Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 3paati ("we", "us", "our", "the Operator", "the Platform") collects, processes, stores, shares and protects personal data relating to individuals ("you", "User", "Data Subject") who access or use the website located at https://3paati.cam and all associated services.

3paati is an English-language online betting information and platform site targeting Pakistani users. We take the privacy and security of your personal information seriously. This Policy is designed to give you full transparency over our data-processing activities and to explain the rights you hold under applicable data-protection law.

We reserve the right to update this Policy from time to time. Material changes will be communicated to registered Users via the email address on file and/or via a prominent notice on the Platform, with at least 14 days' advance notice where practicable.

2 Definitions

• "Personal Data" means any information relating to an identified or identifiable natural person. Examples include name, email address, date of birth, IP address, device identifiers and financial account details.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, alteration, retrieval, use, disclosure, restriction and deletion.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data. For users of this Platform, the Data Controller is 3paati as identified in Section 3.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller, pursuant to a data-processing agreement.
• "KYC Data" means identity-verification documents and associated information collected as part of the Know Your Customer process, including CNIC or passport copies and proof-of-address documents.
• "Sensitive Data" means Personal Data revealing racial or ethnic origin, political opinions, religious beliefs, health information, or financial details beyond basic transactional information.
• "Consent" means a freely given, specific, informed and unambiguous indication of agreement to the Processing of Personal Data for a specified purpose.
• "Platform" means the website at https://3paati.cam and all sub-pages and services accessible through it.

3 Data Controller

The Data Controller responsible for the Personal Data of users of the 3paati Platform is the Operator as identified in the Platform's licensing and corporate documentation. For the purpose of this Policy, the Operator may be contacted via the details set out in Section 16 of this Policy.

Where we engage third-party Data Processors to assist in delivering Platform services — such as payment-processing intermediaries, identity-verification providers or cloud-hosting services — those parties act as Data Processors and are bound by written data-processing agreements that restrict their use of your Personal Data to the purposes specified by us.

4 Data We Collect

4.1 Data You Provide Directly

When you register, verify your account, deposit funds or contact support, you provide us with information including:

• Full name, date of birth, gender and nationality;
• Email address, mobile number and residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar);
• Username and account credentials (passwords are stored in hashed, irreversible form — we never store plaintext passwords);
• KYC documents: CNIC, passport or other government-issued identification;
• Source-of-funds information where required for enhanced due diligence;
• Communications sent to our support team via live chat, email or any other channel.

4.2 Data Collected Automatically

When you use the Platform, we automatically collect:

• IP address and approximate geolocation (country and city level);
• Device type, operating system, browser type and version;
• Pages visited, time spent on each page, click paths and navigation patterns;
• Session duration, login timestamps and logout timestamps;
• Betting and gaming activity, including markets visited, wagers placed, amounts staked and game outcomes;
• Deposit and withdrawal transaction records, including payment method type and transaction reference numbers.

4.3 Data from Third Parties

We may receive Personal Data about you from:

• Identity-verification service providers used to complete KYC checks;
• Fraud-prevention and anti-money-laundering screening services;
• Payment intermediaries, in connection with transaction processing;
• Publicly available sources, where relevant to our compliance obligations.

4.4 Data We Do Not Collect

We do not intentionally collect Sensitive Data (such as racial origin, health or religious beliefs) beyond what is incidentally disclosed in identification documents submitted for KYC. Where such information is contained in a submitted document, it is used solely for identity verification and is not used for any profiling or discriminatory purpose.

5 Legal Basis for Processing

We process your Personal Data on the following legal bases:

6 How We Use Your Personal Data

We use your Personal Data for the following purposes:

6.1 Account & Service Delivery

• Creating and maintaining your Account on the Platform;
• Authenticating your identity at login and during security checks;
• Processing your deposits, bets, winnings and withdrawals;
• Providing customer support and resolving account-related queries.

6.2 Legal & Regulatory Compliance

• Conducting KYC and enhanced due-diligence checks as required by applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations;
• Filing regulatory reports and responding to lawful requests from competent authorities;
• Maintaining transaction records for the legally required retention period.

6.3 Platform Security & Fraud Prevention

• Detecting and investigating suspicious account activity, including multi-account operation and bonus abuse;
• Monitoring for technical vulnerabilities, unauthorised access attempts and data-breach indicators;
• Preventing and investigating match-fixing, collusion and other prohibited conduct.

6.4 Responsible Gambling

• Monitoring betting and gaming patterns to identify indicators of problem gambling behaviour;
• Enforcing self-imposed limits, cooling-off periods and self-exclusion requests;
• Contacting Users who display signs of gambling-related harm with appropriate support information.

6.5 Platform Improvement & Analytics

• Analysing aggregated, pseudonymised usage data to improve platform performance, navigation and content relevance;
• Conducting internal research on market availability and product development.

7 Sharing & Disclosure of Personal Data

We do not sell your Personal Data. We may disclose Personal Data to the following categories of recipients, strictly as necessary:

• Identity Verification Providers: Third-party KYC and AML screening services that assist us in verifying your identity and complying with applicable regulations.
• Payment Service Intermediaries: Where required to process deposits and withdrawals. These parties receive only the transactional data required to complete your requested transaction.
• Cloud & Hosting Providers: Infrastructure providers that host our servers and databases, operating under binding data-processing agreements.
• Fraud & Security Partners: Services that assist us in detecting and preventing fraudulent account activity, bot usage and other prohibited conduct.
• Regulatory & Law Enforcement Authorities: Where we are under a legal obligation to disclose Personal Data, including in response to lawful requests from competent authorities, court orders or regulatory investigations.
• Professional Advisers: Solicitors, auditors and insurers, where necessary for the conduct of their professional services and subject to professional confidentiality obligations.

8 International Data Transfers

Our servers and certain Data Processors may be located in jurisdictions outside Pakistan. Where Personal Data is transferred internationally, we take steps to ensure an appropriate level of protection is in place, including through the use of contractual safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised by applicable data-protection law.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in jurisdictions other than Pakistan. We will always apply the protections described in this Policy regardless of where your data is processed.

9 Retention Periods

We retain Personal Data for as long as necessary to fulfil the purposes described in this Policy, subject to any longer retention periods required by applicable law or regulation. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data-disposal procedures. Anonymised or aggregated data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

10 Cookies & Tracking Technologies

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens. You cannot opt out of essential cookies without ceasing to use the Platform.
• Analytical Cookies: Used to understand how Users interact with the Platform — pages visited, time spent and navigation paths. These are set only with your consent and use pseudonymised identifiers.
• Preference Cookies: Store your selected settings such as language preference, odds format and display preferences. Set with your consent.

10.2 Managing Cookies

You may adjust your cookie preferences at any time via your browser settings or via any cookie-preference mechanism provided on the Platform. Disabling non-essential cookies will not affect your ability to use the core Platform but may reduce personalisation features.

11 Security Measures

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. Our security measures include:

• TLS encryption for all data in transit between your device and our servers;
• Encryption of Personal Data at rest using industry-standard algorithms;
• Role-based access controls restricting staff access to Personal Data on a need-to-know basis;
• Two-factor authentication requirements for administrative access to production systems;
• Regular internal security reviews and vulnerability assessments;
• Incident-response procedures for the detection, investigation and notification of Personal Data breaches.

In the event of a Personal Data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected Users without undue delay and in accordance with applicable law.

12 Your Rights

Subject to applicable data-protection law and any overriding legal obligations we hold, you may exercise the following rights in relation to your Personal Data:

To exercise any of these rights, please contact us as described in Section 16. We will verify your identity before processing any data-subject request and will respond within 30 calendar days. Where a request is complex or numerous, we may extend this period by a further 60 days, in which case we will notify you of the extension and the reason for it.

13 Children's Privacy

The Platform is strictly intended for adults aged 18 or older (or the higher minimum age required by the applicable operator/license jurisdiction). We do not knowingly collect Personal Data from individuals under the applicable minimum age. If we become aware that Personal Data has been collected from an underage individual, we will take immediate steps to delete that data and close the associated Account. If you believe that we may hold Personal Data relating to a minor, please contact us immediately using the details in Section 16.

14 Pakistan-Specific Notice

3paati targets Pakistani users and acknowledges that Pakistan has a developing data-protection legal framework. The Personal Data Protection Bill (and any enacted legislation or amendment thereof) may impose specific obligations on operators collecting data from Pakistani citizens. We monitor regulatory developments and will update this Policy accordingly.

Users located in Pakistan are advised that their Personal Data may be transferred to and processed outside of Pakistan. We apply the protections described in this Policy regardless of the processing location.

15 Policy Amendments

We may update this Privacy Policy from time to time to reflect changes in our data-processing practices, applicable law or the Platform's features. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Material changes will be communicated to registered Users with at least 14 days' advance notice via the registered email address or via a prominent Platform notice.

Your continued use of the Platform after the effective date of any amended Policy constitutes your acknowledgement of the changes. If you object to any change, you may close your Account and request deletion of your data in accordance with Section 12.

16 Contact & Complaints

For all privacy-related queries, data-subject rights requests, or complaints regarding our handling of your Personal Data, please contact the 3paati Data Protection contact:

If you are dissatisfied with our response to a privacy complaint, you have the right to escalate your complaint to the competent supervisory authority in the jurisdiction governing this Policy. We will provide details of the relevant authority upon request.

This Privacy Policy was last reviewed and updated on 1 January 2026. All previous versions are superseded by this document.