3rrm Privacy Policy – How We Protect Your Data in Pakistan

1. Introduction

This Privacy Policy describes how 3rrm ("the Platform", "we", "us", "our") collects, stores, processes, and protects personal data provided by players ("you", "your") who register for and use the 3rrm website and associated services, including cricket betting, sports betting, live casino, crash games, card games, and slots.

3rrm is designed from the ground up for Pakistani players. All accounts operate in Pakistani Rupees (PKR), and all payment integrations are with local Pakistani services. This means the personal data we handle — including payment method details — relates predominantly to Pakistani financial infrastructure, and we take the corresponding responsibility seriously.

By registering an account on 3rrm or by continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use 3rrm. If you have already registered and wish to withdraw consent, please contact support to discuss your options.

This Policy should be read alongside the Terms and Conditions and the Responsible Gaming policy, which together constitute the full agreement between you and 3rrm.

2. Data We Collect

3rrm collects personal data in three ways: data you provide directly during registration and use of the platform, data generated automatically through your use of 3rrm, and data received from payment processors when you make deposits or withdrawals.

3rrm does not collect data that is unnecessary for operating a safe and compliant betting platform. We do not collect biometric data, social media profiles, or any personal data beyond what is described above. If our data collection requirements change materially, this Policy will be updated and players notified in advance.

3. How We Use Your Data

Every use of your personal data by 3rrm has a specific, legitimate purpose. We do not use data for purposes beyond what is described here without first obtaining your explicit consent.

• Account management: Your registration data is used to create, maintain, and secure your 3rrm account. Mobile number verification ensures account security and enables password recovery.
• Processing bets and games: Your betting history and balance data are used to calculate stakes, process payouts, settle bets, and maintain accurate account records. This data is the core operational record of your activity on 3rrm.
• Payment processing: Financial data is used to process PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard. Transaction references are retained for dispute resolution and audit purposes.
• Fraud prevention and security: Technical data including IP addresses and device information is used to detect unusual account activity, prevent unauthorised access, and identify potential fraud patterns. This processing is an essential security measure for all players on 3rrm.
• Responsible gaming: Your betting activity data is monitored by 3rrm's responsible gaming systems to identify patterns that may indicate problematic gambling behaviour. If such patterns are identified, 3rrm may contact you proactively or apply protective restrictions in line with the Responsible Gaming policy.
• Legal and regulatory compliance: Identity and transaction records may be retained and used to comply with applicable legal obligations, respond to lawful requests from authorities, or assist in investigations of financial crime.
• Platform improvement: Aggregated, anonymised usage data is used to improve the 3rrm platform — including betting interface design, game performance, and payment flow optimisation. This data does not identify individual players.
• Customer support: Communication data is used to resolve support queries, investigate complaints, and improve the quality of the 3rrm support experience.
• Marketing communications: If you have opted in to marketing, your contact details may be used to send you information about promotions, bonuses, and new features on 3rrm. You can opt out at any time.

4. Legal Basis for Processing

3rrm processes personal data on the following legal bases, depending on the specific purpose of processing:

• Contract performance: Processing necessary to operate your account, process bets, and manage payments is carried out on the basis that it is required to fulfil the contractual relationship between you and 3rrm as established by the Terms and Conditions.
• Legitimate interests: Security monitoring, fraud prevention, and platform improvement activities are carried out on the basis of 3rrm's legitimate interest in maintaining a safe and reliable platform for all players. These interests are balanced against your privacy rights and do not override them.
• Legal obligation: Where 3rrm is required to process or retain data by applicable law or in response to a legitimate authority request, processing is carried out on the basis of legal obligation compliance.
• Consent: Marketing communications and non-essential cookie placement are carried out only where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing & Disclosure of Data

3rrm does not sell, rent, or trade your personal data to third parties. Data is shared only in the specific circumstances described below, and only to the extent necessary for the relevant purpose.

• Payment processors: When you make a deposit or request a withdrawal, the relevant transaction data is shared with the payment processor handling that transaction — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT systems, or Visa/Mastercard processors. These processors operate under their own privacy policies and applicable financial data protection obligations.
• Game content providers: Where games are provided by third-party studios such as Evolution, Pragmatic Play, or Ezugi, limited session data may be shared with those providers to enable game functionality and fair play verification. These providers are contractually obligated to protect your data.
• Fraud prevention partners: In cases of suspected fraud, account abuse, or suspicious financial activity, data may be shared with specialist fraud prevention services or with other platforms as part of an industry-level fraud monitoring arrangement.
• Legal authorities: If 3rrm receives a lawful request from a Pakistani or international regulatory or law enforcement authority — whether for investigation of financial crime, tax compliance, or other legal purposes — we may be required to disclose specified data. Where permitted, 3rrm will inform you before complying with such a request.
• Business transfers: In the event that 3rrm's business or assets are acquired by or merged with another entity, player data held at the time may form part of the transferred assets. You will be notified of any such change and given the opportunity to close your account before the transfer takes effect.

Under no circumstances does 3rrm share your personal data for third-party advertising or marketing purposes without your explicit, separately obtained consent.

6. Payments, PKR Transactions & Financial Privacy

Because 3rrm operates exclusively in Pakistani Rupees and integrates with local payment infrastructure, the financial data handled by 3rrm is specific to Pakistani payment systems. Understanding how this data is managed is important for players on the platform.

