kk38 Privacy Policy

1. Who We Are and How to Contact Us

kk38 (hereinafter "kk38", "we", "us", or "our") operates the online casino and sports betting platform accessible at kk38.net and any associated mobile applications or services. kk38 is the data controller responsible for personal data collected through the platform.

This Privacy Policy applies to all individuals who access, register on, or use the kk38 platform, including players located in Karachi, Lahore, Islamabad, Faisalabad, and any other location from which kk38 is accessed. For all privacy-related enquiries, you may contact the kk38 Data Protection team via the live chat support channel, which is available around the clock, or by email at [email protected].

2. Categories of Personal Data We Collect

kk38 collects the following categories of personal data from its users. The specific data points collected at any given time depend on the stage of account lifecycle and the services being used:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, CNIC or passport number, selfie or photograph	Registration and KYC verification
Contact Data	Pakistani mobile number, email address, residential address	Registration
Financial Data	JazzCash / EasyPaisa account reference, bank account details (masked), transaction history in PKR	Deposit and withdrawal processing
Gaming Activity Data	Bets placed, games played, session durations, win/loss records, bonus usage	Ongoing platform use
Technical Data	IP address, device type, browser type and version, operating system, login timestamps	Each platform session
Communications Data	Live chat transcripts, support ticket content, email correspondence	When you contact support
Responsible Gaming Data	Deposit limit settings, self-exclusion status, session time preferences	When responsible gaming tools are activated

kk38 does not intentionally collect sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, health data beyond what is strictly necessary for responsible gaming assessments, or biometric data — unless required by applicable law or regulatory mandate.

3. How We Collect Your Personal Data

kk38 collects personal data through the following channels:

• Directly from you: Information you provide during registration, KYC submission, deposit and withdrawal requests, support interactions, and any forms or surveys completed on the platform.
• Automatically during platform use: Technical and gaming activity data collected via server logs, cookies, session tracking technology, and similar tools whenever you access or interact with the kk38 platform.
• From third-party service providers: Identity verification data from KYC partners, fraud risk signals from anti-fraud systems, and transaction confirmation data from payment processors including JazzCash and EasyPaisa.
• From publicly available sources: Where necessary for fraud prevention or AML compliance, kk38 may cross-reference your information against publicly available sanctions lists, PEP (Politically Exposed Persons) databases, or adverse media sources.

4. How We Use Your Personal Data

kk38 uses your personal data for the following purposes:

4.1 Account Management and Platform Operation

To create and manage your kk38 account, process your kk38 login sessions, provide access to casino games and sports betting markets, and personalise your experience on the platform. Without this processing, kk38 cannot provide its services to you.

4.2 Payment Processing

To process deposits made via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card payments, and to process withdrawal requests back to those payment methods. Financial data is processed under strict security protocols and is never stored in unencrypted form.

4.3 Identity Verification and KYC Compliance

To verify your identity in accordance with anti-money laundering (AML) regulations and to confirm that you meet the minimum age requirement of 21 years. This processing is mandatory and accounts cannot be fully activated without successful KYC completion.

4.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, money laundering, unauthorised account access, and other unlawful conduct on the kk38 platform. Technical data including IP addresses and device fingerprints are used for this purpose.

4.5 Responsible Gaming

To monitor gaming patterns for signs of problem gambling behaviour, to enforce responsible gaming limits set by players, to process self-exclusion requests, and to comply with the platform's responsible gaming obligations.

4.6 Customer Support

To respond to your support queries, investigate complaints, process account recovery requests, and improve the quality of kk38's customer service based on interaction history.

4.7 Legal and Regulatory Compliance

To comply with applicable laws, regulations, and lawful orders from regulatory or law enforcement authorities, including retention of transaction records as required by AML regulations.

4.8 Platform Improvement

To analyse aggregated, anonymised usage data to understand how the kk38 platform is used, identify technical issues, and improve game offerings, platform performance, and user experience.

5. Legal Basis for Processing

kk38 processes personal data on the following legal grounds, depending on the specific processing activity:

• Contract performance: Processing necessary to deliver the services described in the kk38 Terms and Conditions to which you have agreed.
• Legal obligation: Processing required to comply with AML regulations, age verification requirements, data retention laws, and lawful regulatory orders.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics, where kk38's interests do not override your fundamental privacy rights.
• Consent: Where kk38 sends optional marketing communications, it will seek your prior consent and you may withdraw this consent at any time without affecting the operation of your account.

