k1ga Privacy Policy

k1ga ("the Company," "we," "us," or "our") is committed to protecting and respecting the privacy of every individual who interacts with our online gaming platform at https://k1ga.bet ("the Platform"). This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by k1ga.

This Policy applies to all users of the k1ga Platform, including registered players in Karachi, Lahore, Islamabad, Faisalabad, and across Pakistan, as well as any visitors who browse the Platform without registering. It covers all personal data collected through the website, customer support channels, and any other point of contact between you and k1ga.

Please read this Policy carefully so that you understand our practices regarding your personal data and how we will treat it. By accessing or using the k1ga Platform, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with any part of this Policy, you should immediately cease using the Platform.

For the purposes of applicable data protection legislation, k1ga is the data controller in respect of the personal data collected and processed through the Platform. As data controller, k1ga determines the purposes for which and the means by which your personal data is processed.

k1ga operates under an internationally recognised gaming licence and is subject to the data protection and player privacy requirements imposed by its licensing authority. Our data protection practices are designed to meet or exceed the standards required by our licensing jurisdiction, and are aligned with internationally recognised data protection principles including those set out in the General Data Protection Regulation (GDPR) where applicable.

For all data protection enquiries, access requests, or complaints, the k1ga Data Protection contact is:

• Email: [email protected] (subject line: "Data Protection Request")
• Response Time: Within 30 calendar days of receipt of a verifiable request.

k1ga collects and processes the following categories of personal data, depending on your interaction with the Platform:

k1ga does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where such information is volunteered by the Player in the context of a responsible gaming or self-exclusion request, in which case it is handled with the highest level of confidentiality.

k1ga collects personal data through the following channels and mechanisms:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated technologies: As you interact with the Platform, we automatically collect Technical Data (IP address, device identifiers, browser fingerprint, session logs) using cookies, server logs, and similar tracking technologies. Please refer to Section 10 for full details of our cookie practices.
• Payment processors: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK, our payment processing partners transmit transaction confirmation data to k1ga. We receive only the minimum data necessary to reconcile transactions — we do not receive or store your full payment credentials.
• Identity verification providers: Where k1ga engages third-party KYC providers to verify your CNIC or other identity documents, those providers transmit a verified/not-verified result and the relevant identity data to k1ga.
• Fraud prevention and security systems: k1ga uses automated systems that analyse Technical Data and Gaming Data in real time to detect suspicious account activity, potential fraud, collusion, or money laundering. These systems generate derived data points that are processed alongside the data you provide directly.

k1ga processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Performance of a contract: Processing is necessary to provide you with the k1ga gaming services you have registered for, including account management, payment processing, and customer support.
• Legal obligation: Processing is required for k1ga to comply with its obligations under applicable gaming licensing requirements, anti-money laundering (AML) regulations, and Know Your Customer (KYC) obligations. This includes mandatory identity verification and the retention of transaction records.
• Legitimate interests: Processing is necessary for k1ga's legitimate interests in fraud prevention, platform security, responsible gaming compliance, and improving the quality of our services — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where k1ga seeks to process your data for optional purposes such as marketing communications, we will first obtain your explicit consent. You may withdraw this consent at any time by contacting [email protected] or using the unsubscribe mechanism in any marketing communication.

k1ga uses your personal data for the following purposes:

• To create, manage, and operate your k1ga Account, including processing deposits and withdrawals in PKR via your chosen payment method.
• To verify your identity and age (21+) through our KYC process, in compliance with our gaming licence requirements.
• To process and settle your bets and gaming transactions accurately and promptly.
• To apply and manage bonuses, promotions, and loyalty rewards to which you are entitled.
• To provide customer support and respond to your queries, complaints, and responsible gaming requests.
• To detect, investigate, and prevent fraud, money laundering, cheating, collusion, and other prohibited conduct as defined in our Terms & Conditions.
• To enforce our Terms & Conditions and Responsible Gaming Policy, including processing self-exclusion requests and deposit limit configurations.
• To comply with anti-money laundering (AML) obligations, including filing reports with relevant authorities where required by applicable law.
• To analyse Platform usage patterns and improve the performance, functionality, and content of the k1ga gaming experience.
• To send you service communications, including account activity notifications, security alerts, and policy update notices.
• Where you have provided consent, to send you promotional communications about k1ga bonuses, new games (including PSL cricket betting specials and seasonal slot promotions), and platform updates.

k1ga does not use your personal data to make solely automated decisions that produce significant legal effects on you, without providing a mechanism for human review. Where automated processes are used for fraud detection or bonus eligibility assessment, a human review is available upon request.

k1ga does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other payment partners receive the minimum data required to process your deposit or withdrawal transaction. All payment partners are contractually required to handle your data in accordance with applicable financial data protection standards.
• Identity verification providers: Third-party KYC and AML compliance service providers receive your identity documents solely for the purpose of verifying your identity and age. These providers are bound by strict data processing agreements.
• Gaming software providers: Game providers whose titles appear on the k1ga Platform may receive anonymised or pseudonymised session and gameplay data for game performance and RNG audit purposes. No directly identifiable personal data is shared with game providers without your consent.
• Fraud prevention and security services: k1ga uses industry-standard fraud detection platforms that process Technical Data and transaction patterns to identify suspicious activity. These services do not retain your data beyond the period needed for the relevant analysis.
• Legal and regulatory authorities: k1ga will disclose personal data to gaming regulators, licensing authorities, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where required to do so by applicable law, court order, or regulatory direction. k1ga will, where permitted by law, notify the affected Player of any such disclosure.
• Business transfers: In the event of a merger, acquisition, or transfer of all or a substantial part of k1ga's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. k1ga will notify affected Players of any such transfer in advance where reasonably practicable.

k1ga operates as an international online gaming platform, and some of our service providers and technology partners are located outside Pakistan. As a result, your personal data may be transferred to and processed in countries other than Pakistan.

Where such international transfers occur, k1ga ensures that adequate safeguards are in place to protect your personal data, including:

• Transfers to countries that have been assessed as providing an adequate level of data protection by the relevant regulatory authority.
• Execution of Standard Contractual Clauses (SCCs) or equivalent data transfer mechanisms with receiving parties in jurisdictions without an adequacy determination.
• Binding corporate rules or equivalent intra-group data transfer frameworks where data is transferred between affiliated k1ga group entities.

You may request details of the specific safeguards applied to international transfers of your personal data by contacting [email protected].

k1ga retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as set out in this Policy, unless a longer retention period is required by applicable law or regulation.

Following the expiry of the applicable retention period, k1ga will securely delete or anonymise your personal data in accordance with our data disposal procedures. Anonymised data (which can no longer be used to identify you) may be retained indefinitely for statistical and analytical purposes.

k1ga uses cookies and similar tracking technologies (including web beacons and local storage) on the Platform. Cookies are small text files stored on your device by your browser when you access a website. They serve several important functions on the k1ga Platform:

• Essential / Session Cookies: These are strictly necessary for the Platform to function. They maintain your login session, remember your language and display preferences, and ensure Platform security. These cookies cannot be disabled without breaking core Platform functionality.
• Performance & Analytics Cookies: k1ga uses first-party analytics to understand how players navigate the Platform, which pages are visited most, and where technical errors occur. This data is collected in aggregated, anonymised form and is used solely to improve Platform performance and user experience.
• Fraud Prevention Cookies: These cookies help k1ga's fraud detection systems identify unusual device behaviour, detect account sharing, and prevent bot-based access. They are essential for Platform security and the integrity of the gaming environment.
• Functionality Cookies: These cookies remember your preferences (such as saved deposit method) to personalise your experience on the Platform between sessions.

k1ga does not use third-party advertising or behavioural tracking cookies that follow your activity across websites other than k1ga.bet.

You can control cookie settings through your browser's privacy settings. Note that disabling essential cookies will impair your ability to use the k1ga Platform. Most browsers allow you to view, manage, and delete cookies through the settings or tools menu — refer to your browser's help documentation for specific instructions.

