Privacy Policy – How 3pattl Protects Your Data in Pakistan

1. Introduction

3pattl is Pakistan's home for online sports betting, cricket markets, live casino, and crash games. We are committed to protecting the privacy of every player on our platform. This Privacy Policy describes how 3pattl collects, uses, stores, protects, and shares the personal information of our users in a way that is transparent and respectful of their rights.

We have written this policy in plain, accessible language because we believe Pakistani players deserve to understand exactly how their data is handled — not have to decode a document full of legal jargon. If anything in this policy is unclear, please contact us directly at support@3pattl.com or via live chat.

This policy should be read alongside the 3pattl Terms and Conditions, which govern the broader relationship between you and the platform. Together, these two documents form the foundation of how 3pattl operates in relation to each registered user.

2. Who We Are

3pattl is an online betting and gaming platform serving the Pakistan market. The platform operates at https://3pattl.com and covers sports betting, cricket betting, live casino games, crash games, a VIP loyalty programme, and related promotional services.

For the purposes of this Privacy Policy, "3pattl", "we", "us", and "our" refer to the platform and its operating entity. When we refer to "you" or "your", we mean any person who accesses or uses the 3pattl platform in any capacity — whether as a registered member, a visitor browsing the site, or someone who has contacted our support team.

As the operator of the platform, 3pattl is the data controller in respect of personal data collected from users. This means we determine the purposes for which your data is collected and the manner in which it is processed. Where we share data with third-party service providers — such as payment processors or game studios — those providers act as data processors under our instruction and are contractually obligated to handle data in accordance with applicable data protection standards.

3. Data We Collect

3pattl collects only the personal data that is genuinely necessary to provide, operate, and improve the platform's services. The categories of data we may collect include:

We do not collect sensitive personal data such as biometric data, health information, political views, or religious beliefs. We do not collect data from social media profiles unless you explicitly choose to link a social account during registration, and even then only the data strictly required for authentication is accessed.

4. How We Collect Your Data

3pattl collects your personal data through the following channels:

• Direct collection: Information you provide to us directly when you register an account, complete identity verification, make a deposit or withdrawal request, place a bet, or contact our support team.
• Automated collection: Technical data collected automatically by our platform systems when you visit the website or use the app. This includes IP address, session data, and browser fingerprinting for security and fraud prevention purposes.
• Payment processors: Transaction confirmation data received from Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard networks when you make a deposit or withdrawal.
• Third-party game providers: Aggregated session data from casino and crash game providers to enable accurate account balance updates and transaction records.
• Identity verification services: Where 3pattl uses a third-party KYC (Know Your Customer) service to verify your identity document, that service returns a verification result and document summary to us. The original document images are handled by the verification provider under their own privacy policy and are not stored permanently by 3pattl beyond the period required for compliance record-keeping.

5. Why We Use Your Data

3pattl uses your personal data for the following purposes, each of which has a lawful basis under applicable data protection principles:

• Account creation and management: To register your account, verify your identity and age, maintain your account balance, and manage your profile settings. This is necessary for the performance of the contract between you and 3pattl.
• Payment processing: To process deposits from and withdrawals to your verified PKR payment methods. Payment processing is a contractual necessity — without it, your account cannot function.
• Platform security and fraud prevention: To detect unusual account activity, prevent unauthorised access, identify and investigate prohibited conduct including multi-accounting and bonus abuse, and protect the integrity of the betting and gaming environment for all users.
• Regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) and know-your-customer (KYC) requirements. This includes retaining transaction records for the periods required under applicable law.
• Customer support: To respond to your queries, resolve complaints, and maintain a record of support interactions for quality assurance and dispute resolution purposes.
• Responsible gaming: To monitor betting and gaming activity for patterns that may indicate problem gambling behaviour, and to operate the deposit limits, loss limits, cool-off, and self-exclusion tools you engage with through your account settings.
• Platform improvement: To analyse aggregate usage patterns in order to improve the features, performance, and user experience of 3pattl. This analysis uses anonymised or aggregated data wherever possible.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, subject to your marketing communication preferences. You can opt out at any time — see Section 12.

