Privacy Policy

This Privacy Policy ("Policy") is issued by the operator of 3patii ("3patii", "we", "us", "our"), accessible at https://3patii.cam and any associated sub-domains or applications. It describes how we collect, use, disclose, store and protect personal data submitted to or gathered by the platform.

3patii is an English-language online betting information and entertainment platform primarily serving users in Pakistan. We recognise that Pakistani users have a legitimate interest in understanding how their data is handled, particularly in the context of financial transactions, identity verification, and account management.

We process personal data in accordance with the data protection principles applicable under the operator's licensing jurisdiction. Where users access the platform from Pakistan, the Pakistan Electronic Crimes Act 2016 (PECA) and other applicable Pakistani laws may also be relevant. Nothing in this Policy constitutes legal advice. Users are encouraged to understand their rights under applicable local law.

In this Policy, the following terms carry the meanings set out below:

We collect the following categories of personal data, depending on how you interact with the 3patii platform:

3.1 Registration & Account Data

• Full legal name;
• Date of birth (for age verification);
• Email address;
• Residential address;
• Username and encrypted password;
• Mobile phone number;
• Country and city of residence (e.g., Karachi, Lahore, Islamabad).

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., National Identity Card / CNIC, passport);
• Proof of address documents (e.g., utility bills, bank statements);
• Selfie or liveness-check images where required by our KYC process;
• Source-of-funds declarations where applicable under AML obligations.

3.3 Financial & Transaction Data

• Deposit and withdrawal history in PKR;
• Payment method identifiers (e.g., partial mobile wallet numbers, bank account references — payment provider names such as Easypaisa, JazzCash, HBL and UBL are referenced as familiar local context only and do not imply those providers process data on 3patii's behalf);
• Betting and gaming activity history;
• Bonus and promotion redemption records.

3.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system and browser;
• Pages visited, session duration and clickstream data;
• Cookie identifiers and analytics data.

3.5 Communications Data

• Live Chat and email support transcripts;
• Complaint and dispute correspondence;
• Responsible gambling self-assessment responses where voluntarily submitted.

We collect personal data through the following means:

• Directly from you — when you register an account, complete KYC, make a deposit, place a bet, contact support, or submit a responsible gambling form;
• Automatically — through cookies, server logs and similar tracking technologies when you browse the platform;
• From third-party verification providers — identity verification services that process KYC documents on our behalf under data processing agreements;
• From payment processors — transaction confirmation data necessary to reconcile deposits and withdrawals;
• From fraud and AML screening services — where required to comply with anti-money laundering obligations.

We process your personal data for the following purposes:

We rely on the following legal bases to process your personal data:

• Contract Performance: Processing necessary to fulfil our contractual obligations to you under the Terms & Conditions — including account management, transaction processing and bet settlement.
• Legal Obligation: Processing required to comply with applicable KYC, AML and regulatory reporting requirements under the laws of the operator's licensing jurisdiction.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gambling monitoring and aggregate analytics — where those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications and optional personalisation features, where you have given explicit, freely withdrawable consent.

7.1 We do not sell your personal data. 3patii does not sell, rent, or trade personal data to third-party advertisers or commercial data brokers under any circumstances.

7.2 Service Providers. We share personal data with third-party service providers who process data on our behalf under written data processing agreements. These include identity verification providers, payment processors, fraud-detection services, cloud infrastructure providers and customer support platforms. All such processors are contractually bound to use your data only for the specified purpose and to maintain appropriate security standards.

7.3 Legal & Regulatory Disclosure. We may disclose personal data to competent authorities, regulatory bodies or law enforcement agencies where required by applicable law, a valid court order, or our anti-money laundering obligations. In such cases, we will disclose only the minimum data required.

7.4 Business Transfers. In the event of a merger, acquisition or sale of all or substantially all assets of the operator, user data may be transferred as part of the transaction. Affected users will be notified in advance where reasonably practicable.

7.5 Payment Method Context. References to Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah throughout the platform are familiar local payment references for Pakistani users only. We do not represent that these providers are data processors for 3patii, nor that they endorse or support this platform.

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal and regulatory retention requirements. The following general retention principles apply:

• Account data is retained for the duration of the account relationship and for a further period as required by applicable law following account closure;
• KYC and identity documents are retained for the period required by the operator's AML obligations — typically a minimum of five (5) years from the date of collection or last account activity, whichever is later;
• Transaction records are retained for a minimum of five (5) years for financial and AML audit purposes;
• Support communications are retained for up to three (3) years for quality assurance and dispute-resolution purposes;
• Analytics data is anonymised and aggregated within twelve (12) months of collection where it is no longer required in identifiable form.

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised. Requests for early deletion are handled in accordance with Section 11 (User Rights) below.

3patii implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data at rest;
• Role-based access controls restricting internal access to personal data on a need-to-know basis;
• Regular security assessments of platform infrastructure;
• Two-factor authentication (2FA) options for user accounts;
• Incident response procedures for detecting and addressing data security events.

Despite these measures, no system is completely secure. In the event of a data breach that poses a risk to your rights, we will notify affected users and relevant authorities as required by applicable law and without undue delay.

3patii uses cookies and similar technologies (local storage, session storage, pixels) to operate the platform, remember your preferences and analyse usage patterns. The following types of cookies are used:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the platform. Consent-based cookies (analytics, marketing) can be withdrawn at any time via your account privacy settings or browser controls.

Subject to applicable law and any overriding legal obligations (such as AML retention requirements), you have the following rights in relation to your personal data:

To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing the request and respond within the timeframe required by applicable law. We will not charge a fee for reasonable data rights requests.

The 3patii platform is strictly for adults aged 18 years or older — or the higher minimum age required by the operator's license jurisdiction, whichever is greater. We do not knowingly collect personal data from individuals below the minimum age.

Where we discover that personal data has been submitted by a minor, we will delete that data promptly and close the associated account without processing any pending withdrawals. If you believe a minor has submitted personal data to 3patii, please contact us at [email protected] immediately.

As 3patii is operated by an internationally licensed operator, your personal data may be transferred to, and processed in, countries other than Pakistan. Where such transfers occur, we ensure that appropriate safeguards are in place — such as contractual data protection clauses with third-party processors — to maintain a level of protection consistent with applicable data protection principles.

Users in Pakistan are advised that Pakistan does not currently have a comprehensive data protection law equivalent to the EU GDPR; however, we apply data protection principles reflective of international best practice regardless of where your data is processed.

We may update this Privacy Policy periodically to reflect changes in our data practices, platform features or applicable legal requirements. The "Last reviewed" date at the top of this page indicates when the most recent review was completed.

Where changes are material — for example, introducing a new category of data processing or a new third-party processor category — we will provide advance notice via a platform notification or an email to your registered address before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy, wish to exercise a data right, or want to report a privacy concern, please contact us using the details below: