Legal Document
3pitt Privacy Policy
This Privacy Policy describes how 3pitt ("we", "us", or "3pitt") collects, processes, stores, and protects the personal data of individuals ("you" or the "player") who access or use the 3pitt platform at 3pitt.org. This policy applies to all players accessing 3pitt from Pakistan, including players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, Peshawar, and all other regions.
By registering on 3pitt, you confirm that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please do not register or continue using the 3pitt platform.
1. Who We Are
3pitt is an online casino and sports betting platform operating under an international gaming license. The platform is accessible at 3pitt.org and is designed to serve adult players (aged 21 and above) across Pakistan who wish to engage in cricket betting, live casino games, slots, instant games, and other betting products offered on the platform.
As the operator of the 3pitt platform, we are the data controller responsible for the personal information you provide to us. We determine the purposes for which, and the manner in which, your personal data is processed. Our obligations as a data controller are governed by the data protection requirements attached to our international gaming license and by applicable data privacy laws and standards.
Data Controller: 3pitt (operating at 3pitt.org). For all data-related enquiries, contact us via live chat or at
[email protected].
2. Data We Collect
3pitt collects personal data from you in three ways: directly (information you provide to us), automatically (information collected as you use the platform), and from third parties (information from payment processors and fraud-prevention partners). The categories of data we collect are as follows:
2.1 Data You Provide Directly
- Registration data: Full legal name (as it appears on your CNIC), date of birth, CNIC number, gender, residential address, city, and province.
- Contact data: Mobile number (including JazzCash/EasyPaisa registered number where applicable), and email address.
- Identity verification documents: CNIC scan or photograph, and where required, supporting proof of address documents submitted during KYC (Know Your Customer) verification.
- Financial data: Payment method details, including JazzCash account number, EasyPaisa account number, HBL/UBL/Meezan Bank account details, and USDT TRC20 wallet address where used. Full card numbers are never stored on 3pitt servers.
- Communications: Content of messages you send to our customer support team via live chat or email, including any attachments.
- Responsible gaming data: Self-exclusion requests, deposit limits, session limits, and cooling-off period settings you configure within your account.
2.2 Data Collected Automatically
- Technical data: IP address, device type, operating system, browser type and version, screen resolution, and time zone.
- Usage data: Pages visited, games played, bets placed, session duration, click patterns, and navigation paths within the 3pitt platform.
- Transaction data: Deposit history, withdrawal history, bonus activations, wagering activity, and win/loss records.
- Cookies and similar technologies: See Section 5 for full details on the cookies and tracking technologies we deploy.
2.3 Data From Third Parties
- Payment processors: Transaction status confirmations from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 network providers.
- Identity verification services: Confirmation of CNIC validity from accredited KYC and identity verification service providers.
- Fraud prevention partners: Risk signals and fraud indicators from third-party fraud-detection platforms to protect the integrity of the 3pitt platform and the safety of all players.
| Data Category |
Source |
Required? |
| Name & CNIC | You (registration) | Yes — mandatory |
| Date of Birth | You (registration) | Yes — age verification |
| Contact Details | You (registration) | Yes — account management |
| Payment Details | You + payment processor | Yes — transactions |
| IP & Device Data | Automatic collection | Yes — security & fraud |
| Gaming Activity | Automatic collection | Yes — platform operation |
| Marketing Preferences | You (opt-in) | No — optional |
3. How We Use Your Data
3pitt uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes described below without first obtaining your explicit consent:
- Account creation and management: To register your account, verify your identity, and maintain your player profile on the 3pitt platform.
- Age and identity verification: To confirm that you are 21 years of age or older before permitting real-money play, in compliance with our licensing obligations.
- Transaction processing: To process deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20, and to process withdrawal requests to your verified payment method.
- Customer support: To respond to your enquiries, complaints, and support requests via live chat and email, and to maintain records of those interactions for quality and compliance purposes.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the platform.
- Responsible gaming monitoring: To monitor your gaming activity for signs of problem gambling behaviour and to enforce the responsible gaming tools you activate on your account, including deposit limits, self-exclusion, and cooling-off periods.
- Legal and regulatory compliance: To meet our anti-money laundering (AML), counter-terrorism financing (CTF), and KYC obligations under our international gaming license.
- Platform improvement: To analyse aggregated usage data and improve the performance, layout, and game selection of the 3pitt platform for Pakistani players.
- Marketing communications: To send you promotional offers, bonus notifications, and news about new games — but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.
No Automated Decision-Making: 3pitt does not make decisions with significant legal or financial effects on you solely through automated processing, without human review. Account suspension decisions triggered by automated fraud detection are always reviewed by a member of our compliance team.
4. Legal Basis for Processing
Where data protection law requires us to identify a legal basis for processing your personal data, we rely on the following grounds:
- Performance of a contract: The majority of our data processing — account management, identity verification, transaction processing, customer support — is necessary for the performance of our agreement with you as a registered player.
