How 3ptt Collects, Protects, and Respects Your Personal Data

1 Introduction & Scope

This Privacy Policy ("Policy") describes the personal data practices of 3ptt ("the Platform", "we", "us", "our") as they apply to individuals ("Players", "you", "your") who register, access, or use any service offered via the 3ptt website and associated applications. This Policy applies to all data collected through registration, account use, gaming activity, payment processing, customer support interactions and your general browsing of the 3ptt platform.

By creating a 3ptt account and using any Platform service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must not register for or continue using the 3ptt platform.

This Policy should be read in conjunction with the 3ptt Terms and Conditions, which govern the overall relationship between you and the Platform. In the event of conflict between this Policy and the Terms and Conditions on privacy matters, this Privacy Policy shall take precedence.

2 Data Controller Identity

2.1 For the purposes of data protection, 3ptt operates as the data controller in respect of all personal information collected from Pakistani players using the Platform. As data controller, 3ptt determines the purposes and means by which your personal data is processed.

2.2 All inquiries, data subject requests, and privacy-related concerns should be directed to the 3ptt data privacy contact at: [email protected]. We are committed to acknowledging all privacy-related communications within five (5) business days and resolving substantive requests within thirty (30) calendar days.

3 Information We Collect

3ptt collects personal information through several channels and in various categories. The following table summarises the categories of data collected and the context in which they arise:

3.1 Information You Provide Directly

The primary source of personal data is information you provide directly to 3ptt: during account registration (name, mobile number, date of birth, email address); during KYC verification (identity documents, proof of address); when making deposits or requesting withdrawals (payment account details); and when contacting customer support (queries, complaints, feedback).

3.2 Information Collected Automatically

When you access and use the 3ptt platform, certain technical data is collected automatically by our systems. This includes your IP address, the type and version of device and browser you are using, your approximate geographic location (derived from IP address), the pages and games you access, the duration of your sessions, and error or crash data. This technical data is used to maintain Platform security, diagnose technical problems, and improve the overall user experience.

3.3 Information from Third Parties

In limited circumstances, 3ptt may receive information about you from third parties. This includes: identity verification data from licensed KYC and anti-money laundering service providers; payment confirmation data from JazzCash, EasyPaisa and banking partners; and fraud detection signals from security service providers engaged by 3ptt to protect the integrity of the Platform.

4 How We Use Your Data

3ptt processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and enable you to access all 3ptt services.
• Payment processing: To process PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and bank transfer; to verify that withdrawals are directed to accounts registered in your name; and to maintain accurate financial records required by applicable regulations.
• Gaming services delivery: To operate cricket betting, live casino, slots, and all other gaming products; to calculate and settle bets; and to credit winnings to your account balance.
• KYC and compliance: To verify your identity, confirm your age (minimum 21 years), and fulfil anti-money laundering (AML) obligations by monitoring transactions for unusual patterns.
• Responsible gaming: To implement and monitor deposit limits, session controls, cool-off periods and self-exclusion requests; and to identify patterns of play that may indicate problematic gambling behaviour, enabling the 3ptt responsible gaming team to reach out proactively.
• Customer support: To respond to your queries, investigate complaints, and maintain records of support interactions for quality assurance purposes.
• Platform security: To detect, prevent and investigate fraud, account compromise, bot activity and other security threats to the 3ptt platform and its players.
• Platform improvement: To analyse aggregate, anonymised usage patterns to improve the design, performance, and content of the 3ptt platform.
• Legal compliance: To meet obligations imposed by applicable laws and regulatory directives, including data retention requirements and disclosure obligations to competent authorities.

3ptt does not use your personal data for automated individual decision-making that produces significant legal or similarly significant effects without human review.

5 Legal Basis for Processing

3ptt processes your personal data on the following legal bases:

• Contractual necessity: Processing your data is necessary to fulfil the contract between you and 3ptt — specifically to operate your account and deliver the gaming services you have signed up for.
• Legal obligation: Certain processing (particularly KYC identity verification, AML transaction monitoring and record retention) is required by applicable laws and regulations.
• Legitimate interests: 3ptt processes technical and security data on the basis of its legitimate interests in maintaining platform integrity, preventing fraud, and improving the player experience, provided these interests are not overridden by your rights.
• Consent: For optional marketing communications (if you opt in), and for certain cookie categories beyond strictly necessary functionality, processing is based on your consent, which you may withdraw at any time.

6 Payment Data & KYC

6.1 Financial data processed by 3ptt in connection with PKR deposits and withdrawals is handled with the highest level of security and access control. Complete payment credentials (mobile wallet PINs, full bank account numbers) are never stored on 3ptt systems. Only the transaction references, account name identifiers and timestamps necessary for financial record-keeping and dispute resolution are retained.

6.2 KYC documents submitted to 3ptt — including copies of Pakistani CNICs, passports and proof of address — are transmitted via encrypted channels and stored in access-controlled environments accessible only to authorised compliance personnel. KYC documents are retained for the period required by applicable regulations and are then securely destroyed.

6.3 In the event of a suspected fraudulent transaction or AML concern, 3ptt may share relevant financial data with its licensed payment providers, banking partners or competent regulatory authorities. Any such sharing is conducted under strict confidentiality obligations and only to the extent required by law or necessary to protect the security of the Platform.

