k9pak Privacy Policy — How We Handle Your Data

k9pak is the trading name of the operator of the online casino and sports betting platform accessible at k9pak.org. k9pak holds an international gaming licence that requires compliance with data protection standards as a condition of that licence.

For the purposes of this Privacy Policy, k9pak is the data controller in respect of the personal data of its registered players and website visitors. This means that k9pak determines the purposes and means by which your personal data is processed.

If you have any questions about how k9pak handles your personal data, or wish to exercise any of the rights described in Section 9 of this Policy, you may contact our Data Protection team via live chat on k9pak.org or by email at [email protected].

k9pak collects the following categories of personal data in connection with the registration and use of the platform:

k9pak does not collect sensitive personal data (such as health data, racial or ethnic origin, or biometric data) unless required by our KYC obligations in specific circumstances — for example, where a Player requests self-exclusion and provides supporting information.

k9pak collects personal data through the following means:

• Directly from you — when you register a k9pak account, complete your KYC verification, make a deposit or withdrawal, contact our support team, or use any responsible gaming tool on the platform.
• Automatically — through cookies, pixel tags, and server logs when you browse k9pak.org or use the platform, regardless of whether you are logged in.
• From payment providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and crypto payment processors may share transaction confirmation data with k9pak in connection with deposits and withdrawals processed on your account.
• From identity verification providers — k9pak may engage third-party KYC providers to assist with identity and age verification. These providers process your CNIC data on k9pak's behalf under a data processing agreement.
• From fraud and AML screening tools — k9pak uses automated screening tools to assess transactions for fraud and money laundering risk. These tools may process your personal data against publicly available databases and sanctions lists.

k9pak processes your personal data for the following purposes:

• Account creation and management: To register your k9pak account, verify your identity and age, manage your account settings, and maintain the integrity of your player profile.
• Service delivery: To provide you with access to casino games, sports betting markets, bonuses, and all other features of the k9pak platform.
• Payment processing: To process deposits and withdrawals in PKR via your chosen payment method, and to maintain accurate transaction records.
• Regulatory compliance: To meet our obligations under our international gaming licence, including KYC verification, anti-money laundering screening, responsible gaming requirements, and record-keeping mandates.
• Responsible gaming: To monitor account activity for indicators of problem gambling, enforce self-exclusion and limit settings, and contact players where our responsible gaming obligations require us to do so.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account takeovers, collusion, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your queries, resolve complaints, and communicate with you about your account in English or Urdu.
• Service improvement: To analyse platform usage patterns (on an aggregated, anonymised basis where possible) to improve the k9pak product for Pakistani players.
• Marketing communications: To send you promotional offers and bonus notifications where you have not opted out of such communications. You may opt out at any time via your account settings or by contacting support.

k9pak relies on the following legal bases to process your personal data, depending on the processing activity:

• Performance of a contract: The majority of data processing at k9pak is necessary to perform the services you have contracted for when you register a k9pak account — account management, game access, payment processing, and customer support.
• Legal obligation: Certain processing — including KYC verification, AML screening, responsible gaming tool maintenance, and transaction record-keeping — is required by the terms of k9pak's international gaming licence and applicable anti-money laundering obligations.
• Legitimate interests: k9pak processes some data on the basis of its legitimate interests, including fraud prevention, security monitoring, and aggregated service analytics, where those interests are not overridden by your privacy rights.
• Consent: Where k9pak sends you direct marketing communications, we do so on the basis of your consent, which you may withdraw at any time. Some non-essential cookies are also deployed on the basis of consent.

k9pak does not sell your personal data to third parties. k9pak may share your personal data with the following categories of recipient, where necessary:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and crypto payment processors, to facilitate your deposits and withdrawals.
• KYC and identity verification providers — Third-party providers who assist k9pak with age and identity verification obligations. These providers act as data processors under contract with k9pak.
• Game providers — Software developers whose games are available on the k9pak platform may receive limited technical data (such as session tokens and game event data) necessary to operate the games.
• Fraud and AML screening services — Automated tools that screen transactions against sanctions lists, fraud databases, and problem gambling self-exclusion registers.
• Regulatory and licensing authorities — k9pak's licensing authority and, where required by law, law enforcement bodies or other regulatory agencies.
• Professional advisers — Legal, compliance, and audit advisers who are bound by professional confidentiality obligations.

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit k9pak.org. They help the platform function correctly, remember your preferences, and allow k9pak to analyse how the platform is used.

7.2 Types of Cookies Used by k9pak

• Essential cookies: Required for the platform to function — session management, login state, security tokens. These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and responsible gaming reminders between sessions.
• Analytics cookies: Help k9pak understand how players navigate the platform. Data is aggregated and anonymised where possible. These cookies require your consent.
• Marketing cookies: Used to personalise bonus and promotional communications within the k9pak platform. These are deployed only with consent and can be disabled in your account settings.

7.3 Managing Cookies

You may manage your cookie preferences through your browser settings or through the k9pak cookie preference centre accessible on the platform. Disabling essential cookies will impair the functionality of the k9pak platform.

k9pak retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account data and transaction records: Retained for a minimum of 5 years from account closure, as required by our gaming licence and AML obligations.
• KYC documentation (CNIC scans etc.): Retained for 5 years from the date of collection or account closure, whichever is later.
• Responsible gaming records (self-exclusion, limits): Retained indefinitely to prevent registration during an active exclusion period and for regulatory compliance purposes.
• Support communications: Retained for 3 years from the date of the interaction, unless the communication relates to an ongoing complaint or regulatory matter.
• Technical/log data: Retained for up to 12 months for security and fraud investigation purposes.

Where a Player requests deletion of their data before the end of the applicable retention period, k9pak will assess that request against its ongoing regulatory obligations and will delete data that is not subject to a legal retention requirement.

As a registered k9pak player, you have the following rights in relation to your personal data:

To exercise any of these rights, please contact k9pak support via live chat on k9pak.org or by emailing [email protected]. k9pak will respond to all data rights requests within 30 days. Where a request is complex or numerous, k9pak may extend this period by a further 60 days with notification.

k9pak implements technical and organisational security measures appropriate to the sensitivity of the personal data processed, including:

• TLS encryption for all data transmitted between your device and k9pak's servers.
• Encryption at rest for all databases containing personal and financial data.
• Role-based access controls limiting staff access to player data on a need-to-know basis.
• Audit logging of all access to player data by k9pak internal systems and staff.
• Regular penetration testing and security audits of k9pak's technology infrastructure.
• Incident response procedures for data breach identification, containment, and notification.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, k9pak will notify you without undue delay in accordance with our obligations under our gaming licence. Notification will be made to the email address registered on your k9pak account.

Players are responsible for keeping their own k9pak login credentials secure. k9pak will never ask you for your password via email, live chat, or any other channel. If you receive any communication purporting to be from k9pak that asks for your password, treat it as fraudulent and report it to our support team immediately.

k9pak operates under an international gaming licence and may use service providers — including game developers, KYC verification platforms, and cloud infrastructure providers — located in countries outside Pakistan. Where personal data is transferred to a country that does not provide equivalent data protection standards, k9pak ensures that appropriate safeguards are in place, including:

• Contractual data protection clauses in all agreements with third-party processors that impose obligations equivalent to those required by k9pak's gaming licence.
• Transfer impact assessments where required to assess the adequacy of protection in the destination country.
• Restrictions on the purposes for which transferred data may be processed by the recipient.

k9pak's platform is strictly for adults aged 21 years and older. k9pak does not knowingly collect or process personal data belonging to persons under the age of 21. Where k9pak becomes aware that personal data has been submitted by a person under 21, the relevant account will be immediately closed, the data will be deleted (subject to any fraud investigation requirements), and any net deposits will be returned.

If you believe that a person under 21 has registered a k9pak account, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

k9pak reviews and updates this Privacy Policy periodically. Material changes — those that affect what data is collected, how it is used, or who it is shared with — will be communicated to registered players via email to their registered address and via a prominent notice on the k9pak platform, at least 14 days before the changes take effect.

Non-material changes — such as formatting updates or clarifications that do not alter the substance of the policy — will take effect immediately upon publication. The "Effective Date" at the top of this policy will be updated to reflect the date of the most recent revision. Continued use of the k9pak platform after the effective date of any change constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by k9pak, please contact us:

• Live chat: Available 24/7 in English and Urdu via k9pak.org
• Email: [email protected]

If you are not satisfied with k9pak's response to a privacy concern, you have the right to lodge a complaint with the data protection supervisory authority in the jurisdiction in which k9pak holds its gaming licence. Details of the relevant authority will be provided upon request via our support team.