Privacy Policy – k1login Pakistan Online Betting Platform

This Privacy Policy applies to the k1login platform, accessible at k1login.bet. k1login is an online sports betting and casino platform serving players in Pakistan. Throughout this document, "k1login", "we", "us", and "our" all refer to the platform operator responsible for your data.

k1login acts as the data controller for personal information collected through the registration and use of accounts on the platform. This means we determine the purposes for which your personal data is processed and the manner in which it is handled. We take this responsibility seriously and are committed to protecting your privacy in all the ways described in this document.

k1login collects personal data in several ways — information you provide directly when registering or using the platform, data generated automatically when you interact with our services, and in some limited cases, information received from third parties for identity verification purposes.

Information you provide directly to k1login:

• Full legal name as it appears on your CNIC (Computerised National Identity Card)
• Date of birth — used to confirm you meet the minimum age requirement of 18 years
• Pakistani mobile phone number — for account access, OTP verification, and security alerts
• Email address — for account communications and transactional notifications
• Account password — stored only as a one-way cryptographic hash; not visible to any staff member
• Identity documents such as CNIC copy, proof of address, or payment method ownership documents when requested for verification
• Payment details including mobile wallet numbers (Easypaisa, JazzCash, NayaPay, SadaPay), bank account details for IBFT, and masked Visa/Mastercard numbers
• Communications you send to k1login's support team via live chat or email

Data collected automatically when you use k1login:

• IP address and approximate geographic location derived from it
• Device type, model, and operating system (e.g., Android version)
• Browser type and version
• Session data including login times, pages visited, and features used
• Betting history — all bets placed, stakes, odds, outcomes, and settlement details
• Deposit and withdrawal transaction history
• Responsible gaming tool usage (deposit limit settings, self-exclusion periods)
• Cookies and similar tracking technologies — detailed in Section 6

Data received from third parties:

• Identity verification results from regulated third-party KYC (Know Your Customer) service providers when we need to confirm your identity remotely
• Fraud detection signals from payment processors to help identify potentially fraudulent transactions
• Age verification data from identity verification services, confirming you meet the 18+ requirement

k1login uses your personal data for specific, legitimate purposes. We do not process your data in ways that are incompatible with the original reason it was collected. The table below sets out our key processing activities.

If you have opted in to receive promotional communications from k1login, we will send you relevant offers, odds boosts, and promotions based on your betting preferences and activity. You can withdraw this consent at any time by updating your communication preferences in your account settings or by emailing support@k1login.bet.

k1login processes your personal data on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity: Processing that is required to fulfil our obligations under the account agreement with you — including account creation, transaction processing, bet settlement, and customer support.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money-laundering requirements, age verification obligations, and data retention rules.
• Legitimate interests: Processing for purposes that serve k1login's legitimate business interests without overriding your rights — including fraud prevention, platform security, responsible gaming monitoring, and platform improvement using anonymised data.
• Consent: Processing based on your freely given, specific, informed consent — primarily for sending you marketing and promotional communications. You can withdraw this consent at any time without affecting any other aspect of your account.

k1login does not sell, rent, or trade your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, bank transfer processors, and Visa/Mastercard networks receive the minimum data necessary to process your deposit or withdrawal. These processors are bound by their own data protection obligations and are not permitted to use your data for any other purpose.
• Identity verification providers: Regulated KYC service providers may receive your identity document details to confirm your identity and age. These providers operate under strict data security and confidentiality obligations.
• Fraud prevention services: We share transaction and behavioural data with fraud detection services to protect your account and the platform from fraudulent activity. This data is handled under confidentiality agreements.
• Platform technology providers: Third-party software providers who power elements of the k1login platform — such as live casino game providers and betting data feed suppliers — may receive limited account data necessary to deliver their service. These providers are vetted for data security compliance before being engaged.
• Legal and regulatory authorities: k1login will disclose personal data to law enforcement, regulators, or courts when required to do so by applicable law, a valid court order, or a regulatory obligation. We will notify you where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of k1login's assets, your personal data may transfer to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer and your rights under this Privacy Policy will be preserved.

k1login uses cookies and similar technologies on its platform. A cookie is a small text file placed on your device by a website. Cookies allow k1login to recognise your device, remember your preferences, keep your session active while you navigate the platform, and analyse how the platform is being used.

k1login uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in while you navigate between pages, security cookies that protect against fraud and cross-site request forgery, and cookies that remember your language preference. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences and settings — such as your default sport view or display preferences — to personalise your k1login experience. Disabling these will not prevent you from using the platform but may require you to reset your preferences on each visit.
• Analytics cookies: Help k1login understand how players use the platform by collecting anonymised data about which pages are visited, how long sessions last, and which features are used most. This data is aggregated and never linked to individual players. We use this information to improve the k1login experience.
• Device fingerprinting: k1login uses device characteristics to identify and prevent multiple account creation and detect fraud. This is a security measure, not a marketing tool, and the data is not shared outside k1login's fraud prevention function.

Most web browsers and mobile devices allow you to control cookies through their settings. If you restrict or delete cookies, certain features of k1login may not function correctly. For mobile app access, equivalent local storage and session management technologies apply.

Protecting the personal data of k1login players is a technical and operational priority. We have implemented multiple layers of security across the platform:

• Transmission security: All data exchanged between your device and k1login is protected by 256-bit TLS (Transport Layer Security) encryption. This prevents any third party from intercepting or reading your data in transit.
• Storage security: Sensitive data at rest — including personal documents, payment information, and identity data — is encrypted in storage. Database access is restricted to authorised systems and personnel only.
• Password security: Your k1login password is processed through a cryptographic hashing algorithm before storage. The original password is never stored or transmitted in plain text and cannot be recovered by anyone.
• Access controls: Only k1login staff who genuinely need access to specific categories of data to perform their job functions have that access. Access logs are maintained and reviewed regularly. Staff receive data protection training as part of their onboarding and annual refresher programmes.
• Intrusion detection: k1login's infrastructure is monitored continuously for unusual access patterns, attempted breaches, and vulnerability exploits. Automated alerts are triggered for any anomalous activity.
• Regular security reviews: k1login conducts periodic security assessments including vulnerability scanning and review of access controls to identify and address potential weaknesses before they can be exploited.

k1login retains your personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply to key categories of data held by k1login:

When a retention period expires and there is no legal basis for continued storage, k1login securely deletes or anonymises the relevant data. Anonymised data — which cannot be linked back to any individual — may be retained indefinitely for aggregate statistical analysis.

As a user of k1login, you have a number of rights in relation to the personal data we hold about you. These rights are genuine and exercisable — not just words on a page. To exercise any of these rights, contact us at support@k1login.bet with "Privacy Rights" in the subject line. We will acknowledge your request within 48 hours and respond substantively within 30 days.

k1login's services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we discover that a player is under 18, their account will be permanently closed, all funds — including any winnings — will be retained, and any personal data collected will be deleted or anonymised as quickly as reasonably possible.

If you believe that a person under 18 has registered on k1login or has been using an account on the platform, please contact us immediately at support@k1login.bet. We will investigate promptly. Parents and guardians are encouraged to use device-level controls and parental supervision tools to prevent under-18s from accessing betting platforms.

The k1login platform may contain links to third-party websites or services in limited contexts — for example, responsible gaming resource pages. k1login is not responsible for the privacy practices of any third-party website. When you navigate away from k1login to another website, this Privacy Policy no longer applies and you should review the privacy policy of that site.

k1login does not host third-party advertising on the platform. Any third-party services integrated into k1login — such as live casino game providers — are governed by data processing agreements that restrict how they may use any data they receive in connection with your k1login sessions.

k1login may update this Privacy Policy from time to time as our services evolve, as applicable laws change, or as we improve the way we handle data. When material changes are made — meaning changes that affect your rights or the way your data is processed — k1login will notify you by email to your registered address and will display a prominent notice on the platform at least 7 days before the updated policy takes effect.

The date at the top of this document will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of k1login after any updated policy has come into force constitutes your acceptance of the revised terms. If you do not agree with an updated policy, you should stop using the platform and request account closure.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how k1login handles your personal information, we want to hear from you directly and resolve the matter as quickly as possible.

• Email: support@k1login.bet — include "Privacy" in the subject line for fastest routing
• Live Chat: Available within your logged-in k1login account 24 hours a day, 7 days a week, in English and Urdu
• Response time: We acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 30 days in most cases

If you have raised a privacy concern with k1login directly and you are not satisfied with the response, you have the right to escalate your complaint to the relevant data protection authority. k1login will cooperate fully with any regulatory investigation into our data handling practices.

We also encourage you to review our full Terms and Conditions for the complete set of rules governing your use of k1login, and our Responsible Gaming page for information about the tools available to help you manage your betting activity.