K1 Login Privacy Policy – How We Protect Your Data

This Privacy Policy applies to all players who access K1 Login through our website at k1login.app, the Android app, or the iOS Progressive Web App. It describes how K1 Login collects, processes, stores, and protects the personal data of players based in Pakistan and elsewhere.

By registering an account or using any feature of the K1 Login platform, you acknowledge that you have read and understood this policy and consent to the data practices described here. This policy should be read alongside our Terms and Conditions and Responsible Gaming page, both of which form part of your agreement with us.

We keep this policy updated. Whenever something meaningful changes, we revise the "Last reviewed" date at the top of this page. If a change significantly affects how your data is used, we will notify you through your registered email address or via an in-platform notice.

The information we collect falls into three categories: information you provide directly, information generated by your use of the platform, and information received from third parties.

Information you provide directly:

• Full name, date of birth, gender (where provided)
• Email address and phone number
• Home address (required for identity verification at withdrawal stage)
• Government-issued CNIC, passport, or other identity documents submitted for KYC verification
• Payment method details (account numbers, mobile wallet IDs, bank details) — these are handled by our payment processors and not stored in raw form on our servers
• Profile preferences and communication preferences

Information generated by platform use:

• Login timestamps, session duration, and device information
• IP address and approximate geographic location
• Gameplay history including bet amounts, game types played, wins and losses
• Transaction history — deposits and withdrawals in PKR
• Support chat transcripts and email correspondence
• Bonus and promotion activity

Information from third parties:

• Identity verification results from KYC/AML screening providers
• Payment confirmation data from JazzCash, Easypaisa, Raast, bank processors and card networks
• Fraud risk signals from anti-fraud services

We use your personal data only for clear, legitimate purposes. Here is a straightforward breakdown of what we do with it and why:

• Account management: To create, maintain, and secure your K1 Login account, authenticate logins, and respond to account-related requests.
• Processing transactions: To handle deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast, bank transfer, and other supported methods. Transaction data is essential for accurate record-keeping and dispute resolution.
• Identity verification (KYC): To verify that you are who you say you are, confirm you meet the minimum age requirement of 18, and comply with anti-money laundering obligations. This is a standard requirement for any financial services platform.
• Fraud prevention and security: To detect unusual account activity, prevent unauthorised access, identify multiple-account abuse, and protect the financial integrity of the platform.
• Improving platform experience: To understand how players use K1 Login — which games are popular, where players run into difficulties, and how the app performs on different devices — so we can make meaningful improvements.
• Customer support: To assist you when you contact us via Live Chat or email, resolve disputes, and follow up on open issues.
• Responsible gaming monitoring: To track gameplay patterns and identify signs of problem gaming behaviour, so we can offer appropriate support and tools in line with our Responsible Gaming policy.
• Marketing communications: To send you information about promotions, bonuses, and platform updates — but only if you have opted in. You can unsubscribe from marketing emails at any time through your account settings or by contacting support.

We do not use your personal data to make automated decisions that significantly affect you without human oversight. Fraud detection flags are reviewed by our compliance team before any account action is taken.

K1 Login does not sell your personal data. We share it only where necessary, and only with parties who are required to handle it responsibly. The categories of third parties who may receive your data are:

• Payment processors: JazzCash, Easypaisa, Raast, banking partners, and card networks receive the transaction data necessary to process your PKR deposits and withdrawals. These providers operate under their own privacy and data security obligations.
• Identity verification providers: KYC and AML screening services receive your identity documents and personal details solely to verify your identity and check against financial crime databases. Results are returned to us and documents are not retained by these providers beyond their contractual obligations.
• Game software providers: Third-party providers who supply our Live Casino tables, Slot Games, and sports betting markets may receive pseudonymised player data (such as a player ID and gameplay data) necessary to run those games correctly.
• Fraud prevention services: Anti-fraud and cybersecurity providers receive technical data such as IP addresses and device fingerprints to help us identify suspicious activity.
• Legal and regulatory authorities: Where we are legally required to share data — for example, in response to a valid legal order or in connection with an investigation of financial crime — we will comply. We will notify affected players where we are legally permitted to do so.

All third-party providers are contractually required to use your data only for the purposes for which it was shared, to apply appropriate security measures, and not to share it further without our consent.

K1 Login processes all player transactions in PKR. When you make a deposit or request a withdrawal using JazzCash, Easypaisa, Raast, bank transfer, or a card, the payment details you enter are handled directly by the relevant payment processor through an encrypted connection.

