1. Introduction
This Privacy Policy ("Policy") describes how 3ptti ("we," "us," "our," "the Platform") collects, uses, stores, and protects personal information provided by registered players and visitors on the 3ptti gaming platform at 3ptti.ws. It applies to all users of the 3ptti platform, including registered account holders and visitors who have not yet created an account.
3ptti is built specifically for Pakistani players. Every data handling decision we have made has been made with the Pakistani user experience in mind — including our use of local payment methods like Easypaisa and JazzCash, which require specific data handling arrangements that are different from international platforms operating generic global policies.
By registering an account on 3ptti or continuing to use the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, please do not register an account or use the 3ptti platform.
Plain English commitment: 3ptti writes its privacy documents in clear, accessible English because we believe Pakistani players deserve to understand exactly what is happening with their data — not have it buried in legalese. If any part of this Policy is unclear to you, contact our support team at support@3ptti.ws and we will explain it directly.
2. Data We Collect
3ptti collects two broad categories of information: data you provide directly when registering and using the platform, and data generated automatically through your use of the platform.
2.1 Data You Provide Directly
| Data Category | Specific Information | When Collected |
|---|
| Identity Data |
Full legal name, date of birth, gender, CNIC number (when KYC is required) |
Registration, KYC verification |
| Contact Data |
Mobile number, email address |
Registration |
| Account Credentials |
Username, encrypted password |
Registration |
| Payment Data |
Easypaisa/JazzCash account number, bank account details (IBFT), card details (Visa/MC) |
First deposit / withdrawal |
| Verification Documents |
CNIC image, selfie with CNIC (for high-value withdrawals) |
KYC request |
| Support Communications |
Messages sent to 3ptti support via email or live chat |
Support interactions |
2.2 Data Collected Automatically
When you use the 3ptti platform — whether on a browser or mobile device — certain data is collected automatically as part of normal platform operation:
- Device information: Device type, operating system, browser type and version, screen resolution
- Connection data: IP address, general geographic location derived from IP (city/country level only)
- Session data: Login times, session duration, pages visited, features used within the platform
- Game activity data: Game rounds played, bet amounts, outcomes, game history — required for dispute resolution, fairness auditing, and responsible gaming monitoring
- Cookie and tracking data: As described in the Cookies section below
3. How We Collect Your Data
3ptti collects personal data through the following mechanisms:
- Direct registration: Information entered during the account creation process on 3ptti.ws
- Payment processing: Data shared with 3ptti by Easypaisa, JazzCash, NayaPay, SadaPay, banks, and card networks when you initiate a deposit or withdrawal
- KYC verification: Documents you submit in response to a 3ptti identity verification request
- Platform usage: Automatically captured through server logs, analytics tools, and the gaming platform's own activity tracking systems
- Customer support: Information you provide when contacting 3ptti by email or live chat
- Cookies and local storage: As described in Section 10 of this Policy
4. How We Use Your Data
3ptti uses collected personal data for the following specific purposes. We do not use your data for any purpose not listed here without obtaining fresh consent from you.
- Account management: Creating and maintaining your 3ptti account, authenticating your login, and managing account settings
- Transaction processing: Processing PKR deposits and withdrawals through your chosen Pakistani payment method
- Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years
- Game delivery and fairness: Operating game rounds, maintaining game history, and providing the audit trail required to resolve disputes fairly
- Fraud and abuse prevention: Detecting and preventing the use of multiple accounts, bonus abuse, payment fraud, collusion, and other prohibited activities
- Customer support: Responding to your queries, resolving disputes, and following up on account issues
- Responsible gaming: Monitoring for patterns consistent with problematic gaming behaviour and applying self-imposed limits you have set on your account
- Legal compliance: Meeting anti-money-laundering (AML), know-your-customer (KYC), and other legal obligations applicable to 3ptti's operations
- Platform improvement: Analysing anonymised usage patterns to improve the 3ptti product for all Pakistani players
- Communications: Sending account notifications, transaction confirmations, and promotional offers where you have opted in to receive them
5. Legal Basis for Processing
3ptti processes personal data on the following legal grounds depending on the purpose of the processing:
- Contractual necessity: Processing your identity data, payment data, and game history is necessary to provide the 3ptti service as set out in our Terms and Conditions. Without this data, we cannot operate your account.
