This Privacy Policy ("Policy") describes how 3patte ("we", "us", "the Platform", "the Operator") collects, processes, stores, and protects personal information provided by registered players and site visitors ("you", "the Player", "the User"). This Policy forms an integral part of the 3patte Terms & Conditions and applies to all personal data processed in connection with your use of the 3patte platform at 3patte.one.
By creating a 3patte account or continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. We encourage all Players to review this Policy carefully and to contact our support team at [email protected] if you have any questions about how your personal data is handled.
These six commitments summarise the principles that guide every data decision at 3patte. They do not replace the full Policy — all Players must read the complete document below.
3patte does not sell, rent, or trade your personal data to any third-party marketers, data brokers, or commercial entities. Your data is used solely for the operational purposes described in this Policy — account management, payment processing, regulatory compliance, and platform improvement.
Every transmission of personal data between your device and 3patte's servers is protected by 256-bit SSL/TLS encryption — the same security standard employed by major Pakistani banks including HBL and UBL. Your CNIC details, financial information, and account credentials are never transmitted in plain text at any stage.
3patte provides every registered Player with the right to access, correct, export, and request deletion of their personal data. These rights can be exercised at any time by contacting our support team. We respond to all data rights requests within 30 calendar days of receipt of a valid request.
3patte operates on a data minimisation principle — we collect only the personal information that is strictly necessary to provide our services, comply with our regulatory obligations under international gaming licence conditions, and protect the integrity of the platform. We do not collect data for speculative or undefined future purposes.
3patte retains personal data only for as long as it is necessary for the purpose it was collected, or as required by the conditions of our international gaming licence and applicable legal obligations. Specific retention periods for each data category are set out in Section 9 of this Policy.
In the event of a data security breach that poses a risk to your personal data, 3patte will notify affected Players without undue delay, in accordance with our obligations under the applicable data protection framework governing our international gaming licence jurisdiction. Notifications will be sent to your registered email address.
In this Privacy Policy, the following terms shall carry the meanings defined below:
3patte, operating the online gaming platform at 3patte.one under an international gaming licence, acts as the Data Controller for all Personal Data collected through the platform. As Data Controller, 3patte is responsible for determining the purposes for which Personal Data is processed and for ensuring that all processing activities comply with the applicable data protection framework governing our licensing jurisdiction.
Questions regarding data controller responsibilities or data subject rights may be directed to our support team at [email protected] with the subject line "Data Privacy Enquiry".
3patte collects the following categories of personal data from Players and site visitors. Collection of each category is driven by a specific operational, regulatory, or legal necessity:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, CNIC number, CNIC front and back images, selfie photograph | Account registration; KYC verification |
| Contact Data | Pakistani mobile number, email address, city of residence | Account registration |
| Financial Data | JazzCash wallet number, EasyPaisa account number, bank account details (HBL, UBL, Meezan Bank), deposit and withdrawal amounts, transaction timestamps | Payment processing; withdrawal verification |
| Gaming Data | Bet history, game session logs, win/loss records, sportsbook wager details, bonus usage history, responsible gaming settings | Platform use; regulatory reporting |
| Technical Data | IP address, device type and model, browser type and version, operating system, screen resolution, time zone, connection type | Platform access; fraud prevention |
| Usage Data | Pages visited, session duration, navigation paths, feature interactions, login timestamps, promotional responses | Platform analytics; user experience improvement |
| Communications Data | Support chat transcripts, email correspondence, dispute records, complaint submissions | Customer support; dispute resolution |
| Source of Funds Data | Employment information, income documentation, bank statements (requested for high-volume accounts or as required by compliance) | AML compliance; regulatory obligation |
3patte collects Personal Data directly from you when you: register a new account on the platform; complete KYC identity verification by submitting CNIC documents; make a deposit or submit a withdrawal request; contact our customer support team via live chat or email; respond to a promotional offer or complete a survey; or update your account profile information.
When you access or use the 3patte platform, certain data is collected automatically through technical means — including session cookies, browser fingerprinting, server logs, and analytics tools. This data includes your IP address, device identifiers, browser type, pages visited, and session duration. Automated collection enables 3patte to maintain platform security, detect fraudulent activity, and improve user experience based on aggregated usage patterns.
In certain circumstances, 3patte may receive Personal Data about you from authorised third parties, including: payment processors who confirm the ownership and status of your JazzCash or EasyPaisa account; identity verification service providers who validate CNIC authenticity; and fraud detection partners who flag IP addresses or device signatures associated with known fraudulent activity. Data received from third parties is handled with the same standard of care as data collected directly from you.
3patte processes your Personal Data on the following legal bases, each of which applies to specific categories of processing activity:
3patte uses your Personal Data for the following specific purposes:
3patte shares Personal Data with authorised third-party Data Processors who assist in delivering our services. All such processors operate under binding data processing agreements that restrict their use of your data to the specific purpose for which it is shared and require them to maintain appropriate security standards. Categories of Data Processor engaged by 3patte include:
3patte may be required to disclose Personal Data to regulatory authorities, law enforcement agencies, or courts as required by the conditions of our international gaming licence, applicable law, or valid legal process. We will make reasonable efforts to notify affected Players of such disclosure requests where legally permissible to do so.