7 Cookies & Tracking Technologies

7.1 Strictly Necessary Cookies. 3ptt uses strictly necessary cookies to maintain your login session, remember your language preference, and ensure the platform functions correctly. These cookies cannot be disabled without breaking core platform functionality.

7.2 Analytics Cookies. With your consent, 3ptt uses aggregate analytics to understand how players use the platform — which game categories are most visited, where players encounter navigation difficulties, and how platform performance varies across device types. Analytics data is collected in aggregate and anonymised form and is not used to identify individual players.

7.3 No Third-Party Advertising Trackers. 3ptt does not embed third-party advertising pixels, social media tracking scripts, or cross-site advertising cookies in the Platform. Your browsing and gaming activity on 3ptt is not shared with advertising networks.

7.4 Cookie Management. You can manage cookie preferences through your browser settings at any time. Disabling analytics cookies will not affect your ability to log in and use the 3ptt platform. Instructions for managing cookies are available in the help section of all major browsers.

8 Data Sharing & Disclosure

3ptt does not sell, rent or trade your personal data. We share your data only in the following circumstances and with the following categories of recipients:

• KYC and identity verification providers: Licensed third-party services engaged by 3ptt to verify the identity and age of Players as required by the Platform's KYC obligations. These providers process data only on 3ptt's instructions and under binding confidentiality agreements.
• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank and other payment processing partners receive the minimum data required to process your deposit or withdrawal transaction.
• Platform security providers: Fraud detection and cybersecurity service providers engaged by 3ptt to protect the integrity of the Platform may receive technical and behavioural data for the purpose of identifying and preventing security threats.
• Legal and regulatory authorities: 3ptt may disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by applicable law, a valid legal process, or where disclosure is necessary to protect the rights, property or safety of 3ptt, its players or the public.
• Business successors: In the event of a merger, acquisition or sale of substantially all of 3ptt's assets, Player data may be transferred to the acquiring entity, provided that the acquiring entity agrees to protect Player data in a manner consistent with this Policy.

9 Data Retention Periods

3ptt retains personal data for as long as necessary to fulfil the purposes described in this Policy and to meet applicable legal retention obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active 3ptt account, plus a period of five (5) years following account closure, as required for financial and compliance record-keeping.
• KYC documents: Retained for five (5) years following account closure or the last transaction, as required by applicable AML regulations.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction.
• Gaming activity data: Session and bet history is retained for three (3) years following the relevant gaming activity, for responsible gaming monitoring and dispute resolution purposes.
• Support communications: Customer support correspondence is retained for two (2) years following the resolution of the relevant query or complaint.
• Technical and security logs: IP address logs and login records are retained for twelve (12) months and then deleted unless a security investigation requires longer retention.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted or anonymised so that it can no longer be associated with any individual player.

10 Security Measures

3ptt implements a layered security architecture to protect your personal data against unauthorised access, loss, alteration or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 3ptt servers.
• Encryption at rest for sensitive data categories including identity documents and financial records.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Multi-factor authentication required for all 3ptt administrative system access.
• Regular security assessments and penetration testing of platform infrastructure.
• Automated monitoring for unusual login patterns, concurrent sessions and suspicious account activity.
• Incident response procedures for detecting, containing and notifying affected parties of data security incidents.

While 3ptt employs industry-standard security practices, no internet-based platform can guarantee absolute security. Players are encouraged to use strong unique passwords for their 3ptt accounts, enable two-factor authentication, and report any suspicious account activity to the 3ptt support team immediately.

11 Your Privacy Rights

As a 3ptt player, you hold the following rights in respect of your personal data held by the Platform. Requests to exercise these rights may be submitted via the 3ptt support channel and will be processed within thirty (30) calendar days:

Please note that certain rights are subject to limitations. For example, 3ptt cannot delete transaction records that must be retained for legal compliance purposes, and cannot provide access to data that would reveal information about other individuals. Where a request cannot be fulfilled in full, 3ptt will explain the reason in writing.

12 Children & Minors

The 3ptt platform is strictly intended for individuals aged twenty-one (21) years and above. 3ptt does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts seeking to use real-money gaming services.

If 3ptt becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all data collected in connection with that account will be deleted (except as required for regulatory reporting of underage gambling), and any deposits will be returned to the originating payment method.

Parents and guardians who believe a minor under their care may have accessed the 3ptt platform should contact the support team immediately at [email protected] for prompt investigation and account closure.

13 Changes to This Privacy Policy

13.1 3ptt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform functionality. When material changes are made, 3ptt will notify registered Players via email to their registered address and/or via a prominent on-platform notification, at least seven (7) days before the revised Policy takes effect.

13.2 The "Last Updated" date displayed at the top of this Policy will reflect the date of the most recent revision. Continued use of the 3ptt platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

13.3 We encourage Players to review this Policy periodically to remain informed about how 3ptt handles their personal data. Archived versions of previous Privacy Policy iterations are available upon request from the 3ptt support team.

14 Contact & Complaints

For any questions, concerns or requests relating to this Privacy Policy or 3ptt's personal data practices, please contact our privacy team through the following channel:

If you are not satisfied with 3ptt's response to a privacy complaint or data subject request, you may escalate the matter through the Platform's formal dispute resolution process as described in the 3ptt Terms and Conditions.