Sonic 3 Complete is a patch. To use it legally, you are technically supposed to own the original Sonic the Hedgehog 3 and Sonic & Knuckles cartridges (or the Steam versions) and apply the patch yourself. Downloading a pre-patched ROM from a random website is technically copyright infringement.
Where to buy or stream legally: