Privacy Policy
Transparency about data is not optional at 3pati — it is a core commitment. This policy explains exactly what we collect, why we collect it, and how you stay in control.
We Do Not Sell Your Data
3pati does not sell, rent or trade your personal information to any third party for their own marketing purposes. Your data exists to operate your account securely, not to generate advertising revenue.
You Control Your Data
You have the right to access, correct, download and request deletion of your personal data at any time. Submit a request to our support team and we will respond within the timeframe specified in this policy.
Industry-Standard Encryption
All data transmitted between your device and 3pati is protected by TLS encryption. Account credentials and sensitive payment references are stored using appropriate cryptographic hashing methods.
Cookie Transparency
We use cookies and similar tracking technologies to improve your experience and analyse platform performance. Session cookies are necessary for platform functionality; analytics and preference cookies can be managed through your browser settings.
KYC Data Handled Carefully
Identity documents collected for Know Your Customer (KYC) purposes — including CNIC copies and proof of address — are handled with the highest level of security and are used solely to verify identity and comply with applicable regulations.
Opt-Out of Marketing
Marketing communications from 3pati are opt-in. If you no longer wish to receive promotional emails or notifications, you may withdraw consent at any time by updating your account communication preferences or contacting support.
1 Introduction
This Privacy Policy ("Policy") describes how 3pati ("we", "us", "our", "the Platform"), operating at https://3pati.cam, collects, uses, stores, shares and protects the personal information of users ("you", "your") who access or use our online gaming and sports betting information platform.
We are committed to handling your personal data responsibly, transparently and in accordance with applicable data protection principles. This Policy applies to all information collected through the Platform, including information provided during account registration, during the use of gaming features, and through your interactions with our support team.
By accessing or using the 3pati Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform immediately.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, which together form the complete framework of rules governing your use of 3pati.
A note for Pakistani users: Pakistan's data protection landscape includes the Prevention of Electronic Crimes Act, 2016 (PECA) and evolving frameworks around digital privacy. While 3pati aligns its data practices with internationally recognised privacy principles, users in Pakistan should be aware that domestic regulatory requirements may differ from the frameworks referenced in this Policy. This Policy does not constitute legal advice.
2 Definitions
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or could reasonably identify a natural person, directly or indirectly — including name, email address, IP address and device identifiers. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure and destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is 3pati. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a contractual arrangement. |
| "Consent" | A freely given, specific, informed and unambiguous indication of agreement to the processing of personal data. |
| "KYC" | Know Your Customer — the identity verification process, including document checks, required for account compliance. |
| "Cookie" | A small text file stored on a user's device by a website, used to remember preferences, maintain sessions and collect analytics data. |
3 Data We Collect
3.1 Data You Provide Directly
When you register an account, contact our support team or engage with Platform features, you may provide the following categories of personal data:
- Identity data: Full name, date of birth, gender;
- Contact data: Email address, mobile phone number, city of residence (e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar);
- KYC documentation: Government-issued identification (e.g., CNIC), proof of address, selfie or biometric verification where required;
- Account credentials: Username and password (stored in hashed form — we do not store plaintext passwords);
- Financial data: Payment method references (e.g., bank account numbers, mobile wallet identifiers for services such as Easypaisa, JazzCash or Raast). These are used for transaction verification only and do not imply endorsement of gambling by those providers;
- Communication data: Messages, complaints and enquiries sent to our support team.
3.2 Data Collected Automatically
When you access the Platform, certain technical data is collected automatically through server logs, cookies and similar technologies:
- Device data: Device type, operating system, browser type and version;
- Network data: IP address, internet service provider, approximate geographic location derived from IP;
- Usage data: Pages visited, features accessed, time spent on pages, click patterns and session duration;
- Performance data: Error logs, crash reports and load time metrics used to maintain Platform quality.
3.3 Data We Do Not Collect
3pati does not collect sensitive personal data categories such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data (unless biometric verification is specifically required by KYC regulations), or health data — except where directly relevant to a responsible gambling assessment and explicitly consented to by the user.
