rrr3 Privacy Policy

1. Who We Are and How to Contact Us

rrr3 ("we", "us", "our", "the Platform") is the operator of the online casino and sports betting platform accessible at rrr3.club. rrr3 is the data controller responsible for your personal data collected through this platform.

For all privacy-related enquiries, data subject requests, and complaints, players may contact rrr3 using the following details:

rrr3 is committed to responding to all privacy-related enquiries within 30 days of receipt. Complex requests may require additional time, in which case rrr3 will notify you of the expected timeline.

2. Personal Data We Collect

rrr3 collects personal data in several ways: directly from you when you register or interact with the platform, automatically when you use rrr3's services, and from third-party service providers where necessary for verification and payment purposes. The categories of data collected are set out below.

2.1 Registration and Account Data

• Full name as it appears on your government-issued identity document
• Date of birth (for age verification purposes — mandatory 18+ check)
• Mobile number (Pakistani format, used as primary login identifier)
• Email address
• Residential address
• Username and encrypted password hash
• Preferred language and currency (PKR)

2.2 Identity Verification (KYC) Data

• Copy of National Identity Card (CNIC) or passport
• Proof of address documentation (bank statement, utility bill)
• Proof of payment method ownership documentation
• Selfie photograph for liveness verification where required

2.3 Financial and Transaction Data

• JazzCash and Easypaisa mobile wallet identifiers (account numbers — not PINs)
• Bank account details where bank transfer is used (HBL, UBL, Meezan Bank, Bank Alfalah, and others)
• USDT TRC20 wallet address where cryptocurrency is used
• Deposit and withdrawal transaction history, including amounts in PKR, timestamps, and payment method references
• Source of funds information where requested

2.4 Gaming and Betting Activity Data

• Game session data including game titles played, stake amounts in PKR, outcomes, and session duration
• Sports betting selections, stake amounts, odds accepted, and settlement outcomes
• Bonus and promotion usage records
• Responsible gaming tool usage (deposit limits set, self-exclusion activations, session reminder preferences)

2.5 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system version, and browser type
• Mobile network operator (Jazz, Zong, Ufone, Telenor, etc.)
• Session identifiers and login timestamps
• Pages visited and features used within the rrr3 platform

2.6 Communications Data

• Live chat transcripts with rrr3 support
• Email correspondence with rrr3
• Preferences for receiving rrr3 promotional communications (opt-in/opt-out status)

3. How We Use Your Personal Data

rrr3 uses personal data collected from players for the following purposes:

Purpose	Data Used
Account creation and authentication	Registration data, device data
Age verification (18+ mandatory check)	Date of birth, KYC documents
Identity verification (KYC)	KYC documents, selfie data
Processing deposits and withdrawals in PKR	Financial data, transaction records
Delivering casino games and sports betting services	Account data, gaming activity data
Bonus and promotion administration	Gaming activity, transaction data
Customer support delivery	Account data, communications data
Fraud prevention and anti-money laundering	All categories as required
Responsible gaming monitoring and enforcement	Gaming activity, financial data
Platform security and abuse prevention	Technical data, account data
Regulatory compliance and audit	All categories as required
Marketing communications (opt-in only)	Contact data, gaming preferences
Platform analytics and improvement	Anonymised technical and activity data

rrr3 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human oversight. Fraud detection systems flag accounts for human review rather than taking automated enforcement action without staff involvement.

4. Legal Basis for Processing

rrr3 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing necessary to provide you with rrr3's services as described in the Terms and Conditions, including account management, game delivery, and payment processing.
• Legal obligation: Processing necessary to comply with applicable legal and regulatory requirements, including anti-money laundering obligations, age verification requirements, and record-keeping mandates.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, informed consent. Consent may be withdrawn at any time by contacting rrr3 support or adjusting your account preferences.

5. Data Sharing and Third Parties

rrr3 does not sell personal data to third parties. rrr3 may share personal data with the following categories of third parties under strict data processing agreements that require them to protect your data and use it only for the specified purpose:

• Identity verification providers: Third-party KYC and age verification services that process identity documents and biometric data to verify player eligibility.
• Payment processors: JazzCash, Easypaisa, and banking partners who process PKR deposits and withdrawals on rrr3's behalf.
• Game content providers: Software providers (e.g., Pragmatic Play, PG Soft, and others) whose games are integrated into rrr3's platform. These providers may receive anonymised session data for game performance monitoring.
• Fraud and AML compliance providers: Third-party services that assist rrr3 in detecting and preventing fraud, money laundering, and terms abuse.
• Customer support platforms: Live chat and helpdesk software providers through which rrr3 delivers player support.
• Cloud hosting and infrastructure providers: Server and data storage providers that host the rrr3 platform and its data.
• Regulatory authorities: Where rrr3 is required by law or by its operating licence to disclose player data to regulators, law enforcement, or other authorised bodies, rrr3 will comply with such requirements.

