Privacy Policy for 3Patti Plus — How We Handle Your Personal Data

3Patti Plus is an online gaming platform serving players across Pakistan. We operate the website at https://3patti.plus and all associated services including live casino, sports betting, card games, crash games, and the VIP Club. When we say "3Patti Plus", "we", "us", or "our" in this policy, we mean the company operating this platform.

We recognise that privacy is a genuine concern for Pakistani players. Sharing your mobile number, financial information, and personal details with an online platform requires trust — and this policy is our commitment to being completely transparent about what happens to that information once you share it with us.

This policy was written in plain English specifically for Pakistani users. We have deliberately avoided legal language that obscures meaning. Every section tells you clearly what data is involved, what we do with it, and what control you have over it. Reading this page in full takes less than ten minutes and gives you a complete picture of how 3Patti Plus handles your personal information.

We collect personal data through several channels: information you provide directly during registration and account use, data generated automatically through your platform activity, and data received from third-party partners who help us deliver our services. Below is a breakdown of each category.

Information you provide directly:

• Full name as it appears on your official identification
• Date of birth (required to verify you are 18 or older)
• Mobile phone number — this is your primary account identifier at 3Patti Plus
• Email address, if provided during registration or support interactions
• Payment account details — your Easypaisa or JazzCash mobile wallet number, NayaPay or SadaPay account, IBFT bank account details, or Visa/Mastercard card number (partial — we do not store full card numbers)
• Identity verification documents when requested — CNIC or passport — for withdrawal processing and age verification
• Communication records — messages sent to our support team via live chat or email

Data generated by your platform activity:

• Login timestamps, IP addresses, and device identifiers
• Bet history — all wagers placed, game types, stakes, and outcomes
• Deposit and withdrawal records — amounts, dates, and payment methods used
• Session duration and activity patterns
• Responsible gaming tool usage — if you set deposit limits or use self-exclusion, this is recorded
• Game preferences and browsing activity within the 3Patti Plus platform

Data from third-party partners:

• Payment confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors
• Identity verification results from our KYC (Know Your Customer) verification provider
• Fraud risk scores from anti-fraud service providers

Every piece of data we hold about you is used for one or more specific purposes. We do not collect data speculatively or hold information that we don't have a clear operational reason for. Below is a complete account of how your data is used at 3Patti Plus.

We never use your data for purposes beyond those listed above without first obtaining your explicit consent or as required by law.

Processing personal data requires a lawful basis. At 3Patti Plus, we rely on the following legal grounds depending on the processing activity:

• Contractual necessity: When you register and use 3Patti Plus, you enter into a contract with us (governed by our Terms and Conditions). Processing your name, contact details, and payment information is necessary to fulfil that contract — to operate your account, accept bets, and pay winnings.
• Legal obligation: We are required by applicable law to verify player identities, maintain transaction records, and conduct anti-money laundering checks. We process data for these purposes because the law requires it, not because we choose to.
• Legitimate interests: We process device and activity data to prevent fraud, detect security threats, and protect the integrity of the platform. This is in the legitimate interests of both 3Patti Plus and the player community as a whole.
• Consent: Where processing is not strictly necessary for the above purposes — such as sending promotional SMS messages — we will ask for your explicit consent first. You can withdraw consent at any time without affecting your account.

3Patti Plus does not sell your personal data to any third party. We do not share your information with advertisers, data brokers, or marketing companies. However, there are specific, limited circumstances where we share data with carefully selected partners who help us operate the platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and our card payment gateway require the minimum necessary financial data to process your deposit or withdrawal. These providers operate under their own privacy policies and are bound by contractual data protection obligations with us.
• KYC and identity verification providers: When identity verification is required, we share your CNIC or passport image with a certified verification provider who checks it against national databases. No verification data is retained by the provider beyond the time required for the check.
• Anti-fraud and security services: Device fingerprinting and IP risk scoring services receive technical data (device type, IP address, browser characteristics) to help identify fraudulent account activity. No personally identifiable information beyond what is technically necessary is shared.
• Live casino game providers: Evolution Gaming, Ezugi, and other live game providers receive your anonymous player ID and session token to serve you live casino content. They do not receive your full name, CNIC, or financial information.
• Legal and regulatory authorities: In the event of a lawful request from a regulatory body, law enforcement agency, or court, we may be legally required to disclose specific player data. We will only do this when the request is formally made and legally valid.

