3patti Privacy Policy

3patti ("we", "us", "our") operates the online gaming platform accessible at https://3patti.vu and all associated mobile applications. As the operator of this Platform, 3patti acts as the data controller in respect of the personal information collected from registered players and website visitors.

This Privacy Policy describes the categories of personal data we collect, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures we apply to protect it, and the rights available to you as a data subject. This Policy applies to all personal data collected through the Platform, whether provided directly by you during registration, generated through your use of our games and services, or collected automatically via cookies and similar technologies.

By registering an Account or continuing to use the 3patti Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

3patti collects personal data from you in three principal ways: information you provide directly, information generated by your use of the Platform, and information collected automatically by our systems. The specific categories are as follows:

2.1 Information You Provide Directly

• Registration data: Full name, date of birth, gender, email address, mobile phone number (including country code), and preferred username and password chosen at the time of account creation.
• Identity verification (KYC) data: Copies of government-issued photo identification (such as a National ID card or passport), proof of address documents, and, where required, proof of ownership of the payment method used for deposits.
• Payment data: Mobile banking account references (bKash, Nagad, Rocket, Upay), card details provided for Visa or Mastercard transactions (card numbers are tokenised and never stored in full on our servers), and transaction history associated with your Account.
• Communications data: Records of your interactions with our support team via email, WhatsApp, or live chat, including the content of those communications and any attachments submitted.
• Responsible gaming preferences: Self-imposed deposit limits, cooling-off period selections, and self-exclusion requests you configure through your Account settings.

2.2 Data Generated Through Platform Use

• Gaming activity: Game session logs, bet amounts, game outcomes, win/loss records, bonus activations, wagering progress, and session duration data.
• Account activity: Login timestamps, IP addresses recorded at login, device identifiers, geographic location data (country and city level, derived from IP address), and Account preference settings.
• Transaction records: Full history of deposits, withdrawals, bonus credits, adjustments, and any chargebacks or payment reversals associated with your Account.

2.3 Automatically Collected Data

• Technical data: Browser type and version, operating system, screen resolution, referring URL, pages visited on the Platform, and time spent on each page.
• Cookie data: Session cookies and persistent cookies as further described in Section 6 of this Policy.

3patti processes your personal data for the following specific purposes. We do not process data for purposes that are incompatible with those listed below without first notifying you and, where required, obtaining your consent.

You may withdraw consent for marketing communications at any time by contacting our support team or by updating your notification preferences within your Account settings. Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal.

3patti processes your personal data on the following legal bases, each of which applies to the corresponding processing activities described in Section 3:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing necessary to comply with applicable anti-money laundering (AML) obligations, know-your-customer (KYC) requirements, and any other regulatory duties applicable to our operations.
• Legitimate interests: Processing carried out for fraud prevention, platform security monitoring, responsible gaming oversight, and aggregate analytics — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and optional personalisation features, which we undertake only where you have given clear, informed, and freely given consent. You may withdraw this consent at any time.

3patti does not sell, rent, or trade your personal data to any third party. We may share your data with carefully selected third-party service providers and in the specific circumstances described below:

• Payment processors: We share the minimum data necessary with payment providers (bKash, Nagad, Rocket, Upay, Visa, and Mastercard partners) solely to process your transactions. These providers are contractually bound to use your data only for the stated purpose and to implement appropriate security measures.
• Game providers: Our licensed game partners (including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi) may receive anonymised session and wagering data necessary to operate their game engines within the Platform. No personally identifiable information is shared with game providers beyond what is strictly necessary.
• Identity verification services: Third-party KYC providers may process copies of your identification documents solely for the purpose of verifying your identity in accordance with our legal obligations.
• IT and hosting infrastructure providers: Data may be processed by cloud hosting and infrastructure providers that support the operation of the Platform. All such providers are bound by data processing agreements requiring them to act only on our instructions and to maintain equivalent security standards.
• Legal and regulatory authorities: We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts where we are required to do so by applicable law, court order, or other legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity, provided that the acquiring entity agrees to process your data in accordance with this Privacy Policy.

