k1ga Privacy Policy

k1ga ("we", "us", "our", "the Platform") is committed to safeguarding the privacy of all registered players and visitors. This Privacy Policy sets out in clear terms how k1ga collects, processes, stores, and protects personal information provided by users ("you", "your") of the k1ga website located at k1ga.pro and all associated pages.

This policy applies to all personal data collected through your use of the k1ga platform, including account registration, deposits and withdrawals, customer support interactions, gameplay activity, and general website browsing. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering an account or continuing to use k1ga after this policy has been published or updated, you confirm that you have read and understood how your data is processed as described herein. If you do not agree with this policy, you must cease using the k1ga platform and close your account.

k1ga collects personal data through several channels. The categories of data we collect are described below:

2.1 Registration Data

When you create a k1ga account, we collect the information you provide during the registration process, which includes:

• Full legal name as it appears on your national identity card (CNIC)
• Date of birth (used to verify that you are 21 years of age or older)
• Email address and mobile phone number
• Residential address
• Username and hashed password
• Preferred language and currency settings

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering (AML) regulations and our licensing obligations, we may request:

• A copy of your Computerised National Identity Card (CNIC) — front and back
• A selfie photograph for facial liveness verification
• Proof of address (utility bill, bank statement dated within 90 days)
• Proof of ownership of the payment method used (e.g., screenshot of JazzCash or EasyPaisa account)

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• Transaction IDs associated with JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, USDT TRC20, or Visa/Mastercard transactions
• Account balance and bonus wallet history

2.4 Gaming Activity Data

• Game session logs including game titles played, stake amounts, and outcomes
• Sports betting history including markets selected, odds accepted, and settlement results
• Session duration and login/logout timestamps
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and geolocation data (city/region level)
• Device type, operating system, and browser version
• Referring URL and pages visited within k1ga
• Cookie identifiers and session tokens

2.6 Communications Data

• Content of messages sent to k1ga customer support via live chat or email
• Responses to surveys or feedback forms you complete voluntarily
• Promotional opt-in or opt-out preferences

k1ga processes your personal data for the following specific and lawful purposes:

k1ga will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing activity.

k1ga does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with trusted third parties strictly on a need-to-know basis and only for the purposes set out in this policy:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and card processing gateways receive only the minimum transactional data required to process deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services that assist in document verification and sanctions screening. All such providers are contractually bound to process data solely on k1ga's instructions.
• Game software providers: Casino game and sportsbook providers may receive anonymised session identifiers for the purpose of delivering game content and resolving game disputes.
• Cloud infrastructure providers: k1ga uses encrypted cloud hosting services. Infrastructure providers have no access to unencrypted player data.
• Regulatory authorities: We may be required to disclose player data to licensing authorities, financial intelligence units, or law enforcement agencies when legally compelled to do so. k1ga will notify affected users where legally permitted.
• Professional advisers: Legal, accounting, and audit firms engaged by k1ga on a confidential basis as required for business operations.

All third-party data processors engaged by k1ga are required to execute data processing agreements that bind them to standards consistent with this Privacy Policy. k1ga remains responsible for ensuring that any third party handling your data does so in a manner that complies with applicable data protection law.

k1ga uses cookies and similar technologies (such as local storage tokens and session identifiers) to operate the platform and provide a personalised experience. The categories of cookies we use are as follows:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your logged-in session, remember your language preference, and ensure security tokens remain valid. These cannot be disabled without breaking core site functionality.
• Functional cookies: These remember your preferences such as currency display, game history view settings, and responsible gaming reminder intervals. They are not essential but significantly improve your experience.
• Analytical cookies: We use first-party analytics to understand aggregate patterns in how players navigate the k1ga platform, such as which pages are visited most frequently and where users encounter difficulties. This data is fully anonymised and never linked to your individual account.

k1ga does not use third-party advertising cookies, cross-site tracking pixels, or behavioural profiling technologies that build advertising profiles based on your browsing activity outside of k1ga.

