rrr3 takes the privacy of every Pakistani player seriously. This policy explains — in plain, straightforward English — exactly what personal data we collect, why we collect it, how we store it, who we share it with, and what rights you have over it. We have written it to be readable, not to bury things in legal language. If something is still unclear after reading, contact us directly.
rrr3 ("rrr3", "we", "us", "our") operates the online betting and casino platform available at rrr3.im. The platform is designed and operated specifically for players in Pakistan, with all transactions conducted in Pakistani Rupees (PKR) and all services delivered in English for the Pakistani market.
For the purposes of this Privacy Policy, rrr3 is the data controller — meaning we are the organisation that determines the purposes and means of processing your personal data. We are responsible for ensuring your data is handled lawfully, fairly and transparently in accordance with applicable data protection principles.
This Privacy Policy applies to all personal data collected through the rrr3 website, platform, mobile-optimised interface, customer support channels and any promotional communications we send. It applies to registered players, visitors who browse rrr3 without registering, and anyone who contacts our support team.
Data Controller: rrr3.im | Contact: support@rrr3.im | Effective Date: 1 July 2025
rrr3 collects personal data only to the extent genuinely necessary to operate your account, process your transactions and comply with applicable legal requirements. We do not collect data speculatively or for purposes we have not identified. The categories of personal data we collect from Pakistani players are set out below.
rrr3 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs or health information, except where health-related context arises in a responsible gaming interaction and is provided voluntarily by the player.
rrr3 collects personal data through the following means:
The majority of your personal data is provided by you directly when you register an account on rrr3, complete identity verification, make a deposit or withdrawal, contact customer support, or configure settings within your account. We rely on you to provide accurate and current information at all times.
When you access and use rrr3, our systems automatically collect technical data about your device, session and interactions. This includes your IP address, the type of device and browser you are using, and data about how you navigate the platform. This data is collected through server logs, session tracking and cookies — see Section 9 for more detail on cookies.
When you make a deposit or request a withdrawal, rrr3 receives confirmation and reference data from your payment provider (such as Easypaisa, JazzCash or your bank). We receive only what is necessary to reconcile the transaction — rrr3 does not receive or store your full card numbers or full mobile wallet credentials.
Where KYC (Know Your Customer) verification is required, rrr3 may receive data from the documents you submit, including scanned or photographed copies of your CNIC and proof of address. In some cases, rrr3 may use a third-party verification service to assist with document authentication — see Section 6 for more detail.
Every piece of personal data rrr3 processes has a defined purpose. We do not collect data without a reason, and we do not use data for purposes beyond those listed here without updating this policy and notifying you.
| Purpose | Data Used |
|---|---|
| Creating and managing your rrr3 account | Identity data, mobile number, email, password |
| Processing PKR deposits and withdrawals | Financial data, payment method identifiers |
| Verifying your identity (KYC/AML) | CNIC number, identity documents, date of birth |
| Operating betting and casino games | Transaction history, account balance, session data |
| Detecting and preventing fraud and abuse | IP address, device data, transaction patterns |
| Responsible gaming monitoring and support | Gaming history, session data, responsible gaming settings |
| Customer support communications | Identity data, communications data, transaction records |
| Sending service-related notifications | Email address, mobile number |
| Sending promotional offers (with consent) | Email address, communication preferences |
| Improving platform performance and UX | Technical usage data, anonymised session analytics |
| Complying with legal and regulatory obligations | Identity data, financial data, communications records |
rrr3 processes your personal data on the following legal bases:
rrr3 does not sell your personal data to any third party. Full stop. We share data only where it is necessary for one of the defined purposes in Section 4, and only with organisations that are contractually obligated to handle it securely and in line with this policy.
To process your PKR deposits and withdrawals via Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT or card networks, we share the minimum transaction data necessary with the relevant payment provider. These providers have their own privacy policies governing their data handling, which are independent of rrr3.
Where KYC verification is required, rrr3 may use a third-party identity verification service to authenticate documents you provide. This service receives the identity documents you submit and returns a verification result to rrr3. Identity verification data is handled under strict data processing agreements.
The casino games and betting software on rrr3 are provided by third-party studios. These providers receive a player identifier and bet/outcome data necessary to operate the game. They do not receive your name, CNIC, mobile number or other direct identity data. Their software is accessed under licensing agreements that include data protection obligations.
rrr3 uses cloud infrastructure and hosting services to operate the platform. Our infrastructure providers may technically have access to server-level data. All providers are selected on the basis of robust security certifications and operate under data processing agreements that prohibit use of rrr3 data for any purpose other than hosting.
rrr3 will share personal data with law enforcement agencies, financial intelligence units or other authorities where required by law, a court order, or a legitimate regulatory request. We will provide only the minimum data required to satisfy the request and will retain a record of such disclosures.
rrr3 will never share your personal data with third-party marketers, data brokers, advertising networks or any organisation whose primary purpose is commercial data exploitation.
rrr3 takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction.
