Privacy Policy – k1login Pakistan Online Betting Platform

This Privacy Policy explains how k1login ("we", "us", "our"), the operator of the online betting and gaming platform at k1login.net, collects, uses, stores, and protects the personal data of players and visitors based in Pakistan. It applies to all users who access k1login through any device — including smartphones, tablets, and desktop computers.

At k1login, we understand that Pakistani players share personal information with us because they trust us to handle it responsibly. That trust is not something we take lightly. This policy is written in plain language — not dense legal jargon — so that any k1login player in Pakistan can understand exactly what happens to their data from the moment they land on the platform to the moment they close their account.

By creating a k1login account and using our services, you agree to the collection and use of your data as described in this Privacy Policy. This policy should be read alongside our Terms and Conditions and our Responsible Gaming policy, both of which are part of the same user agreement framework.

k1login collects personal data in three ways: data you provide directly when registering or using the platform, data generated automatically by your device and browsing activity, and data received from third-party verification or payment service providers as part of our compliance obligations.

k1login does not collect sensitive personal data such as religious beliefs, political views, or health information unless specifically required by law. Full card numbers are never stored by k1login — payment processing is handled by certified third-party payment processors, and k1login only retains a truncated reference.

Every piece of data that k1login collects is collected for a specific, legitimate purpose. We do not collect data "just in case" — each category in the table above corresponds to a real operational need. The primary uses of your data on k1login are:

• Account management: Creating and maintaining your k1login account, verifying your identity, and ensuring the correct person is accessing the account at all times.
• Transaction processing: Accepting deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, and Visa/Mastercard, and processing PKR withdrawal requests to your nominated account.
• Service delivery: Enabling access to all k1login features — cricket betting, PSL betting, esports betting, Aviator game, Andar Bahar, slots, and promotions — and personalising your experience based on your activity.
• Fraud prevention and security: Detecting and preventing unauthorised access, duplicate account creation, payment fraud, bonus abuse, and money laundering. This includes automated screening of account activity against known risk patterns.
• Legal and regulatory compliance: Fulfilling age verification, anti-money-laundering (AML), and know-your-customer (KYC) obligations. Maintaining records as required by applicable law.
• Responsible gaming: Monitoring player activity for signs of problem gambling and applying self-exclusion, deposit limits, or other protective measures when requested or when our responsible gaming systems flag concern.
• Customer support: Using your account and transaction history to assist you efficiently when you contact k1login's support team.
• Marketing communications (optional): Sending promotional offers, bonus notifications, and platform updates via email or SMS — only where you have opted in. You can opt out at any time from your account settings.

k1login does not use your data for any purpose beyond those listed above without obtaining your prior consent. We do not use your data to build advertising profiles for resale to third-party marketers.

k1login processes your personal data on one or more of the following legal grounds, depending on the purpose for which the data is being used:

• Contractual necessity: Processing your registration data, payment data, and transaction data is necessary to fulfil the service agreement between you and k1login — i.e., to operate your account, accept your bets, and pay out your winnings.
• Legal obligation: Identity verification (KYC), age verification, and anti-money-laundering (AML) checks are required by applicable regulatory obligations. k1login cannot legally operate the platform without performing these checks.
• Legitimate interests: Fraud detection, security monitoring, and responsible gaming monitoring are carried out on the basis of k1login's legitimate interest in operating a safe and fair platform. These uses are balanced against your privacy interests and are limited to what is necessary for those purposes.
• Consent: Marketing communications are sent only where you have provided explicit opt-in consent. This consent can be withdrawn at any time by updating your communication preferences in your k1login account settings.

k1login does not sell your personal data to third parties under any circumstances. Your data may be shared with the following categories of third-party service providers, strictly for the purpose of operating the k1login platform:

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card payment processors receive the payment details necessary to process your transactions. They are bound by their own privacy and security obligations and do not use your data for any purpose beyond transaction processing.
• Identity verification providers: Third-party KYC and age verification services receive the identity documents you submit during verification. These providers process your documents securely and return a verification result to k1login without retaining the originals beyond what their own legal retention obligations require.
• Game software providers: Casino and game providers — such as Pragmatic Play, PG Soft, Hacksaw Gaming, and others — receive the minimum data required to deliver game sessions to your account. These providers operate under certified gaming licences and maintain their own data protection obligations.
• Cloud and infrastructure providers: k1login uses cloud infrastructure providers to host the platform. These providers access server data as part of infrastructure operation but are contractually prohibited from using that data for any other purpose.
• Legal and regulatory authorities: k1login may be required to disclose personal data to law enforcement, financial intelligence authorities, or regulatory bodies when legally obligated to do so. k1login will notify affected players of such disclosures where legally permitted to do so.

All third parties with whom k1login shares personal data are contractually required to maintain appropriate technical and organisational security measures and to process your data only for the specific purposes for which it was shared. k1login does not transfer personal data to countries with materially weaker data protection standards without ensuring appropriate safeguards are in place.

k1login uses cookies and similar technologies on the platform. Cookies are small text files stored on your device that help the platform function correctly and improve your experience. Understanding what cookies k1login uses — and what each one does — is part of our commitment to transparency.

k1login does not use third-party advertising cookies or tracking pixels that build profiles for external ad networks. The analytics data we collect is anonymised and used only to improve the platform experience for Pakistani players. You can manage cookie preferences through your browser settings at any time — however, disabling essential cookies may impair the functionality of your k1login account.

