3r3s Privacy Policy

3r3s is an online gaming and sports betting platform operated at 3r3s.net, offering casino games, live dealer tables, sports betting markets — including cricket and PSL — slot games, fishing games, and the Dreams of Macao section to verified players across Pakistan, including Karachi, Lahore, Faisalabad, Islamabad, and other cities.

For the purposes of this Privacy Policy, "3r3s", "we", "us" and "our" refer to the operator of the 3r3s platform. "You" and "your" refer to any individual who visits 3r3s.net, registers an Account, or otherwise interacts with the 3r3s platform in any capacity.

3r3s acts as the data controller in respect of personal data collected directly through the platform. Where 3r3s engages third-party service providers to process data on its behalf (for example, KYC verification services or payment processors), those providers act as data processors under contractual obligations that mirror the standards set out in this Policy.

3r3s collects personal data in several categories, depending on the nature of the Player's interaction with the platform. The table below summarises what is collected and the circumstances in which each category applies.

3r3s does not collect sensitive special-category personal data (such as racial or ethnic origin, political opinions, health data, or biometric data beyond CNIC-based age and identity verification) unless specifically required by applicable AML or regulatory obligations and with appropriate legal basis.

3r3s collects personal data through the following channels and mechanisms:

3.1 Direct Collection

You provide data directly to 3r3s when you register an Account, complete KYC verification, make a deposit or withdrawal request, contact support via live chat or email, or update your account profile settings. All data provided through these channels is submitted voluntarily by the Player.

3.2 Automated Collection

When you access 3r3s.net, our platform automatically collects certain Technical Data and Usage Data through standard web server logs and analytics tools. This includes your device's IP address, your mobile network operator, your browser type and version, and the pages you interact with during each session. This data is collected automatically as a function of how web platforms operate and does not require your active input.

3.3 Cookies and Similar Technologies

3r3s uses cookies and similar tracking technologies on its platform. Full details of the cookies used by 3r3s, their purposes, and how to manage them are set out in Section 9 of this Policy.

3.4 Third-Party Sources

In limited circumstances, 3r3s may receive data about you from third-party sources, including:

• Identity verification service providers used to cross-check CNIC data during the KYC process.
• Payment processors including JazzCash, EasyPaisa, and banking partners, who may provide transaction confirmation data.
• Fraud prevention and AML screening services that check account and transaction data against watchlists and risk databases.

Data received from third-party sources is handled under the same protections as data collected directly from you.

3r3s uses the personal data it collects for the following specific purposes. We do not use your data for any purpose incompatible with those listed here without your separate consent or a lawful basis to do so.

• Account creation and management: Processing your registration, authenticating your identity at login, maintaining your Account profile, and managing your Wallet balance.
• KYC and age verification: Verifying that you are at least 21 years of age and that the identity information you have provided is accurate, as required under 3r3s's licensing and AML obligations.
• Payment processing: Facilitating PKR deposits via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard, and processing withdrawal requests to your verified payment destination.
• Platform operation and game delivery: Enabling access to all 3r3s game categories, recording wagering activity, crediting winnings, and applying responsible gaming settings you have configured.
• Regulatory compliance and AML: Meeting 3r3s's obligations under its gaming licence, including anti-money-laundering monitoring, suspicious transaction reporting, and record-keeping as required by applicable regulations.
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, bonus abuse, duplicate accounts, and other integrity violations.
• Responsible gaming: Monitoring gaming patterns to identify players who may be at risk of gambling-related harm, applying self-exclusion instructions, and administering deposit limits and cooling-off periods.
• Customer support: Responding to enquiries, resolving disputes, and maintaining records of all support interactions for quality and compliance purposes.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with 3r3s and improve the platform's features, performance, and navigation.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have not opted out of marketing communications. You may opt out at any time through your Account settings or by contacting support.

3r3s processes personal data on one or more of the following legal bases, depending on the specific processing activity involved:

• Contractual necessity: Processing required to enter into or perform the contract between 3r3s and the Player — including account management, KYC verification, payment processing, and game delivery. Without this processing, 3r3s cannot provide the platform services to the Player.
• Legal obligation: Processing required to comply with applicable legal and regulatory obligations, including AML monitoring, record-keeping under gaming licence conditions, and suspicious activity reporting to relevant authorities.
• Legitimate interests: Processing that serves 3r3s's legitimate business interests, provided those interests are not overridden by the Player's privacy rights. This includes fraud detection, platform security, responsible gaming monitoring, and platform analytics. Where legitimate interests are relied upon, 3r3s has conducted balancing assessments to confirm that the processing is proportionate and expected by Players in the context of an online gaming relationship.
• Consent: Where 3r3s relies on your consent for a specific processing activity — primarily the sending of marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of any processing already carried out. Withdrawal of consent does not affect processing carried out on other legal bases.