3patti uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your web browser when you visit a website. We use the following categories of cookies:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your Account state across page loads, and ensure the cashier and game interfaces operate correctly. These cookies cannot be disabled without disrupting core Platform functionality.
• Functional cookies: These cookies remember your preferences, such as your chosen language, display settings, and notification configurations, so that you do not need to reset them on each visit.
• Analytics cookies: We use first-party analytics cookies to collect aggregate, anonymised data about how players navigate the Platform — for example, which game categories are most visited and where players experience technical difficulties. This data is used solely to improve Platform performance and user experience. We do not use third-party analytics services that transmit your data to external advertising networks.

We do not use advertising cookies, retargeting pixels, or any third-party tracking technologies that would allow external parties to monitor your browsing activity across other websites. You may configure your browser to reject or delete cookies; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

3patti retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements. The following retention periods apply to the principal data categories we hold:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised such that it can no longer be associated with any individual. Where data must be retained beyond the standard period due to an ongoing legal dispute or regulatory investigation, we will retain only the minimum data necessary for that specific purpose.

3patti implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to, the following:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using 256-bit SSL/TLS protocols. Our Platform enforces HTTPS exclusively — unencrypted HTTP connections are not permitted.
• Encryption at rest: Sensitive personal data fields stored in our databases — including identity documents and payment references — are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is granted on a strict need-to-know basis. Staff access is controlled via role-based permissions, and all access events are logged and subject to regular audit.
• Payment tokenisation: Card payment details processed via Visa and Mastercard are tokenised by our payment partners. Full card numbers are never stored on 3patti's servers.
• Penetration testing and vulnerability assessments: The Platform undergoes regular security testing by qualified third-party professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, 3patti will notify affected players and, where required, relevant authorities within the timeframe prescribed by applicable law.

As a data subject, you have the following rights in relation to the personal data that 3patti holds about you. To exercise any of these rights, please contact us using the details provided in Section 13. We will respond to all valid requests within 30 days of receipt.

• Right of access: You have the right to request a copy of the personal data 3patti holds about you, together with information about how that data is being used.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to erasure: You may request that 3patti delete your personal data in certain circumstances — for example, where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing exists. This right is subject to our legal retention obligations as described in Section 7.
• Right to restriction of processing: You may request that we temporarily restrict the processing of your data while a dispute regarding its accuracy or the lawfulness of our processing is resolved.
• Right to data portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent (for example, for marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to object: You have the right to object to processing carried out on the basis of our legitimate interests where you believe that your fundamental rights and interests override those legitimate interests.

To exercise any of the above rights, please send a written request to [email protected] with the subject line "Data Rights Request" and include your registered username and a description of the right you wish to exercise. We may ask you to verify your identity before processing your request.

The 3patti Platform is strictly intended for adults aged 18 years and above. We do not knowingly collect personal data from any person under the age of 18. If you are a parent or guardian and believe that a minor has provided personal data to 3patti or has registered an Account, please contact us immediately at [email protected].

Upon receiving a verified report that personal data has been collected from a minor, 3patti will promptly close the associated Account, delete the personal data in question, and void any associated transactions. Age verification is a mandatory component of our registration and KYC process, and we take our obligations in this area with the utmost seriousness.

The 3patti Platform may contain references to third-party game providers, payment services, or technology partners. Where any such reference includes a hyperlink to an external website or application, please be aware that 3patti has no control over, and accepts no responsibility for, the privacy practices or content of those third-party destinations.

This Privacy Policy applies solely to data collected and processed by 3patti in connection with its own Platform. We strongly encourage you to review the privacy policies of any third-party services you interact with, including your chosen payment provider (for example, bKash, Nagad, or Rocket), before submitting personal data to them.

3patti reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. The most current version of this Policy will always be available at https://3patti.vu/privacy-policy, with the effective date updated accordingly.

Where changes to this Policy are material — meaning they significantly affect how we collect, use, or share your personal data, or affect your rights as a data subject — we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 3patti processes your personal data, please contact our privacy team through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• WhatsApp: +880 1700 000000
• Support Hours: 24 hours a day, 7 days a week — Bangladesh Standard Time (UTC+6)

When contacting us about a data rights request, please include your registered username and a clear description of your request in the subject line of your email. We aim to acknowledge all privacy-related enquiries within 2 business days and to provide a full response within 30 calendar days.