All personal data stored on rrr3 systems is encrypted using AES-256, which is the industry standard for sensitive data at rest. All data transmitted between your device and rrr3 servers is protected using TLS 1.3 — the current best practice for data in transit. Your account password is stored as a hashed value and cannot be retrieved or read by rrr3 staff.
Access to personal data within rrr3's internal systems is restricted to staff and processes with a documented need to access it for their role. Access is managed on a least-privilege basis, with role-based controls and audit logging of all data access events. Staff with access to personal data receive training on data protection obligations and rrr3's internal data handling procedures.
rrr3 provides two-factor authentication (2FA) for player accounts. We strongly recommend enabling 2FA on your rrr3 account for an additional layer of protection. Suspicious login attempts trigger automatic security holds and player notifications. Where we detect a potentially compromised account, we may temporarily suspend access pending your verification.
rrr3 maintains a documented incident response plan for data security events. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected players promptly and provide clear information about what happened, what data was involved, and what steps you should take to protect yourself.
rrr3 retains personal data for as long as is necessary for the purposes for which it was collected, and in line with applicable legal retention requirements. We do not keep data longer than necessary. The key retention periods applicable to rrr3 accounts are set out below.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & identity data | Duration of account + 5 years after closure | AML and financial regulation compliance |
| Transaction & financial records | 7 years from transaction date | Financial record-keeping obligations |
| KYC documents | 5 years from verification date or account closure | AML compliance and audit requirements |
| Customer support communications | 3 years from last interaction | Dispute resolution and service improvement |
| Technical & usage logs | 12 months | Security, fraud detection, platform performance |
| Marketing preferences & consent records | Duration of consent + 3 years | Demonstrating lawful basis for marketing |
| Responsible gaming records | Duration of account + 5 years | Regulatory obligations and player protection |
After the applicable retention period has passed, rrr3 will securely delete or anonymise the relevant data. Anonymised data may be retained indefinitely for aggregate analytics purposes.
rrr3 uses cookies and similar tracking technologies on the platform to ensure the site functions correctly, to maintain your session when logged in, and to understand how the platform is being used so we can improve it.
These cookies are strictly necessary for the rrr3 platform to function. They manage your login session, maintain your PKR balance display, remember your language and display preferences, and support core security functions including CSRF protection. You cannot opt out of essential cookies without losing the ability to use rrr3.
rrr3 uses analytics tools to understand aggregate user behaviour — which sections of the platform are most used, where users encounter navigation difficulties, and how the platform performs on different device types. Analytics data is used at aggregate level and is not used to build individual profiles for commercial purposes. We use only privacy-respecting analytics configurations that anonymise IP addresses.
You can manage and delete cookies through your browser settings at any time. Most modern browsers allow you to block third-party cookies while permitting first-party cookies — a setting that will allow you to continue using rrr3 while limiting tracking by external services. Blocking all cookies will prevent you from logging in to rrr3.
rrr3 does not use advertising cookies, retargeting pixels or behavioural tracking cookies that profile you across websites for commercial advertising purposes.
As a player on rrr3, you have the following rights in relation to the personal data we hold about you. These rights can be exercised by contacting support@rrr3.im with the subject line "Data Rights Request" and your account username.
You can request a copy of all personal data rrr3 holds about you. We will provide this within 30 days of a verified request in a portable, readable format.
If any personal data rrr3 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require re-verification.
You can request deletion of your personal data. Note that erasure requests may be limited where rrr3 has a legal obligation to retain certain records — such as AML and financial data — for defined periods.
Where you dispute the accuracy of data or the lawfulness of our processing, you can request that we restrict how we use it while the matter is being investigated.
You can request your personal data in a structured, machine-readable format (such as JSON or CSV) for data you have provided to rrr3 under a contract or consent basis.
Where processing is based on legitimate interests, you can object. rrr3 will consider the objection and either stop the processing or explain why the legitimate interest overrides your objection in that context.
If you have consented to receive promotional emails or SMS from rrr3, you can withdraw that consent at any time via your account notification settings or by emailing support@rrr3.im. Withdrawal of marketing consent does not affect service communications.
