k789 Privacy Policy

1. Introduction

k789 ("we", "us", "the Platform") is committed to protecting the privacy and personal data of everyone who uses the k789 platform. This Privacy Policy is published in accordance with the data protection obligations imposed under k789's international gaming licence and applicable data protection law.

This Policy explains what personal data k789 collects, why we collect it, how we use it, with whom we share it, how long we retain it, and what rights you have in relation to it. It applies to all Members who have registered a k789 account and to all visitors who access the k789 website without registration.

This Privacy Policy should be read alongside the k789 Terms & Conditions, which govern the overall contractual relationship between k789 and its Members. Words defined in the Terms & Conditions carry the same meanings in this Policy unless the context requires otherwise.

2. Data Controller

For the purposes of data protection law, k789 is the data controller in respect of all personal data processed in connection with the k789 platform. As data controller, k789 determines the purposes and means of processing personal data and is responsible for ensuring that processing activities comply with applicable data protection obligations.

Where k789 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those third parties act as data processors under written agreements that bind them to process data only on k789's documented instructions and to implement appropriate technical and organisational security measures.

3. Personal Data We Collect

k789 collects the following categories of personal data in connection with the operation of the platform:

4. How Personal Data Is Collected

k789 collects personal data through the following mechanisms:

• Direct provision by you: When you register a k789 account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account settings.
• Automated technical collection: When you visit k789.blog, certain technical data — including your IP address, browser details, and navigation behaviour — is automatically collected via server logs and first-party cookies.
• Payment processor data: When you initiate a deposit or withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT (TRC20), the relevant payment provider shares transaction confirmation data with k789 for the purpose of crediting your account and maintaining financial records.
• KYC verification providers: Where k789 uses a third-party identity verification service to assist with document authentication, that provider may return verification status data and fraud-risk indicators alongside the document data you submitted.
• Responsible gaming monitoring: k789's platform automatically records account activity data — including deposit frequency, session duration, and wagering patterns — for the purpose of identifying potential problem gambling indicators and triggering responsible gaming interventions where appropriate.

5. Purposes of Processing

k789 processes personal data for the following specific purposes:

• Account creation and management: To register and maintain your k789 account, authenticate your identity at login, and enable access to platform features.
• Payment processing: To process deposits and withdrawal requests, maintain transaction records, and reconcile account balances in PKR.
• Identity verification and KYC compliance: To verify that Members are who they claim to be, are of the required age (21+), and are not subject to sanctions or self-exclusion restrictions that would prohibit their use of the platform.
• Anti-money laundering (AML) compliance: To monitor transaction patterns for indicators of money laundering or terrorist financing and to report suspicious activity to relevant authorities as required under applicable law.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent account activity, bonus abuse, unauthorised access, and other security threats to the platform and its members.
• Platform improvement and analytics: To understand how Members use the k789 platform and to inform product development, performance optimisation, and user experience improvements using aggregated and anonymised data where possible.
• Responsible gaming monitoring: To identify Members who may be exhibiting problem gambling behaviour and to intervene with appropriate responsible gaming tools, prompts, or restrictions.
• Customer support: To respond to Member enquiries, complaints, and technical support requests efficiently and accurately.
• Marketing communications: To send Members promotional offers, bonus notifications, and platform updates where you have not opted out of such communications. See Section 14 for details of how to manage marketing preferences.
• Legal compliance: To comply with legal obligations imposed by k789's international gaming licence, applicable financial regulations, court orders, and lawful requests from regulatory or law enforcement authorities.

6. Legal Basis for Processing

k789 processes personal data on the following legal bases depending on the purpose of the processing activity:

• Contract performance: Processing necessary to provide the services described in the k789 Terms & Conditions — including account management, payment processing, and bet settlement — is carried out on the legal basis of contract performance.
• Legal obligation: Processing required to comply with AML regulations, KYC requirements, licensing conditions, and other applicable legal obligations is carried out on the legal basis of legal compliance.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of k789's legitimate interests in protecting the integrity of the platform and its members, provided those interests are not overridden by your interests or fundamental rights.
• Consent: Processing for direct marketing communications is carried out on the basis of your consent, which may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal of consent.

7. Data Sharing with Third Parties

k789 does not sell your personal data to any third party. k789 shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers

k789 engages third-party service providers who process personal data on k789's behalf as data processors. These include: cloud infrastructure and hosting providers; payment processors and mobile wallet operators (JazzCash, EasyPaisa, banking institutions); KYC and identity verification providers; fraud detection and AML screening platforms; and customer support software providers. All such providers operate under data processing agreements that require them to maintain appropriate security measures and to process data only as instructed by k789.

7.2 Game Providers

Casino games on the k789 platform are provided by licensed third-party game studios. Where these studios provide games through integrated APIs, limited technical data — including session identifiers — may be shared to facilitate game session management. Game providers do not receive your full identity or financial data.

7.3 Regulatory and Law Enforcement Authorities

k789 may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable law, court order, or lawful regulatory request. k789 will notify affected Members of such disclosures where legally permitted to do so.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of k789's business, personal data held by k789 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming the obligations set out in this Privacy Policy in respect of that data.

8. International Data Transfers

k789 is an internationally operated platform. Personal data collected from Members in Pakistan may be transferred to, and processed in, countries other than Pakistan — including the jurisdiction in which k789 holds its international gaming licence and the locations of k789's cloud infrastructure providers.