- Compliance with a legal obligation: Processing for AML, KYC, CTF, and age verification purposes is required by our international gaming license and applicable law.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement is carried out on the basis of our legitimate interests as a licensed gaming operator, balanced against your privacy rights.
- Consent: Processing for direct marketing communications and non-essential cookies is carried out only where you have provided your explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. Cookies & Tracking Technologies
3pitt uses cookies and similar tracking technologies on the 3pitt.org website and platform. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language and currency settings, and ensure that our security and fraud detection systems operate correctly. These cookies cannot be disabled.
- Performance and analytics cookies: These cookies collect anonymised information about how players use the 3pitt platform — which pages are most visited, how long sessions last, and where players encounter errors. This data helps us improve the platform experience for all Pakistani players. These cookies are only activated with your consent.
- Functional cookies: These cookies remember your preferences, such as your preferred deposit method, your responsible gaming settings, and any personalisation choices you make within your account dashboard. These cookies are only activated with your consent.
- Marketing cookies: These cookies track your interaction with 3pitt content across the platform to help us deliver relevant promotional offers. We do not use marketing cookies for cross-site tracking. These cookies are only activated with your explicit consent.
You may manage your cookie preferences at any time by accessing the Cookie Settings panel, available in the footer of the 3pitt platform. Withdrawing consent for non-essential cookies will not affect your ability to access or use any core platform features.
Cookie Lifespan: Strictly necessary session cookies expire when you close your browser. Persistent functional and analytics cookies have a maximum lifespan of 12 months from the date they are set, after which they are automatically deleted from your device.
6. Data Sharing & Disclosure
3pitt does not sell, rent, or trade your personal data to third parties. We may share your data only in the following strictly defined circumstances:
- Payment service providers: We share transaction data with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and USDT TRC20 network providers solely for the purpose of processing your deposits and withdrawals. These providers process your data under their own privacy policies and are bound by contractual obligations to protect it.
- Identity verification providers: We share your CNIC and personal details with accredited KYC service providers for the purpose of identity and age verification. These providers are contractually prohibited from using your data for any other purpose.
- Fraud prevention and AML partners: We may share account and transaction data with third-party fraud detection and anti-money laundering screening platforms for the purpose of maintaining the security and integrity of the 3pitt platform.
- Regulatory and law enforcement authorities: We will disclose your personal data to relevant regulatory authorities, law enforcement agencies, or courts where we are legally compelled to do so by a valid court order, regulatory direction, or applicable law. We will notify you of such disclosure where we are legally permitted to do so.
- Business transfers: In the event of a merger, acquisition, or sale of all or part of the 3pitt business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer, and the acquiring entity will be bound to honour this Privacy Policy.
No Third-Party Marketing: 3pitt will never share your personal data with any third party for their own marketing or advertising purposes. Any promotional communications you receive will come directly from 3pitt and only where you have opted in.
7. International Data Transfers
As a platform operating under an international gaming license, some of the third-party service providers we work with — including identity verification services, fraud prevention platforms, and cloud infrastructure providers — may process your data in jurisdictions outside Pakistan.
Where such transfers occur, 3pitt ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections described in this policy. These safeguards may include:
- Contractual clauses with the receiving party that impose data protection obligations equivalent to those applied by 3pitt.
- Use of service providers located in jurisdictions that are recognised as providing an adequate level of data protection.
- Technical and organisational measures, including encryption, that protect your data during and after transfer.
You may request details of the specific safeguards in place for any international data transfer by contacting our support team at [email protected].
8. Data Retention
3pitt retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, and for as long as we are required to retain it by applicable law and our international gaming license obligations. The following retention periods apply:
| Data Type |
Retention Period |
Basis |
| Account & identity data | 5 years after account closure | Licensing & AML obligation |
| Transaction records | 5 years after transaction date | AML / regulatory requirement |
| KYC documents (CNIC) | 5 years after account closure | Legal obligation |
| Customer support records | 2 years after resolution | Legitimate interest |
| Marketing preferences | Until consent withdrawn | Consent |
| Cookie data | Up to 12 months | Consent / legitimate interest |
| Technical / log data | 12 months | Legitimate interest (security) |
Once your data has reached the end of its applicable retention period and there is no longer any legal basis for retaining it, 3pitt will securely delete or anonymise it. Anonymised data (from which you can no longer be identified) may be retained indefinitely for statistical and analytical purposes.
9. Your Rights
As a player on the 3pitt platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us via live chat or email at [email protected]. We will respond to all verified requests within 30 days.
Right of Access
Request a copy of all personal data we hold about you in a structured, commonly used format.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
Right to Erasure
Request deletion of your personal data where there is no longer a legal or contractual basis for us to retain it.
Right to Restrict Processing
Request that we limit how we use your data while you contest its accuracy or object to its processing.