4 How We Process Your Data
We process your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | Creating, maintaining and operating your registered account, including identity verification and security controls. |
| Platform Delivery | Providing access to gaming information, odds data, live casino content, sports betting markets and other Platform features. |
| Payment Processing | Facilitating deposit and withdrawal transactions, verifying payment methods and maintaining transaction records. |
| KYC & Compliance | Verifying user identity to meet anti-money laundering (AML), counter-terrorism financing (CTF) and responsible gambling obligations. |
| Customer Support | Responding to enquiries, resolving disputes and providing assistance via Live Chat, Help Centre or email. |
| Security & Fraud Prevention | Detecting and preventing unauthorised access, fraudulent activity, bonus abuse, multiple account creation and other prohibited conduct. |
| Analytics & Improvement | Understanding how users interact with the Platform to improve functionality, content quality and user experience. |
| Marketing Communications | Sending promotional offers, bonus notifications and platform updates to users who have opted in to marketing communications. |
| Responsible Gambling | Monitoring gaming behaviour, applying self-imposed limits and identifying users who may require responsible gambling interventions. |
5 Legal Basis for Processing
We process your personal data on one or more of the following legal bases, consistent with internationally recognised data protection frameworks:
- Contractual necessity: Processing required to provide services under the Terms & Conditions you have agreed to — including account management, payment processing and customer support;
- Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML, KYC and responsible gambling requirements;
- Legitimate interests: Processing for fraud detection, security, platform improvement and internal analytics, where those interests are not overridden by your rights;
- Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6 Data Sharing & Disclosure
6.1 We Do Not Sell Your Data
3pati does not sell, rent, lease or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. Full stop.
6.2 Authorised Disclosures
We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual and security obligations:
- Service providers and Data Processors: Including payment processors, KYC verification providers, cloud hosting providers, fraud detection services and analytics platforms acting on our instructions;
- Regulatory and law enforcement authorities: Where we are legally required to disclose data in response to a valid court order, regulatory request or other lawful legal process;
- Responsible gambling organisations: Where a user has requested self-exclusion or where we have a regulatory obligation to report gaming behaviour to a designated authority;
- Business successors: In the event of a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction, subject to the receiving party maintaining equivalent privacy protections.
6.3 Payment Method References
References to payment services familiar to Pakistani users — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are provided as contextual information only. Mentioning these services does not mean that 3pati shares your personal data with those providers beyond what is strictly necessary to process a payment transaction you have initiated. These providers are not data partners for marketing purposes.
Cross-Border Transfers: Some of our service providers may process personal data in jurisdictions outside Pakistan. Where data is transferred internationally, we take steps to ensure that appropriate safeguards are in place — such as standard contractual clauses or equivalent protections — to maintain the security of your data. We do not transfer personal data to jurisdictions that lack adequate data protection standards without appropriate safeguards.
7 Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable legal and regulatory obligations. The following general retention periods apply:
- Account data: Retained for the duration of your account and for a period of at least five (5) years following account closure, to meet AML and compliance record-keeping requirements;
- KYC documentation: Retained for the period required by applicable AML and regulatory frameworks — typically five (5) years from the end of the business relationship;
- Transaction records: Retained for a minimum of five (5) years to support financial auditing, dispute resolution and regulatory compliance;
- Support correspondence: Retained for up to three (3) years following resolution of the enquiry or dispute;
- Analytics data: Aggregated and anonymised analytics data may be retained indefinitely as it can no longer identify individual users;
- Marketing consent records: Retained for as long as we hold your contact information, to evidence your consent status.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to you as an individual.
8 Cookies & Tracking Technologies
8.1 What We Use
The 3pati Platform uses cookies, web beacons and similar tracking technologies to provide and improve our services. A cookie is a small text file placed on your device by a web server. Cookies cannot execute programs or deliver viruses to your device.
8.2 Types of Cookies
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, authentication, security tokens. Cannot be switched off without breaking core functionality. | No |
| Functional / Preference | Remember your language preference, display settings and other personalisation choices between sessions. | Yes |
| Analytics & Performance | Collect aggregated data about how users navigate the Platform — pages visited, bounce rates, load times — used to improve design and content. | Yes |
| Marketing / Tracking | Used to understand user interest patterns and deliver relevant promotional content. Only activated where you have provided explicit consent. | Yes |
8.3 Managing Cookies
You can control and manage cookies through your browser settings. Most modern browsers allow you to refuse all or some cookies, or to receive a prompt before a cookie is stored. Please note that disabling strictly necessary cookies will affect the functionality of the Platform. Guidance on cookie management is available in your browser's help documentation.