Protecting the personal and financial data of Pakistani players is a core operational priority at k1login. The platform employs a comprehensive set of technical and organisational security measures, including:

• 256-bit SSL/TLS encryption: All data transmitted between your device and k1login's servers is encrypted using the same standard used by banks and financial institutions globally. The padlock icon in your browser confirms this encryption is active.
• Two-factor authentication (2FA): Available on all k1login accounts and strongly recommended. 2FA adds a second layer of verification beyond your password, significantly reducing the risk of unauthorised access.
• Access control: Access to personal data within k1login's internal systems is restricted on a strict need-to-know basis. Only staff whose role requires access to specific data categories can view that data — and all access is logged.
• Regular security audits: k1login conducts regular penetration testing and security audits of its platform infrastructure and code. Identified vulnerabilities are patched on a priority basis.
• Secure data centres: k1login's data is hosted in certified secure data centres with physical security controls, redundant infrastructure, and regular independent security assessments.
• Fraud detection systems: Automated systems monitor account activity in real time for signs of fraud, account takeover, or unusual transaction patterns, triggering alerts or temporary restrictions where warranted.

Despite these measures, no digital platform can guarantee absolute security. If you suspect that your k1login account has been accessed without your authorisation, contact support immediately at support@k1login.net. k1login will respond to any confirmed security incidents promptly and will notify affected players in accordance with applicable law.

k1login retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to legal minimum retention periods. The general retention periods applied to each data category are:

• Account and registration data: Retained for the duration of your active k1login account plus 5 years after account closure, in compliance with AML and financial record-keeping obligations.
• Transaction and betting records: Retained for 7 years after the transaction date, in line with standard financial record-keeping requirements.
• Identity verification documents: Retained for 5 years after account closure or last verification event. Document copies are stored in encrypted storage with restricted access.
• Support communications: Retained for 3 years from the date of the communication, to allow for complaint resolution and service improvement analysis.
• Technical and log data: Typically retained for 12 months for security monitoring and performance analysis purposes, after which it is anonymised or deleted.
• Marketing preference records: Retained for as long as your account remains active, or until you withdraw consent — whichever comes first.

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be attributed to you. Anonymised, aggregated data may be retained indefinitely for statistical and business analysis purposes — but this data cannot be used to identify any individual player.

As a k1login player, you have meaningful rights over your personal data. These rights can be exercised by contacting support@k1login.net with your registered account details and a description of your request. k1login will acknowledge all rights requests within 3 business days and aim to fulfil them within 30 days.

To exercise any of the above rights, email support@k1login.net with the subject line "Privacy Rights Request" and include your registered mobile number and a clear description of your request. k1login will not charge a fee for reasonable requests and will respond within the timelines above.

k1login is strictly an adults-only platform. No person under the age of 18 is permitted to create an account or use any part of the k1login service. We do not knowingly collect any personal data from individuals under 18 years of age.

If k1login discovers or is notified that an account was created by a person under 18, the following actions will be taken immediately:

• The account will be suspended pending investigation.
• Any funds deposited by the minor will be returned to the payment source used for the deposit.
• All personal data associated with the underage account will be permanently deleted from k1login's systems.
• Any winnings or bonus funds generated by the underage account will be forfeited.

If you believe a person under 18 has created a k1login account — including your own child — please contact support@k1login.net immediately. k1login takes underage gambling extremely seriously and will act on all such reports as a priority. Parental control software can also be used to block access to k1login on shared or family devices.

k1login reviews and updates this Privacy Policy periodically to reflect changes in our data practices, the services we offer, or applicable regulatory requirements. When we make material changes — such as introducing a new category of data processing or a new third-party partner — we will notify active k1login players via email or an in-platform notification at least 7 days before the change takes effect.

Minor updates — such as clarifying existing language, correcting typographical errors, or updating contact information — may be made without advance notice. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of k1login after a Privacy Policy update has taken effect constitutes acceptance of the revised policy. If you do not agree with a material change to this policy, you may request account closure before the change takes effect by contacting k1login support.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to raise a concern about how k1login has handled your personal data, please contact us through one of the following channels:

• Email: support@k1login.net — use the subject line "Privacy Query" for fastest routing. We aim to respond to privacy-related emails within 24 hours.
• Live Chat: Available 24/7 from within your logged-in k1login account. For data rights requests, our support team will guide you through the process and confirm your identity before taking any action on your data.

k1login is committed to resolving all privacy concerns promptly, fairly, and transparently. If you raise a concern with us and are not satisfied with the response, you have the right to escalate your complaint to the relevant data protection authority in your jurisdiction.

We genuinely welcome feedback on our privacy practices — whether you think we're handling something well or could do better. The protection of Pakistani players' personal data is an ongoing commitment, not a box-ticking exercise, and hearing from users helps us improve.