Privacy Policy
3r3 Online Gaming Platform

1 Who We Are

3r3 ("3r3", "the Platform", "we", "us", "our") is an internationally licensed online gaming operator accessible at 3r3.org. The platform is built specifically for Pakistani players and offers cricket betting, live casino games, slots, and related gaming entertainment — all conducted in Pakistani Rupees (PKR).

As the operator of 3r3.org, 3r3 is the data controller responsible for the personal information you provide when registering, depositing, playing, or otherwise interacting with the platform. This Privacy Policy describes how 3r3 fulfils its obligations as a data controller under its international gaming licence requirements and applicable data protection principles.

2 Data We Collect

3r3 collects personal data only to the extent necessary to operate a compliant, secure, and fair gaming platform. The categories of personal data we collect are set out below:

3r3 does not collect special categories of sensitive personal data (such as health information, religious beliefs, or biometric data) except where explicitly required by anti-money-laundering (AML) regulation or where you voluntarily disclose such information during responsible gaming assessments.

3 How We Use Your Data

Personal data collected by 3r3 is used for specific, clearly defined purposes. We do not use your data for any purpose incompatible with those stated below without first obtaining your explicit consent or establishing a new lawful basis:

• Account Registration & Management: Creating, verifying, and maintaining your 3r3 player account, including KYC identity and age verification (21+ enforcement).
• Processing Transactions: Facilitating PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processors; maintaining accurate financial records per licensing obligations.
• Platform Delivery: Providing access to cricket betting markets, live casino games, Fortune Tree, 1001 Nights, and all other 3r3 gaming products.
• Fraud Prevention & AML Compliance: Detecting and preventing fraudulent activity, money laundering, account takeovers, and multi-accounting in compliance with international gaming licence AML requirements.
• Customer Support: Responding to queries, resolving disputes, and managing complaints submitted via live chat or email at [email protected].
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators; actioning self-exclusion and deposit limit requests; complying with licensing authority responsible gaming obligations.
• Marketing Communications: Sending bonus offers, promotional notifications, and platform updates via email or SMS — only where you have consented to receive such communications. You may withdraw consent at any time via your account settings.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, user experience, and platform functionality.
• Legal Compliance: Fulfilling obligations under our international gaming licence, responding to lawful requests from competent authorities, and maintaining records required by applicable regulation.

4 Legal Basis for Processing

3r3 processes your personal data only where a valid lawful basis exists. The primary legal bases applied to 3r3's data processing activities are:

• Contractual Necessity: Processing required to perform the contract between you and 3r3 — including operating your account, processing deposits and withdrawals, and delivering gaming services.
• Legal Obligation: Processing required to comply with our international gaming licence, AML obligations, age verification requirements, and any lawful direction from a regulatory or government authority.
• Legitimate Interests: Processing necessary for 3r3's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional marketing communications, personalised bonus offers, or any purpose for which we have explicitly requested and received your consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5 Sharing Your Data

3r3 does not sell your personal data to third parties. We do not share your information with advertisers, data brokers, or unaffiliated commercial entities for their own marketing purposes. Your data may be shared in the following limited and controlled circumstances only:

• Payment Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card processing partners receive the minimum financial data necessary to process your PKR transactions. Each provider is contractually bound to use your data solely for payment processing.
• Identity Verification Services: Third-party KYC and AML providers receive identity and document data solely for the purpose of verifying your identity and age (21+) in compliance with our licensing obligations.
• Fraud Detection Partners: Specialist fraud intelligence providers may receive technical data (IP, device fingerprint, behavioural patterns) to assist with real-time fraud and money laundering detection.
• Platform Technology Providers: Game content suppliers, casino platform operators, and software providers who power the 3r3 gaming environment operate under strict data processing agreements and may receive gaming activity data for game delivery and RNG auditing purposes only.
• Regulatory & Government Authorities: 3r3 will disclose personal data to competent government authorities, law enforcement agencies, or the international gaming licence authority where required to do so by law or valid legal process.
• Group Companies: Where 3r3 operates through affiliated group entities, data may be shared within the group for the purposes of consolidated regulatory compliance and operational management, subject to the same data protection standards as set out in this Policy.

