Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 3aslot ("we", "us", "our", "the Operator") collects, uses, stores, discloses and otherwise processes personal data relating to individuals ("you", "your", "the User", "the Player") who access or use the 3aslot platform at 3aslot.cam ("the Platform").

We are committed to handling your personal data with care, transparency and respect. This Policy has been prepared to give you a clear and complete picture of our data practices, including what information we gather, why we need it, how long we keep it and what control you have over it.

This Policy forms part of, and should be read alongside, our Terms & Conditions. By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with its terms, you must not use the Platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" — any information that identifies or can reasonably identify a living individual, either directly or indirectly, including name, email address, device identifiers and IP address.
• "Processing" — any operation performed on Personal Data, including collection, recording, storage, use, disclosure, erasure and destruction.
• "Controller" — the Operator, being the entity that determines the purposes and means of processing Personal Data.
• "Processor" — any third party that processes Personal Data on behalf of the Operator under a contractual arrangement.
• "KYC Data" — identity and document verification data collected as part of Know Your Customer compliance obligations.
• "Cookies" — small data files placed on your device by the Platform to facilitate functionality, analytics and personalisation.
• "Account" — the registered user profile created by you upon completing the registration process on the Platform.

3 Data We Collect

We collect Personal Data in three primary ways: information you provide directly, information generated by your use of the Platform, and information received from third parties.

3.1 Information You Provide

• Registration details: full legal name, date of birth, gender, residential address, email address and phone number.
• KYC documents: government-issued identification, proof of address and, where required, proof of payment method ownership.
• Financial information: deposit and withdrawal transaction records (payment credential processing is handled by certified third-party gateways).
• Communications: any messages, support requests or feedback you send to our team.
• Responsible gambling declarations: self-exclusion requests, limit-setting preferences and any problem gambling disclosures.

3.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution and language settings.
• Usage data: pages visited, games played, bets placed, session duration, click-path data and feature interactions.
• Location data: approximate geolocation derived from IP address for jurisdiction verification purposes.
• Cookie and tracking data: as described in Section 7 of this Policy.

3.3 Information from Third Parties

• Identity verification agencies: results of document and identity checks performed by third-party KYC service providers.
• Payment processors: transaction confirmation data from payment gateways.
• Fraud and AML screening services: watchlist screening results and risk scores.

4 Data Processing

We process your Personal Data for the following purposes:

5 Legal Basis for Processing

Where the Operator's licensing jurisdiction requires a stated legal basis for processing Personal Data, we rely on the following grounds:

• Contract Performance: Processing necessary to fulfil the contractual obligations set out in our Terms & Conditions, including account management, game provision and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, anti-money laundering, tax reporting and responsible gambling obligations imposed by the Operator's licence conditions.
• Legitimate Interests: Processing for fraud detection, platform security, abuse prevention and general analytics — where those interests are not overridden by your fundamental privacy rights.
• Consent: Processing for optional purposes such as marketing emails and non-essential cookies, where you have given us clear and specific consent which you may withdraw at any time.

6 Data Sharing

3aslot does not sell, rent or trade your Personal Data to third parties for commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary:

6.1 Service Providers and Processors

We engage trusted third-party service providers to assist with platform operation, including KYC and identity verification agencies, payment gateway operators, fraud and AML screening services, cloud infrastructure providers, customer support tooling and analytics platforms. All such providers are contractually bound to process data only as instructed by us and to apply appropriate security measures.

6.2 Regulatory and Legal Authorities

We may disclose Personal Data to regulatory bodies, law enforcement agencies, financial intelligence units or courts where required to do so by applicable law, by a valid legal order, or to protect the rights, property or safety of the Operator, its users or the public.

6.3 Business Transfers

In the event of a merger, acquisition, reorganisation or sale of assets involving the Operator, your Personal Data may be transferred to the successor entity. You will be notified of any such transfer and your rights with respect to your data will be maintained.