3r3s does not share your personal data with third parties except in the following defined circumstances:

6.1 Service Providers (Data Processors)

3r3s engages carefully selected third-party service providers to assist in delivering the platform. These providers process data solely on 3r3s's instructions and under written contracts that prohibit them from using your data for any purpose other than the specific service they provide to 3r3s. Categories of providers include:

• Identity and age verification (KYC) platforms that cross-check CNIC data.
• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks.
• Game content providers whose certified software powers the 3r3s game library.
• Cloud hosting and infrastructure providers that store platform data.
• Fraud detection and AML screening services.
• Customer support platform providers that power the 3r3s live chat and ticketing system.

6.2 Regulatory and Legal Disclosure

3r3s may disclose personal data to regulatory authorities, law enforcement agencies, courts, or other governmental bodies where required to do so by applicable law, court order, or gaming licence obligation. 3r3s will notify the Player of any such disclosure request where it is legally permissible to do so prior to disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of substantially all of 3r3s's assets, Player personal data may be transferred to the acquiring entity as part of that transaction. 3r3s will notify affected Players and ensure that any successor entity is bound by privacy obligations at least equivalent to those in this Policy before any transfer of Player data occurs.

6.4 What We Will Never Do

3r3s will never: sell or rent your personal data to advertising networks, data brokers, or any third party for commercial purposes; share your CNIC or identity documents with any party that does not have a direct operational or legal need; or transfer your financial data to any entity other than the payment processor directly involved in your transaction.

3r3s retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account data: Retained for the full duration of the Account's active status plus a minimum of five (5) years following Account closure, to meet gaming licence record-keeping and AML obligations.
• KYC documents (CNIC scans, selfies): Retained for a minimum of five (5) years from the date of verification, consistent with standard AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under applicable financial regulations.
• Support communications: Retained for three (3) years from the date of the interaction, to support dispute resolution and quality assurance review.
• Marketing consent records: Retained for the duration of the consent period plus three (3) years, to demonstrate compliance with consent management obligations.
• Technical and usage logs: Typically retained for twelve (12) months, after which they are anonymised or deleted unless required for an ongoing security or compliance investigation.

When personal data is no longer required and no legal retention obligation applies, 3r3s securely deletes or irreversibly anonymises it. Anonymised data that can no longer be attributed to an identifiable individual may be retained and used for platform analytics without time limit.

3r3s applies a layered approach to data security, combining technical, procedural, and access-control measures to protect Player personal data against unauthorised access, disclosure, alteration, or destruction. Key measures in place include:

• TLS encryption: All data transmitted between your device and 3r3s.net is encrypted using Transport Layer Security (TLS). This applies to all account activity, payments, and support interactions.
• Data encryption at rest: Sensitive personal data — including CNIC scans, financial identifiers, and authentication credentials — is encrypted when stored on 3r3s infrastructure.
• SMS OTP authentication: Login and sensitive account actions are protected by SMS one-time passcode verification sent to the Player's registered Pakistani mobile number.
• Access controls: Access to Player personal data within 3r3s is restricted on a strict need-to-know basis. Staff with access to sensitive data undergo background checks and are bound by confidentiality obligations.
• Intrusion detection and monitoring: 3r3s's infrastructure is subject to continuous monitoring for anomalous access patterns, intrusion attempts, and data exfiltration indicators.
• Third-party security audits: 3r3s subjects its platform and data handling practices to periodic third-party security assessments.

In the event of a personal data breach that is likely to result in a risk to Player rights, 3r3s will notify affected Players and relevant regulatory authorities within the timeframes required by applicable law.

3r3s uses cookies — small text files stored on your device — and similar tracking technologies to operate the platform effectively and improve your experience. The following categories of cookies are used on 3r3s.net:

9.1 Strictly Necessary Cookies

These cookies are essential for the 3r3s platform to function. They maintain your login session, remember your language preference, and enable core security features including CSRF protection. These cookies cannot be disabled without breaking platform functionality. No consent is required for strictly necessary cookies.

9.2 Performance and Analytics Cookies

3r3s uses analytics cookies to collect aggregated, anonymised data about how Players navigate the platform — which game categories are most visited, how long sessions last, and which features generate the most interaction. This data is used solely to improve platform design and performance. It is not linked to individual Player identities.

