 18+ platform. We do not knowingly collect data from anyone under 18. If we discover that we have, we delete it immediately and close the associated account.
1. Who We Are
This Privacy Policy applies to the 3patt platform, accessible at 3patt.ws, and all associated mobile and web applications operated under the 3patt brand. When this policy refers to "3patt", "we", "us", or "our", it means the legal entity that operates the 3patt platform and is responsible for your personal data.
3patt is an online gaming platform offering sports betting, casino games, poker, Andar Bahar, Ludo, and other interactive entertainment products to users in Pakistan and other permitted jurisdictions. We are the data controller for all personal information collected through the 3patt platform.
Our dedicated privacy contact for all data-related queries is reachable at privacy@3patt.ws. For general account and support queries, contact support@3patt.ws or use the live chat function available around the clock within your 3patt account.
This Privacy Policy covers personal data collected through the 3patt website, mobile browser experience, and associated services. It does not cover third-party websites that may be linked from our platform. Once you leave 3patt.ws and visit a third-party site, the privacy practices of that third party apply. 3patt is not responsible for the privacy practices of any external site.
2. Data We Collect
3patt collects personal data through several means: information you provide directly during registration and account use, information generated automatically as you use the platform, and in limited cases, information from third-party service providers we work with. The table below summarises the main categories.
| Category | Specific Data Points | When Collected |
|---|---|---|
| Registration Data | Mobile number, chosen username, date of birth, country of residence, password (stored as a hashed value — never in plain text) | When you create a 3patt account |
| Identity Verification | Full legal name, CNIC number, copy of national identity document or passport, selfie photograph for liveness check | When KYC verification is requested |
| Financial Data | Easypaisa / JazzCash / NayaPay / SadaPay wallet numbers, bank account details (IBAN for IBFT), masked card numbers, transaction history in PKR | When you make a deposit or withdrawal |
| Gaming Activity | Betting history, casino game sessions, poker hand history, wager amounts, win/loss records, bonus usage | Continuously while you use 3patt |
| Technical Data | IP address, device type and model, operating system, browser type, session timestamps, login history | Automatically on each session |
| Communications | Live chat transcripts, emails sent to support, call recordings (where calls are offered), survey responses | When you contact 3patt support |
| Cookie Data | Session identifiers, preference cookies, optional analytics cookies (see Section 5) | On each visit to 3patt.ws |
We do not collect sensitive categories of personal data such as health information, racial or ethnic origin, religious beliefs, or political opinions. We do not collect your precise GPS location. The IP address collected is used only for fraud detection and security purposes and is stored in anonymised form after 90 days.
3. How We Use Your Data
3patt uses your personal data only for legitimate purposes directly related to running the platform and serving you as a player. We do not use your data for purposes unrelated to the gaming services you have registered for. Specific uses are as follows:
- Account creation and management: Your registration data is used to create and maintain your 3patt account, verify your identity, and keep your account secure.
- Processing transactions: Financial data is used to process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card payments. Transaction records are maintained for legal and audit purposes.
- Providing gaming services: Your gaming activity data enables us to run the games and betting markets you participate in, settle bets correctly, and calculate your account balance accurately.
- Responsible gaming: We use your gaming activity, deposit patterns, and session data to monitor for signs of problematic gambling behaviour and to enforce any limits or self-exclusions you have set in your account.
- Fraud prevention and security: Technical data including IP addresses, device fingerprints, and login patterns are used to detect and prevent unauthorised access, fraudulent transactions, and bonus abuse.
- Anti-money laundering (AML) compliance: We are required by applicable regulations to monitor transactions and verify the source of funds in certain circumstances. This is a legal obligation, not a discretionary choice.
- Customer support: Communications data is used to resolve your support queries, improve our service, and maintain a record of interactions for quality assurance.
- Marketing communications: Where you have given consent, we use your contact details to send you information about bonuses, promotions, and new features on 3patt. You can opt out of marketing communications at any time through your account settings.
- Platform improvement: Aggregated, anonymised usage data helps us understand how the platform is being used and where improvements can be made. This data cannot be used to identify individual players.