Right to Data Portability
Request a machine-readable export of the data you provided to us directly, for transfer to another service.
Right to Object
Object to our processing of your data for direct marketing or where we rely on legitimate interests as our legal basis.
Please Note: Some rights may be limited where 3pitt is required to retain or process your data to comply with a legal obligation — for example, our AML and KYC obligations under our international gaming license. We will always explain clearly if a limitation applies to your request.
10. Security Measures
3pitt employs a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the 3pitt platform, including all login sessions, registration flows, and payment transactions.
- Encryption at rest for all sensitive personal data stored in 3pitt databases, including CNIC numbers, financial account details, and KYC documents.
- Role-based access controls (RBAC) that restrict employee access to personal data on a strict need-to-know basis, with all access events logged and audited.
- Two-factor authentication (2FA) available to all players for their account login, strongly recommended for accounts with active balances.
- Regular security audits and penetration testing of the 3pitt platform infrastructure, conducted by independent third-party security specialists.
- Secure payment tokenisation: Full payment account numbers are never stored on 3pitt servers. Payment data is tokenised by our payment processor partners, including for JazzCash, EasyPaisa, and bank transfers.
- DDoS protection and firewall infrastructure to protect platform availability and prevent malicious network-level attacks.
- Staff training: All 3pitt personnel who handle personal data receive mandatory data protection and security awareness training on an ongoing basis.
Your Responsibility: While 3pitt implements robust security measures on our end, you also play a role in keeping your account secure. Use a strong, unique password for your 3pitt account, enable 2FA, never share your login credentials, and contact us immediately at
[email protected] if you suspect unauthorised access to your account.
11. Responsible Gaming & Data
3pitt is committed to responsible gaming and uses player data as a key tool in protecting vulnerable players. The following responsible gaming data processing activities are carried out on the 3pitt platform:
- Behavioural monitoring: We analyse your gaming activity — including session lengths, deposit frequency, loss patterns, and betting volumes — to identify signs of problem gambling behaviour. This processing is carried out in the interests of player welfare and is a condition of our international gaming license.
- Self-exclusion enforcement: When you activate a self-exclusion on your 3pitt account, your data is flagged in our system to prevent re-registration during the exclusion period. We retain self-exclusion records for the full duration of any exclusion, plus a mandatory post-exclusion period.
- Deposit and loss limit enforcement: Your deposit limit and loss limit settings are stored and actively enforced at the transaction processing level. Adjustments to limits that increase your exposure are subject to a 24-hour cooling-off period before taking effect.
- Age verification data: Your date of birth and CNIC are used to perform mandatory 21+ age verification before any real-money play is permitted. This data is retained for the full duration required under our licensing obligations.
🔞 21+ Age Restriction: 3pitt strictly enforces a minimum age of 21 years for all real-money gaming activity. If our verification processes identify that a player is or may be under 21, their account will be immediately suspended and any deposits returned, pending investigation. We use your date of birth and CNIC data solely for this purpose in addition to our standard KYC obligations.
12. Children & Minors
The 3pitt platform is strictly intended for adults aged 21 years and above. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. Our registration process includes mandatory age verification using CNIC data to prevent minors from accessing the platform.
If you are a parent or guardian and you believe that a person under 21 in your care has registered on the 3pitt platform or provided their personal data to us, please contact us immediately via live chat or at [email protected]. We will promptly investigate the matter, close any underage account identified, return any funds deposited, and securely delete the personal data of the minor concerned.
Parental Controls: We strongly encourage parents and guardians to use parental control software to prevent minors from accessing online gambling platforms. If you are concerned about a minor accessing online gambling content, organisations such as GamCare and the Responsible Gambling Council provide free resources and guidance.
13. Updates to This Privacy Policy
3pitt reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes to applicable law, or changes to our international gaming license requirements. The effective date at the top of this policy will be updated whenever a material change is made.
Where a change is material — meaning it significantly affects how we collect, use, or share your personal data — we will notify you by email to your registered address and/or by a prominent notice on the 3pitt platform at least 14 days before the change takes effect. Your continued use of the 3pitt platform after the effective date of any updated policy constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how 3pitt protects your personal data. The current version of this policy is always available at 3pitt.org/privacy-policy.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or how 3pitt processes your personal data, please do not hesitate to get in touch with us through any of the following channels:
- Live Chat: Available 24 hours a day, 7 days a week through the 3pitt platform — the fastest way to reach us.
- Email: [email protected] — for non-urgent data protection enquiries, access requests, and erasure requests. We respond within 30 days.
If you are not satisfied with our response to your data protection enquiry, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.
Response Commitment: 3pitt will acknowledge all data subject requests within 5 business days and provide a full response within 30 calendar days. Complex requests may require up to an additional 60 days, in which case we will notify you of the extension before the initial 30-day period expires.