3pat Privacy Policy — Your Data, Explained Clearly

1. Who We Are

This Privacy Policy applies to the 3pat online gaming platform, accessible at 3pat.app. When this policy refers to "3pat", "we", "us" or "our", it means the operator of the 3pat platform.

3pat is an online gaming and entertainment platform designed for Pakistan players. We offer slots, fish games, bingo, a full game lobby and cricket/sports betting, all in PKR with local payment options including JazzCash, Easypaisa, Raast and bank transfers. Your personal data is collected and processed by 3pat in connection with your use of these services.

If you have questions about this policy or want to discuss how your data is handled, contact us via live chat at any time. Our support team is available 24 hours a day, 7 days a week.

2. What Data We Collect

3pat collects the following categories of personal information, depending on how you interact with the platform:

Account Registration Data

• Full legal name
• Date of birth
• Pakistani mobile number
• Email address (if provided)
• Account username and encrypted password

Identity Verification Data

• CNIC number and copy of CNIC document
• Selfie or document photograph (where required for verification)

Payment & Transaction Data

• JazzCash or Easypaisa account reference (not your full mobile wallet credentials)
• Bank account details for transfer-based deposits or withdrawals
• Transaction amounts, dates and reference numbers
• Deposit and withdrawal history

Platform Usage Data

• Games played, session durations and bet history
• Bonus claims and wagering progress
• Device type, operating system and browser version
• IP address and approximate location (city/region level)
• Login timestamps and session activity

Support Communication Data

• Live chat transcripts relating to your support queries
• Email correspondence with the support team

3. How We Collect Your Data

Your data is collected in three main ways on 3pat:

• Directly from you — when you register, complete identity verification, make a deposit, contact support or update your account settings.
• Automatically during platform use — when you play games, log in or navigate the platform, usage data is collected automatically through the platform's technical systems.
• From verification partners — if you submit identity documents, our verification partner processes those documents and returns a verification outcome to 3pat. The partner receives only what is needed for their specific verification function.

3pat does not purchase data from data brokers or compile profiles from publicly available social media information. The data we hold about you comes from your direct interaction with the 3pat platform.

4. Why We Use Your Data

3pat uses your personal data only for legitimate operational purposes directly related to running your account and providing the gaming service. The table below summarises each purpose:

3pat does not use your data for profiling, automated decision-making that affects your rights, or selling to advertisers. If we ever need to use your data for a purpose not listed above, we will notify you and ask for your consent before proceeding.

5. Payment Data

When you deposit or withdraw on 3pat using JazzCash, Easypaisa, Raast or bank transfer, certain payment details are involved in the transaction. It is important to understand exactly what 3pat holds and what it does not:

• 3pat does not store your JazzCash or Easypaisa PIN or wallet password. These credentials stay with your mobile wallet provider.
• For bank transfers, 3pat retains the account reference and transaction amount for reconciliation — not your full banking credentials.
• Payment transaction records are retained for the purpose of dispute resolution, withdrawal processing and fraud detection.
• Payment data shared with providers (e.g., the payment gateway processing your card deposit) is the minimum required for that transaction to complete.

6. Identity Verification (KYC)

3pat is required to verify the identity of account holders before processing withdrawals. This is a standard practice across the gaming industry and is primarily in place to protect players — it prevents someone else from withdrawing your balance even if they access your account credentials.

The verification process involves submitting a photograph of your CNIC (Computerised National Identity Card). The document image is processed by a verification partner, who returns a confirmed or unconfirmed result to 3pat. The following points apply to your KYC data:

• CNIC images are processed for the sole purpose of confirming your identity and age.
• Verification partner staff who process documents are subject to confidentiality obligations.
• CNIC data is not used for any purpose other than identity verification and fraud prevention.
• If verification fails or is incomplete, the document is not retained beyond the period needed to communicate the outcome to you.

If your CNIC verification is completed successfully, the verification record is retained for the lifetime of your account and a reasonable period after closure, consistent with our retention policy in Section 10.

7. Third-Party Data Sharing

3pat shares personal data with third parties only in the following specific circumstances. In every case, data sharing is limited to the minimum required for the third party to perform their function.

Payment Processors

JazzCash, Easypaisa, Raast gateway providers, card processing networks and bank transfer facilitators receive transaction data necessary to process your deposits and withdrawals. Each processor operates under their own privacy policy and data handling standards.

Identity Verification Partners

When you submit your CNIC for verification, the document image and associated data are shared with our verification partner. This partner is bound by confidentiality obligations and processes your data only for the purpose of returning a verification result.

Platform Infrastructure Providers

Third-party providers who host the platform's servers, databases and content delivery infrastructure may have technical access to data as part of their service. These providers are under data processing agreements that restrict how they may use any data they access.

Legal & Regulatory Requirements

3pat will disclose personal data if required to do so by law, court order or a legitimate authority request. We will not voluntarily share data beyond what is legally required and will inform you if we receive a data request wherever we are legally permitted to do so.