When you make a deposit via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or a Pakistani-issued Visa or Mastercard, 3rrm records the transaction amount, timestamp, payment method type, and a reference number. Full payment account numbers — your Easypaisa or JazzCash account number, IBAN, or card number — are never stored in full on 3rrm systems. Payment credentials pass through encrypted channels to the payment processor and are not retained on 3rrm servers beyond what is needed to process the transaction.

For withdrawals above Rs 50,000, 3rrm may request verification that the withdrawal is directed to an account registered in your name. This involves confirming the name associated with your payment account — not accessing or storing your full account credentials.

All PKR transaction records on 3rrm are retained for a minimum of seven years for financial compliance and audit purposes. This retention is a legal requirement and applies even if you close your account.

7. Cookies & Tracking Technologies

3rrm uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. Cookies are small data files stored on your device when you visit 3rrm.

Session and security cookies are strictly necessary for 3rrm to function and cannot be disabled without disrupting your ability to use the platform. Preference and analytics cookies can be managed through your browser settings. Blocking analytics cookies does not affect your ability to bet or use any feature on 3rrm.

3rrm does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

8. Data Retention

3rrm retains personal data for as long as it is needed for the purposes it was collected, or for as long as we are legally required to retain it. The specific retention periods that apply to different data categories on 3rrm are as follows:

• Account and registration data: Retained for the lifetime of your account plus five years after closure. This supports compliance with identity verification obligations and provides a record in the event of a dispute.
• Betting and gaming history: Retained for seven years from the date of each transaction. This is a financial compliance requirement that applies regardless of account status.
• Financial transaction records: Retained for a minimum of seven years to comply with applicable financial regulations.
• Technical and log data: IP addresses and session logs are retained for 90 days for fraud detection and security purposes, then deleted or anonymised.
• Support communications: Chat transcripts and email correspondence are retained for three years from the date of interaction to support dispute resolution.
• Marketing consent records: Records of your marketing preferences and consent history are retained for as long as your account is active and for two years after closure.

When data reaches the end of its retention period, it is securely deleted from 3rrm systems. Where deletion of specific data is not possible due to technical constraints, the data is anonymised so that it can no longer be linked to you as an individual.

9. Data Security

3rrm implements a multi-layered approach to data security that covers technical infrastructure, operational procedures, and access controls. The following measures are in place to protect your personal data:

• Encryption in transit: All data transmitted between your device and 3rrm is encrypted using TLS (Transport Layer Security). This applies to login, account management, betting activity, and payment transactions.
• Encryption at rest: Sensitive stored data — including hashed passwords and identity verification records — is encrypted on 3rrm servers.
• Access controls: Access to player personal data within 3rrm is restricted to staff who need it to perform their specific roles. All access is logged and subject to periodic audit.
• Password security: Passwords are never stored in plain text on 3rrm systems. They are stored as salted cryptographic hashes, meaning that even if our database were compromised, your actual password would not be exposed.
• Payment data handling: Full payment account numbers are never stored on 3rrm servers. Payment processing is handled through encrypted integrations with each payment provider. 3rrm meets the PCI-DSS standards applicable to its payment processing arrangement.
• Fraud monitoring: Automated systems monitor account activity continuously for patterns consistent with account takeover, payment fraud, or identity misuse. Suspicious activity triggers alerts and may result in a temporary account hold pending verification.

Despite these measures, no internet-based system can be guaranteed completely secure. If you believe your 3rrm account has been compromised, change your password immediately and contact support. 3rrm will investigate and take action within two business hours.

10. Your Data Rights

As a player on 3rrm, you have the following rights with respect to your personal data. These rights apply regardless of where in Pakistan you are based.

To exercise any of these rights, contact 3rrm support at support@3rrm.ws. Requests will be acknowledged within two business hours and completed within 30 calendar days. Identity verification may be required before a request can be processed to protect against fraudulent data requests.

11. Minors & Under-18 Policy

3rrm is strictly an 18+ platform. The collection of personal data from individuals under the age of 18 is neither intended nor permitted. The registration process includes an age confirmation step, and 3rrm reserves the right to request age verification at any stage.

If 3rrm becomes aware that personal data has been collected from an individual under 18, the relevant account will be immediately suspended, all associated data will be deleted, and any funds in the account will be returned via the original payment method after a verification process. If you believe a minor may have registered on 3rrm, please contact support immediately at support@3rrm.ws.

12. Changes to This Privacy Policy

3rrm may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. The most current version of the Policy is always available on this page, with the effective date displayed at the top.

Where a change is material — meaning it significantly alters the rights you have over your data or the way in which 3rrm uses your data — registered players will be notified by email or via an in-platform notification at least seven days before the change takes effect. Minor clarifications that do not affect your rights may be made without advance notice.

Your continued use of 3rrm after a Policy update takes effect constitutes acceptance of the revised Policy. If you do not agree with a material change, you have the right to close your account and request deletion of your data (subject to the retention obligations described in Section 8).

13. Contact & Data Enquiries

For any question about this Privacy Policy, to exercise your data rights, or to report a privacy concern, contact the 3rrm data team directly:

Email: support@3rrm.ws
Response time: Acknowledged within 2 business hours, resolved within 30 days

When contacting us about a data rights request, please provide your registered mobile number (do not include your password) and a clear description of the request. Identity verification will be required before personal data is disclosed or amended.

For non-privacy queries — such as betting disputes, payment issues, or account questions — use the live chat option available when you are logged in to your 3rrm account for the fastest response.