At rrr3, your personal data belongs to you. This Privacy Policy explains precisely what information we collect when you use the rrr3 platform, why we collect it, how it is stored and protected, who it is shared with, and what rights you hold over it. We have written this document in plain, readable English because we believe transparency is not a legal formality — it is a core part of how rrr3 operates.
1.1 The data controller responsible for the personal data of rrr3 users is the company operating the rrr3 platform at rrr3.pro under an international online gaming licence (hereinafter referred to as "rrr3", "we", "us", or "our").
1.2 As data controller, rrr3 determines the purposes and means by which your personal data is processed. We are responsible for ensuring that all processing activities comply with the data protection obligations imposed by our international gaming licence and applicable privacy laws.
1.3 For all data protection enquiries, including the exercise of your rights under Section 11 of this Policy, please contact our Data Protection team using the details provided in Section 15.
2.1 The categories of personal data rrr3 collects from registered players and website visitors are set out below. We collect only what is necessary for the purposes described in this Policy.
3.1 rrr3 collects personal data through the following channels:
3.2 You are not legally obligated to provide personal data to rrr3. However, providing the data described in Section 2 is a contractual requirement for operating an rrr3 account. Without it, we cannot create your account, verify your identity, process transactions, or fulfil our licensing obligations.
4.1 The table below sets out each purpose for which rrr3 processes personal data, together with the lawful basis relied upon for that processing activity.
| Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact | Contract performance |
| KYC identity and age verification | Identity, KYC documents | Legal obligation / licensing |
| Processing deposits and withdrawals | Financial, transaction | Contract performance |
| Fraud detection and prevention | Identity, financial, technical | Legitimate interests |
| Anti-money laundering (AML) compliance | Identity, financial, transaction | Legal obligation / licensing |
| Responsible gaming monitoring | Gaming, behavioural, identity | Legal obligation / licensing |
| Customer support delivery | Identity, contact, gaming | Contract performance |
| Personalised promotions and bonuses | Identity, gaming, behavioural | Consent / legitimate interests |
| Platform security and abuse prevention | Technical, identity | Legitimate interests |
| Legal and regulatory reporting | All categories as required | Legal obligation |
4.2 Where rrr3 relies on legitimate interests as its legal basis, we have balanced those interests against your rights and freedoms and determined that our interests do not override them. You may object to processing based on legitimate interests at any time — see Section 11.
4.3 Where processing is based on consent (for example, marketing emails), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6.1 rrr3 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and our licensing obligations. The following indicative retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity and KYC records | 5 years after account closure | AML / licensing obligation |
| Financial transaction records | 5 years after account closure | AML / regulatory reporting |
| Gaming session logs | 3 years after account closure | Dispute resolution / licence |
| Customer support records | 3 years after last interaction | Dispute resolution |
| Self-exclusion records | Indefinitely (minimum 10 years) | Responsible gaming / licence |
| Marketing consent records | Until withdrawal of consent + 1 year | Compliance evidence |
| Technical / device logs | 12 months from collection | Security monitoring |
6.2 When retention periods expire, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised aggregate data (such as statistical reports on gaming activity) may be retained indefinitely as it no longer constitutes personal data.
7.1 rrr3 implements a layered approach to data security, combining technical, organisational, and procedural controls to protect your personal data against unauthorised access, alteration, disclosure, or destruction.
7.2 Key technical security measures include:
7.3 Organisational measures include mandatory data protection training for all rrr3 staff who handle personal data, a formal data breach response procedure with regulatory notification timelines, and periodic reviews of all data processing activities against this Privacy Policy.
7.4 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, rrr3 will notify you without undue delay using the contact details associated with your account, and will take all reasonable steps to contain and remediate the breach.
9.1 rrr3 operates under an international gaming licence and, as such, some personal data may be processed or stored on servers located outside Pakistan. This may include transfers to our cloud infrastructure providers, game software vendors, and KYC verification partners.
9.2 Where personal data is transferred internationally, rrr3 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses, binding corporate rules, or transfer to jurisdictions that provide an adequate level of data protection as recognised under applicable standards.
9.3 Details of the specific safeguards applied to any international transfer can be obtained by contacting our Data Protection team at the address listed in Section 15.
10.1 rrr3 employs age verification as a mandatory step in the account registration and KYC process. Providing a false date of birth to circumvent the age restriction constitutes a material breach of the rrr3 Terms & Conditions and may result in legal action.
10.2 If you are a parent or guardian and believe that a person under 21 in your care has registered an rrr3 account, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.
10.3 rrr3 recommends that parents and guardians make use of parental control software to prevent minors from accessing online gaming platforms. Several reputable tools are available for this purpose.
11.1 Subject to applicable law and the limitations imposed by our licensing obligations, you hold the following rights with respect to your personal data held by rrr3. To exercise any of these rights, contact us using the details in Section 15.
rrr3 respects your data rights. Here is a plain-English summary of each right and what it means for you as an rrr3 player.
