At 3ptt, the privacy and security of every player's personal information is a foundational commitment, not an afterthought. This Privacy Policy sets out in clear, plain terms exactly what data 3ptt collects from you, the purposes for which it is processed, the parties with whom it may be shared, and the rights you hold over your own information. Whether you are a registered player in Karachi, Lahore, Faisalabad, or Islamabad — or anywhere else across Pakistan — this policy applies equally to you and governs every interaction you have with the 3ptt platform at 3ptt.org.
Before diving into the full policy, here are the six core principles that underpin every data decision 3ptt makes. These are not marketing claims — they are binding operational standards reflected in the detailed clauses that follow.
3ptt only processes your personal data where a clear lawful basis exists — your consent, contractual necessity, legal obligation, or legitimate interest. We do not process data for purposes beyond those disclosed in this policy without seeking fresh consent where required.
All personal data stored by 3ptt is protected using industry-standard encryption at rest and in transit. Access to player data within 3ptt's systems is restricted on a strict need-to-know basis, with access logs maintained and regularly audited for anomalies.
You have the right to access, correct, export, and in certain circumstances delete the personal data 3ptt holds about you. These are actionable rights — not statements of intent. Requests are handled within 30 days and are free of charge in standard circumstances.
3ptt collects only the personal data that is genuinely necessary for the purposes described in this policy. We do not collect data speculatively or build profiles beyond what is required for account management, KYC compliance, responsible gaming, and service improvement.
3ptt does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing companies. Sharing with third parties is strictly limited to service providers who assist in operating the platform and regulatory authorities as required by law.
Personal data is not kept indefinitely. 3ptt applies clearly defined retention periods tied to the purpose for which each category of data was collected. When the retention period expires and no legal obligation requires continued storage, the data is securely deleted or anonymised.
3ptt is an online gaming and sports betting platform operating at 3ptt.org, serving players across Pakistan. For the purposes of this Privacy Policy, "3ptt," "we," "us," and "our" refer to the operator of the 3ptt platform, which acts as the data controller in respect of the personal information you provide when registering and using the platform.
As data controller, 3ptt determines the purposes and means by which your personal data is processed. We take this responsibility seriously and have implemented organisational and technical measures to ensure your data is handled lawfully, fairly, and transparently at every stage of its lifecycle — from collection through to deletion.
3ptt collects personal data in several categories depending on the nature of your interaction with the platform. The table below summarises the main categories, specific data points within each, and the primary reason for collection.
| Category | Data Points | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, CNIC / passport number, photograph (KYC selfie) | Account registration, age verification, KYC compliance |
| Contact Data | Email address, mobile phone number, residential address (city, postal code) | Account communications, withdrawal notifications, support |
| Financial Data | Deposit and withdrawal transaction records, payment method identifiers (JazzCash / EasyPaisa wallet reference, bank account last four digits), transaction timestamps and amounts in PKR | Payment processing, fraud prevention, AML compliance |
| Gaming Activity Data | Bet history, game session logs, wager amounts, outcomes, bonus usage records, win/loss records | Account management, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type and OS, browser type and version, device fingerprint, session timestamps, referring URL | Security, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support email content, complaint records | Customer support, dispute resolution, quality improvement |
| Preference Data | Language preference, notification settings, responsible gaming limits set by the player | Platform personalisation, responsible gaming tools |
3ptt does not collect sensitive special-category personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data for identification purposes, health data, or data concerning sexual orientation — except where a player voluntarily discloses health-related information in the context of a responsible gaming request (for example, disclosing a gambling disorder when applying for self-exclusion), in which case such data is processed solely to administer the responsible gaming measure requested.
The majority of personal data 3ptt holds about you is provided directly by you during the course of your interaction with the platform. This includes information you submit when creating your account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account preferences.
When you access 3ptt.org, certain technical data is collected automatically by our platform infrastructure. This includes your IP address, device identifiers, browser information, and browsing behaviour on the site (pages visited, session duration, click patterns). This data is collected using server logs, cookies, and similar tracking technologies as described in Section 5.