Subject to applicable law and our legal obligations (including AML and KYC retention requirements that may limit certain rights), you have the following rights in respect of your personal data held by k1ga:

• Right of Access: You have the right to request a copy of the personal data k1ga holds about you, along with information about how it is processed. This is commonly known as a Subject Access Request (SAR).
• Right to Rectification: If any personal data k1ga holds about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other legal basis for processing applies. Note that this right is subject to k1ga's mandatory AML and licensing retention obligations, which may require us to retain certain data for a minimum statutory period regardless of an erasure request.
• Right to Restriction of Processing: You may request that k1ga restrict the processing of your data while the accuracy of that data is being contested, or pending the outcome of an objection you have raised.
• Right to Data Portability: Where processing is based on your consent or on a contractual necessity, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to k1ga processing your personal data on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, k1ga will cease that processing immediately.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Rights Request." k1ga will respond within 30 calendar days and may ask you to verify your identity before processing the request.

If you are unsatisfied with k1ga's response to any data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority in your jurisdiction.

k1ga implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Transport Encryption: All data transmitted between your device and the k1ga Platform is encrypted using 256-bit TLS/SSL technology, ensuring that your personal and financial data cannot be intercepted in transit.
• Data at Rest Encryption: Personal data stored on k1ga servers is encrypted at rest using AES-256 encryption standards. Database access is strictly access-controlled and audited.
• Access Controls: Access to personal data within k1ga's systems is restricted on a strict need-to-know basis. Staff with authorised access undergo regular security training and are bound by confidentiality obligations.
• Penetration Testing: k1ga engages independent security specialists to conduct regular penetration testing and vulnerability assessments of our Platform infrastructure.
• Incident Response: k1ga maintains a documented data breach incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, k1ga will notify the relevant supervisory authority and affected Players in accordance with applicable law.
• Two-Factor Authentication (2FA): k1ga offers 2FA for all registered Player accounts and strongly recommends that all players enable this feature to maximise account security.

While k1ga employs industry-leading security practices, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords for their k1ga Account and to report any suspected security incidents immediately to [email protected].

The k1ga Platform is strictly intended for adults aged 21 years and over. k1ga does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the k1ga registration and KYC process, and accounts found to belong to persons under 21 will be immediately suspended and all associated data handled in accordance with k1ga's legal obligations.

If you are a parent or guardian and believe that a minor in your care has registered on or provided personal data to the k1ga Platform, please contact us immediately at [email protected]. k1ga will take prompt action to verify the claim and, where confirmed, to delete the minor's data and close the account.

The k1ga Platform integrates with a number of third-party services that are necessary for the delivery of our gaming services. These include game software providers, payment processing partners, identity verification services, and platform analytics tools. Each of these third parties operates under their own privacy practices and data protection agreements with k1ga.

k1ga conducts due diligence on all third-party service providers before engagement and requires each provider to execute a Data Processing Agreement (DPA) that obligates them to:

• Process personal data only on k1ga's documented instructions and for no other purpose.
• Implement appropriate technical and organisational security measures commensurate with the sensitivity of the data processed.
• Not engage sub-processors without prior written authorisation from k1ga.
• Assist k1ga in responding to data subject rights requests within the required timeframes.
• Delete or return all personal data to k1ga upon termination of the service relationship.

k1ga does not permit third-party service providers to use your personal data for their own commercial purposes, including marketing to you directly, without your explicit consent. The k1ga Platform does not contain any third-party advertising networks or social media tracking pixels that collect your data for purposes unrelated to the delivery of k1ga's gaming services.

Please note that links to third-party websites (where provided) are not covered by this Privacy Policy. k1ga accepts no responsibility for the privacy practices of external websites. We encourage you to review the privacy policy of any third-party website you visit.

k1ga reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Effective Date" displayed at the top of this page.
• Post a prominent notice on the k1ga Platform informing registered Players of the update.
• Where the changes materially affect your rights or the way we process your personal data, send a direct notification to your registered email address at least 14 days before the changes take effect.

Your continued use of the k1ga Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated version of this Policy, you should cease using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Privacy Policy periodically to stay informed about how k1ga is protecting your personal data. Previous versions of this Policy are available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k1ga handles your personal data, please do not hesitate to get in touch with our Data Protection team:

• Email: [email protected]
• Subject Line: "Privacy Policy Enquiry" or "Data Rights Request" as applicable
• Response Time: We aim to respond to all privacy-related enquiries within 5 business days, and to all formal data rights requests within 30 calendar days.

For responsible gaming-related privacy matters, including requests related to self-exclusion records or problem gambling support data, please use the subject line "Responsible Gaming – Privacy Request" so that your query is directed to the appropriate team immediately.