Where personal data is transferred internationally, k789 ensures that appropriate safeguards are in place to protect that data in a manner consistent with the standards described in this Policy. These safeguards include: contractual data protection clauses in agreements with international service providers; selection of service providers certified to internationally recognised security standards; and technical security measures applied to data in transit and at rest regardless of processing location.

9. Data Retention

k789 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by applicable law and licensing regulations:

• Account and KYC data: Retained for the duration of your active k789 account and for a minimum of 5 years following account closure, as required by standard AML and gaming licence record-keeping obligations.
• Financial transaction data: Retained for a minimum of 5 years from the date of the transaction in accordance with financial record-keeping requirements.
• Betting and gaming history: Retained for the duration of active account and for a minimum of 3 years following account closure for dispute resolution and compliance purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction in a support thread, unless the content relates to a formal dispute or compliance matter requiring longer retention.
• Marketing consent records: Retained for the duration of your active account or until consent is withdrawn, plus 1 year following withdrawal for compliance documentation purposes.
• Technical and analytics data: Anonymised or aggregated analytics data may be retained indefinitely. Raw server log data containing IP addresses is typically retained for a maximum of 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Where deletion is not immediately technically practicable — for example, in backup storage — the data is isolated from active processing and deleted at the next scheduled backup rotation.

10. Security Measures

k789 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• TLS 1.3 encryption for all data in transit between your browser and k789 servers.
• AES-256 encryption for sensitive personal data stored at rest.
• Role-based access controls limiting employee access to personal data to those with a documented need to access it.
• Two-factor authentication requirements for k789 staff accessing internal systems containing Member data.
• Regular penetration testing and vulnerability assessments by independent security specialists.
• Intrusion detection and monitoring systems providing real-time alerting on anomalous access patterns.
• Incident response procedures with defined escalation paths and notification timelines in the event of a data breach.

11. Cookies and Tracking Technologies

k789 uses the following types of cookies when you access k789.blog:

• Essential cookies: Required for the k789 platform to function. These include session cookies that maintain your logged-in state, security tokens that protect against cross-site request forgery, and preference cookies that remember your display settings. These cookies cannot be disabled without affecting core platform functionality.
• Analytics cookies: First-party analytics cookies collect aggregated, anonymised data about how visitors navigate k789.blog — including pages visited, time spent on each page, and navigation flows. This data is used exclusively to improve platform usability and is not shared with third-party advertising networks.
• Functional cookies: Cookies that remember your language preferences, responsible gaming reminder settings, and other optional personalisation choices you have made on the platform.

k789 does not use third-party advertising cookies, retargeting pixels, or behavioural tracking technologies from social media platforms on k789.blog. Cookie preferences can be managed through your browser settings. Note that disabling essential cookies will prevent you from logging in to your k789 account.

12. Minors and Age Restriction

k789 is strictly a 21-and-over platform. The k789 platform is not directed at individuals under the age of 21, and k789 does not knowingly collect personal data from anyone under this age. k789 implements age verification procedures at account registration and during KYC verification specifically to prevent under-age registration.

If k789 becomes aware that it has collected personal data from an individual who is under 21 years of age, k789 will immediately close the associated account, delete or securely destroy all personal data associated with that account, and return any deposited funds to the originating payment source. Where applicable, k789 may report the incident to relevant regulatory authorities.

Parents and guardians who become aware that a minor in their care may have registered a k789 account should contact k789 support at [email protected] immediately.

13. Your Data Rights

Subject to applicable law and the limitations described below, you have the following rights in relation to the personal data k789 holds about you:

To exercise any of the above rights, contact k789 data support at [email protected] with the subject line "Data Rights Request" and a description of the right you wish to exercise. k789 will respond within 30 calendar days of receiving a verifiable request. k789 may need to verify your identity before processing a data rights request to ensure the security of Member data.

Please note that the right to erasure is subject to limitations where k789 is legally required to retain data — for example, KYC documents and transaction records required under AML regulations cannot be deleted before the expiry of the statutory retention period even upon request.

14. Marketing Communications and Preferences

k789 may send registered Members promotional communications — including bonus offers, deposit match promotions, loyalty programme updates, and seasonal cricket betting promotions — via SMS to the registered mobile number and/or to the registered email address, where you have not opted out of such communications.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in the k789 account settings panel.
• Following the unsubscribe instruction included in any k789 marketing email.
• Replying STOP to any k789 marketing SMS message.
• Contacting k789 customer support and requesting removal from all marketing communications.

Opting out of marketing communications does not affect your receipt of transactional account communications — such as deposit confirmations, withdrawal processing notifications, and responsible gaming alerts — which are sent as part of the k789 service and cannot be unsubscribed from while your account is active.

15. Changes to This Privacy Policy

k789 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform features. Material changes to this Policy will be communicated to Members via email or prominent in-platform notification at least 14 days before the revised Policy takes effect, where practicable.

The current version of the Privacy Policy is always available at k789.blog/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the k789 platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

16. Contact and Data Enquiries

If you have any questions about this Privacy Policy, wish to exercise a data right, wish to withdraw consent for a specific processing activity, or wish to lodge a complaint about k789's handling of your personal data, please contact us using the following details:

Email: [email protected] (plain text — not a clickable link). Please include "Privacy Policy" or "Data Rights Request" in your subject line so your enquiry is routed to the correct team.

Live chat is available on all pages of k789.blog, 24 hours a day, 7 days a week, and may be used for general privacy enquiries.

If you are not satisfied with k789's response to a privacy complaint, you have the right to escalate the matter to the relevant regulatory authority under k789's international gaming licence. Contact details for the relevant authority are available from k789 customer support upon request.