rrr3 Privacy Policy – How We Protect Your Data

1Who We Are

rrr3 is an online gaming platform operating at rrr3.ws and serving registered players in Pakistan. For the purposes of data privacy, rrr3 acts as the data controller — meaning we determine the purposes and means of processing your personal information. When this Privacy Policy refers to "rrr3", "we", "us", or "our", it refers to the operating entity behind the rrr3 platform and all services offered through rrr3.ws.

Our designated contact for all privacy-related matters is our support team, reachable at support@rrr3.ws. We take privacy enquiries seriously and commit to acknowledging all requests within 5 business days and responding fully within 30 days.

2What Personal Data rrr3 Collects

rrr3 collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically through your use of rrr3, and in some cases information received from third-party verification services. The table below gives a clear overview of the categories of data involved.

3How rrr3 Uses Your Personal Data

Every use of your personal data by rrr3 serves a specific, legitimate purpose tied to operating the platform and serving you as a player. We do not use your data in ways that go beyond what is described here. The main purposes for which rrr3 processes personal data are:

• Account Creation and Management: Your contact details and identity data are used to create and maintain your rrr3 account, verify your identity where required, and keep your account secure.
• Processing Deposits and Withdrawals: Financial data is used to process your PKR transactions through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and card channels — and to ensure that all funds reach the correct account holder.
• Regulatory Compliance: rrr3 is required by its operating licence and applicable financial regulations to verify player identities (KYC — Know Your Customer) and monitor for suspicious financial activity (AML — Anti-Money Laundering). This may involve processing identity documents and transaction histories.
• Responsible Gaming: Usage data — including session duration, bet frequency, and deposit patterns — is monitored by rrr3's responsible gaming systems to identify players who may be showing signs of problematic gaming behaviour, so that we can provide timely support.
• Platform Improvement: Aggregated, anonymised usage data helps the rrr3 team understand which games are most popular, where players encounter difficulties, and how the platform can be improved for all Pakistani users.
• Security and Fraud Prevention: Technical data such as IP addresses and device information is used by rrr3's security systems to detect and prevent unauthorised account access, multi-accounting, and fraudulent activity.
• Customer Support: Communication data is used to resolve your queries, process complaints, and maintain a record of our interactions for quality and dispute resolution purposes.

4Legal Basis for Processing

rrr3 only processes your personal data where we have a valid legal basis to do so. The legal grounds we rely on are as follows:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to fulfil the contract between you and rrr3 — specifically, to operate your account, process transactions, and deliver the gaming services you have registered to use.
• Legal Obligation: rrr3 is required by regulatory and licensing obligations to perform identity verification (KYC), maintain transaction records, and cooperate with law enforcement and regulatory authorities. This processing is mandatory and cannot be opted out of.
• Legitimate Interest: Processing usage and technical data for fraud prevention, platform security, and responsible gaming monitoring is based on rrr3's legitimate interest in maintaining a safe, fair, and sustainable platform — an interest that we believe is balanced against your privacy interests and does not override them.
• Consent: Where rrr3 sends you promotional communications beyond transactional notifications, we will do so only with your explicit consent, which you can withdraw at any time by contacting support.

5Who rrr3 Shares Your Data With

rrr3 does not sell, rent, or trade your personal data. We share data only in the following limited circumstances, and only with parties who are contractually bound to handle it securely and in accordance with this Privacy Policy:

• Payment Processors: To process your PKR deposits and withdrawals, rrr3 shares the minimum necessary financial and identity data with Easypaisa, JazzCash, NayaPay, SadaPay, banking partners, and card network processors. These parties are subject to their own privacy obligations and are not permitted to use your data for any purpose other than processing your transaction.
• Identity Verification Services: Where rrr3 is required to verify your identity under KYC obligations, we may share your provided identification data with licensed third-party verification service providers. These providers confirm the validity of your information and return a result — they do not retain your data for their own use.
• Game Software Providers: The third-party game studios whose titles appear on rrr3 may receive anonymised technical data (such as device type and session length) to support game performance monitoring. No personally identifiable data is shared with game providers.
• Regulatory and Law Enforcement Authorities: rrr3 will share data with government agencies, regulators, or law enforcement bodies when legally required to do so under applicable regulations, court orders, or law enforcement requests. Where legally permitted, rrr3 will notify affected players of such requests.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets involving rrr3, player data may be transferred as part of that transaction. In such an event, rrr3 will notify registered players and the receiving entity will be bound by this Privacy Policy.

