Privacy policy

This privacy policy describes how 3Patti Master Vip ("we", "us", "the platform") collects, uses, stores and shares personal data of users of the 3pattimaster.vip website and the 3Patti Master Vip Android application. It is written to comply with the Digital Personal Data Protection Act (DPDPA) 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011.

1. Data we collect

• Identity data: phone number (mandatory), name, date of birth, PAN number (collected only at first withdrawal under Indian financial rules).
• Contact data: email address (optional), state of residence (mandatory to apply state-level legal restrictions).
• Financial data: UPI handle, bank account number and IFSC code (collected only for withdrawals), transaction history within the platform.
• Technical data: device identifier, Android version, IP address, app version, anonymised crash reports.
• Gameplay data: games played, bets placed, wins and losses, session duration, responsible-play limit choices.

2. How we use your data

We process personal data for the following purposes, each with a specific lawful basis under DPDPA 2023:

• Account creation and authentication (contract performance).
• Processing deposits and withdrawals (legal obligation under RBI prepaid-wallet rules).
• Calculating and remitting TDS on winnings (legal obligation under Income Tax Act Section 194BA).
• Detecting fraud, multi-accounting and bonus abuse (legitimate interest).
• Improving game balance and platform performance (legitimate interest).
• Sending transactional notifications via SMS and email (contract performance).
• Marketing communications — only where you have explicitly consented (consent).

3. Data storage and retention

All personal data is stored on Indian-resident servers operated by AWS Mumbai (ap-south-1) and managed under our DPDPA Data Fiduciary obligations. Retention periods:

• Identity and contact data: retained for the lifetime of the active account, plus seven years after account closure as required by Indian financial record-keeping rules.
• Transaction data: seven years from transaction date per Income Tax Act archive requirements.
• Technical and gameplay data: 24 months from collection, then anonymised aggregates only.

4. Sharing your data

We share personal data only with the following categories of recipients:

• Payment processors (NPCI for UPI, partner banks for IMPS/NEFT) — strictly for transaction processing.
• SMS and email gateway providers — only the minimum data needed to deliver notifications.
• Government authorities — when legally compelled by a written order under the Code of Criminal Procedure, Income Tax Act, or Information Technology Act 2000.
• Auditors and legal advisors under strict confidentiality undertakings.

We do not sell personal data. We do not share personal data with advertising networks or analytics providers outside of anonymised aggregate metrics.

5. Your rights under DPDPA 2023

As a Data Principal you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction and erasure: request correction of inaccurate data, or erasure (subject to legal retention obligations).
• Right to grievance redressal: contact our grievance officer for any complaint, with a guaranteed response within 30 days.
• Right to nominate: nominate another individual to exercise your rights in the event of death or incapacity.
• Right to withdraw consent: at any time, for any processing based on consent (note: withdrawal does not affect lawful processing already completed).

6. Grievance officer

Under DPDPA 2023 Section 13 and IT Rules 2011 Rule 5(9), we have designated a Grievance Officer:

Rahul Kapoor
Email: [email protected]
Response time: within 30 days of receipt of a complete grievance request.

7. Cookies and tracking

The 3pattimaster.vip website uses essential cookies only (session, login state, preference cookies). We do not use third-party advertising cookies or cross-site tracking. The Android app does not use any tracking SDK that shares device identifiers with advertising networks.

8. Security measures

Personal data is protected by TLS 1.3 in transit, AES-256 at rest, and access controls limited to authorised personnel. Privileged actions are logged and audit-trailed. We follow industry-standard practices for vulnerability management and patch cadence. In the event of a personal-data breach affecting Indian users, we will notify both affected users and the Data Protection Board of India within 72 hours of detection, as required under DPDPA 2023.

9. Children and minors

3Patti Master Vip is strictly an 18+ platform. We do not knowingly collect personal data from minors under 18. Age is verified at registration and at the first withdrawal. Any account discovered to belong to a minor is immediately suspended; any balance is refunded to the original deposit source.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app and on this page, with a fresh "Last updated" date. Continued use of the platform after the effective date of a change constitutes acceptance of the updated policy.