// Data Protection & Privacy — 3rcom Platform

3rcom Privacy Policy — How We Handle Your Personal Data

At 3rcom, your privacy is treated as a foundational obligation, not a regulatory checkbox. This Privacy Policy explains precisely what personal information we collect from Pakistani members, how it is used, who we share it with, how long we keep it, and what rights you hold over your own data. Please read this document carefully before registering or using any 3rcom service.

Last Revised: January 2026 Governing Language: English International Licensing Jurisdiction Applies To: All 3rcom Members — PK

Six Principles That Guide How 3rcom Handles Your Data

Before reading the full legal text, these six cards summarise the privacy principles that govern every data-processing decision at 3rcom — from the moment you register your Pakistani mobile number through to account closure.

Data Minimisation — We Only Take What We Need

3rcom collects only the personal data that is strictly necessary to operate your account, process your payments, verify your identity, and comply with our licensing obligations. We do not harvest data for commercial resale. Your CNIC details are used for KYC only — not for profiling, targeted advertising sales, or any purpose outside account management and regulatory compliance.

Strong Security — Encrypted at Every Layer

All data transmitted between your device and 3rcom's servers is protected by 256-bit SSL encryption. Sensitive data at rest — including CNIC images, payment method details, and authentication credentials — is encrypted using industry-standard AES-256 protocols. 3rcom undergoes regular independent security audits. No employee has routine access to member financial credentials or CNIC documents without a formal access log entry.

Purpose Limitation — Your Data Stays in Its Lane

Data you provide to 3rcom for one purpose — such as your JazzCash number submitted for a deposit — will not be repurposed for something unrelated without explicit notification and, where required by applicable law, your specific consent. Your payment method details are used for transactions and fraud prevention only — not for sending marketing SMS from third-party partners.

Defined Retention Periods — Not Kept Forever

3rcom retains personal data for defined periods tied to regulatory requirements and operational necessity. Active account data is retained for the duration of membership plus a mandatory post-closure period required by licensing obligations (typically 5 years). Transaction records and KYC documents are retained as required under anti-money laundering regulations. Data no longer required for any legitimate purpose is securely deleted.

Your Rights Are Actionable — Not Just Listed

3rcom respects your rights as a data subject — including the right to access your data, correct inaccuracies, request deletion (subject to legal retention obligations), and object to certain processing activities. These rights can be exercised by contacting the 3rcom Data Privacy team via the support channel. Requests are acknowledged within 5 business days and resolved within 30 days where applicable law permits.

No Sale of Personal Data — Full Stop

3rcom does not sell, rent, or commercially trade personal data belonging to registered members or site visitors. Where we share data with third parties — such as payment processors, identity verification providers, or game suppliers — such sharing is governed by binding data processing agreements and limited strictly to what is necessary for the specified operational purpose. Pakistani members' data is never sold to marketing brokers or data aggregators.

1. Who We Are & Scope of This Policy

Data Controller: 3rcom is the data controller in respect of personal data collected through the 3rcom platform. For data privacy queries, contact our support team via live chat or at [email protected].

Cross-Border Data: As an internationally licensed platform, 3rcom's data processing operations may involve servers and third-party processors located outside Pakistan. Appropriate safeguards are in place for all cross-border data transfers.

2. Data We Collect

// Data Categories & Sensitivity
Data Type Sensitivity Status
Full Name Medium Required
CNIC Number High Required
Mobile Number Medium Required
Email Address Low Optional
Date of Birth Medium Required
JazzCash/EasyPaisa No. High Required
Transaction History High Auto-Logged
IP Address Medium Auto-Logged
Device / Browser Low Auto-Logged
Selfie (KYC) High Required

3. How We Collect Your Data

4. Legal Basis for Processing

Consent Withdrawal: If you have consented to receiving promotional SMS or email communications from 3rcom, you may withdraw that consent at any time by contacting live chat support. Withdrawal of consent for marketing does not affect the lawfulness of any processing that occurred prior to withdrawal.

AML Obligations: 3rcom's KYC and transaction monitoring processing is legally required under anti-money laundering regulations applicable to licensed gaming operators. These obligations cannot be waived by individual member request or consent withdrawal.

5. How We Use Your Data

6. Data Sharing & Third Parties

Never Sold: 3rcom categorically does not sell, rent, or commercially trade personal data belonging to registered members or website visitors to marketing agencies, data brokers, or any third party for commercial gain.

DPA Protection: All third parties who receive personal data from 3rcom are required to sign a Data Processing Agreement (DPA) before any data transfer occurs. DPAs bind third parties to the same data handling standards that 3rcom applies internally.

PK Payment Partners: Transfers to JazzCash, EasyPaisa, and Pakistani banks are governed by the State Bank of Pakistan's data handling regulations in addition to 3rcom's own data processing agreements with each provider.

7. Cookies & Tracking Technologies

// Cookie Retention Reference
Cookie TypeRetentionCategory
Session Token Session / 30d Essential
CSRF Protection Session Essential
Device Fingerprint 90 Days Security
Login IP Log 12 Months Security
Analytics (agg.) 13 Months Analytics
UI Preferences 12 Months Preference

Browser Control: Most modern browsers allow you to view, manage, and delete cookies through their settings menus. Clearing cookies will log you out of 3rcom and reset any preference cookies stored on your device.

8. Data Retention

9. Security Measures

10. Your Rights as a Data Subject

As a data subject whose personal data is processed by 3rcom, you hold the following rights. These rights can be exercised by submitting a request through 3rcom's live chat support channel or via email. Requests are acknowledged within 5 business days.

01
Right of Access

You have the right to obtain confirmation of whether 3rcom processes your personal data and, if so, to receive a copy of that data together with information about how it is used. Requests will be responded to within 30 days of verification of identity.

02
Right to Rectification

You have the right to request correction of any inaccurate personal data held by 3rcom. Where data is incomplete, you have the right to have it completed. Identity verification may be required before corrections are made to sensitive data fields.

03
Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent and no other legal basis applies. This right is subject to mandatory retention obligations — data required by AML or licensing regulations cannot be deleted on request.

04
Right to Restrict Processing

You may request that 3rcom restrict processing of your data in specific circumstances — for example, while the accuracy of data you have contested is being verified. During a restriction period, 3rcom may store but not actively use the relevant data.

05
Right to Object

You have the right to object to processing based on legitimate interests grounds, including profiling for responsible gaming monitoring purposes. 3rcom will cease such processing unless compelling legitimate grounds override your objection, or the processing is necessary for legal claims.

06
Right to Data Portability

Where processing is based on consent or contractual necessity and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to request its transfer to another controller where technically feasible.

11. Children & Age Verification

Your Data Is Safe. Your Experience Is Ours to Deliver.

3rcom is built on trust — trust that withdrawals land when expected, that PSL odds are fair, and that your personal data is handled with the care it deserves. Explore the platform with confidence.

21+ only. Gambling involves financial risk. Please play responsibly. Responsible Gaming →