k1apk Privacy Policy

1.Who We Are

k1apk is an online casino and sports betting platform operating at k1apk.net under an internationally recognised gaming licence. k1apk provides PKR-denominated gaming services to players in Pakistan, offering casino games, live casino, sports betting (including cricket, PSL, and international fixtures), crash games (Crash Goal and Space Max), and slot games. k1apk also provides payment processing via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT.

For the purposes of this Privacy Policy, k1apk is the data controller — meaning k1apk determines the purposes and means of processing your personal data. If you have any questions about how k1apk handles your data, contact us at [email protected].

2.Personal Data We Collect

k1apk collects the following categories of personal data from players:

2.1 Identity Data

• Full legal name as shown on your Pakistani CNIC.
• CNIC number and a photograph of your CNIC (front and back) submitted during KYC verification.
• Date of birth (used to verify you meet the 21+ age requirement).
• Selfie photograph (may be required during enhanced KYC verification).

2.2 Contact Data

• Mobile phone number registered with your k1apk account (typically your JazzCash or EasyPaisa number).
• Email address registered with your k1apk account.
• City and province of residence (collected during registration for responsible gaming compliance purposes).

2.3 Financial Data

• Payment method details — for JazzCash and EasyPaisa, the registered mobile number; for bank transfers, the account holder name and bank branch city.
• Transaction history: all deposit and withdrawal records including amounts in PKR, timestamps, payment method used, and transaction reference numbers.
• Account balance history and wagering history as required for gaming licence compliance and player dispute resolution.

2.4 Technical Data

• IP address at the time of each login and each transaction.
• Device type, operating system, browser type and version.
• Device fingerprint (a unique identifier generated from device characteristics, used for fraud prevention and duplicate account detection).
• Session duration and session activity logs.
• Geolocation data (country and city level only, derived from IP address).

2.5 Behavioural Data

• Game play history: games played, bet amounts, win/loss records, session duration per game.
• Sports betting history: markets wagered on, bet types, odds accepted, outcomes.
• Responsible gaming tool usage: deposit limits set, cooling-off periods activated, self-exclusion status.
• Bonus and promotion redemption history.

2.6 Communications Data

• Records of all communications between you and k1apk support, including live chat transcripts, email correspondence, and any complaint or dispute submissions.
• Feedback and survey responses where voluntarily submitted.

3.How We Collect Your Data

k1apk collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated Collection: Technical and behavioural data collected automatically when you access and use k1apk's platform, via cookies, server logs, and device fingerprinting technologies.
• Third-Party Sources: Identity verification data may be supplemented by data from k1apk's licensed KYC verification partners where required. Payment verification data may be cross-referenced with payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast) to confirm transaction authenticity. Fraud and risk data may be received from fraud prevention service providers.

4.How We Use Your Personal Data

k1apk processes personal data for the following purposes:

5.Legal Basis for Processing

k1apk processes personal data under one or more of the following legal bases:

• Contract Performance: Processing necessary to register your account, provide gaming services, process your deposits and withdrawals, and fulfil k1apk's obligations to you as a player.
• Legal Obligation: Processing required to comply with k1apk's obligations under its international gaming licence, including KYC verification, anti-money laundering (AML) checks, responsible gaming monitoring, and regulatory reporting.
• Legitimate Interests: Processing necessary for k1apk's legitimate business interests, including fraud prevention, platform security, duplicate account detection, and platform analytics — where those interests are not overridden by your data protection rights.
• Consent: Where k1apk relies on your consent to process data (for example, for optional marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

6.Data Sharing & Third Parties

k1apk does not sell your personal data. k1apk shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

• KYC and Identity Verification Partners: Licensed identity verification providers that process your CNIC and identity documents to complete KYC checks as required by k1apk's gaming licence.
• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and cryptocurrency processing services — for the purpose of processing your deposits and withdrawals. These providers receive only the transaction data necessary to process each transaction.
• Fraud and Risk Management Providers: Third-party fraud detection and risk scoring services that assist k1apk in detecting suspicious activity, multi-accounting, and money laundering. These providers operate under strict data processing agreements.
• Gaming Technology Providers: Game studios and platform providers (such as Pragmatic Play, Play'n GO, and others) whose games are hosted on k1apk. These providers may receive anonymised session data to resolve technical disputes about game outcomes.
• Regulatory and Licensing Authorities: k1apk is obligated under its international gaming licence to provide certain player data to its licensing authority upon request. This includes identity data, transaction records, and responsible gaming data.
• Law Enforcement and Government Agencies: Where required by applicable law, court order, or regulatory direction, k1apk may disclose player data to law enforcement or government agencies.
• Legal and Professional Advisers: k1apk's legal advisers and auditors may access player data on a need-to-know basis subject to strict confidentiality obligations.

7.International Data Transfers

k1apk is an internationally operating platform. Some of the third-party service providers described in Section 6 operate in jurisdictions outside Pakistan. Where personal data is transferred outside Pakistan, k1apk ensures that appropriate safeguards are in place to protect the data, including:

• Standard contractual clauses approved by a relevant data protection authority.
• Transfers to jurisdictions that are recognised as providing an adequate level of data protection.
• Data processing agreements containing binding security and confidentiality obligations on the recipient.

Players may request information about the specific safeguards used for international data transfers by contacting k1apk at [email protected].

8.Data Retention

k1apk retains personal data for the following periods:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by k1apk's international gaming licence and AML regulations.
• Transaction records (deposits and withdrawals): Retained for seven (7) years following each transaction, as required by financial compliance obligations.
• KYC documents: Retained for five (5) years following account closure or the date of the last transaction, whichever is later.
• Game and betting history: Retained for five (5) years following each session, for dispute resolution and regulatory compliance purposes.
• Support communications: Retained for three (3) years following the resolution of each support interaction.
• Marketing preference data: Deleted within 30 days of the player opting out of all marketing communications.
• Cookie and analytics data: Anonymised after 26 months. Non-anonymised session data is deleted after 90 days.

After the applicable retention period expires, k1apk securely destroys or anonymises the relevant personal data. Data subject to an ongoing legal dispute, regulatory investigation, or court order will be retained until the matter is fully resolved, regardless of the standard retention period.

9.Security Measures

k1apk implements the following technical and organisational security measures to protect player personal data:

• Encryption at Rest: All personal data stored on k1apk's systems is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and k1apk's servers is protected using TLS 1.3 protocol.
• Access Controls: Access to personal data is restricted to k1apk employees and contractors who require it for their specific role. Access is controlled via role-based permissions and monitored via access logs.
• Two-Step Verification: k1apk offers two-step verification (2SV) on all player accounts. Players are strongly encouraged to enable 2SV to protect their accounts.
• Regular Security Audits: k1apk's systems are subject to regular penetration testing and security audits by independent third-party security specialists.
• Incident Response: k1apk maintains a documented data breach response procedure. In the event of a data breach affecting player personal data, k1apk will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

10.Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. k1apk uses cookies and similar technologies (including local storage and session storage) to make the platform function correctly, remember your preferences, and understand how the platform is used.

10.2 Types of Cookies Used by k1apk

• Essential Cookies: Required for the platform to function. These include session management cookies, security cookies, and cookies that remember your login state. These cannot be disabled without breaking platform functionality.
• Preference Cookies: Store your language preference, display settings, and responsible gaming tool preferences so you do not have to re-enter them on each visit.
• Analytics Cookies: Used to understand how players interact with k1apk's platform — which pages are visited most, how long sessions last, and where players navigate to and from. k1apk uses anonymised analytics only. No data from analytics cookies is shared with advertising networks.
• Security and Fraud Prevention Cookies: Used to detect suspicious activity, identify duplicate accounts, and protect the platform from abuse.

10.3 Managing Cookies

You can manage your cookie preferences via the k1apk cookie preference centre accessible from the footer of any page. You can also control cookies via your browser settings, though disabling essential cookies may prevent k1apk from functioning correctly. k1apk does not use third-party advertising cookies or participate in cross-site behavioural advertising networks.

11.Your Data Protection Rights

As a k1apk player, you have the following rights in relation to your personal data. To exercise any right, contact k1apk at [email protected] with your registered account details:

• Right of Access: You have the right to request a copy of the personal data k1apk holds about you. k1apk will respond to access requests within 30 days.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by k1apk be corrected. Note that correcting KYC data requires re-submission of identity documents.
• Right to Erasure ("Right to Be Forgotten"): In certain circumstances, you have the right to request that k1apk delete your personal data. This right is subject to k1apk's legal obligations — for example, transaction and KYC data must be retained for the periods described in Section 8 regardless of an erasure request.
• Right to Restrict Processing: You have the right to request that k1apk restricts the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested.
• Right to Object: You have the right to object to processing of your data based on k1apk's legitimate interests. k1apk will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, machine-readable format.
• Right to Withdraw Consent: Where k1apk processes data based on your consent (e.g., marketing), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint about k1apk's data processing with the relevant data protection supervisory authority in the jurisdiction where k1apk holds its gaming licence.

k1apk will respond to all data rights requests within 30 days of receipt. Where a request is complex or numerous, k1apk may extend this period by a further 60 days, in which case k1apk will notify you of the extension and the reason for it within the initial 30-day period.

12.Marketing Communications

k1apk sends promotional communications — including bonus offers, new game announcements, PSL cricket betting promotions, and reload offers — only to players who have consented to receive them. Consent is collected during the registration process and can be updated at any time via account settings or by contacting support.

Players who opt out of marketing communications will continue to receive essential transactional communications — such as deposit confirmations, withdrawal processing notifications, KYC status updates, and responsible gaming alerts — as these are necessary for the operation of the player's account and cannot be opted out of.

13.Minors & Underage Access

k1apk's services are strictly for individuals aged 21 years or older. k1apk does not knowingly collect personal data from individuals under 21. If k1apk becomes aware that personal data has been submitted by or in respect of an individual who is under 21 years of age, that data will be deleted and the associated account will be closed immediately.

If you are a parent or guardian and believe that your child under the age of 21 has created a k1apk account or submitted personal data to k1apk, please contact us at [email protected] immediately. We will investigate and take appropriate action, including deletion of the minor's data and notification to our licensing authority as required.

14.Changes to This Privacy Policy

k1apk reviews and updates this Privacy Policy periodically to reflect changes in data processing practices, changes in applicable law, or updates to k1apk's gaming licence requirements. When material changes are made to this policy, k1apk will:

• Update the "Last Reviewed" date at the top of this policy.
• Notify registered players via email to their registered email address at least 14 days before the changes take effect.
• Display a notice on the k1apk platform for a minimum of 14 days prior to the changes taking effect.

Continued use of k1apk after the effective date of an updated Privacy Policy constitutes acceptance of the changes. Players who do not accept the updated policy should stop using k1apk and may request account closure and withdrawal of their remaining balance before the effective date of the changes.

15.Contact Us

For all privacy-related queries, data rights requests, or concerns about how k1apk handles your personal data, please contact the k1apk Data Protection team using the following details:

• Email: [email protected] — please include "Privacy Query" in the subject line.
• Live Chat: Available 24/7 in-app. Ask to be connected to the data protection team for privacy-related matters.
• Response Time: k1apk aims to respond to all privacy queries within 5 business days and to formal data rights requests within 30 days.

Players wishing to submit a formal complaint about k1apk's data processing practices should first contact k1apk using the details above. If you are not satisfied with k1apk's response, you have the right to escalate your complaint to the relevant data protection supervisory authority.