k1ga Privacy Policy — How We Collect, Use, and Protect Your Personal Data

This Privacy Policy is published by k1ga, the online gaming and sports betting platform accessible at k1ga.bid. k1ga operates under an international gaming licence and is the data controller responsible for the personal data of all players who register and use the k1ga platform.

In this Privacy Policy, "k1ga", "we", "us", and "our" refer to the k1ga platform and its operating entity. "You" and "your" refer to any individual who visits, registers on, or uses the k1ga platform, including Pakistani players accessing k1ga from Karachi, Lahore, Faisalabad, Islamabad, and any other location.

If you have any questions about this policy, how k1ga processes your data, or wish to exercise any of your privacy rights, please contact us at [email protected].

This Privacy Policy applies to all personal data processed by k1ga in connection with:

• Your registration for and use of a k1ga account.
• Your use of any gaming service on the k1ga platform, including cricket betting, slot games, live dealer tables, Dragon Gate, Bird Catcher, and any other product offered by k1ga.
• All deposits and withdrawals made through k1ga using Pakistani payment methods including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, SadaPay, and USDT TRC20.
• Communications between you and the k1ga support team, whether by email, live chat, or any other channel.
• Your visits to the k1ga website, including browsing activity captured through cookies and analytics tools.

This policy does not apply to third-party websites or services that may be linked to or from the k1ga platform. k1ga is not responsible for the privacy practices of third parties.

k1ga collects the following categories of personal data in connection with your use of the platform:

k1ga collects personal data through the following means:

• Direct provision by you: Data you provide when registering an account, completing KYC verification, making a deposit, contacting support, or completing any other interaction with k1ga that requires your input.
• Automated technical collection: Data collected automatically when you access the k1ga platform, including IP address, device identifiers, browser characteristics, and usage data collected via cookies, analytics tools, and server logs.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, and other payment providers when you make a deposit or withdrawal — specifically the payment reference number, amount, and confirmation status.
• Identity verification providers: Data received from third-party identity verification and AML screening services used to validate documents submitted during KYC, and to screen players against sanction lists and politically exposed person (PEP) databases.
• Game providers: Technical game round data received from certified game providers whose content is made available on the k1ga platform, including bet amounts, outcomes, and session data.

k1ga uses the personal data we hold about you for the following purposes:

• Account management: Creating, maintaining, and administering your k1ga account, processing your k1ga Login, managing your PKR wallet balance, and providing access to all gaming services.
• Identity and age verification: Confirming your identity and verifying that you are at least 21 years of age, as required by k1ga's international gaming licence and responsible gaming obligations.
• Processing transactions: Facilitating deposits and withdrawals through your chosen Pakistani payment method, reconciling transactions, and investigating any payment disputes or errors.
• Regulatory compliance: Meeting k1ga's obligations under its gaming licence, including anti-money laundering (AML) monitoring, sanctions screening, reporting obligations to the licensing authority, and responding to lawful requests from regulatory bodies and law enforcement agencies.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, managing self-exclusion requests, and applying the deposit and loss limits you have set on your account.
• Customer support: Responding to your enquiries, resolving account issues, processing complaints, and maintaining records of support interactions.
• Platform security and fraud prevention: Detecting, investigating, and preventing fraud, money laundering, identity theft, account compromise, and other prohibited activities.
• Platform improvement: Analysing aggregated, anonymised usage data to understand how players use k1ga, identify technical issues, and improve the platform's design, performance, and game offering.
• Marketing communications: Sending you promotional offers, bonus notifications, and relevant updates about k1ga's services, where you have consented to receive such communications. You may opt out of marketing at any time.

k1ga processes your personal data on the following legal bases:

