3ptti Privacy Policy

This Privacy Policy ("Policy") describes how 3ptti ("3ptti", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at 3ptti.bet, collects, processes, stores, shares, and protects the personal data of individuals ("you", "your", "User") who register for and use the 3ptti Platform.

This Policy applies to all personal data collected through the 3ptti website, mobile-optimised interface, live chat support system, customer communications, KYC verification process, and all other touchpoints through which you interact with 3ptti. It should be read alongside our Terms & Conditions, which govern your use of the Platform as a whole.

3ptti is committed to handling personal data responsibly and in accordance with applicable data protection principles. We recognise the particular sensitivity of financial and identity data collected from Pakistani users and we have built our data practices accordingly.

For the purposes of this Privacy Policy, the data controller responsible for the personal data collected through the 3ptti Platform is the operator of 3ptti.bet. As data controller, 3ptti determines the purposes for which personal data is collected and the manner in which it is processed.

Where 3ptti engages third-party service providers to process personal data on its behalf — for example, payment processors, KYC verification providers, and platform analytics services — those third parties act as data processors under written agreements that bind them to process data only on 3ptti's documented instructions and to implement appropriate technical and organisational security measures.

Questions, requests, and complaints relating to the handling of personal data under this Policy should be directed to the 3ptti data team via the contact details set out in Section 14 of this Policy.

3ptti collects personal data through several distinct channels. The categories of personal data we collect, and the context in which each is collected, are set out below:

Registration Data: When you create a 3ptti account, we collect your full legal name, date of birth, Pakistani CNIC number, email address, and a mobile number registered in Pakistan. This information is required to open and maintain your account.

KYC Verification Data: To comply with anti-money laundering (AML) obligations and to verify that you meet the 21+ age requirement, we collect copies of your CNIC (front and back), and where required by our compliance team, a selfie photograph or proof of address document such as a recent utility bill or bank statement.

Financial Data: We collect records of all deposits, withdrawals, and gaming transactions processed through your 3ptti account. This includes JazzCash and EasyPaisa mobile wallet references, bank account details provided for HBL, UBL, or Meezan Bank transfers, and transaction timestamps and PKR amounts.

Gaming Activity Data: We maintain records of your gaming and betting history on the Platform, including games played, wagers placed, sports markets accessed, session durations, and outcomes. This data is used for account management, responsible gaming monitoring, and dispute resolution.

Technical & Device Data: When you access the 3ptti Platform, we automatically collect technical data including your IP address, device type and operating system, browser type and version, screen resolution, and referring URL. This data is collected through server logs and cookies as described in Section 9.

Communications Data: If you contact 3ptti via live chat, email, or any other support channel, we retain records of those communications including the content of messages and any attachments submitted, for quality assurance, training, and dispute resolution purposes.

The table below summarises the main data categories and their primary collection source:

3ptti uses personal data collected from users for the following specific purposes. We do not use personal data for any purpose that is incompatible with the original purpose of collection without first obtaining your consent or establishing an alternative lawful basis.

• Account creation and management: To register, verify, and maintain your 3ptti account, including resetting passwords, processing account updates, and communicating important service notices.
• Identity and age verification: To confirm that you are aged 21 or above and that the identity information you have provided is accurate, in compliance with our legal obligations and platform eligibility requirements.
• Payment processing: To process deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank, and to maintain accurate financial records associated with your account.
• Service delivery: To provide you with access to casino games, live betting markets — including PSL and international cricket — slots, and all other features available on the 3ptti Platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, identify users who may be exhibiting signs of problem gambling, and proactively offer responsible gaming tools where appropriate.
• Legal and regulatory compliance: To meet our obligations under applicable AML, KYC, and data protection regulations, and to respond to lawful requests from regulatory or law enforcement authorities.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, reliability, and user experience of the 3ptti Platform.
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance through our 24/7 support channels.
• Promotional communications: Where you have opted in to marketing communications, to notify you of relevant 3ptti promotions, bonuses, and platform updates. You may opt out at any time by contacting support.

3ptti processes personal data on the basis of one or more of the following lawful grounds, depending on the specific processing activity:

• Contractual necessity: Processing that is necessary to perform our contract with you — including operating your account, processing transactions, and providing gaming services — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with AML, KYC, and other applicable regulatory obligations is carried out on the basis of legal obligation and cannot be declined by the user without affecting account functionality.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of 3ptti's legitimate interests, balanced against your rights and interests as a data subject.
• Consent: Processing for optional marketing communications and non-essential cookies is carried out on the basis of your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

3ptti does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Personal data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank receive transaction data necessary to process your deposits and withdrawals. These entities operate under their own regulatory frameworks and data protection obligations.
• KYC verification providers: Where 3ptti uses a third-party identity verification service to process CNIC documents and conduct liveness checks, that provider receives only the data necessary to complete the verification task and is bound by a data processing agreement.
• Platform infrastructure providers: Cloud hosting, content delivery, and cybersecurity service providers may process data incidentally in the course of providing infrastructure services to 3ptti. All such providers are bound by contractual data protection obligations.
• Regulatory and law enforcement authorities: 3ptti will disclose personal data to government agencies, regulators, or law enforcement bodies where required by law, court order, or regulatory direction, or where we reasonably believe disclosure is necessary to prevent fraud or protect the safety of users or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 3ptti's assets, personal data held by 3ptti may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

3ptti retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply as a baseline:

• Account and identity data: Retained for a minimum of five (5) years following permanent account closure, in accordance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure. Physical or digital copies of CNIC documents are securely destroyed or deleted at the end of the applicable retention period.
• Gaming activity logs: Retained for three (3) years following the date of the activity, unless retained for longer as part of a specific dispute or investigation.
• Support communications: Retained for two (2) years following the closure of the relevant support interaction.
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, for audit purposes.

