Privacy Policy — 3cardone
Version 2.4 · July 2025
1Who We Are and How to Reach Us
3cardone is an online gaming and sports betting platform operated under the brand name 3cardone, serving players in Pakistan. The platform is accessible at 3cardone.app and offers casino games, slot games, live dealer games, Andar Bahar, Ludo, jackpot slots, and sports betting — all denominated in Pakistani Rupees.
For the purposes of this Privacy Policy, 3cardone is the data controller — meaning we are responsible for deciding how and why your personal data is collected and processed. If you have any questions about this policy or want to exercise any of your data rights, you can contact us at:
Email: support@3cardone.app
Platform: 3cardone.app
Support Hours: 24 hours a day, 7 days a week
2Data We Collect
3cardone collects personal data in three ways: information you provide directly when registering or using the platform, information generated automatically through your use of the platform, and information received from third parties in the course of identity verification or payment processing.
2.1 Information You Provide Directly
When you register a 3cardone account or interact with our platform, you may provide us with the following types of personal data:
Full name
Date of birth
Email address
Mobile number
City / Province
CNIC / Passport number
Payment wallet IDs
Support messages
Providing inaccurate information at registration is a breach of our Terms and Conditions. Identity documents provided for verification are used only for the purpose of confirming your identity — they are not retained beyond the period required by our regulatory obligations.
2.2 Information Collected Automatically
When you use the 3cardone platform, our systems automatically record certain technical and behavioural information. This includes:
- IP address and approximate geographic location derived from it.
- Browser type, browser version, and operating system.
- Device type (mobile, tablet, desktop) and screen resolution.
- Pages visited on 3cardone, time spent on each section, and navigation paths.
- Game session data — games played, duration, bet sizes, and outcomes.
- Login timestamps and account activity logs.
This data is used for platform security, fraud prevention, responsible gaming monitoring, and improving the 3cardone user experience. It is not used to target you with advertising from third parties.
2.3 Information from Third Parties
In limited circumstances, 3cardone receives personal data from third-party sources — specifically from identity verification providers during the KYC (Know Your Customer) process, and from payment processors confirming transaction details. We do not purchase or receive marketing lists from third parties.
3How We Use Your Data
3cardone uses personal data for the following specific purposes. We do not use your data for any purpose not listed here:
| Purpose |
Data Used |
Why This Is Necessary |
| Account creation and management |
Name, email, mobile number, date of birth |
To create and maintain your 3cardone account and verify eligibility |
| Processing PKR transactions |
Payment wallet IDs, bank details, transaction amounts |
To process deposits and withdrawals accurately and securely |
| Identity verification (KYC) |
CNIC, passport, date of birth |
To comply with anti-money-laundering requirements and confirm age |
| Fraud prevention and security |
IP address, login logs, device data, transaction patterns |
To detect and prevent fraudulent account activity |
| Responsible gaming monitoring |
Game session data, deposit patterns, activity frequency |
To identify signs of problem gaming and enforce player-set limits |
| Customer support |
Account details, correspondence history |
To resolve queries and provide accurate assistance |
| Platform improvement |
Aggregated behavioural and usage data (anonymised) |
To improve game performance, navigation, and features |
| Marketing communications (optional) |
Email address, game preferences |
To send promotional offers — only with your explicit opt-in |
4Legal Basis for Processing
Every time 3cardone processes your personal data, we do so on one of the following legal bases:
- Contractual necessity — Processing required to fulfil the service agreement between you and 3cardone. This covers account management, payment processing, and customer support.
- Legal obligation — Processing required to comply with applicable law, including anti-money-laundering regulations, identity verification requirements, and financial record-keeping obligations.
- Legitimate interests — Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interest in protecting users and the platform does not override your privacy rights.
- Consent — Processing for optional marketing communications. You can withdraw consent at any time through your account settings or by emailing us. Withdrawal of marketing consent does not affect your account or the other processing described above.
3cardone never processes your data for purposes that are not listed in this policy and never on the basis of pure commercial interest in a way that overrides your fundamental privacy rights.
5Payment Data and Financial Information
Because 3cardone processes PKR deposits and withdrawals, we necessarily handle financial information. Here is exactly how payment data is treated on our platform:
Easypaisa and JazzCash: Transactions are processed via the official APIs provided by Telenor Microfinance Bank (Easypaisa) and Jazz Payments (JazzCash). 3cardone does not receive or store your mobile wallet PIN or full account credentials. We receive only the transaction confirmation reference and the mobile number associated with the transaction.