The 3patte platform uses the following categories of cookies and tracking technologies:
You may manage non-essential cookie preferences through your browser settings. Disabling analytics cookies will not affect your ability to access gaming services, but may result in less personalised platform experiences. Disabling strictly necessary cookies will prevent you from logging in and accessing your account. Most modern browsers provide cookie management controls in their privacy or settings menus.
3patte retains Personal Data for the periods specified below, after which data is securely deleted or anonymised unless an ongoing legal obligation requires extended retention:
| Data Category | Retention Period | Basis for Period |
|---|---|---|
| Identity & KYC Data | 5 years after account closure | International gaming licence AML obligation |
| Transaction Data | 5 years after account closure | Gaming licence financial record-keeping requirement |
| Gaming Data | 3 years after account closure | Regulatory audit and dispute resolution requirement |
| Contact Data | Duration of account + 1 year | Support and communication continuity |
| Technical & Usage Data | 24 months from collection | Fraud detection; platform analytics |
| Communications Data | 2 years from last communication | Dispute resolution; quality assurance |
| Marketing Consent Records | Until consent withdrawn + 1 year | Consent management obligation |
Where a legal dispute, regulatory investigation, or gaming licence audit is in progress, 3patte may retain relevant data beyond the periods specified above until the matter is fully resolved.
3patte implements a layered security architecture to protect Personal Data from unauthorised access, accidental loss, disclosure, or destruction. Our technical and organisational security measures include:
As a registered 3patte Player, you hold the following rights in relation to your Personal Data. These rights may be exercised by submitting a request to [email protected] with subject line "Data Rights Request — [Your Account ID]". We respond to all valid requests within 30 calendar days.
Request a copy of all Personal Data 3patte holds about you, including account data, KYC records, transaction history, and gaming logs.
Request correction of inaccurate Personal Data held about you. Contact data corrections can be made directly in account settings for most fields.
Request deletion of your Personal Data where it is no longer necessary for the purpose collected, subject to overriding legal and regulatory retention obligations.
Request that 3patte restrict processing of your Personal Data while a data accuracy dispute or objection is being resolved, without deletion of the underlying data.
Request your Personal Data in a structured, machine-readable format for transfer to another service provider, where technically feasible and legally permissible.
Object to processing of your Personal Data on the basis of legitimate interests, including marketing communications. Objections to marketing take effect immediately upon receipt.
Please note that certain data rights requests may be limited where fulfilling them would conflict with 3patte's legal obligations under international gaming licence conditions, AML regulations, or ongoing regulatory investigations. 3patte will explain any limitations that apply to your specific request at the time of response.
The 3patte platform is strictly intended for adults aged 21 years or older. 3patte does not knowingly collect Personal Data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process using Pakistani CNIC documentation, which includes date of birth information.
If 3patte becomes aware that Personal Data has been collected from an individual under 21, the affected account will be immediately and permanently suspended, all associated data will be deleted to the fullest extent permissible under applicable law and gaming licence obligations, and all funds held in the account will be subject to forfeiture as described in our Terms & Conditions.
As a platform operating under an international gaming licence, certain Personal Data collected by 3patte may be transferred to, stored, or processed in jurisdictions outside of Pakistan. Such transfers occur only where necessary for the operational purposes described in this Policy — including cloud infrastructure hosting, KYC verification, and game content delivery.
Where Personal Data is transferred internationally, 3patte ensures that appropriate safeguards are in place to maintain the protection of your data, including contractual data processing agreements with receiving parties that impose equivalent data protection obligations. 3patte does not transfer Personal Data to jurisdictions that do not provide an adequate level of data protection without implementing additional contractual or technical safeguards.
The 3patte platform may from time to time reference third-party services — including game providers, payment processors, and responsible gaming support organisations — whose own privacy practices are independent of this Policy. 3patte is not responsible for the privacy practices of third-party platforms or services. Players who access third-party services through links or references on the 3patte platform do so at their own risk and are encouraged to review the privacy policies of those services independently.
3patte reserves the right to update or amend this Privacy Policy at any time. Where amendments are material — meaning they change how we use your Personal Data in ways that may affect your rights — we will notify registered Players by email at least 7 calendar days before the updated Policy takes effect. Minor updates that do not materially change our data practices will be reflected in an updated effective date and version number at the top of this document.
The current version of this Privacy Policy is always available at 3patte.one/privacy-policy. Continued use of the 3patte platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with an updated Privacy Policy, you must discontinue use of the platform and contact support to request account closure.
For all questions, concerns, or formal requests relating to this Privacy Policy or the processing of your Personal Data by 3patte, please contact us using the following details: