k1win Privacy Policy

1Introduction & Scope

This Privacy Policy ("Policy") is published by k1win ("the Company", "we", "us", "our") and governs the collection, use, storage, sharing, and protection of personal data obtained through the k1win platform accessible at k1win.org, including all associated web pages, mobile-optimised interfaces, and services offered thereon ("the Platform").

This Policy applies to all registered players, prospective players, and any person who interacts with the k1win Platform regardless of their country of access, including Pakistani players accessing the Platform from Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and all other cities across Pakistan.

This Policy should be read alongside the k1win Terms & Conditions, which govern your overall use of the Platform and are incorporated into this Policy by reference. This Policy was last updated on 1 January 2026.

2Data We Collect

k1win collects personal data from you directly when you register, use the Platform, make transactions, or contact us, and indirectly through automated technologies as you browse and interact with the Platform. The categories of personal data we collect are described below.

2.1 Registration and Identity Data

When you create a k1win account, we collect:

• Full legal name as it appears on your national identity document;
• Date of birth (used to verify you meet the 21+ age requirement);
• Residential address including city, province, and postal code;
• Valid Pakistani mobile phone number;
• Email address;
• Username and encrypted password;
• Pakistani CNIC number or passport number where required for KYC verification.

2.2 Financial and Payment Data

When you make deposits or withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, 1LINK, debit card, USDT TRC20, or Cash OTC, we collect:

• Payment method type and the account identifier (e.g. JazzCash mobile number, last four digits of debit card);
• Transaction amounts, timestamps, and reference numbers;
• Transaction history on your k1win account;
• Bank account details where provided for direct bank transfers.

2.3 Gaming Activity Data

As you use the Platform, k1win automatically records your gaming activity data including bets placed, games played, wager amounts, win/loss outcomes, session durations, bonus usage, and responsible gaming tool activations. This data is used for account management, dispute resolution, regulatory compliance, and to improve the Platform experience for Pakistani players.

2.4 Technical and Device Data

k1win's servers and analytics systems automatically collect the following technical data when you access the Platform:

2.5 Communications Data

When you contact k1win via email, live chat, or any other support channel, we retain a record of that communication including the content of your messages, the date and time, and any attachments you provide. This data is used for support resolution, quality assurance, and dispute management.

3How We Use Your Data

k1win uses the personal data it collects for the following purposes, each of which is grounded in a lawful basis described in Section 4 below:

• Account creation and management — to register your account, verify your identity, maintain your account balance, and manage your player profile;
• Service delivery — to allow you to place bets, play games, participate in promotions, and use all features of the k1win Platform;
• Payment processing — to process your PKR deposits and withdrawals via your chosen Pakistani payment method and maintain accurate financial records;
• KYC and regulatory compliance — to verify your identity, age (21+), and the source of your funds as required under k1win's gaming licence and applicable anti-money laundering obligations;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, money laundering, and other prohibited conduct;
• Responsible gaming — to monitor gambling patterns, apply player-requested limits, enforce self-exclusion requests, and identify players who may need support;
• Customer support — to respond to your queries, resolve disputes, and improve the quality of our support services;
• Marketing communications — to send you promotional offers, bonus notifications, and Platform updates where you have given consent or where a legitimate interest applies;
• Platform improvement — to analyse usage patterns, conduct testing, and improve the performance, security, and user experience of the k1win Platform.

4Legal Basis for Processing

k1win processes your personal data only where a lawful basis exists. The primary legal bases on which k1win relies are as follows:

• Contractual necessity — processing that is necessary to perform our contract with you, i.e. to operate your k1win account and deliver the services you have registered to use;
• Legal obligation — processing required to comply with k1win's obligations under its gaming licence, anti-money laundering regulations, KYC requirements, and any other applicable legal obligations;
• Legitimate interests — processing necessary for k1win's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where those interests are not overridden by your data protection rights;
• Consent — processing based on your freely given, specific, and informed consent, primarily for direct marketing communications. You may withdraw your consent at any time by contacting support.

5Sharing Your Data

k1win does not sell your personal data. We share your data only with the categories of recipients listed below, and only to the extent necessary for the specified purpose:

5.1 Payment Service Providers

To process your PKR deposits and withdrawals, k1win shares necessary financial and identity data with our payment processing partners including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, and other payment infrastructure providers. These partners are contractually bound to handle your data securely and to use it only for payment processing purposes.

5.2 Identity Verification Partners

k1win uses regulated third-party identity verification services to conduct KYC checks as required by our gaming licence. These providers may process your CNIC, passport data, and facial verification data on our behalf. They are subject to the same data protection obligations as k1win.

5.3 Game and Technology Providers

k1win integrates games from licensed third-party game studios and technology providers. These providers may receive your anonymised player identifier and session data to deliver game content, calculate outcomes, and maintain game integrity. Full personal data such as your name, address, or CNIC is not shared with game studios.

5.4 Regulatory and Law Enforcement Authorities

k1win is legally obligated to share player data with gaming regulatory authorities, financial intelligence units, and law enforcement agencies where required by applicable law, court order, or our licensing obligations. k1win will not notify you in advance of such disclosures where doing so would be unlawful or would compromise an investigation.

5.5 Professional Advisers

k1win may share limited personal data with its legal advisers, auditors, and insurers where necessary for the provision of professional services to k1win. All such advisers are subject to professional confidentiality obligations.

6Cookies & Tracking Technologies

k1win uses cookies and similar tracking technologies on the Platform to enable essential site functionality, improve your experience, and collect analytics data. A cookie is a small text file placed on your device by the Platform when you visit.

6.1 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your k1win account. You cannot opt out of these without disabling the Platform entirely.
• Analytics cookies — used to collect anonymised data about how players navigate and use the Platform, helping k1win identify areas for improvement. No personally identifiable data is contained in these cookies.
• Functional cookies — used to remember your preferences such as your chosen language, currency display, and responsible gaming settings between sessions.
• Marketing cookies — used with your consent to understand the source of your visit to k1win and to measure the effectiveness of our promotional campaigns.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the k1win Platform.

7Data Retention

k1win retains your personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods imposed by our gaming licence and applicable regulations:

• Account registration and identity data: minimum 5 years from account closure;
• Financial transaction records: minimum 5 years from the date of each transaction;
• Gaming activity logs: minimum 3 years from the date of each gaming session;
• KYC verification documents: minimum 5 years from account closure or the completion of the relevant verification process;
• Customer support communications: minimum 3 years from the date of the communication;
• Marketing consent records: retained for as long as consent is active and for 3 years thereafter.

Where k1win is involved in, or anticipates, legal proceedings in connection with your account, relevant data will be retained for the duration of those proceedings and any applicable limitation periods thereafter, regardless of the standard retention schedule above.

8Your Rights

Subject to applicable law and k1win's legal obligations, you hold the following rights in relation to your personal data. To exercise any of these rights, please contact k1win at the email address provided in Section 14.

k1win will respond to all valid data rights requests within 30 calendar days of receipt. Where requests are complex or numerous, k1win may extend this period by a further 30 days with written notice. k1win will not charge a fee for responding to rights requests unless they are manifestly unfounded or excessive.

9Children & Minors

The k1win Platform is strictly for persons aged 21 years and over. k1win does not knowingly collect personal data from any person under the age of 21. Age verification is a mandatory step in the account registration process and k1win enforces strict 21+ controls across all aspects of the Platform.

If k1win discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted or anonymised to the extent permitted by law, and any deposits will be refunded to the payment source after deducting any costs incurred.

10International Data Transfers

k1win may transfer your personal data to servers, processors, or service providers located outside of Pakistan in connection with the operation of the Platform, including data transfers to the jurisdiction in which k1win's gaming licence is held and to the locations of our technology and payment partners.

Where such transfers occur, k1win ensures that appropriate safeguards are in place to protect your data to a standard equivalent to or greater than that required under k1win's licensing obligations. These safeguards include contractual data processing agreements with all recipients of transferred data.

11Security Measures

k1win implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and k1win's servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls ensuring k1win staff can only access personal data required for their specific job function;
• Regular independent security audits and penetration testing of the Platform infrastructure;
• Intrusion detection and 24/7 security monitoring systems;
• Two-factor authentication (2FA) available for all k1win player accounts;
• Strict vendor due diligence requirements for all third-party processors handling player data.

Despite these measures, no internet transmission or electronic storage system is completely secure. k1win cannot guarantee the absolute security of data transmitted to or from the Platform. In the event of a data breach affecting your rights and freedoms, k1win will notify affected players and the relevant regulatory authorities in accordance with its legal obligations.

12Third-Party Services

The k1win Platform may contain functionality powered by or integrated with third-party services including game content providers, payment processors, analytics platforms, and customer support tools. This Privacy Policy applies only to data processed directly by k1win and does not extend to the data practices of third-party service providers operating under their own privacy policies.

k1win requires all third-party processors handling player data to enter into formal data processing agreements that impose equivalent data protection standards. k1win conducts due diligence on all third-party partners before engaging them in any capacity involving player data.

13Policy Amendments

k1win reserves the right to update or amend this Privacy Policy at any time. Where changes are material, k1win will notify registered players by email and/or by a prominent notice on the Platform prior to the revised Policy taking effect. The date of the most recent update is displayed at the top of this document.

Continued use of the k1win Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the Terms & Conditions.

14Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about k1win's handling of your personal data, please contact our Data Protection team using the following contact detail:

Email: [email protected]  —  please mark your subject line "PRIVACY REQUEST" for priority handling.

k1win aims to acknowledge all privacy-related enquiries within 5 business days and to resolve them fully within 30 calendar days. If you are not satisfied with k1win's response to your privacy concern, you have the right to escalate your complaint to the relevant data protection supervisory authority or to the dispute resolution mechanism associated with k1win's gaming licence.