3rrr Casino – Privacy Policy

1. Introduction

3rrr Casino ("3rrr", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who use the 3rrr platform at 3rrr.club. This Privacy Policy ("Policy") sets out the basis on which personal data we collect from you — or that you provide to us — will be processed.

This Policy applies to all users of the 3rrr platform, including registered account holders, visitors to the website, and any individual whose personal data is processed in connection with the services offered by 3rrr. It should be read alongside the Terms & Conditions and the Responsible Gaming Policy.

By using the 3rrr platform, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with this Policy, you should not use the platform or provide us with your personal data.

2. Data Controller

3rrr Casino is the data controller in respect of personal data collected through the 3rrr platform. As data controller, 3rrr determines the purposes and means by which your personal data is processed. Questions or requests relating to your personal data should be directed to 3rrr support via the contact details in Section 15 of this Policy.

3. Personal Data We Collect

3rrr collects personal data in the following categories depending on how you interact with the platform:

We do not collect special categories of personal data (such as health data, religious beliefs, or biometric data) except where specifically required by applicable KYC or regulatory obligations and with your explicit consent.

4. How We Use Your Personal Data

3rrr processes your personal data for the following purposes:

• Account creation and management — to register your account, verify your identity, and maintain your account settings and preferences on the 3rrr platform
• KYC compliance — to verify your identity and age (18+) as required by our regulatory obligations and to prevent the opening of accounts by minors or individuals using false identities
• Payment processing — to process deposits and withdrawals through JazzCash, Easypaisa, bank transfers, and card methods in Pakistani Rupees
• Fraud and AML prevention — to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crimes on the 3rrr platform
• Platform operation and improvement — to deliver the games, sportsbook markets, and other services on 3rrr, and to improve platform performance based on usage analytics
• Responsible gaming — to monitor gaming activity for indicators of problem gambling and to apply responsible gaming tools where relevant
• Customer support — to respond to your queries, resolve disputes, and process complaints
• Legal and regulatory compliance — to comply with applicable laws, respond to regulatory inquiries, and fulfil reporting obligations
• Direct communications — where you have consented, to send you information about promotions, offers, and updates relevant to your 3rrr account

5. Legal Basis for Processing

3rrr processes personal data on the following legal bases:

• Contract performance — processing necessary to provide the services you have requested by registering an account and using the 3rrr platform
• Legal obligation — processing required by applicable law, including KYC, AML, and regulatory reporting requirements
• Legitimate interests — processing for fraud prevention, security monitoring, platform improvement, and responsible gaming purposes, where these interests are not overridden by your fundamental rights
• Consent — where you have provided explicit consent for specific processing activities such as marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing

6. Data Sharing

3rrr does not sell or rent your personal data to third parties. We share personal data only in the following circumstances and with the following categories of recipients:

• KYC and identity verification providers — third-party services used to verify identity documents and cross-reference against watchlists as required by AML obligations
• Payment processors — JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Visa, Mastercard, and associated processing infrastructure, to the extent necessary to process financial transactions
• Fraud and security services — specialist providers that assist in detecting and preventing fraudulent activity, account takeover attempts, and platform abuse
• Analytics providers — anonymised or aggregated usage data may be shared with analytics platforms to support platform development. These providers are contractually prohibited from using this data for their own purposes
• Regulatory authorities and law enforcement — where required by applicable law, court order, or regulatory request, 3rrr may be required to disclose personal data to government authorities or law enforcement agencies
• Corporate transactions — in the event of a merger, acquisition, or sale of substantially all assets of 3rrr, personal data may be transferred to the successor entity subject to this Policy's protections continuing to apply

All third-party service providers with access to personal data are subject to contractual data processing obligations consistent with applicable data protection standards.

7. International Data Transfers

Some of our data processors and service providers may operate in or transfer data to jurisdictions outside Pakistan. Where personal data is transferred internationally, 3rrr takes steps to ensure that appropriate safeguards are in place, including contractual protections and data transfer mechanisms consistent with applicable data protection requirements. If you have questions about specific international transfer arrangements, please contact 3rrr support.