Debit and credit cards: Card transactions on 3cardone are processed by a PCI-DSS Level 1 certified payment processor. 3cardone does not receive or store your full card number, CVV, or card expiry date. The payment processor passes only a transaction token and confirmation status to our platform.
Bank transfers / IBFT: When you deposit via bank transfer, we receive your bank account name and account number as part of the transfer record. This is retained for a period of five years as required by financial record-keeping obligations and then securely deleted.
Transaction history: A record of your deposit and withdrawal history on 3cardone is maintained in your account and is accessible to you at any time through the account dashboard. This record is retained for the duration of your account plus five years post-closure.
3cardone will never ask for your Easypaisa or JazzCash PIN, your full card number, or your online banking password via email, chat, or any other channel. If you receive such a request claiming to be from 3cardone, treat it as fraudulent and contact us immediately.
6Cookies and Tracking Technologies
3cardone uses cookies and similar tracking technologies to operate the platform, analyse usage patterns, and maintain your session while you are logged in. Here is what each type of cookie does:
Essential Cookies
These cookies are strictly necessary for the platform to function. They maintain your login session, remember your game preferences within a session, and enable security features that protect your account. You cannot opt out of essential cookies without disrupting the platform's operation.
Analytics Cookies
3cardone uses first-party analytics to understand how players navigate the platform — which sections are visited most, where users encounter difficulty, and how game categories perform. This data is aggregated and anonymised before analysis. We do not use third-party advertising analytics networks that track your behaviour across other websites.
Performance Cookies
These cookies help us identify technical performance issues — slow-loading pages, failed transactions, or error states — so we can fix them. They collect technical data about your session without identifying you personally.
Managing Cookies
You can control cookie settings through your browser preferences. Disabling essential cookies will affect your ability to log in and use the platform normally. Disabling analytics or performance cookies will not affect your ability to play or make transactions. Browser-level cookie instructions are available in the help documentation of Chrome, Safari, Firefox, and other major browsers.
7Third-Party Data Sharing
3cardone does not sell, rent, or trade personal data. The only circumstances in which we share your data with third parties are the following:
- Payment processors — We share transaction data with Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors strictly to process your deposits and withdrawals. These providers are governed by their own privacy policies and are bound by our data processing agreements.
- Identity verification providers — For KYC compliance, we work with accredited identity verification services that cross-check the documents you submit against official databases. Data shared for this purpose is not retained by the verification provider beyond the time needed to complete the check.
- Regulatory and law enforcement bodies — We are legally required to share certain information with financial intelligence authorities and law enforcement agencies where required by applicable law, a court order, or a regulatory obligation. We will only share the minimum data necessary to comply with such a requirement.
- Technology and infrastructure providers — 3cardone uses hosting, cloud storage, and security providers to operate the platform. These providers act as data processors under contracts that prohibit them from using your data for any purpose other than providing the agreed service to 3cardone.
In all cases of third-party data sharing, 3cardone remains responsible for ensuring that your data is treated in accordance with this Privacy Policy. If any third-party partner suffers a security breach that affects your data, we will notify you as required by applicable law.
8Data Security Measures
3cardone implements technical and organisational security measures that are appropriate to the risk level associated with the data we hold. Our current security infrastructure includes:
TLS ENCRYPTION
All data transmitted between your device and 3cardone is encrypted with TLS 1.2 or higher. This covers login, game play, and all financial transactions.
Protection level: 98%
ENCRYPTED AT REST
Personal data stored on our servers is encrypted at rest using AES-256 standard encryption. Database access is restricted to authorised staff with role-based access controls.
Protection level: 95%
ACCESS CONTROLS
Access to player personal data within 3cardone's internal systems is restricted to staff whose role requires it. All internal access is logged and regularly audited.
Protection level: 92%
BREACH RESPONSE
In the event of a confirmed data breach that creates a risk to player rights, 3cardone will notify affected players within 72 hours of becoming aware of the incident.
Response readiness: 90%
While 3cardone takes all reasonable steps to protect your personal data, no internet-based system can guarantee absolute security against all possible threats. You also have a role to play — keeping your 3cardone login credentials confidential and using a strong, unique password significantly reduces the risk of unauthorised access to your account.
9How Long We Keep Your Data
3cardone does not retain personal data for longer than is necessary for the purposes described in this policy. The following retention periods apply:
| Data Category |
Retention Period |
Reason |
| Account registration data |
Duration of account + 5 years post-closure |
AML and financial record-keeping obligations |
| Transaction records |
5 years from transaction date |
Legal and regulatory compliance |
| Identity verification documents |
5 years from submission date |
AML regulatory requirement |
| Game session logs |
2 years from session date |
Dispute resolution and fair play verification |
| Customer support correspondence |
2 years from last communication |
Support quality and dispute resolution |
| Marketing consent records |
Duration of consent + 1 year post-withdrawal |
Evidence of consent basis |
| Technical / system logs |
90 days |
Security monitoring and fraud detection |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be used to identify you. Anonymised, aggregated data may be retained for analytical purposes indefinitely.
10Your Rights Over Your Personal Data
As a 3cardone player based in Pakistan, you have the following rights in relation to your personal data. These rights can be exercised by contacting us at support@3cardone.app at any time, free of charge:
You have the right to request a copy of all personal data that 3cardone holds about you. We will provide this in a clear, readable format within 30 days of your request. This includes account details, transaction history, game session summaries, and any correspondence we hold. For straightforward requests, there is no charge. If your request is complex or repetitive, we may charge a reasonable administrative fee — we will tell you before proceeding.
If any personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it. You can update most account details directly through your 3cardone account settings. For corrections that require document verification — such as a name change supported by a CNIC — contact our support team who will process the update within 14 days.
You can request deletion of your personal data at any time. However, this right is subject to our legal retention obligations — we cannot delete transaction records or identity documents within their mandatory retention period. Data that is not subject to legal retention will be deleted within 30 days of a valid erasure request. Requesting erasure will result in the closure of your 3cardone account — any remaining balance will be returned to your registered payment method before closure.
Where 3cardone processes your data on the basis of your consent or a contract with you, you have the right to receive that data in a structured, commonly used, machine-readable format (such as CSV or JSON). This allows you to transfer your data to another service provider if you wish. Submit your portability request by email to support@3cardone.app — we will fulfil it within 30 days.
You can object to processing carried out on the basis of legitimate interests — such as certain analytics activities — at any time. You can also withdraw consent for marketing communications at any time through your account settings or by emailing us. Objecting to or withdrawing consent for processing that is strictly necessary for your account (such as payment processing or KYC) is not possible without closing the account, as this processing is required to provide the service.
11Children's Privacy
3cardone is strictly for adults aged 18 years and older. We do not knowingly collect personal data from individuals under the age of 18. All registration requests are subject to age verification processes, and accounts found to belong to minors are closed immediately with any deposited balance returned to the source payment method.
If you believe that a minor has registered on 3cardone using false information, please contact us at support@3cardone.app immediately. We take reports of underage access seriously and will investigate within 24 hours of notification.
Parents and guardians: Please ensure your 3cardone login credentials are not accessible to minors in your household. Consider using device-level parental controls to restrict access to gaming platforms on shared devices.
12Updates to This Privacy Policy
3cardone may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the platform's features. When we make updates, we will revise the "Last Updated" date shown at the top of this page.
For material changes — those that significantly affect how your personal data is used or your rights in relation to it — we will notify registered players by email at least 14 days before the changes take effect. This gives you the opportunity to review the changes and, if you disagree, to request account closure and data deletion before the new policy comes into force.
Minor updates — such as clearer wording for an existing practice, corrections to typographical errors, or the addition of a new payment method to the data categories list — may be made without advance notice beyond the updated date on this page. We recommend reviewing this policy periodically to stay informed of how 3cardone handles your data.
13Contact Us and Data Complaints
If you have questions about this Privacy Policy, want to exercise any of your data rights, or believe that 3cardone has mishandled your personal data, please contact us directly in the first instance:
Email: support@3cardone.app
Response time: Within 24 hours for standard queries; within 72 hours for formal data rights requests
Language: English preferred, but we understand Pakistani users' natural mix of English and Urdu
We take privacy complaints seriously and aim to resolve them within 30 days. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.
All data rights requests submitted to 3cardone are handled personally by our privacy team — not by automated systems. You will receive a human response confirming receipt of your request within 24 hours of submission.
