3pattiok Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") explains how 3pattiok ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal data of players and visitors ("you", "your") who access or use the 3pattiok website at https://3pattiok.bet, including all games, betting markets, account features, and support services (collectively, the "Services").

3pattiok is an online casino and sports betting platform primarily serving English-speaking players across Pakistan — including major cities such as Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and Multan. We recognise that our players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference and form part of our overall agreement with you.

2 Data We Collect

3pattiok collects personal data only to the extent necessary for the lawful operation of our platform, fulfilment of our regulatory obligations, and delivery of a high-quality gaming experience to Pakistani players. The categories of personal data we collect are as follows:

2.1 Registration & Identity Data

When you create a 3pattiok account, we collect your full legal name, date of birth, email address, and your chosen username and password. This information is mandatory — without it, we cannot create a verified player account.

2.2 KYC & Verification Documents

As required under international anti-money laundering (AML) frameworks, we collect documentary evidence of your identity and source of funds. This includes copies of your Pakistani CNIC or passport, and proof of ownership of your payment method (such as a screenshot of your JazzCash or EasyPaisa wallet). KYC documents are processed by our licensed verification partner and are not stored beyond the legally mandated retention period.

2.3 Financial & Transaction Data

We record all deposit and withdrawal transactions, including the payment method used (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard, or USDT), transaction amounts in PKR or crypto, timestamps, and transaction reference numbers. Full card or wallet numbers are never stored on 3pattiok servers — they are tokenised by our payment processor.

2.4 Gaming & Betting Activity

We maintain records of all games played, bets placed, outcomes, bonus activations, and wagering activity on your account. This data is used for account integrity checks, dispute resolution, responsible gaming monitoring, and platform optimisation.

2.5 Technical & Device Data

We automatically collect technical information when you access 3pattiok, including your IP address, device type, operating system, browser type and version, session timestamps, pages visited, and referral source. This data is used for security monitoring, fraud prevention, and platform performance analysis.

2.6 Communications Data

Any communications you send to 3pattiok — through live chat, email to [email protected], or our feedback tools — are stored for quality assurance, compliance, and dispute resolution purposes. We may record live chat transcripts with your awareness as noted at the start of each chat session.

3 How We Use Your Data

The personal data 3pattiok collects is used for the following purposes:

We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required by our regulatory obligations (e.g., automated fraud detection triggers, which are always subject to manual review before any account action is taken).

4 Legal Basis for Processing

3pattiok processes your personal data under the following legal bases, consistent with internationally recognised data protection principles:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — such as processing your deposits, maintaining your account, and paying out winnings.
• Legal Obligation: Processing required by applicable law — including AML/CFT regulations, gaming licensing requirements, and age verification obligations. We are legally required to retain certain records for defined minimum periods regardless of your instructions.
• Legitimate Interests: Processing necessary for 3pattiok's legitimate business interests — such as fraud prevention, security monitoring, platform analytics, and improving the player experience — provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — such as opt-in marketing emails, promotional SMS messages, and optional analytics cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

3pattiok does not sell, rent, or trade your personal data. Data is shared with third parties only where strictly necessary, and only with parties who are contractually bound to handle your data in accordance with applicable data protection standards. Third-party recipients include:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our card/crypto payment infrastructure providers receive the minimum data necessary to process your transactions. None of these partners are permitted to use your data for their own marketing purposes.
• KYC & Identity Verification Providers: Our licensed third-party KYC partner processes identity documents on our behalf to fulfil our age verification and AML obligations. They operate under strict data processing agreements and are prohibited from retaining your documents beyond the verification process.
• Fraud Prevention & Security Services: We use industry-standard fraud detection tools that analyse anonymised or pseudonymised technical signals (IP reputation, device fingerprints) to protect the platform and our players from fraudulent activity.
• Regulatory Authorities: We may be required by law, court order, or regulatory directive to disclose player data to competent authorities. We will only do so to the extent legally required and will endeavour to notify affected players where we are legally permitted to do so.
• IT & Hosting Infrastructure: Our platform is hosted on secure cloud infrastructure. Hosting partners are bound by strict data processing agreements and operate under internationally recognised security certifications.

6 Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit 3pattiok. They help us maintain your session, remember your preferences, and collect analytics data to improve our platform. 3pattiok uses only first-party cookies — we do not deploy third-party advertising or cross-site tracking cookies.