You may manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use k1ga services.

k1ga retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. Our standard retention schedule is as follows:

• Account and registration data: Retained for the duration of your active account, plus a minimum of 5 years following account closure to comply with AML and licensing record-keeping requirements.
• KYC and identity documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of 5 years from the transaction date in compliance with financial record-keeping obligations.
• Gaming activity logs: Retained for 2 years from the date of the activity, or longer where required for dispute resolution or regulatory audit purposes.
• Customer support communications: Retained for 2 years from the date of the last communication in a given support thread.
• Marketing preferences and consent records: Retained for the duration of your active account and for 1 year following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised, aggregated data that can no longer identify an individual may be retained indefinitely for analytical purposes.

k1ga implements a multi-layered security architecture to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• TLS 1.3 encryption for all data in transit between your device and k1ga servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Bcrypt password hashing — your password is never stored in plaintext under any circumstances.
• Role-based access controls (RBAC) — internal staff access to player data is strictly limited to those with a verified operational need.
• Regular security audits and penetration testing by independent third-party security firms.
• Intrusion detection systems (IDS) monitoring for anomalous access patterns in real time.
• Two-factor authentication (2FA) available to all players as an additional account security layer.

Notwithstanding the above, no security system is entirely impenetrable. In the event of a data breach that poses a material risk to your rights and freedoms, k1ga will notify affected users and relevant authorities within the timeframes prescribed by applicable law.

As a k1ga user, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with a clear description of your request:

• Right of access: You may request a copy of all personal data k1ga holds about you. We will respond within 30 days of receiving a valid request.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you may request that we correct it without undue delay.
• Right to erasure ("right to be forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
• Right to restrict processing: In certain circumstances, you may request that we limit our processing of your data, for example while a dispute regarding accuracy is being resolved.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
• Right to object: You may object to processing carried out on the basis of our legitimate interests, including profiling for responsible gaming monitoring purposes.
• Right to withdraw consent: Where processing is based on your consent (e.g., promotional communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

k1ga is strictly an adult platform. Access to, and use of, k1ga is permitted only for individuals who are 21 years of age or older. We do not knowingly collect personal data from any person under the age of 21.

During registration, all users are required to declare that they meet the minimum age requirement. k1ga applies age verification checks as part of the KYC process. Where there is any doubt about a user's age, we will request documentary proof of age before allowing continued access to gaming services.

If k1ga becomes aware that personal data has been collected from a person under the age of 21, we will:

• Immediately suspend the account pending investigation.
• Permanently close the account upon confirmation that the user is underage.
• Securely delete all personal data associated with the underage account.
• Withhold or reverse any deposits or winnings associated with the account in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor in your care has created a k1ga account, please contact us immediately at [email protected] so that we can take prompt remedial action.

k1ga operates infrastructure that may involve the transfer of personal data to servers or service providers located outside of Pakistan. Where such transfers occur, k1ga ensures that appropriate safeguards are in place to protect your data to the same standard as described in this policy. Safeguards include:

• Contractual clauses requiring receiving parties to apply equivalent data protection standards.
• Transfers only to jurisdictions or processors that maintain adequate security certifications (e.g., ISO 27001, SOC 2 Type II).
• Ongoing monitoring of third-party processor compliance with data protection obligations.

k1ga will not transfer your personal data to any country or territory that does not offer an adequate level of protection for personal data without first implementing appropriate contractual or technical safeguards.

k1ga reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered users via email to the address on file and/or via a prominent notice displayed on the k1ga platform for a minimum of 14 days prior to the change taking effect.

The "Effective Date" shown at the top of this page will always reflect the date on which the current version of the policy came into force. We encourage you to review this page periodically to stay informed of how k1ga protects your personal data.

Your continued use of the k1ga platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a revised policy, you must cease using the platform and contact support to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the manner in which k1ga processes your personal data, please do not hesitate to reach out to our dedicated support team. We handle all privacy-related enquiries with priority and strict confidentiality.

Data enquiries email: [email protected]

When submitting a data-related request, please include your registered username and a clear description of your query. k1ga will acknowledge all privacy requests within 5 business days and aim to resolve them within 30 calendar days. For complex requests requiring additional verification or legal review, we will inform you of any extension to this timeline.