k1gm Privacy Policy

This Privacy Policy describes how k1gm ("k1gm," "we," "us," or "our") collects, uses, stores, and protects personal data in connection with the operation of the k1gm online casino and sports betting platform, accessible at https://k1gm.net and through the k1gm mobile application.

k1gm is committed to handling personal data responsibly and in accordance with internationally recognised data protection principles. This policy has been written to be clear and accessible to all k1gm players, including those based in Pakistan who access k1gm's services via JazzCash, EasyPaisa, or other local payment methods.

This Privacy Policy should be read alongside k1gm's Terms & Conditions, which govern the overall use of k1gm's services and are incorporated by reference into this policy.

k1gm is the data controller responsible for the personal data collected through the k1gm platform. As data controller, k1gm determines the purposes for which personal data is collected and the means by which it is processed.

k1gm operates under international online gaming licensing standards and is subject to the data protection obligations imposed by its licensing framework, which align with internationally recognised data protection principles including those reflected in the General Data Protection Regulation (GDPR) framework.

For all data protection enquiries, requests, and complaints, players may contact the k1gm data protection team at the contact details provided in Section 15 of this policy.

k1gm collects the following categories of personal data in connection with the operation of its platform:

k1gm does not intentionally collect any special categories of sensitive personal data (such as health information, biometric data, or political opinions) unless specifically required by law or voluntarily provided by the player in the context of a responsible gaming request.

k1gm collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically from your device — when you access the k1gm platform, technical and usage data is automatically recorded by k1gm's servers and analytics systems;
• From third-party payment processors — when you make a deposit via JazzCash, EasyPaisa, or a bank transfer, the relevant payment provider shares transaction confirmation data with k1gm;
• From identity verification providers — when k1gm uses a third-party KYC service to verify your identity, that provider may share verification results and associated identity data with k1gm;
• From fraud prevention and compliance services — k1gm may receive data from third-party fraud detection and anti-money-laundering screening services as part of its regulatory compliance programme.

k1gm processes personal data for the following specific purposes:

• Account creation and management — to register your k1gm account, maintain your player profile, and authenticate your login sessions;
• Identity verification (KYC) — to verify your age (21+ requirement), identity, and eligibility to use k1gm's services in accordance with our regulatory obligations;
• Payment processing — to process your deposits and withdrawals via JazzCash, EasyPaisa, bank transfers, and other supported payment methods;
• Anti-money-laundering (AML) compliance — to monitor transactions for suspicious activity and comply with international AML obligations applicable to licensed gaming operators;
• Customer support — to assist you with account enquiries, technical issues, payment queries, and responsible gaming requests, in both English and Urdu;
• Platform security and fraud prevention — to detect, investigate, and prevent fraudulent activity, bonus abuse, account takeover attempts, and other security threats;
• Platform improvement — to analyse usage patterns, identify technical issues, and improve the k1gm product experience based on how players actually use the platform;
• Marketing and promotions — where you have consented, to send you information about k1gm promotions, bonuses, and new features via email or SMS;
• Legal and regulatory compliance — to fulfil obligations imposed by k1gm's gaming licence, applicable law, or orders from competent authorities.

k1gm processes personal data on the following legal bases, aligned with internationally recognised data protection frameworks:

• Contractual necessity — processing required to provide the k1gm service you have registered for, including account management, payment processing, and gameplay;
• Legal obligation — processing required to comply with applicable laws and regulations, including KYC, AML, and licensing requirements;
• Legitimate interests — processing necessary for k1gm's legitimate interests in fraud prevention, platform security, and service improvement, where those interests are not overridden by your data protection rights;
• Consent — processing for marketing and promotional communications, which requires your explicit opt-in consent and can be withdrawn at any time by contacting k1gm support or updating your communication preferences in account settings.

The following categories of third parties may receive personal data from k1gm in the course of normal operations:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20 processors receive the transaction data necessary to process your deposits and withdrawals;
• Identity verification providers — KYC service providers receive the identity documents and personal data necessary to complete your age and identity verification;
• Game technology providers — licensed game software providers operate RNG and live dealer infrastructure, and in some cases may process session-level data to deliver the game experience;
• Cloud hosting and infrastructure providers — k1gm uses reputable cloud infrastructure providers to host the platform, which involves storing personal data on those providers' servers under strict data processing agreements;
• Fraud prevention and AML services — specialist third-party services may screen transactions and player data for indicators of money laundering, fraud, or sanctions violations;
• Regulatory and law enforcement authorities — k1gm will disclose personal data to competent authorities where required to do so by law, court order, or regulatory direction.

All third-party service providers engaged by k1gm are contractually required to process personal data only for the specified purpose, to maintain appropriate security standards, and to refrain from using k1gm player data for their own commercial purposes.

As an international online platform, k1gm may transfer personal data to servers and service providers located outside Pakistan. Where such transfers occur, k1gm takes appropriate measures to ensure that your personal data continues to receive a comparable level of protection to that afforded under international data protection standards.