- Legitimate interests: Processing for fraud prevention, platform security, game integrity monitoring, and platform improvement is conducted on the basis of 3ptti's legitimate business interests, balanced against your rights.
- Legal obligation: KYC and AML processing is required by applicable laws and regulations governing financial service providers and online gaming platforms.
- Consent: Marketing communications and non-essential cookies are processed only where you have given explicit consent. You may withdraw consent at any time by updating your communication preferences in your 3ptti account settings or contacting support@3ptti.ws.
6. Data Sharing and Third Parties
3ptti does not sell, rent, or trade personal data about Pakistani players. We share data only in the specific, limited circumstances described below:
6.1 Payment Service Providers
When you deposit or withdraw funds via Easypaisa, JazzCash, NayaPay, SadaPay, your bank (IBFT), or your Visa/Mastercard card, the relevant transaction data is shared with that payment provider as necessary to process the transaction. These providers have their own privacy policies governing how they handle transaction data — 3ptti shares only the minimum data required and does not give payment providers access to your game history or account activity.
6.2 Identity Verification Services
For high-value withdrawal verification or where KYC checks are required, 3ptti may use third-party identity verification services. These providers process your CNIC and related documents solely for verification purposes under contracts that prohibit any other use of the data.
6.3 Platform Infrastructure Providers
3ptti uses cloud hosting, analytics, and other technical service providers to operate the platform. These providers process data on 3ptti's behalf under strict data processing agreements and are prohibited from using 3ptti player data for their own purposes.
6.4 Legal Requirements
3ptti may disclose personal data where required to do so by applicable law, court order, or regulatory authority. We will notify affected players of any such disclosure to the extent permitted by law, and will challenge any requests that we believe are excessive or unlawfully broad.
No data sold, ever: 3ptti has never sold player data to any third party and has no intention of doing so. Our business model is built on gaming revenue — the integrity of that model depends entirely on players trusting 3ptti with their data. That trust is something we take seriously.
7. Payment Data and PKR Transactions
Because 3ptti is a Pakistani-focused platform processing real PKR transactions, payment data receives additional protection beyond general personal data handling standards.
3ptti does not store full card numbers, CVV codes, or complete mobile wallet credentials on its own servers. Payment processing is handled through encrypted connections with your payment provider. 3ptti retains only the minimum payment reference data necessary to process withdrawals back to your registered payment method and to satisfy AML/KYC audit requirements.
Transaction records — amounts deposited, amounts withdrawn, dates, and payment method types — are retained for a minimum of seven years as required for financial compliance purposes. These records are used only for audit, dispute resolution, and legal compliance — they are never used for commercial analysis or shared with advertisers.
Accepted payment methods at 3ptti and the data they require:
- Easypaisa: Mobile number linked to your Easypaisa wallet
- JazzCash: Mobile number linked to your JazzCash wallet
- NayaPay / SadaPay: Registered mobile number and account reference
- IBFT Bank Transfer: Bank account number, bank name, account title
- Visa / Mastercard: Processed via encrypted payment gateway — full card numbers not stored by 3ptti
8. Security Measures
3ptti implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The following measures are currently in place:
256-bit SSL/TLS Encryption
All data transmitted between your device and 3ptti's servers is encrypted using TLS 1.3 with 256-bit AES encryption — the current industry standard for secure web communications. This applies to login, account management, deposits, withdrawals, and all game interactions.
Secured Server Infrastructure
3ptti's player data is stored on servers with strict access controls, regular security patching, intrusion detection systems, and automated anomaly alerts. Physical access to server infrastructure is restricted to authorised personnel only.
Internal Access Controls
Access to player personal data within 3ptti is restricted to staff members whose job functions require it. All internal access is logged. Staff undergo data privacy training and are bound by confidentiality obligations.
Regular Security Audits
3ptti's platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited. Identified issues are prioritised and remediated according to severity.
Two-Factor Authentication (2FA)
3ptti supports and encourages players to enable two-factor authentication on their accounts. With 2FA active, logging in requires both your password and a one-time code sent to your registered mobile number — significantly reducing the risk of unauthorised access.
Despite these measures, no online system is entirely immune to security risks. 3ptti recommends that all Pakistani players use strong, unique passwords for their 3ptti accounts and avoid logging in from public or shared Wi-Fi networks without VPN protection.
9. Data Retention
3ptti retains personal data only for as long as it is needed to fulfil the purpose for which it was collected, or to meet applicable legal obligations. Retention periods vary by data category:
| Data Category | Retention Period | Reason |
|---|
| Account & identity data |
Duration of account + 5 years after closure |
KYC / AML legal obligation |
| Transaction records |
7 years minimum |
Financial compliance, audit |
| Game history |
3 years after account closure |
Dispute resolution, fairness audit |
| Support correspondence |
3 years after closure of case |
Dispute record, quality review |
| Cookie / analytics data |
Up to 13 months |
Platform improvement, session analysis |
| Marketing opt-in records |
Until consent withdrawn + 3 years |
Proof of consent |
When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with any individual player.
10. Cookies and Tracking
3ptti uses cookies and similar technologies to operate the platform, remember your preferences, and analyse how Pakistani players use the site. Here is a breakdown of the cookies 3ptti uses:
- Essential cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, security tokens that protect against CSRF attacks, and cookies that maintain your game state. These cannot be disabled without preventing the platform from working.
- Functional cookies: Remember your preferences such as language settings, preferred game lobby layout, and responsible gaming settings you have configured on 3ptti.
- Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, where players drop off, how long sessions last. This data is anonymised and used to improve the 3ptti experience. You may opt out of analytics cookies via your browser settings or by contacting support.
- Marketing cookies: Only placed with your explicit consent. Used to track whether marketing communications you received led to a visit to 3ptti. You can withdraw consent at any time through your account settings.
You can control cookie settings through your browser's privacy controls. Note that disabling essential cookies will prevent you from logging in to or using the 3ptti platform. Disabling functional cookies may reduce the quality of the experience but will not prevent basic access.
11. Your Privacy Rights
As a 3ptti player, you have the following rights regarding your personal data. These rights can be exercised at any time by emailing support@3ptti.ws. 3ptti will respond to all data rights requests within 30 days.
Right of Access
You may request a copy of all personal data 3ptti holds about you, including account data, transaction history, and game logs associated with your account.
Right to Rectification
If any personal data held by 3ptti is inaccurate or incomplete, you have the right to request that it be corrected. Identity corrections may require supporting documentation.
Right to Erasure
You may request deletion of your personal data. Note that data subject to legal retention obligations (such as transaction records) cannot be deleted until the applicable retention period expires.
Right to Restrict Processing
In certain circumstances, you may request that 3ptti restricts how it processes your data — for example, while a dispute about its accuracy is being resolved.
Right to Portability
You may request your personal data in a structured, machine-readable format so that it can be transferred to another service provider if you choose.
Right to Object
You may object to processing carried out on the basis of legitimate interests, including direct marketing. Objections to marketing will be actioned immediately.
How to exercise your rights: Email support@3ptti.ws with the subject line "Privacy Rights Request" and specify which right you are exercising and what data it relates to. We will verify your identity before processing any request and respond within 30 calendar days. Complex requests may require additional time, in which case we will inform you of the expected timeline.
12. Minors and Data Protection
3ptti's services are strictly for adults aged 18 and over. The platform does not knowingly collect personal data from anyone under the age of 18. All registration processes include an age declaration and are backed by age verification checks.
If 3ptti discovers that personal data has been collected from a person under 18 — whether through an inaccurate age declaration or circumvention of age checks — that data will be deleted immediately, the account will be closed, and any funds deposited will be returned to the payment source. No winnings will be paid to under-18 accounts under any circumstances.
Parents and guardians who believe a minor in their household may have created a 3ptti account are encouraged to contact support@3ptti.ws immediately. 3ptti will investigate and take action without delay. We also recommend implementing device-level parental controls on any device that children have access to.
13. Changes to This Policy
3ptti may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or changes to our data handling practices. When we make material changes to this Policy, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification to all registered 3ptti players via their registered email address
- Display a prominent notice on the 3ptti platform for a reasonable period following the update
Minor or administrative changes — such as updating contact email addresses or correcting typographical errors — may be made without formal notice, though the "Last Updated" date will always reflect the most recent edit. We encourage all Pakistani players to review this Policy periodically to stay informed about how 3ptti is protecting their data.