6. Sharing Your Data

3pattl does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or any party whose purpose is to use your data for their own commercial benefit. Data is shared with third parties only in the following specific and limited circumstances:

• Payment service providers: Easypaisa, JazzCash, NayaPay, SadaPay, IBFT processors, and Visa/Mastercard networks receive the transaction data required to process your deposit or withdrawal. These providers are independently regulated and operate under their own privacy policies.
• Identity verification providers: Where we use a third-party KYC service, your identity document data is transmitted to that service for verification purposes only.
• Game content providers: Casino and crash game studios receive a player session token that allows your game activity to be recorded and your winnings to be credited accurately. Full personal identity data is not shared with game providers.
• Legal and regulatory authorities: Where we are required by law, court order, or regulatory direction to disclose user data, 3pattl will comply. We will notify affected users of such disclosure where legally permitted to do so.
• Fraud prevention and security services: We may share technical data (IP addresses, device fingerprints) with fraud detection services to protect the platform and its users from bad actors.

All third parties with whom 3pattl shares data are subject to data processing agreements that require them to handle your information with appropriate security measures and to use it only for the purposes for which it was shared.

7. Cookies and Tracking Technologies

3pattl uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, and improve your experience. The categories of cookies we use are:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in during a visit and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, odds format, and display preferences so you do not have to re-enter them on each visit.
• Analytics cookies: Used to understand how users navigate the platform — which sections are most visited, where users drop out of a process, and how long typical sessions last. This data is used in aggregate to improve the platform experience. Analytics data is anonymised before analysis.
• Security cookies: Help 3pattl detect and prevent fraudulent activity, including identifying suspicious login patterns, unusual betting behaviour, and potential bot activity.

3pattl does not use third-party advertising cookies or retargeting pixels. We do not serve behavioural advertising based on your 3pattl activity on other websites.

You can manage cookie preferences through your browser settings. However, disabling essential cookies will prevent you from logging in to and using the 3pattl platform. Disabling functional or analytics cookies will not prevent you from using the platform but may result in a less personalised experience.

8. Data Retention

3pattl retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our general retention approach is:

• Active account data: Retained for the duration of your account. If you close your account, your personal data will be retained for a minimum post-closure period to allow for regulatory compliance, dispute resolution, and legal obligations.
• Transaction records: Financial transaction records including deposits, withdrawals, and bet history are retained for a minimum of five years from the date of the transaction. This is required under anti-money laundering compliance obligations.
• Identity verification documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, in line with KYC regulatory requirements.
• Support communications: Chat and email records are retained for three years from the date of the interaction. Records relating to unresolved disputes are retained until the dispute is fully resolved.
• Technical and usage data: Session logs and IP address records are typically retained for 90 days for security monitoring purposes, after which they are deleted or anonymised.

When data reaches the end of its retention period, it is securely deleted or permanently anonymised in a way that prevents re-identification.

9. Data Security

3pattl takes the security of your personal data seriously and implements appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. The security measures we employ include:

• Encryption in transit: All data transmitted between your device and 3pattl's servers is encrypted using TLS (Transport Layer Security). You can verify this by checking for the padlock icon in your browser's address bar when visiting the platform.
• Encryption at rest: Sensitive data — including financial account details and identity verification records — is encrypted at rest in our database systems.
• Access controls: Access to systems containing personal data is restricted to 3pattl staff members who require it for their specific role. All staff access is logged and subject to regular review.
• Penetration testing: 3pattl conducts regular security assessments of the platform's infrastructure to identify and address vulnerabilities before they can be exploited.
• Two-factor authentication: Available for all 3pattl accounts and strongly recommended. We encourage all users to enable two-factor authentication from their account security settings.

Despite these measures, no internet-based service can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 3pattl will notify affected users without undue delay and will take all appropriate steps to contain and remediate the breach.

10. Your Data Rights

As a 3pattl user, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@3pattl.com with your registered account details and the nature of your request. We aim to respond to all data rights requests within 30 days.