rrr3 Privacy Policy

01

Introduction

rrr3 ("rrr3", "we", "us", "our") operates the online gaming platform available at rrr3.asia, serving English-speaking players in Pakistan. This Privacy Policy describes how rrr3 collects, processes, stores, shares and protects the personal data of users ("you", "your") who register an account or otherwise interact with the rrr3 platform.

This policy applies to all personal data collected through the rrr3 website, account registration process, KYC verification, payment transactions, customer support interactions, and any other touchpoint between you and the rrr3 platform. It does not apply to third-party websites or services that may be linked from the rrr3 platform.

By registering an rrr3 account, using the rrr3 platform, or submitting personal data to rrr3 by any means, you acknowledge that you have read, understood and accepted this Privacy Policy. If you do not accept this policy, you should not register an account or use the rrr3 platform.

This Privacy Policy should be read alongside the rrr3 Terms & Conditions, which together constitute the full agreement governing your use of the rrr3 platform.

02

Data We Collect

rrr3 collects personal data through several channels. The categories of personal data collected include:

Registration Data

• Full legal name
• Date of birth
• Residential address (including city — Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad or elsewhere in Pakistan)
• Pakistani mobile number and/or email address
• Username and encrypted password

KYC Verification Data

• Government-issued identity documents (national identity card, passport or equivalent)
• Proof of address documentation
• Photographs or selfies as required for identity verification
• Source of funds documentation where required by anti-money laundering procedures

Financial Data

• Payment method details (JazzCash wallet ID, Easypaisa account, HBL/UBL/Meezan Bank account details as applicable)
• Transaction history including deposits, withdrawals and gaming activity
• PKR account balance and transaction records

Technical & Usage Data

• IP address, device type, operating system and browser information
• Session data, login timestamps and geographic location derived from IP
• Pages visited, features used and navigation patterns on the rrr3 platform
• Cookie and similar tracking technology data

Communications Data

• Records of live chat and email support interactions with rrr3
• Feedback and complaint submissions

03

How We Use Your Data

rrr3 uses the personal data it collects for the following purposes:

1. Account management: Creating, maintaining and administering your rrr3 user account, including processing your rrr3 login sessions and managing account security.
2. Identity and age verification: Conducting KYC checks to verify your identity and confirm that you are at least 18 years of age before enabling real-money gaming and financial transactions.
3. Payment processing: Processing deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Visa, Mastercard and USDT TRC20, and maintaining accurate PKR transaction records.
4. Gaming and platform services: Providing access to cricket betting, PSL markets, live casino, slots, dice games and all other rrr3 platform features.
5. Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, underage gambling, duplicate accounts and other prohibited conduct.
6. Responsible gaming: Monitoring gaming patterns to support responsible gaming obligations, applying deposit limits and self-exclusion settings, and identifying potentially problematic behaviour.
7. Customer support: Responding to queries, complaints and support requests submitted to rrr3 via live chat or email.
8. Legal and regulatory compliance: Meeting applicable anti-money laundering, know-your-customer and other regulatory obligations.
9. Platform improvement: Analysing aggregated usage data to improve rrr3 platform features, performance and user experience.
10. Marketing communications: Sending relevant promotional information to your registered contact details, where you have not opted out of such communications.

04

Legal Basis for Processing

rrr3 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and rrr3, including account management, payment processing and access to platform services.
• Legal obligation: Processing required to comply with applicable legal and regulatory requirements, including anti-money laundering and KYC obligations.
• Legitimate interests: Processing conducted for the legitimate interests of rrr3, including fraud prevention, platform security, responsible gaming monitoring and platform improvement, where these interests are not overridden by your rights.
• Consent: Where you have provided explicit consent, including for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

05

Data Sharing & Third Parties

rrr3 does not sell your personal data to third parties. rrr3 may share personal data with third parties only in the following circumstances:

• Payment processors: Financial data is shared with payment service providers (including JazzCash, Easypaisa, HBL, UBL, Meezan Bank and card processors) solely to process your transactions.
• KYC verification providers: Identity documentation may be processed by third-party KYC and identity verification service providers acting on rrr3's behalf.
• Game providers: Limited technical data is shared with licensed game studios providing the casino, slot and live dealer games available on the rrr3 platform, to the extent required for game operation.
• Regulatory and law enforcement authorities: rrr3 may disclose personal data to regulatory bodies or law enforcement agencies where required by law or where rrr3 has a good-faith belief that disclosure is necessary to comply with a legal obligation.
• Professional advisors: Legal, financial or other professional advisors may access personal data where necessary in connection with their advisory services to rrr3, subject to appropriate confidentiality obligations.

All third parties with whom rrr3 shares personal data are required to handle it in accordance with applicable data protection standards and are prohibited from using it for any purpose other than those specified by rrr3.