6How Long We Keep Your Data

rrr3 retains personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

• Active Account Data: Identity, contact, and financial data associated with an active rrr3 account is retained for the lifetime of the account and for 5 years after account closure, in line with regulatory requirements.
• Transaction Records: Records of all deposits and withdrawals processed on rrr3 are retained for a minimum of 7 years from the date of the transaction to satisfy financial regulatory obligations.
• Usage and Technical Data: Aggregated and anonymised usage data may be retained indefinitely for platform analytics. Identifiable usage logs (such as session logs tied to your account) are retained for 2 years after your last login.
• Support Communications: Records of customer support interactions are retained for 3 years from the date of the interaction.
• Self-Excluded Accounts: If you apply a self-exclusion on your rrr3 account, your data is retained for the duration of the exclusion period and 5 years thereafter to prevent re-registration during the exclusion window.

When retention periods expire, data is securely deleted or irreversibly anonymised. If you request early deletion of your data, rrr3 will delete all data that is not subject to a mandatory legal retention obligation within 30 days of your request.

7How rrr3 Protects Your Data

Data security is taken seriously at rrr3. The platform employs a range of technical and organisational security measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

• All data in transit between your device and rrr3 servers is encrypted using TLS 1.3 (256-bit)
• Data at rest on rrr3 servers is stored in encrypted form with access controlled by role-based permissions
• Two-factor authentication (2FA) is available for all rrr3 accounts and strongly recommended for all players
• rrr3 undergoes regular third-party security penetration testing to identify and remediate vulnerabilities
• All staff with access to personal data undergo privacy and security training and are subject to confidentiality obligations
• rrr3 maintains a documented incident response plan — in the event of a data breach, affected players will be notified within 72 hours

8Cookies and Tracking Technologies

rrr3 uses cookies and similar tracking technologies to make the platform work correctly, remember your preferences, and understand how players use the site. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential for the rrr3 platform to function. They manage your login session, keep you authenticated, and maintain your in-game state. These cannot be turned off.
• Functional Cookies: These remember your preferences — such as your chosen game category, display settings, and language preferences — so you do not have to reconfigure them each visit.
• Analytics Cookies: rrr3 uses anonymised analytics data to understand platform usage patterns — which pages are visited most, how players navigate the site, and where technical issues are occurring. No personally identifiable information is passed to analytics tools.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the rrr3 platform from functioning correctly. Disabling functional or analytics cookies will not prevent you from using rrr3 but may affect your experience.

9Your Privacy Rights as an rrr3 Player

As a registered rrr3 player, you have the following rights in relation to your personal data. To exercise any of these rights, contact our support team at support@rrr3.ws with "Privacy Request" in the subject line. We will acknowledge your request within 5 business days and respond fully within 30 days.

10Children's Privacy

rrr3 is strictly an adult platform. We do not knowingly collect any personal information from individuals under the age of 18. Our registration process is designed to prevent underage access, and we actively verify the age of players where we have reason to suspect a registrant may be under 18.

If you are a parent or guardian and believe that your child has registered on rrr3 or provided personal information to rrr3, please contact us immediately at support@rrr3.ws. We will investigate and, if confirmed, close the account, return any deposits to their source, and delete all personal data associated with that account within 10 business days.

11Changes to This Privacy Policy

rrr3 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this document reflects when the current version came into effect.

When material changes are made to this Privacy Policy, rrr3 will notify registered players via the mobile number or email address associated with their account, and will post a prominent notice on the rrr3 platform for at least 14 days before the new version takes effect. If you disagree with any changes, you have the right to close your account and request deletion of your data before the new policy comes into effect.

Continued use of the rrr3 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.

12How to Contact rrr3 About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please reach out to our dedicated privacy team:

For responsible gaming support, self-exclusion, or deposit limit requests, please also visit our Responsible Gaming page. For general questions about your account, our FAQ page covers the most common topics in detail.