Privacy Policy

1. Introduction

rrr3 ("we", "us", "our") operates the online gaming information platform accessible at https://rrr3.cam ("Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, transfer and protect personal data relating to users ("you", "User", "Player") of the Platform.

We are committed to protecting your privacy and to processing your personal data in a manner that is transparent, lawful and consistent with your rights. This Policy applies to all individuals who access or use the Platform, regardless of location, including users based in Pakistan and other jurisdictions.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together form the complete legal framework governing your use of rrr3.

2. Definitions

The following terms have the meanings assigned to them throughout this Policy:

• "Personal Data" means any information relating to an identified or identifiable natural person ("Data Subject"), including but not limited to name, email address, IP address, device identifiers, usage data and financial information.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction.
• "Data Controller" means the entity that determines the purposes and means of Processing Personal Data — in this case, rrr3.
• "Data Processor" means a third party that Processes Personal Data on behalf of the Data Controller under a written data-processing agreement.
• "Consent" means a freely given, specific, informed and unambiguous indication of the Data Subject's wishes by which they signify agreement to the Processing of their Personal Data.
• "Cookies" means small text files placed on a User's device by a website, used to remember preferences, track sessions and gather analytics data.
• "Operator" means any third-party licensed gaming or betting company whose services may be referenced, linked or integrated within the Platform.
• "KYC" means Know Your Customer — the identity verification process conducted by Operators and, where applicable, by rrr3.

3. Data Controller Information

rrr3 acts as the Data Controller for Personal Data collected through the Platform. All queries, requests and complaints relating to the processing of Personal Data under this Policy should be directed to rrr3 using the contact details provided in Section 16.

4. Personal Data We Collect

4.1 Data You Provide Directly

When you register for an Account or interact with the Platform, you may provide the following categories of Personal Data:

• Identity data: Full name, date of birth, gender, nationality
• Contact data: Email address, telephone number, residential address (including city — e.g., Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan, Peshawar)
• Account credentials: Username, hashed password, security questions
• Financial data: Deposit and withdrawal transaction records, payment method identifiers (not full card numbers), currency preference (PKR or other)
• KYC documents: Government-issued ID (CNIC, passport), proof of address, payment method proof — collected and processed by the Operator under their own privacy policy
• Communication data: Messages and queries submitted to rrr3 support

4.2 Data Collected Automatically

When you visit the Platform, the following data may be collected automatically through technical systems and cookies:

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution
• Usage data: Pages visited, time on page, navigation path, referring URL, search terms used on the Platform
• Location data: Approximate geolocation derived from IP address (not GPS-level precision)
• Session data: Login timestamps, session duration, logout times
• Cookie data: Preference settings, session tokens, analytics identifiers (see Section 8)

4.3 Data from Third Parties

rrr3 may receive limited Personal Data from third-party Operators or service providers for the purpose of fraud prevention, identity verification and responsible gambling compliance. Such data is handled in accordance with this Policy and under appropriate data-sharing agreements.

5. How We Use Your Personal Data

rrr3 uses your Personal Data for the following specific and documented purposes:

• Account management: Creating, maintaining and administering your Account on the Platform
• Service delivery: Providing access to gaming information, guides, betting resources and responsible gambling content
• Communications: Responding to your support queries, sending account notifications and delivering requested information
• Platform improvement: Analysing usage patterns to improve content quality, site performance and user experience
• Security and fraud prevention: Detecting, investigating and preventing fraudulent activity, multi-accounting, money laundering and other prohibited conduct
• Responsible gambling: Processing self-exclusion requests, deposit-limit settings and other player-protection tools in coordination with the Operator
• Legal compliance: Meeting obligations under applicable laws, including responding to lawful requests from regulatory or law-enforcement authorities
• Marketing (where consented): Sending promotional communications about rrr3 features, bonus guides or relevant content updates — only where you have provided explicit prior consent and in accordance with your preferences

rrr3 does not use automated decision-making processes (including profiling) that produce legal or similarly significant effects without human oversight, except where explicitly required by an applicable legal obligation.

6. Legal Basis for Processing

rrr3 processes Personal Data on one or more of the following legal bases, as applicable to each specific processing activity:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted, including Account management and service delivery
• Legal obligation: Processing required to comply with applicable laws, court orders or regulatory requirements
• Legitimate interests: Processing necessary for the legitimate interests of rrr3 (e.g., fraud prevention, security, analytics) where those interests are not overridden by your fundamental rights
• Consent: Processing based on your freely given, specific and informed consent — applicable primarily to direct marketing communications. You may withdraw consent at any time by contacting [email protected]
• Vital interests: Where processing is necessary to protect the life of a Data Subject or another natural person (e.g., safeguarding concerns relating to problem gambling)

7. Data Sharing & Disclosure

7.1 Service Providers (Data Processors)

rrr3 may share your Personal Data with carefully selected third-party service providers who process data on our behalf under written data-processing agreements. These providers may include cloud hosting infrastructure providers, email delivery platforms, analytics services, payment processing intermediaries and fraud-detection specialists. All such providers are contractually required to process data only as directed by rrr3 and to maintain appropriate security standards.

