k1ga – Privacy Policy

1. Who We Are & Data Controller

k1ga is an online casino and sports betting platform operating at k1ga.app. For the purposes of this Privacy Policy, k1ga acts as the data controller in respect of the personal data of its registered players and website visitors. As data controller, k1ga is responsible for determining the purposes and means of processing personal data collected through the platform.

This policy applies to all personal data collected by k1ga through the website, mobile web interface, customer support interactions, KYC verification processes, and payment transactions. It does not apply to third-party websites or services linked from or integrated within k1ga's platform, each of which operates under its own privacy policy.

2. What Data We Collect

k1ga collects the following categories of personal data in connection with the provision of its services:

2.1 Registration & Identity Data

• Full legal name as it appears on your CNIC;
• Date of birth;
• Pakistani mobile number;
• Email address;
• CNIC number and copies of identity documents submitted during KYC;
• Residential address (where provided or required for verification).

2.2 Financial & Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, and payment methods used;
• JazzCash or Easypaisa wallet identifiers linked to your account;
• Bank account details submitted for bank transfer withdrawals (HBL, UBL, Meezan Bank, Bank Alfalah);
• PKR balance history.

2.3 Gaming & Betting Activity Data

• Wager history including game titles, bet amounts, outcomes, and timestamps;
• Sports betting selections and live betting activity;
• Session duration and login/logout timestamps;
• Responsible gaming settings and limit history.

2.4 Technical & Device Data

• IP address;
• Device type, operating system, and browser;
• Cookies and session identifiers;
• Referring URL and navigation paths within the platform.

2.5 Communication Data

• Records of customer support interactions including emails, chat logs, and support tickets;
• Responses to surveys or feedback requests, where voluntarily provided.

3. How We Collect Your Data

k1ga collects personal data through the following means:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account profile;
• Automated collection: Technical data including IP address, device identifiers, and cookies are collected automatically when you access the k1ga platform;
• Payment providers: Transaction confirmation data is received from JazzCash, Easypaisa, and bank payment systems when processing deposits and withdrawals;
• Game providers: Aggregated or pseudonymised session data may be received from k1ga's game software providers for the purpose of resolving disputes and confirming game outcomes;
• Identity verification services: Third-party KYC services may process your CNIC and identity document data on k1ga's behalf.

4. How We Use Your Data

k1ga uses your personal data for the following purposes:

• Creating and managing your k1ga account, including authentication and security;
• Verifying your identity and age in accordance with KYC requirements;
• Processing deposits, withdrawals, and other financial transactions in PKR;
• Delivering the gaming and sports betting services you have requested;
• Administering bonuses, promotions, and loyalty rewards;
• Detecting and preventing fraud, money laundering, and prohibited conduct as described in the Terms & Conditions;
• Providing and improving customer support services;
• Monitoring and enforcing responsible gaming limits and self-exclusion requests;
• Communicating with you regarding your account, transactions, and important policy updates;
• Complying with applicable legal and regulatory obligations;
• Analysing platform usage in aggregate to improve performance and user experience.

k1ga does not use your personal data to make automated decisions that produce legal or similarly significant effects on you without human review, except as required for fraud detection and KYC verification where permitted by applicable law.

5. Legal Basis for Processing

k1ga processes your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the k1ga gaming and betting services to you as a registered player, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable anti-money laundering, KYC, and fraud prevention obligations;
• Legitimate interests: Processing for fraud detection, platform security, abuse prevention, and service improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing for non-essential communications and marketing where you have provided explicit consent, which you may withdraw at any time by contacting k1ga support.

6. Data Sharing & Third Parties

k1ga shares personal data with third parties only in the circumstances described below. k1ga does not sell personal data to third parties for their own marketing purposes.

6.1 Service Providers

k1ga engages third-party service providers to perform functions necessary to operate the platform. These providers act as data processors on k1ga's behalf and are contractually required to process data only for the specified purpose and in accordance with k1ga's instructions. Categories of service providers include: payment processing providers, identity verification and KYC services, game software providers, cloud hosting and infrastructure providers, and customer support platforms.