8. Data Retention

3rrr retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention requirements imposed by applicable law and regulatory obligations. Specific retention periods include:

• KYC and identity documents — retained for a minimum of five years following account closure, or longer where required by AML regulations
• Transaction records — retained for a minimum of five years following the date of the transaction
• Account information — retained for the duration of the account relationship and for a minimum of five years following account closure
• Support communications — retained for a minimum of three years from the date of the communication
• Usage and analytics data — retained in anonymised or aggregated form and may be kept indefinitely for analytical purposes

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised.

9. Cookies and Tracking Technologies

The 3rrr platform uses cookies and similar tracking technologies. Cookies are small text files stored on your device when you visit the platform. 3rrr uses the following categories of cookies:

• Strictly necessary cookies — essential for the platform to function, including session management, login state, and security tokens. These cannot be disabled without preventing core platform functionality.
• Analytics cookies — used to collect anonymised information about how users navigate the 3rrr platform, allowing us to identify and address usability issues. These are optional and subject to your consent.
• Preference cookies — used to remember your platform settings and preferences between sessions. These are optional.

You can manage your cookie preferences at any time through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the 3rrr platform. 3rrr does not use third-party advertising or behavioural tracking cookies.

10. Data Security

3rrr implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and the 3rrr platform
• AES-256 encryption for sensitive personal data stored at rest
• Role-based access controls limiting internal access to personal data to authorised personnel on a strict need-to-know basis
• Regular security assessments and penetration testing of the 3rrr platform infrastructure
• Mandatory two-factor authentication for privileged internal system access

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach affecting your personal data, 3rrr will notify you and applicable regulatory authorities in accordance with legal requirements.

11. Your Data Rights

Subject to applicable law and regulatory limitations, you have the following rights in respect of personal data held by 3rrr:

• Right of access — to request a copy of the personal data 3rrr holds about you
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure — to request deletion of your personal data, subject to regulatory data retention obligations that may require us to retain certain records
• Right to restriction — to request that processing of your personal data be restricted in specific circumstances
• Right to data portability — to receive personal data you have provided to 3rrr in a structured, machine-readable format
• Right to withdraw consent — where processing is based on your consent, to withdraw that consent at any time without affecting the lawfulness of prior processing
• Right to object — to object to processing of your personal data carried out on the basis of legitimate interests

To exercise any of these rights, please contact 3rrr support via the live chat in your account dashboard or by email (plain text contact in Section 15). 3rrr will respond to rights requests within a reasonable period and in accordance with applicable legal requirements. Identity verification may be required before a rights request can be fulfilled.

12. Children and Minors

The 3rrr platform is strictly for individuals aged 18 and over. 3rrr does not knowingly collect personal data from individuals under the age of 18. The mandatory KYC verification process is designed to prevent underage account creation. If 3rrr becomes aware that an account has been opened by an individual under 18, the account will be immediately closed and all personal data associated with it will be deleted or retained only to the minimum extent required by applicable legal obligations.

If you believe a minor has registered on the 3rrr platform, please contact 3rrr support immediately.

13. Responsible Gaming & Data Processing

3rrr processes usage data — including gaming activity, session frequency, deposit patterns, and betting behaviour — as part of its responsible gaming programme. This processing enables 3rrr to identify patterns that may indicate problem gambling and to proactively offer responsible gaming tools to affected players.

Where a player activates a self-exclusion request at 3rrr, their account details are retained on the exclusion register for the duration of the exclusion period to prevent account reactivation. This is a legal and regulatory obligation and cannot be overridden by a right to erasure request during the exclusion period.

Full details of 3rrr's responsible gaming tools and policies are available on the Responsible Gaming page.

14. Changes to This Privacy Policy

3rrr may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Where changes are material, 3rrr will provide reasonable notice through in-platform notification or by email to your registered address. The updated Policy will be published on this page with the revised effective date. Your continued use of the 3rrr platform following the publication of a revised Policy constitutes your acceptance of the changes.

15. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 3rrr, please contact our support team via the 24/7 live chat available in your account dashboard.

You may also contact us by email. Our support address is displayed below as plain text and is not a clickable link:

Support email (plain text): [email protected]

We aim to respond to all privacy-related enquiries within a reasonable timeframe, and no later than the period required by applicable law.