9.3 Functional Cookies

Functional cookies remember preferences you have set on 3r3s — such as your preferred game lobby layout or responsible gaming reminder frequency — so that you do not need to reconfigure them on every visit. These cookies are session-based or have a limited lifespan.

9.4 Managing Cookies

Most modern browsers allow you to control cookie storage through your browser settings. You can typically configure your browser to block third-party cookies, to notify you when a cookie is placed, or to delete existing cookies. Note that disabling cookies may affect the functionality of certain 3r3s features, including login session persistence. Guidance on managing cookies is available in the help documentation of your browser. Pakistani players commonly access 3r3s via Chrome, Samsung Internet, or Firefox on Android — all of which support cookie management.

3r3s recognises and respects Players' rights in relation to their personal data. The following rights are available to all 3r3s Players. Requests should be submitted to the 3r3s Data Privacy team via the contact details in Section 13.

• Right of Access: You have the right to request a copy of the personal data 3r3s holds about you and information about how it is being used. 3r3s will respond to access requests within thirty (30) calendar days.
• Right to Rectification: If any personal data 3r3s holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Identity data changes may require re-verification via KYC before they take effect.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (where consent was the basis), or where the data has been processed unlawfully. This right is subject to 3r3s's legal retention obligations — for example, AML record-keeping requirements mean that transaction records cannot be erased during mandatory retention periods.
• Right to Restriction: You may request that 3r3s restrict processing of your data in certain circumstances — for example, while a rectification request is being resolved, or where you have objected to processing and a decision on the objection is pending.
• Right to Data Portability: Where processing is based on your consent or on contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing of your personal data where 3r3s relies on legitimate interests as its legal basis. You also have an unconditional right to opt out of direct marketing communications at any time.
• Right to Withdraw Consent: Where 3r3s processes your data on the basis of your consent — primarily for marketing communications — you may withdraw that consent at any time through your Account settings or by contacting support. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact the 3r3s Data Privacy team as described in Section 13. 3r3s will not charge a fee for reasonable requests and will respond within the applicable timeframe. Where a request is manifestly unfounded or excessive, 3r3s may charge a reasonable administrative fee or decline to act, with reasons provided in writing.

CNIC-based age verification is a mandatory step in the 3r3s KYC process. Any Account found to be registered by a person under 21 will be immediately closed and all associated data will be deleted, except where retention is required for regulatory or AML compliance purposes. If a parent or guardian has reason to believe that a minor has registered with 3r3s or provided data to the platform, they should contact the 3r3s support team immediately at [email protected] so that the Account can be investigated and closed without delay.

3r3s also does not engage in marketing directed at minors and does not purchase audience data from any source that includes individuals under 21.

3r3s reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, platform functionality, or internal data handling practices. Where changes are material — meaning they significantly affect how your personal data is used or the rights available to you — 3r3s will provide advance notice via your registered email address or via a prominent notice on the 3r3s platform prior to the changes taking effect.

Minor updates that do not materially affect Player rights may be made without specific notification; the updated Policy will be published on this page with a revised effective date. 3r3s recommends that Players review this Policy periodically to remain informed about how their data is handled. Continued use of the 3r3s platform following the effective date of any update constitutes acceptance of the revised Policy.

The current version of this Privacy Policy is always available at 3r3s.net/privacy-policy. The version number and effective date displayed at the top of this page identify the current operative version.

For all enquiries, requests, or complaints relating to the handling of your personal data by 3r3s — including requests to exercise your data rights under Section 10 — please contact the 3r3s Data Privacy team through the following channels:

• Live Chat: Available 24/7 within your 3r3s Account dashboard. For data rights requests, please state "Data Privacy Request" at the start of your message so the query is routed to the appropriate team.
• Email: [email protected] — please use the subject line "Privacy Policy Enquiry" or "Data Rights Request" so your message is prioritised by the Data Privacy team. Include your registered Account username and a clear description of your request.

3r3s aims to acknowledge all data privacy enquiries within two (2) business days and to issue a substantive response within thirty (30) calendar days of receipt. Where a request is complex or where 3r3s receives a high volume of concurrent requests, the response period may be extended by a further thirty (30) days, with written notification to the Player of the extension and its reason.

If you are not satisfied with 3r3s's handling of your personal data or its response to a data rights request, you have the right to lodge a complaint with the relevant supervisory authority or data protection regulator in the jurisdiction applicable to your circumstances.