These measures include:

• Entering into data processing agreements with all international service providers that incorporate standard data protection clauses;
• Selecting service providers that operate under internationally recognised security certifications (such as ISO 27001 or SOC 2);
• Conducting due diligence on international providers to assess their data protection practices before engaging them.

By using the k1gm platform, players in Pakistan consent to the transfer of their personal data to k1gm's international hosting and service infrastructure as described in this policy.

k1gm retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or regulation. The following general retention periods apply:

• Account data and KYC documents — retained for the duration of your k1gm account and for a minimum of five (5) years following account closure, as required by AML and gaming licensing regulations;
• Transaction records — retained for a minimum of five (5) years following the date of the transaction, for regulatory and audit purposes;
• Customer support records — retained for three (3) years from the date of the interaction;
• Technical and usage data — retained for up to two (2) years, after which it is aggregated and anonymised;
• Marketing consent records — retained until consent is withdrawn, plus three (3) years thereafter for audit purposes.

Where personal data is no longer required for any lawful purpose and no legal retention obligation applies, k1gm will securely delete or anonymise that data using industry-standard methods.

k1gm implements a multi-layered approach to data security designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between players' devices and k1gm's servers;
• Encrypted storage of sensitive personal data and financial information at rest;
• Access controls limiting internal access to personal data on a strict need-to-know basis, with all access logged and auditable;
• Two-factor authentication available for player accounts and mandatory for k1gm administrative staff;
• Real-time intrusion detection and continuous monitoring of k1gm's infrastructure for security anomalies;
• Regular security assessments conducted by internal and external security specialists;
• Incident response procedures that ensure prompt action and player notification in the event of a data breach that affects player personal data.

k1gm uses cookies and similar tracking technologies on its website and mobile application to ensure proper platform functionality and to improve the player experience. The following types of cookies are used:

• Essential cookies — necessary for the k1gm platform to function. These include session authentication cookies that keep you logged in during your visit. Essential cookies cannot be disabled without impairing the platform's core functionality.
• Functional cookies — remember your preferences, such as language settings and game display options, so that you do not need to reconfigure them on every visit.
• Analytics cookies — collect anonymised usage data about how players navigate and interact with the k1gm platform. This data is used exclusively to improve platform performance and user experience.
• Security cookies — support k1gm's fraud detection and account protection systems by identifying unusual patterns of platform access.

You may manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect the availability or performance of some k1gm features. k1gm does not use third-party advertising cookies or share usage data with external advertising networks.

Subject to applicable law and k1gm's legal retention obligations, registered k1gm players have the following rights in respect of their personal data:

• Right of access — you may request a copy of all personal data k1gm holds about you. Requests will be fulfilled within 30 days at no charge;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data held by k1gm;
• Right to erasure — subject to legal retention requirements, you may request deletion of your personal data. Note that certain data must be retained for regulatory compliance purposes even after account closure;
• Right to restrict processing — you may request that k1gm restricts its processing of your personal data in certain circumstances;
• Right to data portability — you may request that k1gm provides your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent — where k1gm processes your data on the basis of consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal;
• Right to object — you may object to k1gm's processing of your personal data where that processing is based on legitimate interests.

To exercise any of these rights, please contact the k1gm support team via live chat or email. k1gm will acknowledge all data rights requests within five (5) business days and aim to fully respond within 30 calendar days. In complex cases, this period may be extended by up to a further 60 days, with prior notification to you.

k1gm enforces age verification as part of its account registration and KYC process. Players may be required to submit government-issued identification confirming their date of birth before being permitted to deposit, play, or withdraw. This is a non-negotiable requirement under k1gm's operating framework.

Parents and guardians who believe that a minor may have accessed or registered on the k1gm platform should contact the k1gm support team immediately. k1gm will investigate and take appropriate action without delay.

k1gm reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, k1gm will notify registered players via:

• A prominent notice displayed on the k1gm platform upon login;
• An email notification to the registered address on file;
• An update to the effective date shown at the top of this policy.

Continued use of the k1gm platform following notification of an updated Privacy Policy constitutes acceptance of the revised terms. If you do not accept the updated policy, you should stop using the platform and request account closure via the k1gm support team.

k1gm recommends reviewing this Privacy Policy periodically. Previous versions of this policy are available on request from the k1gm support team.

For any questions, requests, or concerns relating to this Privacy Policy or k1gm's handling of your personal data, please contact the k1gm data protection team using the details below:

• Support team: Available 24/7 via live chat on the k1gm platform (English and Urdu);
• Email: [email protected] (plain text — not a clickable link);
• Response time: All privacy-related enquiries acknowledged within five (5) business days.

If you are not satisfied with k1gm's response to a privacy complaint, you may escalate your complaint to the relevant data protection supervisory authority or gaming licensing regulator, details of which will be provided in k1gm's response to your initial complaint.