9 Data Security
3pati implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or disclosure. These measures include:
- TLS/SSL encryption for all data transmitted between your device and our servers;
- Password hashing using industry-standard algorithms — we never store plaintext passwords;
- Access controls limiting internal access to personal data on a strict need-to-know basis;
- Regular security assessments including vulnerability scanning and penetration testing;
- Incident response procedures to identify, contain and report data breaches in accordance with applicable obligations.
While we maintain robust security practices, no system is completely immune to cyberattacks. We therefore encourage users to maintain strong, unique passwords and to notify us immediately at [email protected] if they suspect any unauthorised access to their account.
Security Best Practice: Use a strong password that is unique to your 3pati account. Do not share your login credentials with anyone, including family members. Enable any two-factor authentication options made available on the Platform. Log out of your account when using shared or public devices.
10 Your Rights
Subject to applicable law and certain legal exceptions, you have the following rights in relation to your personal data held by 3pati. To exercise any of these rights, contact us at [email protected] with the subject line "Data Rights Request". We will respond within 30 days of receiving your request.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and on what legal basis.
Right to Rectification
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
Right to Erasure ("Right to be Forgotten")
You may request the deletion of your personal data where it is no longer necessary for the purposes it was collected, you have withdrawn consent, or it has been unlawfully processed. This right does not apply where retention is required by law — for example, AML and KYC records must be retained for regulatory periods.
Right to Restriction of Processing
In certain circumstances, you may request that we limit the processing of your data — for example, while the accuracy of data is being contested or while an objection is being assessed.
Right to Data Portability
Where processing is based on your consent or a contract, and is carried out by automated means, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
Right to Object
You have the right to object to processing based on legitimate interests, including profiling for marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to Withdraw Consent
Where processing is based on your consent — including marketing communications and non-essential cookies — you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
We will not discriminate against you or restrict your access to the Platform as a result of exercising any of the rights described above, except where restrictions are required by applicable law.
11 Minors & Age Restrictions
The 3pati Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable operator's licensing jurisdiction. We do not knowingly collect, process or retain personal data relating to individuals below the applicable minimum age.
If we become aware that personal data has been collected from a minor — including through misrepresentation during registration — we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian who believes a minor has registered on the Platform, please contact us immediately at [email protected].
🔞 Important: Confirming that you are 18+ during registration is a legal representation. Providing false information regarding age constitutes a material breach of the Terms & Conditions and may result in immediate account closure and forfeiture of all balances. Age verification alone does not make gambling lawful in Pakistan — users remain responsible for understanding applicable local law.
12 Third-Party Services & Links
The Platform may reference or link to third-party services, including payment platforms, sports data providers and regulatory bodies. These third parties operate under their own privacy policies, which are independent of this Policy. 3pati is not responsible for the privacy practices of any third-party website or service.
We do not share personal data with third-party advertising networks for the purpose of delivering targeted advertising based on your gaming behaviour. Any third-party service providers we engage process personal data solely on our instructions and are contractually prohibited from using it for their own purposes.
Payment service references — Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are cited as contextual familiarity markers for Pakistani users. These entities process only the payment data you submit directly during a transaction you initiate. Their own privacy policies govern their data practices independently of 3pati.
13 Amendments to This Policy
We reserve the right to update, modify or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law or Platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised.
Where we have your registered email address and where changes are significant, we may send you a notification. However, it is your responsibility to review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms.
If you disagree with any changes to this Policy, you should discontinue use of the Platform and may request account closure in accordance with the procedure set out in the Terms & Conditions.
14 Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the way we handle your personal data, please contact the 3pati Data Privacy team using the details below. We respond to all privacy-related enquiries in English or Urdu, and aim to reply within 30 days.
Privacy & Data Enquiries:
Please use the subject line "Privacy Policy Query" or "Data Rights Request" so we can route your enquiry correctly.
Players from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar may write in English or Urdu. Email responses are typically handled within 1 business day for support queries and within 30 days for formal data rights requests.
Your Privacy, Clearly Explained
Have more questions about how 3pati handles your data? Our support team is available around the clock. You can also visit our FAQ for quick answers, or head back to the homepage to explore everything 3pati offers.