Privacy Policy — How 3pattiok Collects, Uses & Protects Your Data

This Privacy Policy describes how 3pattiok collects, processes, stores, and protects personal data belonging to its registered players and website visitors. It applies to all services operated under the 3pattiok brand, accessible at 3pattiok.biz. By using the 3pattiok platform, you acknowledge that you have read and understood this Privacy Policy.

3pattiok is designed specifically for players based in Pakistan. Our data practices reflect that focus — we use payment providers, verification services, and support systems that operate within or in direct connection with the Pakistani market. No personal data is transferred to servers in jurisdictions that do not maintain equivalent data protection standards without appropriate safeguards in place.

01Who We Are

3pattiok is an online gaming platform operated under the 3pattiok brand, accessible at 3pattiok.biz. For the purposes of this Privacy Policy, "3pattiok", "we", "us", and "our" refer to the platform operator responsible for your personal data.

The 3pattiok platform provides online card games including Teen Patti and its variants, Poker, Sports Betting, the Aviator Game, and related entertainment services. All services are denominated in Pakistani Rupees (PKR) and delivered to players in Pakistan through Pakistani payment infrastructure including Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard.

02Data We Collect

3pattiok collects only the personal data that is genuinely necessary to operate the platform, verify identity, process payments, and keep the gaming environment safe and fair. We do not collect data for the sake of it. Below is a clear breakdown of every category of data we collect and the source it comes from.

Data Provided Directly by You

• Registration data: Full name, date of birth, email address, mobile phone number, and chosen username when you create your 3pattiok account.
• Identity verification (KYC): A photograph or scan of your CNIC (Computerised National Identity Card), submitted once when you initiate your first withdrawal request.
• Payment information: Mobile wallet account numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, or partially masked card details for Visa/Mastercard transactions. Full card numbers are not retained by 3pattiok.
• Support communications: Messages, chat transcripts, and emails you send to 3pattiok support, which are retained to maintain continuity of service and resolve disputes.
• Responsible gaming settings: Deposit limit configurations, self-exclusion requests, and cooling-off preferences you set within your account.

Data Collected Automatically

• Device information: Device type, operating system version, browser type, and screen resolution — used to optimise the platform display for your device.
• Connection data: IP address and approximate geographic location — used for fraud prevention and to verify that access is coming from Pakistan.
• Session data: Login timestamps, session duration, pages visited within the platform, and features used — used for security monitoring and responsible gaming monitoring.
• Game history: A complete record of all games played, bets placed, hands dealt, and outcomes, including bet amounts in PKR and timestamps — retained for dispute resolution, game integrity, and regulatory purposes.
• Transaction history: All deposit and withdrawal transactions, amounts, timestamps, and payment method references.

Data from Third Parties

• Payment verification: Confirmation signals from Easypaisa, JazzCash, NayaPay, SadaPay, and banking partners confirming that a payment was successfully sent or received. 3pattiok receives confirmation data, not access to your full payment account.
• Fraud prevention services: Where necessary to protect the platform and its players, 3pattiok may consult third-party fraud detection services that provide risk scores based on anonymised behavioural patterns.

03How We Use Your Data

Every piece of data collected by 3pattiok is used for a specific, defined purpose. The table below maps each data category to its use and the justification for processing it.

3pattiok does not use your personal data to send unsolicited third-party marketing. Platform communications you receive from 3pattiok relate directly to your account, transactions, promotions you have opted into, or important policy updates.

04Legal Basis for Processing

3pattiok processes your personal data on the following legal bases, depending on the type of data and purpose:

• Contract: Processing is necessary to deliver the 3pattiok service you signed up for — account creation, game access, payment processing, and withdrawal handling.
• Legal obligation: Identity verification and transaction record-keeping are required by financial regulations and responsible gaming compliance standards.
• Legitimate interest: Security monitoring, fraud prevention, platform optimisation, and quality assurance are carried out on the basis of 3pattiok's legitimate interest in operating a safe and well-functioning platform. In each case, these interests are balanced against your privacy rights and do not override them.
• Consent: Where 3pattiok wishes to process your data for a purpose not covered by the above bases — for example, sending you optional promotional newsletters — we will ask for your explicit consent first. You can withdraw consent at any time from your account settings.

05Data Sharing and Disclosure

3pattiok does not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. The only circumstances under which your data is shared with any external party are described below:

Payment Processing Partners

To process deposits and withdrawals in PKR, 3pattiok shares the minimum necessary transaction data with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT banking partners, or Visa/Mastercard processing networks. This sharing is necessary to complete the transaction you have requested and is governed by each payment provider's own terms and security standards.