In limited circumstances, 3ptt may receive personal data about you from third parties. This includes identity verification data returned by our KYC partners (who verify your CNIC or passport against official databases), transaction data from payment processors such as JazzCash, EasyPaisa, HBL, and UBL, and fraud-risk signals from fraud prevention services. All third-party data sources used by 3ptt are contractually bound to process your data lawfully and to share it with 3ptt only for the specific purposes described in this policy.
3ptt processes your personal data only where a valid lawful basis exists under applicable data protection law. The table below maps each processing purpose to its corresponding lawful basis.
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your player account | Performance of contract |
| Processing deposits and withdrawals in PKR | Performance of contract |
| Verifying your age and identity (KYC) | Legal obligation; performance of contract |
| Anti-money laundering (AML) monitoring and reporting | Legal obligation |
| Fraud detection and prevention | Legitimate interests (protecting the platform and players) |
| Responsible gaming monitoring and tool delivery | Legal obligation; legitimate interests (player welfare) |
| Customer support and dispute resolution | Performance of contract; legitimate interests |
| Sending transactional communications (account alerts, withdrawal confirmations) | Performance of contract |
| Sending promotional communications and bonus offers | Consent (opt-in required; withdrawable at any time) |
| Platform analytics and service improvement | Legitimate interests (improving product quality) |
| Compliance with gaming licence reporting requirements | Legal obligation |
Where 3ptt relies on legitimate interests as the lawful basis for processing, we have carried out a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms as a data subject. You may request a summary of any such assessment by contacting [email protected].
Cookies are small text files stored on your device when you visit a website. 3ptt uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, remember your preferences, maintain your login session, and gather anonymous analytics about how players interact with the site.
You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling strictly necessary cookies will impair or prevent your ability to log in and use the platform. Instructions for managing cookies are available in your browser's help documentation. 3ptt does not currently respond to "Do Not Track" browser signals, as no uniform standard for this signal has been adopted across the industry.
3ptt does not sell, rent, or trade your personal data. We share your data only in the specific circumstances described below, and only to the extent necessary for each purpose:
All third-party data processors engaged by 3ptt are bound by written data processing agreements that require them to process your data solely on 3ptt's documented instructions and to maintain appropriate security standards. 3ptt remains responsible for the lawful handling of your data regardless of which processor is involved in any particular processing activity.
Given that 3ptt operates as an internationally licensed platform, certain data processors engaged by 3ptt — including game software providers, fraud prevention services, and cloud infrastructure providers — may be located in jurisdictions outside Pakistan. Where your personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable under 3ptt's licensing framework, 3ptt ensures that appropriate safeguards are in place before the transfer is made.
Such safeguards may include: binding contractual clauses between 3ptt and the recipient entity that impose equivalent data protection obligations; the recipient being located in a jurisdiction recognised as providing adequate protection; or other transfer mechanisms recognised as providing appropriate protection under applicable law.
3ptt retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or our gaming licence obligations. The table below summarises the standard retention periods applied to the main data categories:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years after closure | Licensing obligation; AML regulatory requirement |
| KYC documents (CNIC copies, selfies, proof of address) | Duration of account + 5 years after closure | AML / KYC regulatory requirement |
| Financial transaction records | 7 years from transaction date | Financial regulatory obligation |
| Gaming activity logs | Duration of account + 3 years after closure | Licensing obligation; dispute resolution |
| Customer support communications | 3 years from date of last interaction | Legitimate interests (dispute resolution, quality) |
| Technical / server logs | 12 months on a rolling basis | Security monitoring; fraud detection |
| Marketing consent records | Until consent is withdrawn + 1 year | Evidence of consent basis |
When a retention period expires, data is either securely deleted from 3ptt's systems and those of its processors, or anonymised such that it can no longer be attributed to any individual. Anonymised data sets may be retained indefinitely for statistical and analytical purposes without restriction.