You can request a copy of all personal data rrr3 holds about you. We will provide this in a structured, readable format within 30 days of receiving a valid request.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it promptly. Some corrections may require re-verification of identity.
You may request deletion of your personal data where it is no longer necessary for the purposes collected. Note that AML, licensing, and fraud prevention obligations may require us to retain certain data regardless.
You can ask us to pause processing your data in certain circumstances — for example, while you contest the accuracy of data we hold, or while an objection to processing is being evaluated.
Where processing is based on your consent or contract performance, you may request your data in a machine-readable format (JSON or CSV) so you can transfer it to another service provider.
You can object to processing based on legitimate interests, including profiling for marketing purposes. Upon receiving your objection, rrr3 will cease that processing unless compelling legitimate grounds override your interests.
12.1 With your consent, rrr3 may send you promotional communications via email or SMS regarding bonuses, new games, PSL cricket betting markets, and other platform updates relevant to Pakistani players. You may withdraw this consent at any time by:
12.2 Withdrawing marketing consent will not affect your ability to receive transactional communications that are essential to your account, such as deposit confirmations, withdrawal notifications, security alerts, KYC requests, or responsible gaming notifications. These are sent on the basis of contract performance and cannot be opted out of while your account remains active.
12.3 Players who have activated a self-exclusion or cooling-off period under rrr3's Responsible Gaming tools are automatically removed from all marketing lists for the duration of their restriction period, and will not receive any promotional materials during that time.
13.1 The rrr3 platform integrates software from third-party game providers whose titles are available in the rrr3 casino library. When you play a game developed by a third-party provider, certain technical data (such as session identifiers and game outcome logs) may be processed by that provider's systems under their own data practices. rrr3 selects providers who maintain appropriate data protection standards and contractually restricts their data use to game operation only.
13.2 Payment processing is handled by third-party payment service providers including JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank. Each of these providers operates under their own privacy policy with respect to financial transaction data processed on their infrastructure. rrr3 recommends reviewing the privacy policies of your chosen payment provider.
13.3 The rrr3 website does not contain links to external third-party websites for advertising or affiliate purposes. Any third-party integrations on the platform are strictly for operational purposes (payments, games, KYC) and are governed by the data sharing controls described in Section 5.
14.1 rrr3 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or licensing obligations. The effective date at the top of this document will be updated accordingly.
14.2 Where changes are material — meaning they significantly affect how we process your personal data or reduce your privacy protections — rrr3 will notify you by email to the address registered on your account prior to the changes taking effect, and will display a prominent notice on the platform.
14.3 Minor amendments, such as corrections of typographical errors or clarifications that do not alter the substance of this Policy, may be made without prior notification.
14.4 Your continued use of the rrr3 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any revision, you should cease using the platform and may request account closure as described in the rrr3 Terms & Conditions.
15.1 For all data protection enquiries, requests to exercise your rights under Section 11, or concerns about how rrr3 handles your personal data, please contact our Data Protection team:
15.2 When submitting a data rights request, please include your full name, the email address associated with your rrr3 account, and a clear description of your request. We may ask for additional information to verify your identity before processing the request — this is to protect your data from unauthorised access.
15.3 If you are dissatisfied with rrr3's response to a privacy concern, you have the right to escalate your complaint to the data protection authority or dispute resolution body applicable under rrr3's international gaming licence. Details of the applicable authority are available on request from our support team.
15.4 Please note that the email address above is displayed as plain text for your reference and is not a clickable link. Please copy it manually into your email client.
Beyond legal obligations, here are the core privacy commitments rrr3 makes to every player across Karachi, Lahore, Islamabad, and beyond.
rrr3 has never sold player data and never will. Your personal information is not a product. It is collected purely to operate your account, fulfil licensing obligations, and keep the platform secure. Full stop.
All data in transit is protected by TLS encryption. Sensitive data at rest — including KYC documents and financial records — is encrypted with AES-256. The same standard used by major Pakistani banks like HBL and Meezan.
We hold your data only as long as required by law and our gaming licence. When retention periods expire, data is securely deleted or anonymised. We do not keep your information indefinitely just because we can.
Strict role-based access controls mean only the rrr3 staff members who genuinely need your data for their job function can access it. All access is logged and audited. No one at rrr3 browses player data out of curiosity.
Every data processing activity at rrr3 is documented in our internal Records of Processing Activities. We know exactly what data we hold, why we hold it, and who has access to it. No shadow databases, no undocumented processing.
rrr3 maintains a formal data breach response plan. In the unlikely event of a security incident affecting your data, we will notify you promptly and take immediate containment action — no delays, no cover-ups.
Now that you understand exactly how rrr3 protects your personal information, enjoy Pakistan's premier cricket betting and casino platform with total peace of mind. PKR transactions, JazzCash and EasyPaisa support, and 21+ responsible gaming — all backed by a transparent privacy commitment.