06

KYC & Verification Data

Identity documents and related KYC data submitted to rrr3 are handled with strict confidentiality. KYC documentation is used exclusively for the purposes of identity and age verification and compliance with anti-money laundering obligations. rrr3 does not use KYC documentation for any other purpose without your explicit consent.

KYC data is stored securely and access is restricted to rrr3 personnel and authorised KYC verification partners who require it to carry out verification procedures. Copies of identity documents are retained for the period required by applicable regulatory obligations, after which they are securely destroyed.

The age verification component of KYC is a non-negotiable requirement for all rrr3 accounts. rrr3 does not permit access to real-money gaming by any person who has not completed age verification confirming they are 18 years of age or older.

07

Cookies & Tracking Technologies

rrr3 uses cookies and similar tracking technologies (including local storage and session identifiers) on the rrr3 platform for the following purposes:

• Essential cookies: Required for rrr3 login session management, platform security and core platform functionality. These cannot be disabled without impacting your ability to use the rrr3 platform.
• Analytics cookies: Used to collect aggregated data about how users interact with the rrr3 platform, which helps improve platform features and performance.
• Responsible gaming cookies: Used to support session time monitoring and responsible gaming features within your rrr3 account.
• Preference cookies: Used to remember your platform preferences and settings between sessions.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the rrr3 platform.

08

Data Retention

rrr3 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following principles:

• Account data is retained for the duration of your active rrr3 account registration and for a further period following account closure as required by applicable regulatory retention obligations.
• Financial transaction records are retained for a minimum of five years following the relevant transaction in accordance with standard anti-money laundering record-keeping requirements.
• KYC documentation is retained for the period required by applicable regulatory requirements following account closure or the completion of the verification process to which the documentation relates.
• Customer support interaction records are retained for a period sufficient to address any related disputes or complaints.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identified individual.

09

Data Security

rrr3 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction or alteration. Measures include:

• HTTPS encryption for all data in transit between your device and the rrr3 platform;
• Encryption of sensitive stored data including payment details and identity documents;
• Access controls restricting internal access to personal data on a need-to-know basis;
• Regular review of security practices and vulnerability assessments;
• Session management controls including automatic timeout for inactive rrr3 login sessions.

While rrr3 takes all reasonable steps to protect your data, no security system is infallible. In the event of a data breach that poses a risk to your rights and interests, rrr3 will notify affected users as required by applicable law.

10

Your Rights

Subject to applicable law, registered rrr3 users have the following rights with respect to their personal data:

• Access: You may request a copy of the personal data rrr3 holds about you.
• Correction: You may request correction of inaccurate or incomplete personal data held by rrr3. You can update basic account details directly within your rrr3 account settings.
• Deletion: You may request deletion of your personal data, subject to rrr3's legal obligations to retain certain categories of data (including financial records and KYC documentation) for specified minimum periods.
• Restriction of processing: You may request that rrr3 restrict the processing of your personal data in certain circumstances.
• Objection: You may object to processing of your personal data where rrr3 is relying on legitimate interests as the legal basis, including for direct marketing purposes.
• Withdrawal of consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact rrr3 support via live chat or at the email address provided in the Contact section of this policy. rrr3 will respond to valid requests within a reasonable timeframe, subject to identity verification.

11

Children & Minors

The rrr3 platform is strictly intended for users who are 18 years of age or older. rrr3 does not knowingly collect personal data from individuals under the age of 18. Age verification through the KYC process is a mandatory step before any rrr3 account can access real-money gaming or financial services.

If rrr3 becomes aware that personal data has been collected from a person under the age of 18, such data will be deleted and the associated account closed immediately. Parents or guardians who believe their child may have registered an rrr3 account should contact rrr3 support immediately.

12

Responsible Gaming & Data

rrr3 uses account activity data to support its responsible gaming programme. This includes analysing gaming patterns and transaction behaviour to identify potentially problematic gaming activity and to apply responsible gaming interventions where appropriate. This processing is conducted on the basis of rrr3's legitimate interest in promoting responsible gaming and protecting the wellbeing of its users.

Where you activate deposit limits, session reminders or self-exclusion through your rrr3 account settings, rrr3 processes and stores these preferences to ensure they are applied consistently across all your rrr3 sessions. Self-exclusion data is retained for the duration of the exclusion period and for a reasonable period thereafter to prevent re-registration during an active exclusion.

13

Updates to This Privacy Policy

rrr3 reserves the right to update this Privacy Policy at any time. Where changes are material, rrr3 will provide notice via the rrr3 platform or by communication to your registered email address prior to the changes taking effect. The "Last updated" date at the top of this policy indicates the date of the most recent revision.

Your continued use of the rrr3 platform following notification of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you should cease using the rrr3 platform and contact support regarding account closure.

14

Contact Us

For any questions, requests or concerns regarding this Privacy Policy or the handling of your personal data by rrr3, please contact the rrr3 support team:

• Email: [email protected]
• Live Chat: Available 24/7 via the rrr3 platform
• Response Time: Within 24 hours for email; immediate for live chat