3ptt has implemented a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Key measures in place include:
Subject to applicable law and certain exceptions tied to our legal and regulatory obligations, you have the following rights in respect of the personal data 3ptt holds about you:
To exercise any of the rights above, please contact 3ptt at [email protected] with the subject line "Data Rights Request." We will acknowledge your request within 3 business days and provide a substantive response within 30 calendar days. In complex cases this period may be extended by a further 30 days, with notice given to you of the extension and the reasons for it.
The 3ptt platform is strictly intended for individuals aged 21 years and above. 3ptt does not knowingly collect, process, or retain personal data belonging to any individual under the age of 21. The registration process includes date-of-birth verification, and KYC procedures confirm age through government-issued identity documents prior to first withdrawal.
If 3ptt becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended and permanently closed. Any associated Account Balance will be handled in accordance with the Terms & Conditions applicable to underage registrations, and the personal data will be deleted from 3ptt's systems subject only to any mandatory reporting obligations to relevant authorities.
If you are a parent or guardian and believe that a minor in your care has registered an account on 3ptt, please contact us immediately at [email protected] with details so we can investigate and act without delay.
3ptt processes certain categories of gaming activity data specifically to support responsible gaming obligations and player welfare. This includes monitoring patterns of play that may indicate problem gambling behaviour — such as significantly increased bet frequency, rapidly escalating wager amounts, extended unbroken session durations, or repeated manual override of responsible gaming limits previously set by the player.
Where such patterns are detected by 3ptt's responsible gaming monitoring systems, the platform may take one or more of the following actions using your data:
Data processed under this section is handled with a high degree of sensitivity. It is not used for marketing purposes and is not shared with third parties except as required by our gaming licence obligations or responsible gaming programme requirements. Full details of the responsible gaming tools available on 3ptt are set out on the Responsible Gaming page.
3ptt may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game releases, PSL betting markets, seasonal promotions, and loyalty programme updates — but only where you have provided your explicit prior consent to receive such communications during registration or subsequently through Account Settings.
You may withdraw your marketing consent and unsubscribe from all promotional communications at any time by:
Withdrawal of marketing consent does not affect the delivery of transactional and operational communications (such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts), which are sent on the basis of contractual necessity rather than consent and cannot be opted out of while your account remains active.
The 3ptt platform does not contain links to external third-party websites for advertising or general browsing purposes. Any third-party integrations present on the platform — such as payment gateway interfaces for JazzCash, EasyPaisa, or bank transfer portals — are functional service integrations rather than general outbound links, and data exchanged through these integrations is governed by the terms of 3ptt's data processing agreements with each provider.
3ptt bears no responsibility for the privacy practices of any external website or service that a player independently navigates to outside of the 3ptt platform. We recommend that you review the privacy policy of any third-party service you use in connection with your gaming activity.
3ptt reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, the services offered on the platform, or guidance from regulatory authorities. The effective date displayed at the top of this page will be updated whenever a revised version is published.
Where amendments are material — meaning they affect the purposes for which we process your data, the categories of data collected, the third parties with whom we share data, or your rights as a data subject — 3ptt will notify registered players by email at least 14 days before the revised policy takes effect. For non-material amendments (such as typographical corrections or clarifications that do not alter the substance of any provision), no prior notice will be given beyond updating the effective date.
Your continued use of the 3ptt platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated version. If you do not accept a material change to this policy, you may close your account by following the process described in Clause 12.3 of the Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or have a concern about how 3ptt has handled your personal data, please contact us through one of the following channels:
3ptt takes all privacy complaints seriously. If you are not satisfied with our response to your complaint after following the process above, you have the right to escalate your concern to the relevant data protection supervisory authority or the licensing body under whose framework 3ptt operates.
3ptt is built on trust, transparency, and security. Now that you know exactly how your data is protected, step into Pakistan's most trusted online gaming platform and play with total confidence.