All third parties with whom 3r3 shares personal data are subject to contractual data processing agreements that require them to process your data lawfully, securely, and solely for the specific purposes described above.

6 Cookies & Tracking Technologies

3r3 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse aggregate usage patterns for platform improvement purposes. The categories of cookies used by 3r3 are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and language preference cookies. These cannot be disabled without disrupting your ability to use the platform.
• Functional Cookies: Remember your platform preferences, such as preferred language, game display settings, and responsible gaming notification frequencies.
• Analytics Cookies: Collect anonymised, aggregated data about how players use the platform — pages visited, session lengths, game categories accessed — to help 3r3 improve user experience. No individual player is identified in analytics reports.
• Security Cookies: Used to detect and prevent fraudulent sessions, bot activity, and account takeover attempts. These operate in the background and do not collect browsing data outside of the 3r3 platform.

3r3 does not use third-party advertising cookies or deploy tracking pixels that share your data with external advertising networks. You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality.

7 Data Retention

3r3 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to overriding legal retention obligations imposed by our international gaming licence and applicable AML regulation. Key retention periods applicable to 3r3 player data are:

• Active Account Data: Retained for the full duration of your active 3r3 account relationship plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Financial Transaction Records: PKR deposit, withdrawal, and wagering records are retained for a minimum of five (5) years from the date of the transaction.
• KYC Documentation: Identity verification documents are retained for five (5) years from account closure or the last transaction, whichever is later.
• Customer Support Communications: Live chat transcripts and email correspondence are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your marketing consent and any withdrawal of consent are retained for five (5) years to demonstrate compliance with consent obligations.
• Technical Log Data: Server logs and IP address records are retained for twelve (12) months for security and fraud investigation purposes.

8 Your Data Rights

As a 3r3 player, you hold meaningful rights over your personal data. 3r3 is committed to honouring these rights promptly and without unnecessary barrier. The rights available to you include:

• Right of Access: You may request a copy of all personal data 3r3 holds about you. Requests will be fulfilled within 30 days of receipt.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Minor corrections (such as email address updates) can be made directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the original collection purpose and no legal retention obligation overrides your request. Note that AML and gaming licence record-keeping obligations will take precedence over erasure requests in most cases.
• Right to Restrict Processing: You may request that 3r3 temporarily suspend processing of your data while a rectification or objection request is being assessed.
• Right to Data Portability: Where processing is based on consent or contractual necessity, you may request your personal data in a commonly used, machine-readable format (e.g., CSV) for transfer to another controller.
• Right to Object: You may object to processing based on legitimate interests, including profiling for responsible gaming monitoring. 3r3 will assess your objection and respond within 30 days.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time via your account settings or by contacting support. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

To exercise any of the above rights, contact the 3r3 Data Protection Officer at the address in Section 14. We will respond within 30 calendar days. If you are dissatisfied with our response, you have the right to escalate your complaint to the relevant data protection authority or the international gaming licence authority.

9 Security Measures

3r3 applies industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• End-to-end TLS 1.3 encryption for all data transmitted between your browser or device and the 3r3 platform.
• AES-256 encryption for all personal and financial data stored in 3r3's databases.
• Multi-factor authentication (MFA) options for player accounts, strongly recommended for all registered players.
• Regular third-party penetration testing and vulnerability assessments of the 3r3 platform infrastructure.
• Role-based access controls ensuring 3r3 staff access only the minimum data necessary for their specific function.
• Real-time intrusion detection and automated alerting systems monitoring the platform for anomalous access patterns.
• Physical security controls at all data processing locations, including access logging and CCTV monitoring.

In the event of a personal data breach that poses a risk to your rights and freedoms, 3r3 will notify affected players and the relevant supervisory authority within the timeframes required under applicable data protection obligations. The notification will describe the nature of the breach, the data affected, and the remediation steps taken by 3r3.