7 Cookies & Tracking Technologies

The Platform uses cookies and similar tracking technologies to deliver a functional and personalised experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
• Functional Cookies: Enable personalised features such as remembering your language preference, currency display (PKR) and responsible gambling limit settings across sessions.
• Analytics Cookies: Help us understand how users interact with the Platform — which pages are visited most, where users drop off and how features perform. Data collected is aggregated and does not directly identify individual users.
• Marketing Cookies: Used only with your explicit consent to serve relevant promotional content. You may withdraw consent at any time through your browser settings or Account preferences.

You may configure your browser to refuse or delete cookies at any time. Note that disabling strictly necessary cookies will affect your ability to access and use key features of the Platform.

8 Data Retention

We retain your Personal Data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and our licensing obligations. General retention periods are as follows:

• Account and registration data: For the duration of your Account and for a minimum of five (5) years following Account closure, as required for AML and regulatory compliance.
• KYC documents: For a minimum of five (5) years from the date of verification, or longer where required by applicable licensing or financial regulations.
• Transaction records: For a minimum of five (5) years following the transaction date.
• Support communications: For three (3) years from the date of the last communication, or longer where a dispute remains unresolved.
• Marketing preferences and opt-out records: Retained indefinitely to honour your preferences even if your Account is closed.
• Analytics and usage data: Typically aggregated and anonymised after thirteen (13) months.

When Personal Data is no longer required, it is securely deleted or anonymised in accordance with our data destruction procedures.

9 Security Measures

We apply a range of technical and organisational measures to protect your Personal Data against unauthorised access, accidental loss, alteration and destruction. These include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Encryption at rest for sensitive data categories including identity documents and financial records.
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis.
• Regular security assessments, penetration testing and vulnerability management.
• Multi-factor authentication requirements for administrative access to production systems.
• Incident response procedures with defined notification timelines in the event of a data breach.

10 User Rights

Subject to applicable law and the Operator's licensing jurisdiction, you have the following rights in relation to your Personal Data:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request correction of inaccurate or incomplete Personal Data held in your Account.
• Right to Erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations that require us to retain it.
• Right to Restriction: You may request that we restrict processing of your Personal Data in certain circumstances, such as while a dispute regarding its accuracy is resolved.
• Right to Data Portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request that we provide your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact our support team as described in Section 15. We will aim to respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days with prior notice.

11 Minors

The Platform is strictly intended for adults who are at least 18 years of age, or the higher minimum age required by the Operator's licence jurisdiction. We do not knowingly collect Personal Data from individuals under the minimum eligible age.

If we become aware that a minor has provided Personal Data to us, we will take immediate steps to delete that data and close the associated Account. If you believe that a minor has registered an Account on this Platform, please notify us immediately at [email protected].

12 International Data Transfers

The Operator and its service providers may process your Personal Data in countries outside of Pakistan and outside of the Operator's primary licensing jurisdiction. Where Personal Data is transferred internationally, we take appropriate steps to ensure that it receives a level of protection consistent with this Policy, including through the use of standard contractual clauses or equivalent data transfer safeguards with receiving parties.

By using the Platform, you acknowledge that your Personal Data may be transferred to and processed in countries that may not offer the same level of data protection as your home jurisdiction. We will always aim to implement appropriate protections irrespective of where data is processed.

13 Third-Party Links

The Platform does not include links to external third-party websites as a matter of policy. Should any reference to an external resource appear in informational content, please be aware that 3aslot has no control over, and accepts no responsibility for, the privacy practices or content of any external site. This Policy applies exclusively to data processed by the 3aslot Platform.

14 Policy Amendments

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations or Platform features. Where changes are material, we will provide reasonable notice via the Platform or by email to the address registered on your Account before the changes take effect.

The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Platform following publication of any update constitutes your acknowledgement of the revised Policy. We encourage you to review this page periodically.

15 Contact Us

If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your Personal Data, please reach out to the 3aslot support team through the following channels:

For questions relating to responsible gambling or self-exclusion, please visit our Responsible Gambling page. For full platform usage rules, see our Terms & Conditions.