k1com Privacy
Policy

1.1 For the purposes of this Privacy Policy, the data controller responsible for the personal data of players registered on the k1com platform is the operator of k1com, trading under the brand name k1com and operating the website located at k1com.org.

1.2 As data controller, k1com determines the purposes and means by which personal data is processed. k1com processes personal data in accordance with its obligations under applicable international data protection standards and the requirements of its gaming licence.

1.3 If you have any questions about how k1com processes your personal data, you may contact the k1com data privacy team via the live chat support function available 24/7 on the platform, or by emailing support@k1com.org (plain text — not a clickable link).

2.1 k1com collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the main categories of personal data collected:

2.2 k1com does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is required for identity verification purposes under applicable KYC regulations.

3.1 k1com collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated technologies: Data collected automatically when you access the k1com platform, including cookies, server logs, and device fingerprinting used for security and fraud prevention purposes.
• Third-party sources: Data received from identity verification partners, payment processors (such as JazzCash and EasyPaisa), and fraud prevention services, where such data is necessary to verify your identity or protect the integrity of the platform.

3.2 Where k1com receives data about you from third parties, we will only use that data for the specific purpose for which it was provided and in accordance with this Privacy Policy.

4.1 k1com processes your personal data only where a lawful basis for doing so exists. The primary purposes and their corresponding legal bases are set out below:

• Contract performance: Processing your account registration, managing deposits and withdrawals in PKR, delivering gameplay and betting services, and handling support requests are all necessary for the performance of the contract between you and k1com.
• Legal obligation: k1com is required to collect and process certain personal data to comply with KYC (Know Your Customer) regulations, anti-money laundering (AML) legislation, and the requirements of its gaming licence. This includes identity verification, transaction monitoring, and record-keeping obligations.
• Legitimate interests: k1com processes certain data — including technical and usage data — on the basis of its legitimate interests in maintaining platform security, preventing fraud, improving the user experience, and conducting responsible gaming monitoring. These interests are balanced against your privacy rights.
• Consent: Where k1com sends you optional marketing communications, including promotional emails or SMS notifications about bonuses, cricket betting offers, or new slot releases, it does so only with your prior consent. You may withdraw this consent at any time.

5.1 k1com does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own commercial purposes. Data may be shared in the following limited circumstances:

• Payment processors: Financial data is shared with payment service providers — including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa/Mastercard processing partners — strictly to the extent necessary to process your deposits and withdrawals in PKR.
• KYC and identity verification partners: Identity and contact data is shared with k1com's accredited identity verification service provider for the purpose of completing mandatory KYC checks. This partner operates under a data processing agreement with k1com.
• Fraud prevention and security services: Technical and identity data may be shared with specialist fraud prevention providers to protect the platform and all players from fraudulent activity.
• Regulatory and law enforcement authorities: k1com may disclose personal data to gaming regulators, financial intelligence units, or law enforcement agencies where required to do so by law, court order, or binding regulatory direction.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or part of k1com's business, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

5.2 All third parties with whom k1com shares personal data are required to handle that data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond the specific purpose for which it was disclosed.

6.1 k1com retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or longer where required by the applicable gaming licensing authority.
• Transaction records: All deposit and withdrawal records in PKR are retained for a minimum of five (5) years to comply with financial record-keeping obligations.
• Support communications: Live chat transcripts and email correspondence are retained for up to three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Log data and session records are retained for up to twelve (12) months, after which they are anonymised or deleted.

6.2 Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with k1com's internal data disposal procedures. Where data is anonymised rather than deleted, the resulting anonymised dataset no longer constitutes personal data and is not subject to this Privacy Policy.

7.1 k1com implements a range of technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between players' devices and k1com's servers.
• Encrypted storage of sensitive personal data including passwords (stored as salted hashes) and identity documents.
• Role-based access controls ensuring that personal data is accessible only to k1com personnel with a legitimate operational need.
• Regular security assessments and vulnerability testing of the k1com platform and infrastructure.
• Automated fraud detection and suspicious activity monitoring systems operating in real time.
• Two-factor authentication options available to all registered players to protect account access.

7.2 Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, k1com will notify affected players and relevant regulatory authorities in accordance with its legal obligations and as promptly as the circumstances permit.

7.3 Players are responsible for maintaining the security of their own k1com login credentials. k1com strongly recommends using a unique, strong password for your k1com account and enabling two-factor authentication where available.

8.1 k1com uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: These cookies are essential for the k1com platform to function. They manage your login session, maintain your authentication state, and enable core security features. These cookies cannot be disabled without breaking the platform's core functionality.
  Session IDCSRF TokenAuth State
• Functional Cookies: These cookies remember your preferences such as language settings, preferred payment method, and game lobby layout to provide a more personalised experience on subsequent visits.
  Language PreferenceUI Preferences
• Analytics Cookies: k1com uses privacy-respecting analytics tools to understand how players navigate the platform, which features are most used, and where technical issues occur. This data is aggregated and does not identify individual players.
  Page ViewsSession DurationFeature Usage
• Security & Fraud Prevention Cookies: These cookies support k1com's fraud detection systems by tracking device characteristics and behavioural signals associated with suspicious activity patterns.
  Device FingerprintRisk Score

8.2 k1com does not use advertising or tracking cookies that follow you across unrelated third-party websites. Your browsing activity outside of k1com is not monitored or collected by k1com's systems.

8.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the k1com platform. Disabling functional or analytics cookies will not affect your ability to play but may reduce the quality of your experience.

9.1 Subject to applicable law and certain limitations, k1com recognises the following privacy rights for all registered players:

• Right of Access: You may request a copy of the personal data k1com holds about you. k1com will respond to verified access requests within thirty (30) days.
• Right to Rectification: If any personal data k1com holds about you is inaccurate or incomplete, you may request that it be corrected. You can update most account information directly through your account settings.
• Right to Erasure: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request that k1com delete your personal data. Note that this right is limited where k1com has legal retention obligations (e.g., AML record-keeping) that override the erasure request.
• Right to Restrict Processing: You may request that k1com restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of data held about you pending verification.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that k1com provide your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You may object to k1com's processing of your personal data where it relies on legitimate interests as its legal basis. k1com will assess whether its legitimate interests are overridden by your privacy rights in each case.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

9.2 To exercise any of the above rights, please contact k1com's support team via live chat or email at support@k1com.org. k1com may request proof of identity before processing a privacy rights request to ensure that data is not disclosed to an unauthorised person.

10.1 k1com is strictly a 21+ platform. The collection and processing of personal data belonging to individuals under the age of 21 is not permitted on k1com. The platform implements age verification controls during the registration process and through KYC identity checks to enforce this restriction.

10.2 If k1com becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the originating payment method after deducting any winnings, which will be forfeited.

10.3 Parents and guardians who believe that a minor in their care has registered an account on k1com are encouraged to contact support immediately via live chat so that the account can be closed promptly and the matter handled sensitively.

11.1 k1com operates as an internationally licensed gaming platform. As a result, personal data collected from Pakistani players may be processed and stored on servers located outside Pakistan, including in the jurisdiction where k1com holds its operating licence and where its third-party service providers (such as KYC and payment processing partners) maintain their infrastructure.

11.2 Where personal data is transferred internationally, k1com ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that afforded within Pakistan. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions recognised as providing an adequate level of data protection.

11.3 By registering an account on k1com and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to international destinations as described in this section, subject to the safeguards described above.

12.1 k1com reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the way the platform operates. Material changes will be communicated to registered players via the email address associated with their account or through a prominent notice on the k1com platform, no less than seven (7) days before the changes take effect.

12.2 The date of the most recent update is displayed at the top of this Privacy Policy. Your continued use of the k1com platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree to the revised policy, you must cease using the platform and may request account closure before the changes take effect.

12.3 The most current version of this Privacy Policy is always available at k1com.org/privacy-policy and supersedes all previous versions.

13.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by k1com, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the k1com platform — the fastest way to reach the team for privacy matters.
• Email: support@k1com.org

13.2 k1com aims to acknowledge all privacy-related written enquiries within two (2) business days and to resolve them within thirty (30) days of receipt. Complex requests may take longer, in which case k1com will notify you of the extended timeline and the reasons for it.

13.3 If you remain dissatisfied after engaging with k1com's privacy team, you retain the right to escalate your complaint to the relevant regulatory or supervisory authority. k1com will cooperate fully with any such regulatory inquiry.