6. Payment Data and Financial Security

rrr3 gives particular care to the protection of financial data. The following practices apply specifically to payment-related personal data:

• rrr3 does not store JazzCash or Easypaisa PINs, full card numbers, or equivalent sensitive authentication data on its systems. Payment processing is handled via the payment providers' own secure APIs.
• Bank account numbers and mobile wallet identifiers stored by rrr3 are retained only as long as necessary for transaction processing, dispute resolution, and anti-money laundering compliance.
• All withdrawal requests are matched against the payment methods used for deposits as an anti-money laundering control. This comparison requires rrr3 to retain a record of deposit payment method details for the duration of your account lifecycle and for the legally required period thereafter.
• Source of funds enquiries may result in rrr3 requesting documentation evidencing the legitimate origin of funds deposited. Relevant documentation is retained for the period specified in rrr3's AML compliance programme.

7. Cookies and Tracking Technologies

rrr3 uses cookies and similar tracking technologies on its platform. Cookies are small text files placed on your device that allow rrr3 to recognise your browser across sessions and deliver a functional, personalised experience.

Categories of Cookies Used by rrr3

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your rrr3 session. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings and, where applicable, the "remember me" login preference. These are set with your consent during the login process.
• Analytics cookies: Used to collect anonymised, aggregated data about how players interact with the rrr3 platform, which pages are visited most, and where technical issues occur. This data is used to improve rrr3's product. No individual player is identified in analytics data.
• Responsible gaming cookies: Store session duration data locally on your device to enable session reminders to function accurately even if the server connection is temporarily interrupted.

You can manage cookie settings through your browser's privacy or settings menu. Note that disabling strictly necessary cookies will impair or prevent your ability to use the rrr3 platform.

8. Data Security

rrr3 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and rrr3's servers.
• Encryption at rest for sensitive data fields including password hashes, identity document data, and payment identifiers.
• Role-based access controls ensuring that rrr3 staff access player data only to the extent required for their specific job functions.
• Regular penetration testing and security audits by independent third parties.
• Anomalous login detection that triggers additional verification when access from an unrecognised device or location is attempted.
• Incident response procedures that include notification obligations to affected players where a data breach is likely to result in high risk to their rights and interests.

9. Data Retention

rrr3 retains personal data for defined periods based on the category of data and the purpose for which it was collected. The following retention principles apply:

• Active account data: Retained for the duration of your rrr3 account relationship.
• KYC and identity documents: Retained for a minimum of five years from the date of account closure or the end of the business relationship, in accordance with anti-money laundering regulatory requirements.
• Financial transaction records: Retained for a minimum of five years from the date of the transaction for AML and audit purposes.
• Betting and gaming activity records: Retained for a minimum of three years from the date of the activity for regulatory compliance and dispute resolution purposes.
• Customer support communications: Retained for two years from the date of the interaction unless they relate to an unresolved dispute, in which case they are retained until final resolution.
• Marketing consent records: Retained for the duration of the consent plus three years to evidence consent was validly obtained and subsequently withdrawn if applicable.
• Closed account data: Where an account is closed at the player's request, rrr3 will delete or anonymise data beyond what is required to be retained for legal compliance within 30 days of closure confirmation.

10. Your Data Rights

Depending on applicable data protection law and rrr3's operating jurisdiction, you may have some or all of the following rights with respect to your personal data held by rrr3:

• Right of access: You may request a copy of all personal data rrr3 holds about you, along with information about how it is used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update most account details directly in your rrr3 account settings.
• Right to erasure: You may request deletion of your personal data. This right is subject to rrr3's legal retention obligations — data that must be retained for regulatory compliance cannot be deleted before the applicable retention period expires.
• Right to restriction: You may request that rrr3 restricts processing of your data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing.
• Right to data portability: You may request a machine-readable copy of personal data you have provided to rrr3, to the extent technically feasible.
• Right to object: You may object to processing of your personal data where rrr3 relies on legitimate interests as the legal basis for processing, unless rrr3 can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of the above rights, please contact rrr3 support via live chat or by emailing [email protected] (plain text, not a link). rrr3 will respond to verified data subject requests within 30 days. Identity verification will be required before rrr3 acts on any data subject request to protect against fraudulent requests.

11. Children's Privacy and the 18+ Requirement

rrr3 does not knowingly collect personal data from individuals under the age of 18. All rrr3 services are strictly reserved for adults aged 18 and over. rrr3 employs age verification controls at registration and during KYC processing specifically to prevent minors from accessing the platform.

If rrr3 discovers that personal data has been collected from a person under 18, that data will be deleted promptly, the associated account will be closed, and appropriate action will be taken in accordance with rrr3's responsible gaming obligations. If you believe a minor has registered on rrr3, please contact support immediately via live chat.

12. International Data Transfers

rrr3 operates a platform that may involve data being transferred to, stored in, or processed in countries outside Pakistan. Where such transfers occur, rrr3 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that described in this Privacy Policy, including standard contractual clauses with data processors and hosting providers where applicable.

Pakistani players should be aware that data protection laws in other countries may differ from those in Pakistan. By using rrr3 and accepting this Privacy Policy, you acknowledge that your data may be processed internationally as described above.

13. Changes to This Privacy Policy

rrr3 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via the email address associated with their rrr3 account or via an in-platform notification. The date of the most recent revision is displayed at the top of this page.

Your continued use of the rrr3 platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised policy. If you disagree with a revised policy, you must cease using rrr3 and may request account closure and data deletion via rrr3 support.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or rrr3's data practices, please contact us:

For formal complaints that cannot be resolved through rrr3's internal process, you may escalate to the applicable data protection or regulatory authority relevant to rrr3's operating jurisdiction.