Privacy Policy —
patti3 Platform

1 Introduction

This Privacy Policy ("Policy") is issued by patti3 ("patti3", "we", "us" or "our"), the operator of the online gaming information platform accessible at https://patti3.cam ("the Platform"). This Policy applies to all users of the Platform ("User", "you" or "your") and governs the collection, use, storage, disclosure and protection of personal data in connection with your use of the Platform.

patti3 is an English-language online gaming information and guidance platform designed specifically for Pakistani users. The Platform provides sports betting guides, casino game overviews, payment method explainers, KYC guides, responsible gambling resources and related informational content. patti3 does not operate as a licensed casino or sportsbook and does not directly accept bets, deposits or wagers from users.

By accessing or using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please do not access or use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person, including name, CNIC number, email address, postal address, phone number, device identifiers and payment details.
• "Processing" means any operation performed on personal data, whether by automated or manual means, including collection, recording, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of processing personal data. For the purposes of this Policy, patti3 is the data controller in respect of data collected through the Platform.
• "Data Processor" means any third party that processes personal data on behalf of patti3, pursuant to a written data processing agreement.
• "Sensitive Personal Data" means personal data that requires higher levels of protection due to its nature, including financial information, identity documents (such as CNIC or passport), biometric data and health-related information.
• "KYC" means Know Your Customer — the identity and age verification process that may be required to access certain features of the Platform.
• "Cookies" means small data files stored on a User's device by the Platform, used to enable functionality and analyse usage patterns.
• "Third Party" means any person or entity other than patti3, its affiliates and the User.

3 Data Controller Identity

patti3, operating through the Platform at https://patti3.cam, acts as the Data Controller in respect of personal data collected through the Platform. This means patti3 is responsible for deciding how and why your personal data is collected and used.

4 Personal Data We Collect

patti3 may collect the following categories of personal data, depending on how you interact with the Platform:

5 How We Collect Your Data

patti3 collects personal data through the following means:

• Direct collection from you: When you register an account, complete KYC verification, submit support requests, participate in promotions or correspond with our team, you voluntarily provide personal data to us. This includes name, email address, date of birth, CNIC details and payment method information.
• Automated technical collection: When you visit the Platform, we automatically collect certain technical and usage data, including IP address, browser type, device information, operating system, referring URLs and session activity. This data is collected through server logs, cookies and similar tracking technologies.
• Third-party sources: We may receive personal data from third-party identity verification providers, fraud detection services or payment processing partners, where you have authorised such sharing or where we have a legitimate legal basis to obtain such data.
• KYC verification providers: Where a third-party identity verification service is used to process KYC documents, data may be shared between that provider and patti3 pursuant to a data processing agreement. Such providers are contractually bound to handle your data securely and in accordance with applicable law.

6 Legal Basis for Processing

patti3 processes personal data on one or more of the following legal grounds, depending on the specific processing activity:

• Contractual necessity: Processing is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering into such a contract. This includes account registration, KYC verification and processing deposits or withdrawals.
• Legal obligation: Processing is necessary for compliance with a legal obligation to which patti3 is subject. This includes anti-money laundering (AML) checks, identity verification obligations and responses to lawful requests from regulatory authorities or law enforcement.
• Legitimate interests: Processing is necessary for the purposes of the legitimate interests pursued by patti3, provided these interests are not overridden by your fundamental rights and freedoms. Legitimate interests include fraud prevention, platform security, analytics and service improvement.
• Consent: Where processing is based on your freely given, specific, informed and unambiguous consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

7 How We Use Your Personal Data

patti3 uses collected personal data for the following purposes:

• Account management: Creating, maintaining and administering your account on the Platform, including verification of your identity and age eligibility.
• KYC and compliance: Verifying your identity in accordance with applicable anti-money laundering (AML) and counter-terrorist financing (CTF) obligations.
• Transaction processing: Facilitating deposits, withdrawals and related payment operations, including communicating with payment processors regarding your transactions. Payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are mentioned on the Platform for informational context only; actual transaction processing is conducted by the relevant operator and payment provider.
• Customer support: Responding to your queries, complaints and support requests, and maintaining records of communications for quality assurance and dispute resolution purposes.
• Fraud and security: Detecting, investigating and preventing fraudulent activity, unauthorised access, money laundering, collusion and other security threats.
• Responsible gambling: Monitoring usage patterns that may indicate problem gambling behaviour, administering self-exclusion arrangements and enforcing responsible gambling limits.
• Platform analytics and improvement: Analysing usage data to understand how the Platform is used, identify areas for improvement, and optimise content and functionality for Pakistani users.
• Legal compliance: Meeting our legal obligations, responding to lawful requests from regulatory authorities, courts or law enforcement agencies, and maintaining records as required by applicable law.
• Marketing communications: Where you have provided explicit consent, sending you relevant promotional information about patti3 services. You may withdraw consent at any time.