6.2 Legal & Regulatory Disclosure

k1ga may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, lawful order, or in connection with the investigation of fraud, money laundering, or other criminal activity.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or a material part of k1ga's business, your personal data may be transferred to the successor entity as part of that transaction. You will be notified of any such transfer via the platform or by email where practicable.

7. International Data Transfers

k1ga operates with infrastructure and service providers that may be located outside Pakistan. Where personal data is transferred to jurisdictions that may not have equivalent data protection standards to those you are accustomed to, k1ga implements appropriate safeguards including contractual data processing agreements, standard contractual clauses, or equivalent measures to ensure that your data is protected to a standard consistent with this Privacy Policy.

8. Data Retention

k1ga retains personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by applicable law. In general:

• Account registration and KYC data is retained for a minimum of five years following account closure to comply with anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of five years;
• Gaming activity logs are retained for a minimum of three years for dispute resolution purposes;
• Customer support communications are retained for a minimum of two years;
• Technical data such as IP logs is retained for a period proportionate to its security purpose, typically 12 months.

Following the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with your identity.

9. Your Rights as a Data Subject

Subject to applicable law and k1ga's legitimate obligations, you have the following rights in respect of your personal data:

• Right of access: Request a copy of the personal data k1ga holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations and active contract requirements;
• Right to restrict processing: Request that k1ga limits the processing of your data in certain circumstances;
• Right to data portability: Request a machine-readable copy of personal data you have provided to k1ga, where technically feasible;
• Right to object: Object to processing based on k1ga's legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact k1ga support using the email address registered on your account. k1ga will respond to data subject requests within a reasonable timeframe. In some cases, k1ga may need to verify your identity before processing a data request.

10. Cookies & Tracking Technologies

k1ga uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that allow the platform to recognise you across sessions and provide core functionality.

10.1 Essential Cookies

Essential cookies are required for the platform to function and cannot be disabled without disrupting core services. These include session authentication cookies that keep you logged in, security tokens, and load-balancing cookies. k1ga processes essential cookies on the basis of contract performance.

10.2 Analytics Cookies

k1ga uses analytics cookies to measure aggregate usage of the platform – such as which pages are visited most frequently and where players spend time in the lobby. This data is used in anonymised or pseudonymised form to improve the platform experience. You may disable analytics cookies through your browser settings without affecting your ability to use k1ga's core features.

10.3 Managing Cookies

Most browsers allow you to refuse or delete cookies through the browser's settings menu. Disabling essential cookies will affect your ability to log in and use k1ga. Please refer to your browser's help documentation for instructions on managing cookies.

11. Security Measures

k1ga implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and k1ga's servers;
• Encrypted storage of sensitive data including passwords (which are hashed and not stored in plaintext);
• Restricted internal access to personal data on a need-to-know basis;
• Two-factor authentication available for player accounts;
• Regular security monitoring and vulnerability assessments;
• Incident response procedures for potential data breaches.

Notwithstanding k1ga's security measures, no method of internet transmission or electronic storage is completely secure. k1ga cannot guarantee absolute security of personal data and is not liable for breaches resulting from factors outside its reasonable control. Players are advised to use strong, unique passwords and to enable two-factor authentication on their k1ga accounts.

12. Children's Privacy

k1ga is strictly an 18+ platform. k1ga does not knowingly collect personal data from individuals under the age of 18. If k1ga becomes aware that personal data has been collected from a minor, it will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on k1ga, please contact support immediately so that appropriate action can be taken.

13. Changes to This Policy

k1ga reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, platform operations, or data processing practices. Where material changes are made, k1ga will provide notice via the platform or by email to your registered address. The "Last updated" date at the top of this policy reflects the most recent revision. Continued use of k1ga after the effective date of any revision constitutes acceptance of the updated policy.