6. Data Sharing and Disclosure

kk38 may share your personal data with the following categories of recipients:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, and Mastercard processing networks, to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity documents and perform AML screening.
• Fraud prevention and security providers: Third-party systems used to detect fraudulent account activity, bonus abuse, and unauthorised access attempts.
• Game content providers: Where necessary to facilitate your access to licensed game content, limited technical data (such as session tokens) may be shared with certified game providers.
• Regulatory and law enforcement authorities: Where kk38 is legally required to disclose information pursuant to a lawful order, court order, or regulatory requirement. kk38 will notify the affected user where legally permitted to do so.
• Professional advisors: Legal counsel, auditors, and other professional advisors under strict confidentiality obligations, where necessary for legitimate business and compliance purposes.

All third-party service providers engaged by kk38 are subject to data processing agreements requiring them to handle your data in accordance with applicable privacy standards and solely for the purposes for which it was shared.

7. International Data Transfers

Some of kk38's third-party service providers are located outside Pakistan. Where personal data is transferred to providers in other countries, kk38 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that which applies within Pakistan. Safeguards may include standard contractual clauses, adequacy decisions, or other legally recognised transfer mechanisms.

kk38 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing the necessary technical and contractual safeguards.

8. Data Retention

kk38 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs: Retained for three (3) years from the date of the session or wager.
• Support communications: Retained for two (2) years from the date of the final interaction in a support thread.
• Technical and log data: Typically retained for twelve (12) months unless a security investigation requires longer retention.

When personal data is no longer required, kk38 will securely delete or anonymise it in accordance with its data destruction procedures.

9. Cookies and Tracking Technologies

The kk38 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your logged-in session state, apply your preferences, and collect aggregated analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These cannot be disabled without breaking core functionality such as your kk38 login session and game state preservation.
• Functional cookies: Used to remember your preferences (such as language or display settings) and to personalise your experience on the kk38 platform.
• Analytics cookies: Used to collect anonymised data about how users navigate the platform, which pages are visited most frequently, and where technical errors occur. This data helps kk38 improve the platform experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats against the kk38 platform.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the kk38 platform. Third-party analytics or advertising cookies are not deployed on the kk38 platform.

10. Security Measures

kk38 takes the security of your personal data seriously and implements the following technical and organisational measures to protect it:

• 256-bit TLS (Transport Layer Security) encryption for all data transmitted between your device and the kk38 servers.
• Encryption at rest for all stored sensitive personal and financial data.
• Role-based access controls limiting employee access to personal data to those whose job functions require it.
• Regular penetration testing and security audits of the kk38 platform infrastructure.
• Multi-factor authentication (MFA) for all kk38 administrative system access.
• Incident response procedures for the detection, containment, and notification of any personal data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kk38 will notify affected users without undue delay, and in accordance with applicable notification obligations.

11. Your Data Rights

As a kk38 user, you have the following rights in respect of your personal data. Requests may be submitted via the live chat support channel or by email to [email protected]. kk38 will respond to all verified data subject requests within thirty (30) days:

• Right of access: You may request a copy of the personal data kk38 holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to kk38's legal retention obligations.
• Right to restriction of processing: You may request that kk38 restrict its processing of your data in certain circumstances, for example while a correction request is being assessed.
• Right to data portability: You may request a machine-readable copy of the personal data you have provided to kk38, where processing is carried out by automated means.
• Right to object: You may object to processing carried out on the basis of legitimate interests. kk38 will cease such processing unless compelling grounds exist that override your interests.
• Right to withdraw consent: Where processing is based on consent (such as marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

Please note that certain rights are subject to legal exceptions — for example, kk38 cannot erase data that it is legally required to retain for AML compliance purposes. Where kk38 is unable to fulfil a request in full, it will explain the reason.

12. Children's Privacy

The kk38 platform is strictly intended for adults aged 21 years and above. kk38 does not knowingly collect personal data from individuals below this age. If kk38 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended and all associated data will be deleted in accordance with kk38's data destruction procedures, except where retention is required by law.

If you believe that an underage individual has registered on the kk38 platform, please notify kk38 immediately via live chat support so that the matter can be investigated and resolved without delay.

13. Changes to This Privacy Policy

kk38 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or platform services. Material changes will be communicated to registered users via their registered mobile number or email address at least seven (7) days prior to the change taking effect, where operationally practicable.

The effective date at the top of this document indicates when the current version was last updated. Continued use of the kk38 platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms. We recommend reviewing this page periodically to stay informed of any changes.

14. Contact and Complaints

For any privacy-related questions, data subject requests, or concerns regarding how kk38 handles your personal data, please contact the kk38 Data Protection team through the following channels:

• Live Chat: Available 24/7 on the kk38 platform — the fastest channel for all support and privacy enquiries.
• Email: [email protected] — for written privacy requests and formal complaints.

If you are not satisfied with kk38's response to a privacy complaint, you have the right to escalate your complaint to the relevant data protection authority or supervisory body in the jurisdiction applicable to your circumstances. kk38 will cooperate fully with any such authority in accordance with its legal obligations.