7.2 Operators

Where you interact with a third-party Operator through or in connection with the Platform, limited Account data may be shared with that Operator to facilitate the gaming relationship. Each Operator processes your data under their own privacy policy and is an independent Data Controller for those purposes. rrr3 is not responsible for the privacy practices of any Operator.

7.3 Legal and Regulatory Disclosure

rrr3 may disclose Personal Data where required to do so by applicable law, court order, subpoena or lawful governmental or regulatory request. rrr3 will, where legally permissible, notify affected Users of such disclosure obligations.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, asset sale or other corporate transaction involving rrr3, Personal Data may be transferred to the acquiring or successor entity, subject to equivalent data-protection obligations.

7.5 Payment References — Pakistan Context

rrr3 may reference familiar Pakistan-market payment methods — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — for educational and contextual purposes. rrr3 does not share your financial data with these providers and does not claim any affiliation with, endorsement from, or integration into any of these payment services. Any payment data processing is conducted by the Operator under their applicable terms and privacy policy.

8. Cookies & Tracking Technologies

rrr3 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse site performance and, where you have consented, deliver relevant content. The table below describes the categories of cookies used on rrr3:

You may manage your cookie preferences at any time through your browser settings or via rrr3's cookie preference controls. Disabling strictly necessary cookies may impair Platform functionality. Disabling analytics cookies does not affect your access to core services.

9. International Data Transfers

rrr3 may transfer your Personal Data to countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. Where such transfers occur, rrr3 ensures that appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by applicable data protection authorities
• Adequacy decisions recognising equivalent data-protection standards
• Binding corporate rules where applicable
• Other legally recognised transfer mechanisms

For users based in Pakistan, where specific international transfer regulations may apply under forthcoming data-protection legislation, rrr3 will review and update its transfer mechanisms as required upon enactment of applicable law.

10. Data Retention

rrr3 retains Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, regulation or legal proceedings. The following general retention guidelines apply:

• Account data: Retained for the duration of your Account, and for a further period of up to 5 years after Account closure, to comply with anti-money-laundering and responsible gambling obligations
• Transaction records: Retained for up to 7 years in accordance with typical financial record-keeping requirements
• Communication records: Support communications retained for up to 3 years for quality assurance and dispute-resolution purposes
• Analytics data: Anonymised analytics data may be retained for longer periods as it no longer constitutes Personal Data
• Self-exclusion data: Records of self-exclusion requests retained for the duration of the exclusion period and for a legally appropriate period thereafter, to prevent re-registration

Upon the expiry of applicable retention periods, Personal Data is securely deleted or anonymised using industry-standard irreversible processes.

11. Your Data Rights

Subject to applicable law and any overriding legal obligations, you have the following rights in relation to your Personal Data held by rrr3. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving a valid, verified request.

12. Children's Privacy

The Platform is strictly intended for adults aged 18 years or older, or the higher minimum age required by the applicable jurisdiction or Operator licensing terms. rrr3 does not knowingly collect Personal Data from individuals under the applicable minimum age.

If rrr3 discovers or is notified that Personal Data has been collected from an individual below the applicable minimum age, such data will be deleted promptly and the associated Account suspended. If you believe a minor has registered an Account on rrr3, please notify us immediately at [email protected].

13. Security Measures

rrr3 implements a range of technical and organisational security measures designed to protect your Personal Data against unauthorised access, loss, destruction, disclosure or alteration. These measures include, but are not limited to:

• TLS (Transport Layer Security) encryption for all data in transit between your device and rrr3 servers
• Encryption of sensitive data fields at rest using industry-standard algorithms
• Role-based access controls limiting employee access to Personal Data on a strict need-to-know basis
• Regular security assessments and vulnerability monitoring of Platform infrastructure
• Incident response procedures for identifying, containing and notifying affected parties of data breaches
• Contractual security obligations imposed on all third-party Data Processors

While rrr3 takes reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. Users are responsible for maintaining the security of their own Account credentials and should use strong, unique passwords that are not shared with third parties.

14. Third-Party Links

The Platform may contain references to or descriptions of third-party Operators, services and resources. rrr3 does not control the privacy practices of these third parties and is not responsible for their data-collection or processing activities. Each third party's own privacy policy governs its processing of your Personal Data.

rrr3 recommends reviewing the privacy policy of any third-party platform before providing personal information. The inclusion of a reference to a third-party service on rrr3 does not constitute an endorsement of that service's privacy practices.

15. Updates to This Privacy Policy

rrr3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data-processing practices or Platform features. When material changes are made, rrr3 will use reasonable endeavours to notify registered Users via email or a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this Policy. Your continued use of the Platform following publication of any amendments constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must discontinue use of the Platform and request Account closure.

16. Contact Us

For any questions, concerns or requests relating to this Privacy Policy or to the processing of your Personal Data by rrr3, please contact us using the details below. We aim to respond to all privacy-related queries within 5 business days.

If you are not satisfied with rrr3's response to a privacy complaint, you may have the right to lodge a complaint with the relevant data-protection supervisory authority in the jurisdiction applicable to your situation. rrr3 encourages users to contact us first to allow us to resolve any concern before escalation.