1 Who We Are
3rrr ("3rrr", "we", "us", "our") operates the online gaming and sports betting platform accessible at 3rrr.best. For the purposes of this Privacy Policy, 3rrr is the data controller responsible for the personal information collected from players who register and use the platform.
This Privacy Policy applies to all Pakistani players and visitors who access 3rrr through any device or browser. It explains our practices in relation to the personal data we collect, the purposes for which we process it, the parties with whom we share it, how long we retain it, and the rights you have over your own information.
This Policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy. If you have questions about any aspect of this Policy before registering with 3rrr, please contact us at support@3rrr.best before providing any personal data.
2 Data We Collect
3rrr collects the minimum data necessary to operate the platform, process PKR transactions, verify identities, and comply with applicable legal requirements. The categories of personal data we collect are listed below.
2.1 Registration & Identity Data
- Full name as it appears on your CNIC or other government-issued identity document
- Date of birth (to verify that you are 18 or older)
- Pakistani mobile phone number (used for account access and OTP verification)
- Email address (optional but used for account notifications if provided)
- CNIC number or a copy of your identity document (requested during enhanced verification)
2.2 Payment & Financial Data
- Easypaisa or JazzCash mobile wallet number associated with your deposits and withdrawals
- NayaPay or SadaPay account details where used as a payment method
- Bank account number and IBAN for IBFT transactions
- Masked card number and issuing bank details for Visa or Mastercard payments
- Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used
3rrr does not store full card numbers or CVV codes. Card payment data is handled by our payment processor under PCI-DSS standards. 3rrr stores only masked card references sufficient to identify previously used methods.
2.3 Game & Betting Activity Data
- Game sessions played: game title, session start and end time, stake amounts, and results
- Sports bets placed: market, selection, odds, stake, and settlement outcome
- Bonus claims, wagering progress, and promotion participation history
- In-game chat messages where the chat feature is used
2.4 Technical & Device Data
- IP address and approximate geolocation derived from IP
- Device type, operating system, and browser version
- Device fingerprint components used for fraud and duplicate account detection
- Session timestamps and page navigation paths within 3rrr
2.5 Communications Data
- Support conversation transcripts (chat, email, or in-platform messaging)
- Responsible gaming tool requests and associated notes
- Complaints and their resolution history
3 How We Collect Data
3rrr collects personal data through three primary channels:
- Directly from you. When you register an account, complete a deposit or withdrawal, contact support, submit a verification document, or use any interactive feature of the platform.
- Automatically. When you access 3rrr, our servers and analytics tools automatically record technical data including IP address, device identifiers, browser details, and session behaviour. Cookies and similar technologies are used as described in Section 8.
- From third parties. Identity verification providers may return verification results and document validity confirmations to 3rrr. Payment processors provide transaction status updates. Fraud prevention services may provide risk scores associated with registration or payment events.
3rrr does not purchase personal data lists from data brokers or third-party marketing companies. All personal data we hold originates from your direct interaction with 3rrr or from the service providers necessary to operate the platform.
4 Why We Use Your Data
The table below summarises the specific purposes for which 3rrr processes personal data and the category of data used for each purpose.
| Purpose | Data Used |
|---|---|
| Creating and managing your 3rrr account | Registration & identity data |
| Processing PKR deposits and withdrawals | Payment & financial data |
| Verifying age and identity to comply with 18+ rules | Registration data, identity documents |
| Providing game access and settling bets and game results | Game & betting activity data |
| Detecting and preventing fraud, duplicate accounts, and money laundering | Technical data, payment data, game activity |
| Delivering and responding to customer support requests | Communications data, registration data |
| Administering responsible gaming tools and self-exclusion requests | Registration data, game activity, communications data |
| Sending account notifications (deposit confirmations, withdrawal updates) | Phone number or email address |
| Sending promotional communications (where you have opted in) | Phone number or email address |
| Platform improvement and performance analytics | Technical & device data (aggregated) |
5 Legal Bases for Processing
3rrr processes your personal data under the following legal bases depending on the purpose involved:
- Contract performance. Processing necessary to provide the services you have registered for — including account management, game access, and payment processing — is carried out because it is required to fulfil our contractual obligations to you as a registered 3rrr player.
- Legal obligation. Identity verification, anti-money laundering checks, and the retention of transaction records are carried out to comply with applicable legal and regulatory requirements.
- Legitimate interests. Fraud detection, device fingerprinting for duplicate account identification, platform security monitoring, and aggregated analytics are processed under 3rrr's legitimate interest in operating a secure and fair platform. These interests are balanced against your privacy rights and do not override them.
- Consent. Marketing communications — promotional SMS messages or emails about bonuses, new games, or platform events — are sent only where you have given explicit consent. You may withdraw consent at any time by contacting support or using the opt-out mechanism in any marketing message.
6 Who We Share Your Data With
3rrr does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:
- Payment processors. Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT partners, and card processing networks receive transaction data necessary to execute deposits and withdrawals. Each processor operates under its own privacy standards and applicable financial regulation.
- Identity verification providers. Third-party KYC (Know Your Customer) services receive your identity document details and return verification outcomes to 3rrr to confirm your age and identity. These providers are contractually bound to use your data only for verification purposes.
- Fraud prevention services. Device fingerprint data, IP addresses, and registration signals may be shared with fraud detection services to identify and prevent account abuse. Data shared for this purpose is used only for fraud risk scoring.
- Game content providers. Where a game is provided by a third-party studio accessible through 3rrr, the provider may receive a session token and stake data necessary to run the game. They do not receive your full account or identity data.
- Regulatory and law enforcement authorities. Where required by law, court order, or a legitimate regulatory request, 3rrr will disclose personal data to the appropriate authority. 3rrr will not disclose data beyond what the specific legal requirement demands.
- Professional advisers. Legal counsel, auditors, or financial advisers may access limited personal data in the context of specific professional engagements under strict confidentiality obligations.
3rrr does not share your data with advertisers, marketing platforms, social media networks, or data brokers for any commercial purpose. If you receive marketing communications from a third party claiming to be connected to 3rrr, please report it to support@3rrr.best immediately as this is not an authorised activity.
7 International Data Transfers
Some of the third-party service providers 3rrr works with — including identity verification and fraud prevention providers — may process data outside Pakistan. Where such transfers occur, 3rrr ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protections described in this Policy. These safeguards may include contractual clauses, data processing agreements, or the use of providers operating under recognised international data protection standards.
Payment data processed by Pakistani payment networks — Easypaisa, JazzCash, NayaPay, and SadaPay — remains within Pakistan's financial infrastructure and is subject to State Bank of Pakistan regulations. IBFT and card payment data follows the routing standard applicable to each network.
8 Cookies & Tracking Technologies
3rrr uses cookies and similar local storage technologies to maintain your session, remember preferences, and collect anonymised analytics about how the platform is used. The categories of cookies used are:
- Essential cookies. Required for the platform to function. These include session authentication tokens, CSRF protection tokens, and language preference storage. These cannot be disabled without making the platform non-functional.
- Analytics cookies. Aggregated, anonymised data about page views, session durations, and feature usage collected to help improve the 3rrr experience. No individual player is identifiable from this data.
- Security cookies. Browser fingerprint components and device consistency markers used to detect suspicious login attempts or unusual activity patterns on your account.
3rrr does not use advertising or retargeting cookies. No third-party advertising network can place cookies through 3rrr or track your activity on the platform for advertising purposes.
Most browsers allow you to view, manage, and delete cookies through the browser's settings menu. Deleting essential cookies will require you to log back into your 3rrr account and may affect certain platform features. Deleting analytics cookies does not affect your access to any game or feature.
9 Data Retention
3rrr retains personal data for as long as necessary to fulfil the purpose for which it was collected, subject to any legal obligation to retain it for a longer period. The general retention periods applied are:
- Active accounts: All account and transaction data is retained for the duration of your active account relationship with 3rrr.
- Closed accounts: Following account closure, transaction records, identity verification data, and game history are retained for a minimum of five years to satisfy anti-money laundering and regulatory record-keeping requirements.
- Support communications: Customer support conversations are retained for three years from the date of the interaction to allow for dispute resolution and quality review.
- Marketing consent records: Records of marketing consent and opt-out requests are retained for five years from the date the consent was given or withdrawn.
- Technical logs: Server access logs containing IP address data are retained for 12 months and then automatically deleted unless a security investigation requires extended retention.
When personal data is no longer required for any of the above purposes and no legal obligation requires its continued retention, 3rrr deletes or anonymises it in a way that makes it impossible to re-identify.