• Contract performance: Processing necessary to create and operate your k1ga account and deliver the gaming services you have requested — including account management, payments, and k1ga Login functionality.
• Legal obligation: Processing required to comply with k1ga's obligations under its international gaming licence, including KYC verification, AML monitoring, transaction reporting, and age verification.
• Legitimate interests: Processing carried out for k1ga's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — provided these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain non-essential cookie categories, where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

k1ga shares personal data only with parties where sharing is genuinely necessary to deliver the services you have requested or to comply with applicable law. The categories of recipients with whom k1ga may share your data are:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, SadaPay, and USDT TRC20 processors, for the purpose of processing your financial transactions. These providers receive only the data necessary to process each specific transaction.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity documents and perform required regulatory checks. These providers act as data processors under contractual obligations to k1ga.
• Game providers: Certified game studios and providers whose products are available on the k1ga platform. Technical gaming data (bet amounts, game sessions) is shared with providers for game round settlement and RNG audit purposes.
• Regulatory and licensing authorities: k1ga's gaming licensing authority and, where required by law, law enforcement agencies, financial intelligence units, or other regulatory bodies — when k1ga is legally obligated to disclose information.
• IT and infrastructure providers: Hosting, cloud computing, and cybersecurity service providers who process data on k1ga's behalf under strict data processing agreements and security requirements.
• Professional advisers: Legal, accounting, and audit professionals, where disclosure is necessary for k1ga to receive professional advice or to establish, exercise, or defend legal claims.

k1ga operates under an international gaming licence and, as a consequence, some personal data may be transferred to and processed in countries outside of Pakistan. This may occur when k1ga shares data with its licensing authority, international payment processors, or game providers whose servers are located outside Pakistan.

When personal data is transferred internationally, k1ga takes steps to ensure that appropriate safeguards are in place to protect your data to a standard consistent with international data protection best practice. Such safeguards may include:

• Contractual clauses in data processing agreements that impose equivalent data protection standards on the receiving party.
• Transfers to countries that have been assessed to provide an adequate level of data protection.
• Encryption of data in transit using TLS 1.2 or higher for all international data transfers.

You may request details of any specific international transfer arrangements that apply to your personal data by contacting k1ga at [email protected].

k1ga retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with the obligations imposed by k1ga's international gaming licence, and to meet any applicable statutory retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your k1ga account and for a period of five (5) years from the date of account closure, consistent with standard gaming licence AML retention requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, as required by k1ga's licensing authority. Documents are stored in encrypted form and access is strictly controlled.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, for regulatory compliance and AML audit purposes.
• Support communications: Retained for three (3) years from the date of the last interaction, to support complaint resolution and quality assurance.
• Marketing consent records: Retained for as long as you hold an active k1ga account, or until you withdraw consent, plus a reasonable period to demonstrate prior consent in the event of a complaint.
• Website usage and analytics data: Aggregated analytics data is anonymised after thirteen (13) months and retained in anonymous form for statistical purposes.

Upon expiry of the applicable retention period, data is securely deleted, destroyed, or anonymised in accordance with k1ga's data disposal procedures.

k1ga uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device that helps k1ga recognise your browser, maintain your logged-in session, and understand how the platform is used.

k1ga uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your k1ga Login state and security tokens that protect your account against cross-site request forgery. These cookies cannot be disabled.
• Performance and analytics cookies: Collect anonymised information about how visitors use the k1ga platform — including which pages are visited most frequently and any errors encountered. This data helps k1ga improve the platform experience for Pakistani players.
• Functional cookies: Remember your preferences, such as your preferred language, display settings, and whether you have acknowledged the age verification notice.
• Marketing cookies: Used to track which promotional content you have viewed and to ensure you receive relevant offers. These cookies are only deployed where you have given consent.

You can manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the k1ga platform. Detailed information about the specific cookies used by k1ga is available upon request from [email protected].

Subject to applicable law and k1ga's regulatory obligations, you have the following rights in relation to the personal data k1ga holds about you:

• Right of access: You have the right to request a copy of the personal data k1ga holds about you, together with information about how that data is processed. k1ga will respond to a verified access request within 30 calendar days.
• Right to rectification: You have the right to request that k1ga corrects any inaccurate or incomplete personal data held about you. Some corrections can be made directly through your account settings.
• Right to erasure ("right to be forgotten"): You may request that k1ga deletes your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected. Note that k1ga may be required to retain certain data for regulatory compliance purposes even following an erasure request.
• Right to restrict processing: You may request that k1ga restricts the processing of your personal data in specified circumstances, for example while a correction request is being resolved.
• Right to data portability: You may request that k1ga provides your personal data in a structured, commonly used, machine-readable format, where processing is based on your consent or contract performance and is carried out by automated means.
• Right to withdraw consent: Where k1ga processes your data based on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting support or updating your account communication preferences.
• Right to object: You have the right to object to k1ga's processing of your personal data where such processing is based on legitimate interests, including for direct marketing purposes.

To exercise any of the above rights, please contact k1ga's data team at [email protected] with the subject line "Privacy Rights Request". k1ga may request proof of your identity before processing any such request to protect your data against unauthorised disclosure.

k1ga implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and k1ga's servers is encrypted using TLS 1.2 or higher (256-bit SSL), including all k1ga Login sessions and financial transactions.
• Encryption at rest: Sensitive data stored on k1ga's servers — including KYC documents, payment method details, and passwords — is encrypted at rest using industry-standard encryption algorithms.
• Password hashing: Account passwords are never stored in plain text. k1ga uses a strong one-way cryptographic hash function to store password credentials, meaning your actual password cannot be recovered even by k1ga staff.
• Access controls: Access to player data is restricted to authorised k1ga personnel on a strict need-to-know basis. All data access is logged and subject to periodic access review.
• Intrusion detection: k1ga's systems are monitored for unusual access patterns, login anomalies, and potential security threats on a continuous basis.
• Regular security testing: k1ga conducts periodic security assessments and penetration testing of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data breach response: In the event of a confirmed personal data breach that poses a risk to your rights and freedoms, k1ga will notify affected players promptly and will report the breach to the relevant supervisory authority as required by the terms of our gaming licence.

k1ga's services are strictly intended for individuals aged 21 and above. k1ga does not knowingly collect personal data from anyone under the age of 21. As part of the account registration and KYC process, k1ga requires all players to confirm their age and, before any withdrawal is processed, to verify their identity with a government-issued document.

If k1ga discovers or is notified that it has inadvertently collected personal data from a person under the age of 21, k1ga will:

• Immediately suspend the affected account.
• Delete or destroy all personal data associated with the account as soon as is reasonably practicable, subject to any minimum retention requirements under k1ga's licensing obligations.
• Return any deposited funds to the payment source from which they originated.
• Report the incident to the relevant licensing authority as required.

If you have reason to believe that a person under the age of 21 has registered an account on k1ga, please notify us immediately at [email protected].

k1ga reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or k1ga's data processing practices. The date of the most recent revision is shown at the top of this page.

Where changes to this Privacy Policy are material — meaning they affect the nature of how k1ga processes your data or your rights in relation to that data — k1ga will notify registered players by email and/or through a notice on the platform at least seven (7) calendar days before the changes take effect.

Your continued use of the k1ga platform after any revised Privacy Policy takes effect constitutes your acknowledgement of the updated policy. If you do not accept the revised terms, you should cease using k1ga and request account closure before the effective date.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way k1ga processes your personal data, please contact us through any of the following channels:

• Email: [email protected] — use the subject line "Privacy Enquiry" for the fastest routing to our data team.
• Live Chat: Available 24/7 from within your logged-in k1ga account. Suitable for general privacy questions.
• Privacy Rights Requests: To submit a formal access, correction, erasure, or portability request, email [email protected] with the subject line "Privacy Rights Request" and include your registered email address or account username for identity verification purposes.

k1ga is committed to addressing all privacy enquiries promptly and transparently. We aim to respond to all privacy-related email enquiries within five (5) business days and to complete formal rights requests within thirty (30) calendar days of receiving adequate identity verification.