K1 Login does not store your full payment credentials (such as bank account numbers, complete card numbers, or mobile wallet PINs) on our own servers. What we retain is a transaction reference, the payment method type, the amount, and the timestamp — the minimum needed to maintain accurate account records and process withdrawals back to the correct method.

If you believe there has been an unauthorised transaction on your K1 Login account, contact support immediately. Do not initiate a chargeback with your bank or payment provider before contacting us — initiating a chargeback while funds are active in your account is a breach of our Terms and Conditions and we will work with payment providers to contest fraudulent chargebacks.

K1 Login uses cookies and similar tracking technologies to make the platform work properly and to understand how players interact with it. Here is what we use and why:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences, and keep your account secure. You cannot opt out of these without stopping use of the platform.
• Analytics cookies: We use first-party analytics to understand how players navigate the platform — which pages are visited most, where users drop off, and how the mobile app performs. This data is aggregated and not tied to individual identities.
• Functional cookies: These remember settings like your preferred language, game lobby filter, and notification preferences so you do not have to reconfigure them every session.

K1 Login does not use third-party advertising cookies or share browsing data with ad networks. You can manage cookie preferences through your browser settings. Blocking essential cookies will affect your ability to log in and use the platform normally.

We keep your personal data for as long as your account is active and for a period after closure as required by our legal and financial record-keeping obligations. In practice this means:

• Active accounts: Data is retained throughout the lifetime of your account plus a standard post-closure period of at least five years, which is typical for platforms handling financial transactions.
• KYC documents: Identity verification records are retained for the duration required by applicable anti-money laundering obligations. These may be retained beyond standard account closure timelines.
• Transaction records: Deposit and withdrawal records in PKR are retained for a minimum of five years from the date of the transaction.
• Support correspondence: Chat transcripts and email records related to disputes or account issues are retained for at least two years, or longer if an issue remains unresolved.
• Marketing data: If you have opted in to marketing communications, we retain your marketing preferences until you opt out. Unsubscribing removes you from mailing lists but does not delete your account data.

When data is no longer needed, it is securely deleted or anonymised so it can no longer be linked back to you.

Protecting your data is something we invest in continuously. The security measures we apply include:

• SSL/TLS encryption on all data in transit between your device and our servers.
• Encrypted storage for sensitive fields including passwords (which are hashed, never stored in plain text) and identity document references.
• Access controls that restrict internal access to player data to authorised staff only, based on their job role.
• Session security including automatic logout after periods of inactivity and device session management so you can see and terminate active sessions.
• Fraud monitoring that flags unusual login patterns, rapid account changes, or suspicious transaction behaviour for review.
• Regular security reviews of platform infrastructure and third-party integrations.

Despite these measures, no internet-based platform can guarantee absolute security. If you have reason to believe your account has been compromised, change your password immediately and contact our support team.

As a K1 Login player, you have the following rights over your personal data. To exercise any of these rights, contact our support team via Live Chat or email — we aim to respond to all data requests within 30 days.

Please note that some rights are subject to legal and regulatory obligations — for example, we cannot delete transaction records that we are required to retain by anti-money laundering rules. Where a request cannot be fully fulfilled, we will explain why.

K1 Login is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of our standard registration process, and we may request additional proof of age at any point.

If you are a parent or guardian and believe that a minor has created an account or provided personal information on K1 Login, please contact our support team immediately. We will investigate promptly and take appropriate action, which will include account closure and secure deletion of any data collected from the minor.

K1 Login reviews this Privacy Policy on a regular basis to make sure it remains accurate and reflects any changes in how we operate or in applicable data protection standards. When we make changes, we update the "Last reviewed" date at the top of this page.

For material changes — meaning changes that meaningfully affect how your data is collected or used — we will notify active players via their registered email address or through an in-platform notification before the changes take effect.

Continued use of K1 Login after any update to this policy constitutes your acceptance of the revised terms. If you disagree with an update, you may request account closure by contacting support before the new policy takes effect.

If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, please get in touch with our support team. We are available around the clock and aim to respond to all data-related queries within 24 hours.

• Live Chat: Available within the platform after logging in to your account — typically the fastest way to reach us.
• Email: [email protected] — include your registered email address and the nature of your query so we can assist you efficiently.

For data deletion or access requests, please contact us via email with the subject line "Data Request" and include your full name and registered account email. We will acknowledge your request within 72 hours and aim to complete it within 30 days.