10 Your Rights Over Your Personal Data
As a 3rrr player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact support@3rrr.best with your registered phone number and a description of your request. 3rrr will respond within 30 days of receiving a valid request.
Right of Access
Request a copy of all personal data 3rrr holds about you, including your registration data, transaction history, and game activity records.
Right to Correction
Request correction of any inaccurate personal data, such as a misspelled name or an incorrect date of birth recorded during registration.
Right to Deletion
Request deletion of your personal data where it is no longer necessary for any purpose and no legal retention obligation applies. Note that regulatory record-keeping requirements may prevent full deletion of financial data.
Right to Portability
Request a machine-readable export of the personal data you have provided to 3rrr, in a format that allows you to transfer it to another service if you wish.
Right to Restriction
Request that 3rrr restricts processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.
Right to Object
Object to processing carried out under 3rrr's legitimate interests. We will cease the processing unless there are compelling legitimate grounds that override your interests.
There is no fee to exercise any of these rights. 3rrr will ask you to verify your identity before processing a data rights request to ensure we are speaking with the genuine account holder and not a third party acting without your knowledge.
11 Minors
3rrr does not knowingly collect personal data from individuals under the age of 18. The platform is intended exclusively for adults. Age verification is a required step during account registration and enhanced verification may be requested at any point where 3rrr has reasonable grounds to suspect that an account holder may be under 18.
If you are a parent or guardian and believe that a person under 18 in your household has registered with 3rrr or accessed the platform, please contact support@3rrr.best immediately. 3rrr will investigate the matter and, where a minor account is confirmed, will close the account and return any deposited funds to the payment source, forfeiting any bonus-related activity that took place on the account.
Account holders are responsible for ensuring that their login credentials are not accessible to minors sharing their household or device. 3rrr recommends enabling parental control features on shared devices to prevent unintended access.
12 How We Protect Your Data
3rrr takes the security of your personal data seriously and maintains technical and organisational measures designed to protect it against unauthorised access, disclosure, loss, or destruction. These measures include:
- Transport Layer Security (TLS) encryption for all data transmitted between your device and the 3rrr platform
- Encryption of sensitive data fields at rest in our databases
- Role-based access controls ensuring that 3rrr staff can only access the minimum data necessary for their specific function
- Automated monitoring and alerting for unusual account access patterns
- Regular security assessments of platform infrastructure
- Staff training on data protection obligations and handling procedures
No internet-based system is completely immune to security risks. While 3rrr maintains robust protections, we cannot guarantee absolute security against all possible threats. If you become aware of any security concern relating to your 3rrr account or the platform, please report it to support@3rrr.best immediately.
In the event of a data breach that is likely to result in risk to players' rights and interests, 3rrr will notify affected players as promptly as possible and take appropriate steps to limit the impact of the breach.
13 Marketing Communications
3rrr may send you promotional communications about bonuses, new games, tournament schedules, and special offers. These communications are only sent where you have opted in to receive them during registration or via your account settings. Each marketing message will include a clear and simple opt-out mechanism.
Opting out of marketing communications does not affect your ability to use 3rrr or receive operational account notifications such as deposit confirmations, withdrawal status updates, and security alerts. These operational messages are sent regardless of your marketing preferences because they are necessary to manage your account.
To update your marketing preferences at any time, contact support@3rrr.best or update your preferences in your account settings. Opt-out requests will be processed within 48 hours.
3rrr will never send unsolicited marketing communications to individuals who have not registered with the platform. If you receive an unsolicited message claiming to be from 3rrr and you are not a registered player, please do not click any links and report it to support@3rrr.best.
14 Changes to This Privacy Policy
3rrr may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When material changes are made, registered players will be notified via the phone number or email address associated with their account at least 7 days before the changes take effect. Minor clarifications may be made without advance notice and the "last updated" date at the top of this page will be revised.
We recommend visiting this page periodically to stay informed of how 3rrr handles your personal data. Your continued use of 3rrr after a revised Privacy Policy takes effect constitutes your acknowledgment of the revised practices described.
15 Contact Us
If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to report a privacy concern, please contact 3rrr at:
Email: support@3rrr.best
Subject line: Privacy Request — [your registered phone number]
Requests are acknowledged within 2 business days and resolved within 30 days. For responsible gaming-related data requests, visit the Responsible Gaming page. For general account questions, visit our FAQ.