If you believe rrr3 has handled your personal data unlawfully, you have the right to raise a formal complaint. Please contact support@rrr3.im in the first instance — we are committed to resolving data complaints quickly and in good faith.
rrr3 will acknowledge all data rights requests within 5 business days and complete the request within 30 calendar days. Complex requests that require extended processing time will be acknowledged with an updated timeline.
rrr3 is strictly an adult platform. You must be 18 years of age or older to register or use any service on rrr3. We do not knowingly collect personal data from anyone under the age of 18.
If rrr3 discovers or is notified that a minor has registered on the platform, we will immediately suspend the account, delete the associated personal data (subject to any legal retention obligations triggered during the account's operation), and take steps to prevent re-registration by that individual. Any winnings accumulated on a minor's account will be forfeited.
If you believe a minor may be using a rrr3 account, please notify us immediately at support@rrr3.im. We will investigate and act promptly.
Parents and guardians who are concerned about children's access to gambling content are encouraged to use parental control software to restrict access to betting and casino websites.
The rrr3 platform contains links to related policy pages and internal navigation. rrr3 does not include external outbound links to third-party websites as part of the standard platform interface. However, payment processing and identity verification may route through third-party provider interfaces during the transaction process.
Where third-party provider interfaces are involved in your transaction — for example, an Easypaisa confirmation screen or a bank redirect during card payment — you are temporarily interacting with that provider's platform, and their privacy policy governs the data they collect during that step. rrr3 is not responsible for the data handling practices of those independent third parties.
The game studios whose titles appear on rrr3 receive limited anonymised data sufficient to operate the game. They do not receive your name, CNIC, contact details or payment information. Their software runs within the rrr3 interface under technology licensing agreements that include data protection requirements.
rrr3 may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable law, or new data processing activities. When we make material changes — for example, if we begin processing a new category of data or sharing data with a new category of third party — we will notify registered players via email at least 7 days before the changes take effect.
Minor clarifications or corrections that do not change the substance of how we handle your data may be updated without a formal notification, though the effective date on this page will always reflect when the policy was last changed. The current version of this Privacy Policy is always available at rrr3.im/privacy-policy.
Continued use of rrr3 after a policy update takes effect constitutes your acceptance of the revised policy. If you object to any changes, please contact support@rrr3.im before the effective date — if we cannot resolve your concern, you may close your account.
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or wish to raise a concern about how rrr3 handles your personal data, please contact us using the details below.
Email: support@rrr3.im
Subject Line for Data Requests: "Data Rights Request – [your username]"
Subject Line for Privacy Concerns: "Privacy Concern – [your username]"
Live Chat: Available 24/7 via the rrr3 platform — ask to speak with the data protection team
Response Commitment: Acknowledgement within 5 business days, full response within 30 calendar days
rrr3 treats all privacy-related enquiries seriously and will respond substantively. We do not use automated systems to handle formal data rights requests — a real member of our team will review and respond to your enquiry.
Six concrete ways we make sure your data stays private, secure and under your control.
Every item of personal data stored on rrr3 systems — your CNIC details, transaction history, account credentials — is encrypted using AES-256. Even if our storage were somehow accessed without authorisation, the data would be unreadable without the decryption keys, which are held separately under strict access controls.
rrr3 has never sold player data to a third party and never will. Your mobile number, email address and betting history are not commodities for us. Many platforms in the online betting space generate revenue from player data — rrr3 generates revenue from providing a good platform. Your data is not our product.
Access, correct, export or delete your data — rrr3 supports all data rights requests with a dedicated process and a genuine human response. We acknowledge within 5 business days and complete within 30 calendar days. No automated rejection of valid data rights requests.
rrr3 collects only the personal data genuinely needed to run your account and process your transactions. We do not collect data speculatively. If a piece of information is not needed for a defined operational or legal purpose, we do not ask for it.
If a data security incident occurs that puts your data at risk, rrr3 will notify affected players promptly with clear information about what happened and what to do. We do not delay breach notifications or minimise what we report. Transparency is how we maintain trust when things go wrong.
Promotional emails and SMS from rrr3 are opt-in only. If you have given consent and want to withdraw it, you can do so instantly from your account notification settings — no need to contact support. We honour unsubscribe requests immediately without a cooling-off period.
You have read how rrr3 handles your data. We collect the minimum necessary, protect it with serious encryption, never sell it, and give you full control over your rights. If you are 18 or older, register your free account today and play in PKR knowing your privacy is taken seriously.
Privacy questions? Email support@rrr3.im — we respond within 5 business days.