When you visit the 3Patti Plus website, we use cookies and similar tracking technologies to make the platform work correctly, remember your preferences, and understand how you use the site. Here's what each category of cookie does:

• Essential cookies: These are required for the platform to function. They keep you logged in during a session, remember your language preference, and ensure that security mechanisms like CSRF protection work correctly. You cannot opt out of essential cookies without disabling platform functionality.
• Performance cookies: These help us understand which pages and features are most used, how long sessions last, and where errors occur. The data is aggregated and does not identify individual players. We use this to improve platform speed and usability.
• Functional cookies: These remember your preferences — such as your preferred chip denomination in a casino game, or notification settings — so you don't have to re-enter them every session.
• Session security cookies: Short-lived cookies that bind your authenticated session to your device, preventing session hijacking attacks.

3Patti Plus does not use third-party advertising cookies. We do not allow ad networks to place tracking cookies on our platform. You will not see your 3Patti Plus activity retargeted at you on other websites as a result of cookies placed by us.

You can manage cookies through your browser settings. Note that disabling all cookies will prevent certain platform features from working correctly, including staying logged in between pages.

Protecting your personal and financial data is a core operational responsibility at 3Patti Plus, not an afterthought. We apply a layered security architecture that addresses both technical vulnerabilities and human error risks.

Technical security measures in place:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases, including payment references and identity documents
• Two-factor authentication (2FA) available for all player accounts and mandatory for internal staff accounts
• Regular penetration testing by independent security firms
• Web application firewall (WAF) protection against SQL injection, cross-site scripting, and other common attacks
• Automated anomaly detection that flags unusual login patterns, rapid fund movements, or other indicators of account compromise

Operational security measures:

• Staff access to player data is strictly limited on a need-to-know basis — support agents can see what they need to help you, nothing more
• All internal data access is logged and subject to regular audit
• New staff who interact with player data complete mandatory data protection training before accessing any systems

We don't hold data any longer than we need to. Retention periods are set based on operational necessity and legal obligations. Here's how long different categories of data are typically retained:

• Active account data (name, contact details, login history): Held for as long as your account remains active, plus a minimum of 5 years after account closure to satisfy regulatory requirements.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of the transaction. This is required by anti-money laundering regulations.
• Identity verification documents (CNIC, passport images): Retained for 5 years from the date of the last verification check. Copies are stored encrypted and access-controlled.
• Customer support communications (live chat logs, emails): Retained for 3 years from the date of the conversation, to allow us to reference previous interactions in the event of follow-up queries or disputes.
• Cookie and analytics data: Performance and session data is aggregated and anonymised after 13 months. Raw session logs are retained for 90 days.
• Marketing consent records: Records of your opt-in to marketing communications are held for as long as you remain opted in, plus 3 years after opt-out, to demonstrate consent compliance.

When a retention period expires, data is securely deleted or irreversibly anonymised in line with our data disposal procedures. If you request account deletion before a mandatory retention period expires, we will close and restrict your account but retain the minimum data required by law until that period lapses.

As a player at 3Patti Plus, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at support@3patti.plus with a clear description of your request. We will respond within 30 days.

3Patti Plus is an adult gaming platform. We do not knowingly collect or process personal data from anyone under the age of 18. Our registration process requires date of birth confirmation, and we conduct age verification checks before processing withdrawals.

If we discover or are informed that an account is held by a person under 18, that account will be immediately closed. Any deposits made will be returned to the original payment source, and any winnings generated by the account will be forfeited.

If you are a parent or guardian and believe your child has created an account at 3Patti Plus, please contact us immediately at support@3patti.plus. We will investigate and take action promptly. We take underage gambling very seriously — both for the protection of children and as a core platform policy.

3Patti Plus may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your data — particularly changes that reduce your privacy rights or expand the categories of data we collect — we will provide advance notice via SMS or an in-platform notification at least 14 days before the change takes effect. This gives you time to review the changes and, if you disagree with them, to close your account before they apply.

For minor or technical updates that don't meaningfully affect your rights — such as clarifying language or correcting factual errors — we may update the policy without advance notice. We encourage you to review this page periodically so you're always aware of the current version that applies to your account.

If you have questions about this Privacy Policy, want to exercise your data rights, or want to raise a complaint about how 3Patti Plus has handled your personal data, the following contact options are available:

• Live Chat: Available 24/7 within the platform after login. Use the subject "Privacy Query" to route your message to the appropriate team. Typical response time is under five minutes.
• Email: support@3patti.plus — for formal data rights requests or complaints, please use the subject line "Privacy / Data Rights Request". We respond to privacy-related emails within 48 hours on standard requests and within 30 days for formal data subject access requests.

We genuinely want to hear from you if you have concerns about your data. Complaints are not treated as an inconvenience — they help us identify gaps and improve our practices. Every privacy complaint received at 3Patti Plus is logged, investigated by a senior team member, and responded to formally in writing.