6.2 Cookie Categories We Use

6.3 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use core platform features. Disabling analytics cookies will not affect your ability to play games or place bets. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Retention

3pattiok retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as required by applicable law. Our general retention schedule is as follows:

• Active account data (profile, transaction history, gaming records): Retained for the full duration of your account and for a minimum of five (5) years following account closure, as required by international AML/CFT regulations.
• KYC documents (CNIC copies, passport scans, selfies): Retained for a minimum of five (5) years following the completion of verification, in compliance with our licensing obligations. After this period, documents are securely deleted from our systems.
• Communications data (live chat transcripts, support emails): Retained for two (2) years from the date of the communication, or longer if the communication relates to an unresolved dispute.
• Technical & device data (IP logs, session logs): Retained for twelve (12) months for security monitoring purposes, after which they are automatically purged from our logs.
• Marketing consent records: Retained for the duration of your consent plus three (3) years to demonstrate compliance in the event of a regulatory inquiry.

8 Data Security

3pattiok implements a comprehensive suite of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and 3pattiok's servers is encrypted using industry-standard TLS 1.2 or higher protocols. Look for the padlock icon in your browser address bar as confirmation.
• At-Rest Encryption: Sensitive data stored in our databases — including KYC documents and financial records — is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within 3pattiok's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: 3pattiok offers and encourages the use of Two-Factor Authentication (2FA) for all player accounts as an additional layer of protection against unauthorised login.
• Penetration Testing & Security Audits: Our platform undergoes regular security assessments by independent security specialists to identify and remediate vulnerabilities.
• Incident Response: In the event of a data breach that poses a risk to your rights and freedoms, 3pattiok will notify affected players and relevant regulatory authorities within 72 hours of becoming aware of the incident, consistent with international data breach notification standards.

Notwithstanding the above, no method of data transmission or storage over the internet is guaranteed to be 100% secure. While we work hard to protect your data, we cannot provide an absolute guarantee of security and encourage you to use a strong, unique password for your 3pattiok account and to enable 2FA where available.

9 Your Privacy Rights

As a 3pattiok player, you have the following rights in relation to your personal data. These rights are exercisable by submitting a written request to [email protected]. We will respond to all valid requests within thirty (30) days.

• Right of Access: You have the right to request a copy of the personal data 3pattiok holds about you, along with information about how it is processed, to whom it has been disclosed, and for how long it will be retained.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it. You may also update certain information directly through your account settings.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that this right is subject to our legal data retention obligations — we cannot delete data we are legally required to keep.
• Right to Restrict Processing: You may request that we temporarily halt the processing of your personal data while a dispute or verification request is pending.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV) for transfer to another platform, where technically feasible.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to 3pattiok demonstrating compelling grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

10 Children & Minors

The 3pattiok platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we discover or have reason to believe that a player is under the age of 21, we will immediately suspend the account, freeze any associated balance pending investigation, and permanently delete all personal data collected from that individual upon confirmation of underage status.

If you are a parent or guardian and believe that a minor in your care has registered a 3pattiok account or provided us with personal data, please contact us immediately at [email protected]. We will investigate the matter and take appropriate action, including account closure and data deletion, as promptly as possible.

11 International Data Transfers

3pattiok's platform infrastructure, including its servers and data storage systems, may be located in jurisdictions outside Pakistan. When your personal data is transferred internationally, 3pattiok ensures that appropriate safeguards are in place to protect it to a standard equivalent to that required under international data protection law.

These safeguards may include:

• Transfers to countries recognised as providing an adequate level of data protection;
• Standard contractual clauses or data processing agreements with third-party service providers that require equivalent data protection standards;
• Binding corporate rules where applicable within our corporate group.

By registering a 3pattiok account, you acknowledge and consent to the transfer of your personal data to servers and processors located outside Pakistan, subject to the safeguards described above.

12 Updates to This Policy

3pattiok reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how we use your personal data or your privacy rights — we will provide advance notice via email to your registered address and/or a prominent notice on the 3pattiok homepage at least seven (7) days prior to the changes taking effect.

Minor or administrative updates (such as correcting typographical errors or clarifying existing practices without substantive change) may be made without advance notice. The "Last Revised" date at the top of this page will always reflect the most recent revision.

Your continued use of 3pattiok following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised terms, please cease using the platform and contact us to close your account.

13 Contact Us

If you have any questions, concerns, or complaints relating to this Privacy Policy or the way 3pattiok handles your personal data, please reach out through any of the following channels:

• Email: [email protected] — include "Privacy Policy" in the subject line for faster routing
• Live Chat: Available 24/7 via the chat widget on the 3pattiok platform
• Support Hours: 9:00 AM – 3:00 AM PKT, seven days a week