4. Legal Basis for Processing
Data protection law requires that we identify a valid legal basis for each type of personal data processing we carry out. 3patt relies on the following legal bases:
- Contractual necessity: Processing your registration data, financial data, and gaming activity is necessary to perform the contract between you and 3patt — that is, to operate your account and provide the gaming services you have signed up for.
- Legal obligation: Processing for AML compliance, KYC verification, and transaction record-keeping is required by applicable laws. We cannot operate without performing these processes.
- Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics are carried out on the basis of 3patt's legitimate interests in operating a secure and fair platform. These interests do not override your fundamental privacy rights.
- Consent: Marketing communications and optional analytics cookies are only processed where you have given your explicit consent. You may withdraw this consent at any time without affecting the legality of processing carried out before withdrawal.
5. Cookies & Tracking Technologies
3patt uses cookies and similar technologies to make the platform work correctly and, with your consent, to understand how it is being used. Here is a plain breakdown of what each category of cookie does:
These cookies are essential for the platform to function. They maintain your login session so you do not have to re-enter your password on every page, store your security tokens, and ensure your bet slip functions correctly. You cannot opt out of strictly necessary cookies without breaking the platform. No consent is required for these cookies under applicable law.
These cookies remember your preferences — such as your chosen odds format, language settings, and theme preferences — so the platform works the way you have set it up. They are not strictly necessary but improve your experience significantly. You can disable them in your browser settings, though some preferences will reset on each visit.
With your consent, 3patt uses anonymised analytics data to understand which sections of the platform are most used, where players experience friction, and how navigation can be improved. Analytics data cannot identify individual players and is never shared with advertising networks. You can opt out by declining analytics cookies when prompted or by adjusting your browser settings.
3patt does not use third-party advertising cookies or behavioural tracking cookies that build profiles for advertising purposes. You can manage cookies by adjusting your browser settings. Most browsers allow you to refuse all cookies, accept cookies from specific sites, or delete cookies already stored on your device.
6. Sharing Your Data
3patt does not sell, rent, or trade your personal information. We share data with third parties only in the limited circumstances set out below, and only to the extent necessary for the stated purpose.
- Payment processors: To process your PKR transactions, we share the minimum necessary financial data with Easypaisa, JazzCash, NayaPay, SadaPay, bank payment networks, and card scheme operators. These parties process data under their own privacy policies and are bound by financial services regulation.
- Identity verification providers: Where third-party KYC verification is used, your identity documents and verification data are shared with a regulated identity verification service. This data is used solely for the purpose of verifying your identity and is not retained by the verification provider beyond the period necessary to complete verification.
- Game software providers: Some casino games and betting markets on 3patt are provided by licensed third-party software providers. These providers may receive anonymised session data necessary to operate the game correctly. They do not receive your personally identifiable information.
- Fraud and security services: Anonymised technical data may be shared with fraud detection service providers to identify patterns associated with account takeover or fraudulent transactions.
- Legal and regulatory authorities: 3patt complies fully with all lawful requests from government authorities, regulators, and law enforcement agencies. We disclose personal data in response to valid legal process — court orders, regulatory demands, or law enforcement requests — without requiring individual notice to the affected player where law prohibits such notice.
- Business transfers: In the event of a merger, acquisition, or sale of the 3patt business, player data may be transferred to the acquiring entity. Players will be notified of any such transfer and given the opportunity to close their account before the transfer takes effect.
All third parties who receive personal data from 3patt are required by contract to process that data in accordance with applicable data protection law and to maintain appropriate security standards.
7. International Data Transfers
3patt's primary infrastructure is operated from servers in the Asia-Pacific region. In certain circumstances — such as when using globally distributed fraud detection or game platform services — your data may be processed in countries outside Pakistan. Where such transfers occur, 3patt ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within Pakistan, including contractual data protection clauses with all receiving parties.
Your PKR payment data processed through Easypaisa and JazzCash remains within Pakistan's payment network and is not transferred internationally by 3patt. Bank IBFT transfers follow the processing rules of Pakistan's Raast and IBFT infrastructure.
8. Data Retention
3patt retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | AML / legal obligation |
| Transaction & Financial Records | 7 years from transaction date | Financial regulatory compliance |
| KYC / Identity Documents | 5 years from account closure | AML / legal obligation |
| Betting & Gaming History | 5 years from the date of each event | Dispute resolution & regulatory audit |
| Support Communications | 3 years from the date of the communication | Quality assurance & legal protection |
| Session & Technical Logs | 90 days (then anonymised) | Security & fraud detection |
| Marketing Consent Records | Duration of consent + 3 years | Proof of consent |
When the retention period expires, your data is securely deleted or irreversibly anonymised. Anonymised data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.
9. How We Keep Your Data Secure
3patt invests significantly in technical and organisational security measures to protect your personal data against unauthorised access, loss, or misuse. Our key security practices include:
- Encryption in transit: All data passed between your device and 3patt's servers is encrypted using TLS 1.3 — the current industry standard for secure data transmission. You can verify this by the padlock icon in your browser's address bar when visiting 3patt.ws.
- Encryption at rest: Personal data stored in 3patt's databases is encrypted using AES-256 encryption. Passwords are hashed using bcrypt and are never stored in recoverable plain text — even 3patt's own staff cannot read your password.
- Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and are required to complete data protection training. All access to sensitive data is logged.
- Two-factor authentication: All 3patt staff accounts and administrative systems require two-factor authentication. We strongly recommend that you enable 2FA on your player account via account security settings.
- Regular security audits: 3patt commissions regular external security audits and penetration testing of the platform's infrastructure. Identified vulnerabilities are remediated on a priority basis.
- Incident response: In the event of a data security breach that may affect your personal information, 3patt will notify you via your registered mobile number within 72 hours of becoming aware of the breach, in line with applicable breach notification requirements.
While 3patt takes extensive measures to protect your data, no internet-based system is entirely immune to attack. You play an important part in keeping your account secure by maintaining a strong, unique password and enabling two-factor authentication on your 3patt account.
10. Your Privacy Rights
As a 3patt player, you have the following rights over your personal data. To exercise any of these rights, contact our privacy team at privacy@3patt.ws. We will respond within 30 days. We may ask you to verify your identity before acting on a request to protect against fraudulent requests.
11. Children's Privacy
3patt is strictly an 18+ platform. We do not knowingly collect, store, or process personal data from anyone under the age of 18. Registration on 3patt requires confirmation that you are 18 or older, and we may conduct age verification checks at any stage of the account lifecycle.
If 3patt becomes aware that personal data has been collected from a person under 18 — whether through a false age declaration during registration or any other means — we will take immediate action to close the account, void all transactions associated with it, and securely delete the personal data involved. Any funds deposited by a minor will be returned to the source payment method after a reasonable security review.
If you believe a minor is using 3patt, please report this immediately to support@3patt.ws. We take these reports extremely seriously and will investigate promptly.
12. Changes to This Privacy Policy
3patt reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform features. The "Last Updated" date at the top of this page indicates when the most recent revision was made.
For material changes — those that significantly affect how we use your data or your privacy rights — we will notify you via your registered mobile number at least 14 days before the change takes effect. For minor updates that do not materially affect your rights, we will update the policy without individual notification but will update the effective date.
Your continued use of 3patt after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not accept a revised policy, you must stop using 3patt and close your account before the effective date. Closing your account does not affect data we are legally required to retain.
13. Contact & Complaints
If you have any question about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 3patt handles your personal data, please get in touch through the following channels:
privacy@3patt.ws
For all data rights requests, privacy concerns, and formal complaints. We aim to respond within 5 business days for general queries and within 30 days for formal rights requests.
Available 24/7 via your 3patt account. For non-urgent privacy queries and general questions. Agents respond in both Urdu and English and can escalate to the privacy team where required.
If you are not satisfied with how 3patt handles a privacy complaint after raising it with us, you may have the right to escalate the matter to a relevant data protection supervisory authority or consumer protection body in your jurisdiction. 3patt will cooperate fully with any such investigation.
For general terms of service, see our Terms and Conditions. For information about responsible gaming tools and player protection, visit our Responsible Gaming page.