Privacy Policy — kk32 Platform

This Privacy Policy (hereinafter "Policy") sets out the manner in which kk32 (hereinafter "kk32", "we", "us" or "our") collects, processes, stores, shares and protects personal data relating to users (hereinafter "User", "you" or "your") of the kk32 platform accessible at https://kk32.cam (the "Platform").

kk32 is an English-language online gaming information platform serving Pakistani audiences. We are committed to handling personal data with integrity, transparency and in accordance with applicable data protection principles. This Policy applies to all data processing activities carried out by kk32 in connection with the Platform and any services provided through it.

By accessing or using the Platform, you acknowledge that you have read, understood and agreed to the data processing practices described in this Policy. If you do not agree with any part of this Policy, you should discontinue your use of the Platform immediately.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information relating to an identified or identifiable natural person, including name, email address, device identifiers and account credentials.
• "Processing" — any operation performed on personal data, including collection, storage, use, disclosure, erasure or destruction.
• "Data Controller" — the entity that determines the purposes and means of processing personal data. kk32 is the Data Controller for personal data collected through the Platform.
• "Data Processor" — a third party that processes personal data on behalf of the Data Controller under a binding data processing agreement.
• "Consent" — freely given, specific, informed and unambiguous indication of a User's agreement to the processing of their personal data for a stated purpose.
• "Cookies" — small text files placed on a User's device by a website to store and retrieve information about the User's browsing behaviour and preferences.
• "KYC" — Know Your Customer; identity and age verification procedures conducted to comply with anti-money laundering (AML) and regulatory obligations.

kk32 acts as the Data Controller in respect of personal data collected and processed through the Platform. As Data Controller, kk32 determines the purposes for which personal data is collected and the means by which it is processed.

For all data protection enquiries, including requests to exercise your rights as a data subject, please contact us using the details provided in Section 16 (Contact Us) of this Policy. We will respond to verified data subject requests within the timeframes required by applicable law.

kk32 may collect and process the following categories of personal data:

kk32 collects personal data through the following means:

• Direct provision by you — when you register an account, complete KYC verification, contact our support team, submit a form or participate in a promotion, you provide data directly to us.
• Automated technical collection — certain technical and usage data is collected automatically when you access the Platform, including IP address, device identifiers and browsing behaviour data collected through cookies and similar technologies.
• Third-party verification services — where KYC verification is conducted using third-party identity verification providers, those providers may share the results of verification checks with us. Such providers operate under their own privacy policies and are bound by data processing agreements with kk32.
• Payment processing partners — transaction data is shared with us by payment processing partners in connection with deposits and withdrawals. Payment providers retain their own data independently and are subject to their own privacy policies.

kk32 processes personal data only where a valid legal basis exists. The applicable legal bases for our processing activities are as follows:

• Contractual necessity — processing required to perform the contract with you, including delivering platform services, managing your account and processing payments;
• Legal obligation — processing necessary to comply with applicable legal obligations, including KYC/AML requirements, financial record-keeping and regulatory reporting;
• Legitimate interests — processing carried out for purposes of fraud prevention, platform security, analytics and service improvement, where those interests are not overridden by your data protection rights;
• Consent — where you have provided explicit consent for a specific processing purpose, such as receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

kk32 uses collected personal data for the following purposes:

• To create, maintain and manage your user account on the Platform;
• To verify your identity and age through KYC procedures, as required by regulatory obligations;
• To process deposits, withdrawals and other financial transactions associated with your account;
• To deliver customer support, including responding to enquiries, complaints and responsible gambling requests;
• To send account-related communications, including transaction confirmations, security alerts and policy update notices;
• To send promotional communications where you have provided consent, and to manage your communication preferences;
• To detect, investigate and prevent fraudulent activity, money laundering, account abuse and other prohibited conduct;
• To monitor and improve the performance, functionality and security of the Platform;
• To comply with applicable legal and regulatory obligations, including record-keeping requirements and law enforcement requests made in accordance with applicable law;
• To enforce our Terms & Conditions and other applicable policies.

kk32 does not use personal data for automated decision-making processes that produce legal or similarly significant effects on users without providing appropriate safeguards, unless required by law.

kk32 does not sell, rent or trade your personal data to third parties for their independent marketing purposes. Personal data may be shared only in the following circumstances:

• Service providers and data processors — trusted third-party providers engaged to deliver specific platform functions (such as KYC verification services, payment processing, IT infrastructure, analytics and customer support tools) who are contractually bound to process data only on our instructions and in accordance with this Policy;
• Legal and regulatory compliance — where kk32 is required by applicable law, court order, regulatory requirement or law enforcement request to disclose personal data. We will endeavour to notify you of such disclosure where legally permitted to do so;
• Business transfers — in the event of a merger, acquisition, restructuring or sale of all or part of kk32's business, personal data may be transferred as part of that transaction, subject to equivalent privacy protections being maintained by the acquiring entity;
• Protection of rights — where disclosure is necessary to protect the rights, property or safety of kk32, its users or the public, including fraud prevention and credit risk assessment.

kk32 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns and support security functions. The categories of cookies used on the Platform are as follows:

• Strictly necessary cookies — required for the Platform to function correctly. These cookies enable core features such as session management, authentication and security. They cannot be disabled without significantly impairing Platform functionality.
• Analytical / performance cookies — used to collect anonymised information about how users interact with the Platform, enabling us to identify usage trends, measure performance and improve the user experience. These cookies do not identify individual users.
• Functional cookies — used to remember your preferences and settings (such as language preference and display options) to provide a more personalised experience on subsequent visits.
• Marketing cookies — used, where you have provided consent, to deliver relevant content and track the effectiveness of promotional communications. You may withdraw consent for marketing cookies at any time through your account settings or browser controls.

You may manage or disable cookies through your browser settings at any time. Please note that disabling certain categories of cookies may affect the functionality and performance of the Platform.

kk32 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods vary by data category, as outlined below:

• Account data — retained for the duration of the active account relationship and for a defined period following account closure, as required for legal and regulatory compliance;
• Transaction and financial records — retained for the period required by applicable financial record-keeping obligations, typically a minimum of five years from the date of the transaction;
• KYC documentation — retained for the period required by applicable AML and identity verification regulations following the termination of the account relationship;
• Support and communication records — retained for a period sufficient to enable dispute resolution and quality assurance reviews, after which they are securely deleted;
• Technical and usage data — typically retained in anonymised or aggregated form following the expiry of the defined retention period for identifiable usage data.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

kk32 implements appropriate technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of passwords using industry-standard one-way hashing algorithms — we do not store passwords in plaintext;
• Access controls ensuring that personal data is accessible only to authorised personnel with a legitimate need;
• Regular security assessments and monitoring of Platform infrastructure;
• Staff training on data protection obligations and security procedures.

Notwithstanding these measures, no method of data transmission over the internet or electronic storage is completely secure. kk32 cannot guarantee the absolute security of your personal data. In the event of a security incident that poses a significant risk to your rights and freedoms, kk32 will notify you and any relevant supervisory authority in accordance with applicable law.

kk32 may transfer personal data to service providers or processors located outside Pakistan. Where such transfers occur, kk32 takes appropriate steps to ensure that your personal data receives adequate protection equivalent to that provided under this Policy, including by implementing contractual safeguards with data processors located in third countries.

By using the Platform, you acknowledge that your personal data may be processed in jurisdictions outside Pakistan. We will ensure that any such transfers are conducted in compliance with applicable data protection principles and that your rights as a data subject are not diminished.

Subject to applicable data protection law, you hold the following rights in respect of your personal data held by kk32. You may exercise any of these rights by contacting us using the details in Section 16 of this Policy. We will respond to verified requests within the timeframes required by law and without undue delay.

To exercise any of the above rights, please contact us at [email protected]. We may require you to verify your identity before processing a data subject request to ensure that personal data is not disclosed to an unauthorised party.

The kk32 Platform is intended solely for adults aged 18 or above, or the higher minimum age required by the applicable operator or licence jurisdiction. kk32 does not knowingly collect personal data from individuals under the minimum age threshold.

If kk32 becomes aware that personal data has been collected from a minor without verified parental consent, we will take immediate steps to delete that data from our records and close any associated account. If you have reason to believe that a minor has registered on the Platform or submitted personal data to kk32, please notify us immediately at [email protected].

kk32 reserves the right to update or amend this Privacy Policy at any time. Where material changes are made, we will provide advance notice to registered users through in-Platform notifications or by email to the address associated with your account, where reasonably practicable.

The current version of this Policy, including the effective date of the most recent revision, is always accessible at https://kk32.cam/privacy-policy. Your continued use of the Platform following publication of an updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and request account closure.

If you have any questions, concerns or requests relating to this Privacy Policy, or if you wish to exercise any of your data subject rights, please contact the kk32 Data Protection team through the following channels:

kk32 is committed to resolving all privacy-related queries transparently and efficiently. We serve players across Pakistan — including Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — and take our responsibility to protect the data of every user equally seriously, regardless of location.