3pati Privacy
Policy

1 Introduction

3pati ("we", "us", "our") operates the online casino and sports betting platform at 3pati.bio. We are committed to protecting your personal data and handling it in a transparent, responsible, and lawful manner. This Privacy Policy describes our practices in relation to personal data that we collect from you directly, that you provide to us, or that we obtain from third parties in connection with your use of our platform.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and 3pati.

We take privacy seriously. 3pati is built for Pakistani players and we understand the importance of trust in a digital payments environment where JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 transactions are part of everyday life. We apply the same diligence to protecting your data as we do to protecting your funds.

2 Data We Collect

We collect personal data from you in several ways. The categories of data we collect are set out in the table below:

3 How We Use Your Data

3pati uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the 3pati platform.
• Payment processing: To facilitate deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20, and to reconcile your transaction history.
• KYC and age verification: To comply with our obligation to verify that all registered players are 21 years of age or older, and to confirm your identity in line with anti-money-laundering requirements.
• Platform security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions.
• Customer support: To respond to your queries, resolve disputes, process complaints, and provide account assistance via live chat and email.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling, to enforce self-exclusion and deposit limit settings, and to comply with responsible gaming obligations.
• Legal and regulatory compliance: To meet our obligations under applicable laws, including anti-money-laundering regulations, financial crime reporting requirements, and any orders issued by competent authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the 3pati platform experience, fix bugs, and develop new features.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and updates about new games or features — only where you have provided explicit consent or where permitted by applicable law. See Section 11 for full details.

4 Legal Basis for Processing

We process your personal data on the following legal grounds, depending on the nature of the processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, anti-money-laundering obligations, and lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications, where you have provided clear, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Third Parties

3pati does not sell, rent, or trade your personal data. We share personal data only in the following strictly limited circumstances:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 infrastructure providers receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own data protection obligations.
• KYC and identity verification providers: Third-party KYC service providers may receive your identity documents and personal details for the purposes of age and identity verification. All such providers are contractually bound to process your data only for KYC purposes.
• Game content providers: Third-party game studios whose titles appear on the 3pati platform may receive anonymised session identifiers for the purposes of game delivery and RNG certification. They do not receive your name, contact details, or financial information.
• Regulatory and law enforcement authorities: We may disclose your personal data to competent authorities where required by law, court order, or regulatory directive. We will notify you of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6 Cookies & Tracking Technologies

3pati uses cookies and similar technologies (such as local storage and session storage) to operate the platform effectively. We do not use third-party advertising cookies or cross-site tracking pixels.

You can control cookie settings through your browser. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform. Instructions for managing cookies in major browsers (Chrome, Firefox, Safari, Edge) are available via each browser's help section.

7 Data Security

3pati implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction:

• All data in transit is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Sensitive data at rest — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption on isolated, access-controlled storage systems.
• Access to personal data within 3pati's internal systems is restricted on a strict need-to-know basis, with role-based access controls and comprehensive access logging.
• Passwords are stored as salted cryptographic hashes. 3pati staff cannot view your plaintext password under any circumstances.
• Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• All payment transaction data is processed through PCI-DSS compliant payment channels. Card data is not stored on 3pati servers.
• In the event of a data breach that poses a risk to your rights and freedoms, 3pati will notify affected users within 72 hours of becoming aware of the breach, in accordance with our obligations under applicable law.

8 Data Retention

We retain personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account relationship with 3pati, plus a minimum of 5 years following account closure, in line with standard anti-money-laundering and financial record-keeping obligations.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required for financial compliance and dispute resolution purposes.
• KYC documents: Retained for a minimum of 5 years from the date of verification completion, in line with standard AML/KYC regulatory requirements.
• Support communications: Live chat transcripts and email correspondence are retained for 2 years from the date of the last interaction, or longer if the communication relates to an active dispute or investigation.
• Technical and analytics data: Anonymised or aggregated technical data may be retained indefinitely for platform improvement purposes, as it cannot be used to identify you.
• Self-exclusion records: Retained for the full duration of the self-exclusion period plus 5 years thereafter, to prevent re-registration in violation of the exclusion.

When personal data is no longer required, it is securely deleted or anonymised using industry-standard data destruction methods.

9 Your Privacy Rights

As a 3pati user, you have the following rights in relation to your personal data:

• Right of access: You may request a copy of all personal data we hold about you. We will respond within 30 days of a verified request.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. For basic account details, you can update information directly from your account dashboard.
• Right to erasure ("right to be forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that data required for AML compliance cannot be erased early regardless of this request.
• Right to restriction of processing: You may request that we restrict how we process your data while a dispute over accuracy or legitimate interests is being resolved.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to us, for transfer to another service provider where technically feasible.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though we may be required to continue processing on legal grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the legality of prior processing.

To exercise any of these rights, contact our support team via live chat from your account dashboard or by email at [email protected]. We may ask you to verify your identity before processing your request. All requests are handled free of charge.

10 Children & Minors

The 3pati platform is strictly intended for users who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If you are a parent or guardian and believe that your child has registered on 3pati, please contact us immediately at [email protected] so that we can close the account and delete the associated personal data promptly.

11 Marketing Communications

With your consent, 3pati may contact you by email or SMS to inform you about:

• New bonus offers, welcome promotions, and seasonal campaigns
• New game launches including slots, instant games, and live dealer additions
• Cricket betting promotions tied to PSL and international fixtures
• Platform updates, feature announcements, and app improvements
• Personalised offers based on your gameplay history

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link at the bottom of any marketing email
• Adjusting your notification preferences in your account dashboard settings after 3pati Login
• Contacting support via live chat or at [email protected] and requesting removal from all marketing lists

Opting out of marketing does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, or account security alerts — these are sent as a necessary part of the service and cannot be disabled while your account is active.

12 Third-Party Links

The 3pati platform may contain links to third-party services, including payment providers and game content partners. These third-party sites and services operate under their own privacy policies, which are entirely independent of this Policy. 3pati is not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy policy of any third-party service before submitting personal data to them.

The presence of a third-party link on the 3pati platform does not constitute an endorsement of that third party's privacy practices. If you follow a link to a third-party site from within the 3pati platform, you do so at your own risk and subject to that site's own terms and privacy policy.

13 Changes to This Privacy Policy

3pati reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform functionality. When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the 3pati platform for a minimum of 7 days prior to the updated Policy taking effect
• Sending an email notification to the address registered on your account where the changes materially affect your rights
• Updating the "Last updated" date at the top of this Policy

Your continued use of the 3pati platform after any updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the changes, you must discontinue use of the platform and may request account closure and data deletion as described in Section 9.

We recommend that you review this Privacy Policy periodically to stay informed about how we are protecting your information. Previous versions of this Policy are available on request from our support team.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3pati handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week from your account dashboard after completing 3pati Login. This is the fastest way to reach our Data Support team.
• Email: [email protected] — for formal written privacy requests and data subject rights exercises. We aim to respond within 30 days of receiving a verified request.

Our support team is fluent in English and serves players across Pakistan including Karachi, Lahore, Islamabad, Faisalabad, Multan, Rawalpindi, and Peshawar. All formal data subject requests must be submitted in writing via the email address above and must include sufficient information to verify your identity before we can process the request.