Identity Verification Services

CNIC documents submitted for KYC may be processed through a third-party identity verification service that checks document authenticity. These services are bound by strict confidentiality agreements and process your documents solely for verification purposes.

Legal Requirements

3pattiok will disclose your personal data if required to do so by a valid legal order from a Pakistani court or regulatory authority. We will notify you of any such disclosure request as far as legally possible before complying, unless prohibited from doing so by the legal order itself.

Business Transfers

In the event that 3pattiok undergoes a merger, acquisition, or transfer of assets, your personal data may be transferred to the new entity. If this occurs, you will be notified in advance via your registered email address, and the new entity will be required to honour this Privacy Policy.

06Cookies and Tracking Technologies

3pattiok uses cookies and similar tracking technologies to make the platform work correctly, to maintain your session while you are logged in, and to understand how the platform is being used so we can improve it. Below is a plain-language explanation of each category of cookie used on 3pattiok.

3pattiok does not use advertising or retargeting cookies. No data from your 3pattiok session is shared with advertising networks or social media platforms through cookie technology. You can manage your browser's cookie settings at any time; however, disabling essential cookies will prevent the platform from functioning correctly.

07Data Security

3pattiok takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information:

• TLS encryption: All data in transit between your device and 3pattiok servers is encrypted using current TLS standards. This applies to login, gameplay, payment processing, and account settings updates.
• Encrypted data storage: Sensitive data fields including identity verification documents and payment account references are encrypted at rest in the 3pattiok database.
• Access controls: Access to personal data within 3pattiok systems is restricted to staff who genuinely need it to do their job. Access is logged and reviewed regularly.
• Two-factor authentication: 3pattiok uses OTP-based verification for high-value actions including large withdrawals and account settings changes.
• Regular security reviews: The 3pattiok platform undergoes periodic security assessments to identify and address vulnerabilities.
• Incident response: 3pattiok maintains a documented data breach response process. Confirmed breaches affecting player data will be communicated to affected players within 72 hours.

Despite these measures, no internet-based platform can guarantee absolute security. You play an important role in keeping your account safe — maintain a strong, unique password for your 3pattiok account, do not share it with anyone, and contact support immediately if you notice any suspicious activity.

08Data Retention Periods

3pattiok retains your personal data for as long as it is needed to deliver the service, comply with legal obligations, and resolve any disputes. The following retention schedule applies:

• Active account data (name, contact details, account settings): Retained for the lifetime of your account and for five years after account closure, in line with financial record-keeping requirements.
• KYC / identity verification documents: Retained for five years from the date of submission, or five years from account closure if later, as required for financial compliance.
• Transaction records (deposits, withdrawals, game history): Retained for five years from the date of each transaction.
• Support communications: Retained for two years from the date of the last interaction in the relevant support thread.
• Security and session logs: Retained for 90 days, after which they are automatically purged unless retained as part of a specific fraud or dispute investigation.
• Data deletion requests: When you request account deletion, all personal data not subject to a legal retention requirement will be deleted within 30 days of the request being confirmed.

09Your Privacy Rights

As a 3pattiok player, you have the following rights over your personal data. To exercise any of these rights, contact us at support@3pattiok.biz. We will respond within three business days of receiving your request.

10Children's Privacy

3pattiok is strictly an adult gaming platform. The minimum age to register and play is 18 years. We do not knowingly collect personal data from anyone under the age of 18.

During the registration process, all players confirm that they are 18 or older. Where identity verification raises a concern about a player's age, the account will be suspended pending KYC confirmation. If 3pattiok becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the account will be closed.

Parents or guardians who believe a minor has created an account on 3pattiok should contact support@3pattiok.biz immediately. Reports of this nature are treated as priority issues and investigated within 24 hours.

11Policy Updates

3pattiok may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, you will be notified via your registered email address at least seven days before the updated policy takes effect.

The effective date at the top of this document will always reflect the most recent update. Continued use of the 3pattiok platform after the effective date of changes constitutes acceptance of the updated Privacy Policy. We recommend bookmarking this page and reviewing it periodically.

12Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to make a complaint about how 3pattiok has handled your personal data, please contact us through one of the following channels:

Privacy-related requests are treated as a separate category from general support queries and are escalated to the appropriate team. Standard response time for privacy requests is three business days, with a maximum of 30 days for complex requests involving data access or deletion.

If you are not satisfied with how 3pattiok has handled your privacy complaint after engaging with our support team, you may escalate the matter by contacting senior management at the same email address, clearly marking your message as a formal privacy escalation.