8. Cookies & Platform Tracking

3pat uses cookies and similar tracking technologies to make the platform work correctly and to understand how it is being used. Cookies are small data files stored in your browser when you visit 3pat.app.

Essential Cookies

These are required for the platform to function. They maintain your login session, remember your preferences and ensure the platform loads correctly on your device. You cannot opt out of essential cookies without preventing the platform from working.

Analytics Cookies

Analytics tools help 3pat understand which games are popular, where users encounter difficulties and how different parts of the platform are performing. This data is aggregated and does not identify individual users. It is used only to improve the platform experience.

Managing Cookies

Most browsers allow you to view and delete cookies through the browser settings. Note that disabling non-essential cookies will not affect your ability to play games or access your account. For mobile browsers, cookie settings are typically found under the browser's privacy or site settings menu.

3pat does not use advertising cookies or allow third-party ad networks to place tracking cookies through the platform.

9. Your Rights Over Your Data

You have meaningful rights over the personal data 3pat holds about you. Here is what you can ask for and how to do it:

• Access: Request a copy of all personal data 3pat holds in connection with your account. We will provide this within a reasonable timeframe, typically within 30 days of a verified request.
• Correction: If any of your personal data is inaccurate or out of date, you can request a correction. For most account details, you can update these directly through your account settings.
• Deletion: You can request that your account and associated personal data be deleted. We will process this after confirming your identity, settling any outstanding balance and completing any legally required retention period.
• Restriction: You can request that we restrict processing of your data in specific circumstances — for example, while a dispute is being investigated.
• Portability: You can request a copy of your data in a machine-readable format where technically feasible.
• Objection: If you object to any specific use of your data, contact support with details of your objection and we will review and respond.

To exercise any of these rights, contact us via live chat or email at [email protected]. You will be asked to verify your identity before we process any data-related request, to protect against unauthorised access to your information.

10. Data Retention

3pat retains personal data for as long as is necessary to fulfil the purposes for which it was collected, plus any additional period required for legal compliance or dispute resolution.

• Active account data — retained for the lifetime of your account
• Transaction and payment records — retained for a minimum of 5 years after the transaction date for financial record-keeping purposes
• Identity verification documents — retained for the duration of account activity plus a reasonable period after closure
• Support communications — retained for up to 2 years after the conversation closes
• Game history — retained for a minimum of 12 months for dispute resolution purposes

After the applicable retention period expires, data is securely deleted or anonymised so it can no longer be linked to an individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes — this data cannot identify you.

11. Security Measures

3pat implements technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include:

• SSL/TLS Encryption: All data transferred between your device and 3pat's servers is encrypted in transit. The padlock icon in your browser confirms this is active.
• At-Rest Encryption: Sensitive data stored in 3pat's databases is encrypted at rest.
• Access Controls: Staff access to personal data is role-based and logged. Only staff whose function requires access to specific data categories are granted that access.
• Two-Factor Authentication: Available for all accounts to add an additional layer of login security.
• Session Security: Active sessions time out after a period of inactivity. Multiple active sessions are visible in your account settings.
• Penetration Testing: Platform security is periodically tested to identify and remediate vulnerabilities before they can be exploited.

No online platform can guarantee absolute security — the internet inherently carries some risk. What we can guarantee is that 3pat takes reasonable, industry-standard steps to protect your data and that we will inform you promptly in the event of any security incident that affects your account.

12. Children's Privacy

3pat is an adult platform. We do not knowingly collect personal data from anyone under the age of 18. If an individual under 18 has registered on the platform — which is a breach of our Terms and Conditions — and we become aware of this, we will close the account immediately and delete the associated personal data.

If you have reason to believe a minor is using this platform, please contact us via live chat immediately. We treat any credible report of underage access seriously and act on it promptly.

Adults who share a device with minors should ensure that platform access is not available to those individuals. We recommend using separate browser profiles and enabling device-level parental controls where appropriate.

13. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in how 3pat operates, new legal requirements or improvements to our data practices. When material changes are made, registered account holders will be notified via the contact details on file or through an account dashboard notification.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We recommend reviewing this page periodically if you want to stay current with how 3pat handles your data. The previous version of this policy is available on request from the support team.

Your continued use of 3pat after a policy update has been communicated constitutes your acceptance of the revised policy. If you disagree with any changes, you should contact support to discuss your options before the updated policy takes effect.

14. Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal information has been handled, you can contact 3pat through the following channels:

• Live Chat: Available 24/7 directly on the 3pat platform — the fastest way to get a response
• Email: [email protected] — for written enquiries and formal data rights requests

For data rights requests submitted by email, please include your registered account username and a brief description of what you are requesting. We will acknowledge your request within 48 hours and aim to fulfil it within 30 days, or inform you if additional time is required for complex requests.

We're a platform that takes privacy seriously — not because we're legally required to say that, but because our players in Pakistan deserve to know that their information is being treated with care and respect. If something about our data practices doesn't sit right with you, tell us, and we'll address it.