10 International Data Transfers

As an internationally licensed gaming operator serving the Pakistan market, 3r3 may process and store personal data on servers located outside of Pakistan. Where personal data is transferred internationally — for example, to KYC verification partners, fraud detection providers, or cloud infrastructure services — 3r3 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to this Policy, including:

• Standard contractual clauses (SCCs) incorporated into data processing agreements with international service providers.
• Transfers only to countries or organisations that maintain an adequate level of data protection as assessed by 3r3's Data Protection Officer.
• Binding corporate rules where data is transferred within affiliated group companies operating across multiple jurisdictions.

11 Children & Minors

The 3r3 platform is strictly restricted to individuals aged 21 years and older. 3r3 does not knowingly collect, process, or store personal data relating to any person under the age of 21. Age verification is a mandatory component of the 3r3 registration and withdrawal process.

If 3r3 becomes aware that personal data has been collected from a person under the age of 21, the following actions will be taken immediately:

• The account will be permanently closed without delay.
• Any deposited funds will be returned to the original deposit source after verification (no winnings will be paid).
• All personal data associated with the underage account will be deleted from 3r3's systems within 30 days, except where retention is required for regulatory reporting or legal purposes.
• The incident will be reported to the international gaming licence authority as required under 3r3's licence conditions.

Parents or guardians who believe a minor in their household has registered on 3r3 should contact support immediately via live chat or at [email protected]. 3r3 treats such reports as the highest priority and will act without delay.

12 Responsible Gaming Data

3r3 processes certain personal data specifically for responsible gaming purposes. This includes monitoring gaming activity patterns for indicators of potential problem gambling, recording self-exclusion and deposit limit requests, and flagging accounts for responsible gaming intervention where appropriate.

Responsible gaming data is handled with particular sensitivity and is subject to the following specific protections:

• Responsible gaming data is never used for marketing profiling or promotional targeting.
• Self-exclusion status is maintained in a dedicated, access-restricted database. Staff authorised to view self-exclusion records are limited to those with a direct operational need.
• Self-exclusion records are retained for a minimum of five (5) years following the exclusion end date to prevent re-registration during the exclusion period and to fulfil licensing authority reporting obligations.
• Responsible gaming assessments conducted by 3r3 staff are documented and retained as part of your account record in accordance with licensing requirements.

For full details of the responsible gaming tools available to you on the 3r3 platform — including deposit limits, cooling-off periods, reality checks, and self-exclusion — please visit our dedicated Responsible Gaming page.

13 Amendments to This Policy

3r3 may update this Privacy Policy periodically to reflect changes in applicable data protection law, our international gaming licence obligations, platform features, or internal data practices. When material amendments are made, 3r3 will notify registered players via email to the address on record and/or via a prominent notice displayed upon login.

The "Last Updated" date at the top of this Policy reflects when the current version was published. Minor, non-material amendments — such as formatting corrections, clarifications that do not change the substantive effect of any clause, or updated contact details — may be made without advance notice and will take effect from the publication date.

Continued use of the 3r3 platform after any amendment to this Privacy Policy constitutes acceptance of the revised Policy. If you do not agree with any amendment, you should cease using the platform and contact support to request account closure.

14 Contact & Data Protection Officer

For any question, concern, or request relating to this Privacy Policy or the processing of your personal data by 3r3, please contact the 3r3 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within your 3r3 account dashboard — the fastest route to a response, with average reply times under two minutes.
• Email: [email protected] — for data subject access requests, erasure requests, or formal privacy complaints, please include "Privacy Request" in the subject line.
• Response Times: All privacy-related requests will be acknowledged within 48 hours and fully responded to within 30 calendar days from the date of receipt.
• Escalation: If you are not satisfied with our response to your privacy request, you have the right to escalate your complaint to the international gaming licence supervisory authority or the relevant data protection regulator.

3r3 takes every privacy request seriously. Our Data Protection Officer is a dedicated function within the 3r3 compliance team, independent of the commercial operations of the platform, and empowered to act on your privacy rights without commercial interference.