Where data is retained beyond the period of active account use for regulatory reasons, access to that data is restricted to authorised compliance personnel and it is not used for any commercial purpose.

3ptti implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• SSL 256-bit encryption for all data in transit between your device and our servers.
• Encryption at rest for all sensitive stored data, including CNIC records, financial data, and user credentials.
• Two-factor authentication (2FA) available to all registered users to secure account access.
• Role-based access controls ensuring that 3ptti staff can only access personal data to the extent necessary for their specific job function.
• Regular security audits and penetration testing of Platform infrastructure conducted by independent security specialists.
• DDoS protection and web application firewall (WAF) to protect Platform availability and integrity.
• Incident response procedures to detect, contain, and notify affected users of any data breach in a timely manner.

Whilst 3ptti takes all reasonable measures to protect personal data, no online platform can guarantee absolute security. In the event of a security incident affecting your personal data, 3ptti will notify you via your registered email address within a reasonable timeframe and provide guidance on any protective steps you should take.

3ptti uses cookies and similar technologies — including local storage and session tokens — to operate the Platform effectively and to improve your user experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in, security cookies, and load balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, preferred payment methods, and responsible gaming limit configurations. These improve your experience but are not strictly required.
• Analytics cookies: Used to collect aggregated, anonymised data about how users navigate the Platform — including pages visited, session durations, and feature usage — to help us improve performance and content. No personally identifiable data is included in analytics reports.
• Marketing cookies: Only placed with your explicit consent. Used to identify whether you arrived at 3ptti via a specific referral channel, for attribution purposes. No third-party advertising network cookies are placed on the 3ptti Platform.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling functional or analytics cookies will not affect your core gaming experience but may reduce personalisation features.

As a user of the 3ptti Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the 3ptti support team using the contact details in Section 14. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 3ptti holds about you, along with information about how it is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details such as your email address and mobile number directly via the Account Settings page.
• Right to erasure: You may request deletion of your personal data. Please note that 3ptti is legally required to retain certain data for a minimum period following account closure — as described in Section 7 — and erasure requests cannot override these legal obligations.
• Right to restriction: You may request that 3ptti restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or where you have objected to processing pending verification of our legitimate grounds.
• Right to data portability: Where processing is based on your consent or on contractual necessity, you may request that 3ptti provide your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing based on legitimate interests, including processing for direct marketing purposes. Objections to marketing will be actioned immediately; objections to other processing will be assessed against 3ptti's legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent — for example, marketing communications — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

The 3ptti Platform is strictly intended for use by individuals aged 21 years and above. We do not knowingly collect personal data from any person under the age of 21. CNIC-based age verification is a mandatory step in the 3ptti KYC process and is designed to prevent underage access to the Platform.

If 3ptti becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified CNIC, misrepresentation of age during registration, or any other means — we will take the following immediate steps:

• Permanently close the account and suspend all associated gaming activity.
• Retain only the minimum data necessary to record the breach and prevent re-registration by the same individual.
• Securely delete all other personal data associated with the underage account within 30 days, subject to any legal hold obligations.
• Review and reverse any financial transactions where legally required and practically possible.

If you are a parent or guardian and believe that a minor may have accessed the 3ptti Platform using falsified identity information, please contact our support team immediately. We take underage gambling extremely seriously and will investigate all such reports as a priority.

The 3ptti Platform is operated for users in Pakistan. However, certain infrastructure and service providers used by 3ptti may be located in jurisdictions outside Pakistan. Where personal data is transferred to such providers, 3ptti ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this Policy.

Safeguards used for international transfers include contractual clauses that bind recipient entities to data protection standards consistent with applicable law, and technical measures such as encryption of data in transit and at rest.

3ptti does not transfer personal data to jurisdictions that lack adequate data protection frameworks without first implementing appropriate contractual protections. Payment data specifically — including JazzCash, EasyPaisa, and bank transfer records — is processed by locally regulated Pakistani financial institutions and does not leave Pakistan's financial infrastructure.

3ptti reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or Platform functionality. The date of the most recent revision is displayed prominently at the top of this page.

Where a change to this Policy materially affects your rights or how we use your personal data, 3ptti will notify you by email to your registered address at least seven (7) days before the change takes effect, and will display a prominent notice on the Platform during that period.

Non-material changes — such as formatting corrections, clarifications that do not alter the substance of our data practices, or updates to contact details — may be made without advance notice. We encourage you to review this Policy periodically to stay informed of how 3ptti protects your personal data.

Your continued use of the 3ptti Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you should cease using the Platform and contact support to arrange account closure and data handling in accordance with your rights under Section 10.

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 3ptti, please contact our support and data team through the following channels:

For responsible gaming support and self-exclusion requests, please visit our dedicated Responsible Gaming page.