8 Cookies & Tracking Technologies

patti3 uses cookies and similar tracking technologies to operate the Platform, analyse usage patterns and improve the user experience. The following categories of cookies may be used:

• Strictly necessary cookies: Required for the Platform to function correctly. These cannot be disabled without impairing Platform functionality. They include session management, security tokens and load balancing cookies.
• Analytical/performance cookies: Used to collect aggregate, anonymised data about how visitors interact with the Platform — such as which pages are most visited, how long users stay and which content is most engaging. This helps us improve Platform performance and content relevance for Pakistani users.
• Functional cookies: Enable the Platform to remember your preferences, such as language settings and display configurations, to provide a more personalised experience.
• Targeting/advertising cookies: Where applicable and subject to your consent, these cookies may be used to deliver relevant content or advertising. You may withdraw consent for non-essential cookies at any time through your browser settings or our cookie preference manager.

9 Sharing Your Data with Third Parties

patti3 does not sell, rent or trade your personal data. We may share your personal data with third parties only in the following circumstances and to the extent strictly necessary:

• Identity verification providers: Third-party KYC and identity verification services used to process CNIC documents, passport scans and liveness checks. These providers operate under contractual data processing agreements and may not use your data for their own purposes.
• Payment service providers: Where transactions are processed through third-party payment infrastructure, necessary payment data is shared with the relevant provider. This does not imply endorsement of gambling by Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank, Bank Alfalah or any other referenced payment provider.
• Fraud and AML screening providers: Third-party services that assist in detecting fraudulent activity and meeting anti-money laundering obligations.
• Analytics providers: Aggregated, anonymised usage data may be processed by analytics platforms to help us understand Platform performance. Such data does not identify individual users.
• Legal and regulatory authorities: We may disclose personal data to law enforcement, courts, regulators or governmental authorities where required by applicable law, pursuant to a valid legal order, or where necessary to protect the rights and safety of users or the Platform.
• Corporate transactions: In the event of a merger, acquisition or sale of all or part of patti3's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to maintain appropriate technical and organisational security measures and may only process personal data for the specified purpose disclosed at the time of collection.

10 International Data Transfers

patti3 may transfer personal data to countries outside Pakistan in connection with the operation of the Platform, where third-party service providers (including identity verification, analytics or payment processing partners) are located in other jurisdictions.

Where personal data is transferred internationally, patti3 takes steps to ensure that an adequate level of protection applies to such transfers, including through the use of contractual safeguards (such as data processing agreements) and, where applicable, adequacy decisions or binding corporate rules recognised under applicable data protection frameworks.

11 Data Retention

patti3 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Account and KYC data: Retained for the duration of your account relationship with patti3 and for a minimum period thereafter as required by applicable AML and record-keeping regulations. KYC documents may be subject to statutory minimum retention periods.
• Transaction records: Financial transaction records are retained for the period required by applicable financial regulations and AML obligations, which typically range from five to seven years depending on jurisdiction.
• Communications and support records: Support correspondence and chat transcripts are retained for a reasonable period for quality assurance, dispute resolution and legal purposes.
• Technical and usage data: Log files and usage analytics are typically retained in identifiable form for a shorter period (often 90 days to 24 months) before being anonymised or deleted.
• Marketing data: Where processing is based on consent, data used for marketing communications is retained until you withdraw consent or request deletion, subject to any applicable regulatory requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

12 Data Security

patti3 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• Encryption of personal data in transit using Transport Layer Security (TLS/HTTPS);
• Encryption of sensitive data at rest using industry-standard encryption protocols;
• Access controls limiting personnel access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Incident response procedures to identify, contain and remediate data security breaches.

Notwithstanding patti3's security measures, no internet-based platform can guarantee absolute security. You acknowledge and accept that data transmission over the internet carries inherent risks and that patti3 cannot guarantee the security of data transmitted to the Platform prior to receipt.

13 Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by patti3. To exercise any of these rights, please contact us using the details in Section 16.

14 Children's Privacy

The patti3 Platform is strictly intended for adults. We do not knowingly collect, process or retain personal data from individuals under the age of 18, or under the higher minimum age required by the operator's license jurisdiction, whichever is greater.

If we become aware that personal data has been collected from an individual under the applicable minimum age without appropriate parental consent, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has submitted personal data to patti3 without your knowledge, please contact us immediately at [email protected].

15 Amendments to This Policy

patti3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. Where material changes are made, we will provide reasonable notice to registered Users by email or via a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how we handle your personal data.

Your continued use of the Platform following the publication of any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and may request deletion of your account by contacting our support team.

16 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by patti3, please contact our support team using the details below.