Privacy Policy – 3 Card One Gaming Platform Pakistan

01 Who We Are

3 card one (referred to as "we", "us" or "our" throughout this policy) operates the online gaming platform accessible at 3cardone.win. The platform provides sports betting — with a focus on Cricket, PSL, T20 internationals and Football — as well as Fish Games, Bingo, the Game Lobby and related features, all available to adult users in Pakistan.

This Privacy Policy applies to all personal data collected when you visit 3cardone.win, register an account, make a deposit or withdrawal in PKR, play any game, use the 3 card one mobile app, or contact our customer support team. By using the platform, you acknowledge that you have read and understood this policy.

02 Data We Collect

We collect personal data in three ways: information you give us directly, information generated automatically when you use the platform, and information received from third-party payment and verification providers.

Information you provide directly:

• Full name, date of birth and gender (at registration)
• Email address and mobile number
• CNIC number and a copy of your CNIC or other ID document (when identity verification is required)
• Payment method details such as your JazzCash or Easypaisa account number (not full card numbers — see Section 04)
• Messages and attachments you send to customer support
• Any other information you choose to add to your account profile

Information collected automatically:

• IP address and approximate location (city/region level)
• Device type, operating system and browser version
• Pages visited, games played, bets placed and session duration
• Login timestamps and account activity logs
• Cookie and tracking data (see Section 05)

Information from third parties:

• Payment confirmation and transaction reference numbers from JazzCash, Easypaisa, Raast and bank transfer processors
• Identity verification results from document verification services where applicable
• Fraud risk signals from payment network providers

03 How We Use Your Data

Every piece of data we collect is used for a specific, legitimate purpose. The table below sets out the main uses and the reason we rely on each one.

We do not use your data for automated decision-making that produces significant legal effects without human review. Where our systems flag an account for review — for example due to unusual betting patterns or a failed verification check — a member of our team reviews the case before any action is taken.

04 Payment Data & PKR Transactions

All deposits and withdrawals on 3 card one are processed in Pakistani Rupees (PKR). The platform supports JazzCash, Easypaisa, Raast, bank transfers, debit and credit cards, and other mobile wallets. Here is exactly how payment data is handled:

• JazzCash and Easypaisa: We store only your registered mobile wallet number to enable withdrawals to the correct account. Your wallet PIN or password is never requested or stored by us.
• Bank transfers: We store your bank account title and account number to process withdrawals. Full bank login credentials are never collected.
• Cards: Card payments are processed directly through a PCI-DSS compliant payment gateway. We receive only a payment confirmation and masked card reference (last four digits). Full card numbers are never stored on 3 card one servers.
• Transaction records: We retain records of all deposits and withdrawals — including amounts in PKR, timestamps and references — for financial record-keeping and to resolve any disputes.

05 Cookies & Tracking Technologies

3 card one uses cookies and similar tracking technologies to make the platform work correctly, to remember your preferences and to understand how users navigate the site so we can keep improving it.

Types of cookies we use:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language setting, preferred payment method and game display options. These improve your experience but are not strictly essential.
• Analytics cookies: Used to understand how users interact with the platform — which pages are visited most, how long sessions last and where users encounter issues. This data is aggregated and not linked back to individuals.
• Security and fraud-detection cookies: Help identify unusual device behaviour or access patterns that could indicate account compromise or automated abuse.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using the platform, but some features may not work as smoothly. Essential and security cookies cannot be disabled as they are necessary for the platform to operate safely.

06 Data Sharing & Third Parties

3 card one does not sell, rent or trade your personal data. We share data with third parties only in the following limited circumstances:

• Payment processors: JazzCash, Easypaisa, Raast and our card payment gateway receive only the data needed to process your transaction — typically your wallet number or masked card reference, the amount in PKR and the transaction reference.
• Identity verification providers: Where third-party document verification services are used, your ID document data is shared with that provider solely for the purpose of verification and is not retained by them beyond the verification process.
• Fraud prevention and security services: We may share device fingerprint data and IP addresses with security service providers to detect and prevent fraudulent account activity.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics platforms to help us understand platform performance. This data cannot be used to identify individual users.
• Legal obligations: We may disclose personal data when required to do so by a valid legal process, court order or other binding legal obligation. We will notify you of such requests where legally permitted to do so.

All third-party service providers who handle your data are required by contract to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared. They are not permitted to use your data for their own marketing or any other purpose.

07 Data Retention

We retain your personal data for as long as your account is active and for a defined period afterwards to comply with financial, legal and operational obligations. The general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for up to five years after account closure to meet financial record-keeping requirements.
• Transaction records (PKR deposits and withdrawals): Retained for up to seven years in line with standard financial compliance obligations.
• Customer support communications: Retained for up to two years after the support case is closed, in case of subsequent related queries or disputes.
• Analytics and session data: Aggregated analytics data is retained for up to two years. Raw session logs are typically retained for up to 90 days.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever comes first.

Once the applicable retention period has expired, data is securely deleted or irreversibly anonymised so it can no longer be linked to you as an individual. If you request early deletion of your account data, we will delete what we can immediately and flag any data that must be retained for legal reasons with an explanation of how long it will be kept.

08 Data Security

Protecting your personal data is a core operational priority for 3 card one. The security measures we have in place include:

• HTTPS encryption on all pages and API endpoints — all data in transit between your device and our servers is encrypted.
• Password hashing using industry-standard algorithms — your password is never stored in a readable format.
• Access controls — internal access to personal data is restricted to staff who require it to perform their role, and all access is logged.
• Regular security reviews and vulnerability testing of the platform.
• Two-factor authentication available for account holders to add an extra layer of protection to their login.
• Monitoring of account activity for patterns consistent with unauthorised access or credential stuffing attacks.

Despite these measures, no online system can guarantee absolute security. If you become aware of any security issue affecting your account — such as an unrecognised login or a change to your account details that you did not make — contact customer support immediately so your account can be secured.

09 Your Rights Over Your Data

You have the following rights in relation to the personal data 3 card one holds about you. To exercise any of these rights, contact our support team with your account username and a description of your request.

10 Children's Privacy

3 card one is strictly an adults-only platform. You must be at least 18 years old to register an account or use any feature of the platform. We do not knowingly collect personal data from anyone under the age of 18.

During registration we collect your date of birth and require identity verification specifically to confirm that you meet the minimum age requirement. If we discover that an account has been created by or for a person under 18, we will close the account immediately, reverse any transactions where possible and delete the personal data associated with that account.

If you are a parent or guardian and believe your child has created an account on 3 card one, contact our support team immediately. We will investigate and take action as quickly as possible.

11 Changes to This Privacy Policy

3 card one may update this Privacy Policy from time to time to reflect changes in how we handle data, updates to the platform's features, or changes in applicable legal requirements. When we make material changes, registered users will be notified via email or an in-platform notification.

The "Last updated" date at the top of this page will always reflect when the most recent version was published. We encourage you to check this page periodically so you are always aware of how your data is being used. Continued use of the platform after an update constitutes your acceptance of the revised policy.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how your personal data has been handled, please reach out to our support team. We aim to respond to all privacy-related queries within 72 hours.

[email protected]

When contacting us about a data request, please include your registered account username, the email address associated with your account, and a clear description of your request. For identity verification purposes we may ask you to confirm some account details before processing a data access or deletion request.

For concerns related to your account security, responsible gaming tools or self-exclusion, you can also visit the Responsible Gaming page or the FAQ for further guidance.