Privacy Policy

Introduction

This Privacy Policy ("Policy") is published by k1com ("Platform", "we", "us", "our") and applies to all users ("User", "you", "your") of the k1com online sports betting and casino entertainment platform, accessible at https://k1com.cam and any associated mobile or web applications (collectively, the "Service").

We take your privacy seriously. This Policy explains how we collect, use, disclose, store and protect personal data in connection with your use of the Service. It also describes the rights available to you and how you may exercise them.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy. By registering an account or using the Service, you acknowledge that you have read this Policy and understand how your data is handled.

Definitions

Data Controller

k1com acts as the Data Controller in respect of personal data collected from users of the Service. As Data Controller, k1com determines the purposes for which personal data is collected and the means by which it is processed.

Where k1com engages third-party service providers (such as payment processors, KYC verification providers, fraud detection services and analytics platforms) to process data on its behalf, those parties act as Data Processors and are required to process data only in accordance with k1com's documented instructions, under appropriate contractual and technical safeguards.

For all data protection enquiries, requests and complaints, please contact us using the details provided in Section 15 of this Policy.

Data We Collect

k1com collects personal data through several channels in the course of providing the Service. The categories of data collected include:

4.1 Registration Data

When you create an account, we collect your full legal name, date of birth, residential address, email address, phone number, and the username and password you choose. This data is required to create and maintain your account and verify your eligibility.

4.2 Identity Verification (KYC) Data

As part of our KYC obligations, we may collect copies of government-issued identity documents (such as a CNIC for Pakistani residents), proof of address documentation (such as a utility bill or bank statement), and in some cases, source-of-funds documentation. This data is collected to verify your identity, prevent fraud and comply with applicable regulatory requirements.

4.3 Financial and Transaction Data

We collect records of your deposits, withdrawals, wagers and account balance transactions. Payment method details (such as bank account references or wallet identifiers) are collected as necessary to process transactions. Full payment card numbers, if applicable, are handled by our payment processors and are not stored on k1com's systems.

4.4 Usage and Technical Data

We automatically collect technical data about your use of the Platform, including your IP address, browser type and version, operating system, device identifiers, session timestamps, pages visited, features used and betting/gaming activity logs. This data helps us maintain platform security, improve performance and detect suspicious activity.

4.5 Communications Data

If you contact our support team — by live chat, email or any other channel — we retain records of those communications, including the content of your messages and our responses, for support quality and compliance purposes.

4.6 Marketing Preferences

Where you have consented to receive marketing communications, we record your preferences and the history of communications sent to you. You may update your marketing preferences at any time through your account settings or by contacting support.

Purposes & Legal Basis for Processing

k1com processes personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes of processing and the corresponding legal basis:

Data Sharing

k1com does not sell, rent or trade personal data. We share personal data with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: Transaction data is shared with payment service providers to facilitate deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulation. References to payment brands such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are for contextual reference only — their inclusion does not imply that they endorse, support or are affiliated with k1com.
• KYC and Identity Verification Providers: Identity documents and verification data are shared with regulated KYC service providers to fulfil our identity verification obligations.
• Fraud Prevention and Security Services: Technical and behavioural data may be shared with fraud detection platforms to protect the integrity of the Service and other users.
• Analytics Providers: Anonymised or aggregated usage data may be shared with analytics services to help us understand and improve platform performance.
• Regulatory and Law Enforcement Authorities: Where required by applicable law, court order or regulatory direction, we may be required to disclose personal data to competent authorities.
• Business Transfers: In the event of a merger, acquisition, restructuring or sale of all or part of the k1com business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent privacy protections.

Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention principles apply:

• Active Accounts: Personal data associated with an active account is retained for the duration of the account's activity on the Platform.
• Closed Accounts: Following account closure, we typically retain transaction records, KYC documentation and communication logs for a minimum of five (5) years, or longer where required by applicable anti-money laundering, financial services or gaming regulations.
• Marketing Data: Where you have withdrawn consent for marketing communications, your preferences and suppression record are retained indefinitely to prevent future unsolicited contact.
• Backup and Archival Data: Data held in backup systems may persist for a period following deletion from active systems, subject to our backup rotation schedule.

Once data is no longer required, it is securely deleted or irreversibly anonymised in accordance with our internal data disposal procedures.

User Rights

Depending on the laws applicable in your jurisdiction, you may have some or all of the following rights in relation to your personal data held by k1com:

• Right of Access: You may request confirmation of whether we hold personal data about you and, if so, a copy of that data together with information about how it is processed.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data held about you.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful — subject to any overriding legal obligation to retain the data.
• Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances, for example whilst a rectification request is being assessed.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your data be provided in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing based on legitimate interests, including profiling. You also have the absolute right to object to processing for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of the above rights, please contact us using the details in Section 15. We will respond to all requests within a reasonable timeframe and in accordance with applicable law. We may ask you to verify your identity before processing a rights request.

Cookies & Tracking Technologies

k1com uses cookies and similar technologies (including local storage, session storage and tracking pixels) on the Platform. These technologies serve several purposes:

9.1 Types of Cookies Used

9.2 Managing Cookies

Most web browsers allow you to control cookie settings through the browser's preferences or settings menu. You may choose to block or delete cookies; however, disabling essential cookies will prevent the Platform from functioning correctly. Please refer to your browser's help documentation for instructions on managing cookie settings.

Security Measures

k1com implements appropriate technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security) protocols.
• Encryption of sensitive data at rest using industry-standard algorithms.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, investigating and notifying affected parties of data security incidents.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is entirely immune from security risk. Users are encouraged to use strong, unique passwords and to enable any available account security features.

International Data Transfers

In the course of operating the Service, personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection as your home jurisdiction. This may occur where our service providers, hosting infrastructure or operational teams are located in other countries.

Where personal data is transferred internationally, k1com takes steps to ensure that appropriate safeguards are in place, such as contractual data transfer agreements, to protect your information consistently with the standards described in this Policy.

By using the Service, you acknowledge and consent to the international transfer of your personal data for the purposes described in this Policy.

Children's Data

The k1com Service is strictly intended for adults aged 18 years and above — or the higher minimum age required by the applicable operator license jurisdiction. We do not knowingly collect personal data from individuals under the minimum eligible age.

If we become aware that we have inadvertently collected personal data from an underage individual, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the Platform, please contact us immediately using the details in Section 15.

Payment Data

Payment and financial data is handled with particular care given its sensitive nature. The following principles govern how we manage payment-related information:

• Full payment card numbers and equivalent sensitive financial credentials are processed by regulated payment service providers and are not stored on k1com's own servers.
• Transaction records — including deposit and withdrawal amounts, dates, methods and reference identifiers — are retained as part of your account history for regulatory compliance and dispute resolution purposes.
• Payment method identifiers (such as truncated bank account numbers or wallet references) are stored to facilitate withdrawal processing and to enforce the policy that withdrawals are returned to the same method used for deposit.
• References to familiar Pakistani payment options such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are provided for contextual reference only. Their inclusion in this Policy does not imply that any of these providers endorse or are affiliated with k1com, or that they support gambling transactions.

Policy Amendments

k1com reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements or platform functionality. The date of the most recent update is displayed at the top of this document.

Where changes to this Policy are material, we will endeavour to provide reasonable notice to users via the Platform interface or by email to the address registered on your account prior to the changes taking effect. Your continued use of the Service following publication of a revised Policy constitutes your acceptance of the changes.

If you do not agree with any amendment to this Policy, you should cease using the Service and may request account closure by contacting our support team.

Contact Us

For all data protection enquiries, personal data access requests, rights exercises, complaints or general privacy questions, please contact the k1com team through the following channels. All privacy-related requests will be acknowledged and handled in a timely manner.

• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly on the Platform for real-time support assistance.
• Language: Privacy enquiries are handled in English, with Urdu-language support available on request.

When submitting a data rights request, please include sufficient information to allow us to verify your identity and locate your account records. We may ask you to provide additional verification before processing requests involving sensitive account data.

For general information about our platform, bonus terms and account policies, you may also refer to our FAQ page or our Terms & Conditions.