Privacy Policy – How KKLion Protects Your Data in Pakistan

01 Who We Are

kklion ("kklion", "we", "us", "our") is an online gaming platform operating at kklion.biz, designed specifically for Pakistani players and offering games including crash games, casino slots, live casino, virtual sports, fishing games, Ludo, and sports betting. All transactions on kklion are processed in Pakistani Rupees (PKR).

kklion is the data controller for the personal information collected through the kklion platform. This means we are responsible for deciding how and why your personal data is collected and used, and we are accountable for ensuring that collection and use complies with applicable data protection standards.

This Privacy Policy applies to all current and former members of kklion, all visitors to the kklion.biz website, and all persons who contact kklion's support team. By using kklion, you acknowledge that you have read and understood this policy.

02 What Data We Collect

kklion collects the minimum personal data necessary to operate the platform, process payments, and meet our legal obligations. The following table summarises the main categories of data we collect and what each category includes:

kklion does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data as part of the standard registration or gaming process. If we ever need to collect any such data for a specific purpose (for example, for enhanced responsible gaming support), we will explain the reason clearly and request your explicit consent before doing so.

03 How We Collect Your Data

kklion collects your personal data through several channels, each of which is described below so you have a complete picture of where your data comes from:

• Registration: When you create a kklion account, you directly provide your name, mobile number, date of birth, and initial payment method details. This is the primary point at which we collect your identity and contact data.
• Account Activity: When you deposit, place bets, withdraw winnings, or use any feature of the kklion platform, we automatically record the relevant transaction and activity data associated with your account.
• Payment Processing: When you complete a deposit or request a withdrawal, payment data is shared between kklion and our certified payment processor partners. kklion receives a tokenised reference to your payment method – we do not receive or store your full wallet PIN, card number, or bank account credentials.
• Support Interactions: When you contact kklion support via Live Chat, email at support@kklion.biz, or WhatsApp, the content of that communication and any information you provide during support is recorded so we can resolve your query and refer to the conversation if needed in future.
• Device and Browser: When you visit kklion.biz, our servers automatically collect technical data about the device and browser you are using, including your IP address, device type, browser version, and operating system. This happens whether or not you are logged into your account.
• Cookies and Tracking Technologies: kklion uses cookies and similar tracking technologies to remember your preferences, keep you logged in, and understand how you use the platform. Full details are in Section 6 of this policy.
• Verification Documents: If kklion requests identity or payment verification, you may submit documents such as a CNIC copy or a screenshot of your payment wallet. These documents are collected and stored securely for the purpose of completing the verification check.

04 Why We Use Your Data

kklion uses your personal data for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the reasons it was originally collected. The main purposes for which kklion processes your personal data are:

• To operate your kklion account: We use your identity and contact data to create, maintain, and manage your account, process logins, and ensure the account functions correctly. Without this processing, it would not be possible for you to use the kklion platform at all.
• To process PKR deposits and withdrawals: Financial data and transaction data are used to process your deposits via Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard, and to credit your PKR winnings back to your registered payment method. This processing is necessary to fulfil our contract with you.
• To operate games and betting fairly: Gaming activity data is used to operate crash games, casino games, live casino, sports betting, and all other sections of the platform, to settle bets accurately, and to maintain game history records that you can review at any time from your account.
• To verify your identity and prevent fraud: kklion uses identity data, financial data, and device data to detect and prevent fraudulent accounts, multiple account creation, bonus abuse, money laundering, and other prohibited activities. This is a legal obligation as well as a responsibility to our honest members.
• To provide customer support: Communications data is used to understand and resolve support queries, complaints, and disputes. Support records are also used to improve our processes and training.
• To send you relevant communications: If you have opted in to receive promotional communications from kklion, your contact data is used to send you information about bonuses, new games, tournaments, and relevant platform updates. You can opt out of marketing communications at any time through your account settings or by contacting support.
• To comply with legal obligations: kklion is required to retain certain records for anti-money laundering compliance, tax purposes, and other legal obligations. We process your data for these purposes only to the extent required by applicable law.
• To improve the platform: Anonymised and aggregated usage data is used to understand how members use the kklion platform so we can improve features, fix issues, and develop the platform in ways that are genuinely useful for Pakistani players.

05 Payment Data & PKR Transactions

Because kklion handles real PKR transactions through Pakistani payment methods, payment data privacy deserves its own section. Here is a clear account of how kklion handles your payment information.

When you make a deposit or request a withdrawal using Easypaisa, JazzCash, NayaPay, SadaPay, IBFT bank transfer, or Visa/Mastercard, the actual processing of that transaction is carried out by our certified payment processor partners. These partners are PCI-DSS compliant, meaning they meet the international security standard for organisations that handle card and payment data.

kklion itself stores only a tokenised reference to your payment method – a non-sensitive identifier that allows us to link transactions to your account and send withdrawals to the correct destination. kklion does not store your full Easypaisa PIN, JazzCash wallet credentials, full card number, CVV, or IBFT account credentials on our servers at any point.

• Transaction Records: kklion retains records of all PKR transactions – deposits, withdrawals, and bets – for a minimum of 5 years. This retention is required for financial compliance purposes and is not used for any marketing purpose.
• Payment Method Matching: As stated in our Terms and Conditions, withdrawals are processed to the same payment method used for deposits. This matching is a standard anti-money laundering control and the payment data used for this purpose is not accessible for any other purpose.
• Third-Party Payment Processors: Our payment processor partners have access only to the data they need to process the specific transaction. They are contractually prohibited from using kklion member payment data for any purpose other than completing the requested transaction.

06 Cookies & Tracking Technologies

kklion uses cookies – small text files stored on your device – and similar tracking technologies to make the platform work properly and to understand how it is being used. Here is a breakdown of the types of cookies we use:

• Essential Cookies: These cookies are necessary for the kklion platform to function. They keep you logged in during your session, remember your active game state, and enable secure payment sessions. You cannot opt out of essential cookies without stopping the platform from working.
• Functional Cookies: These remember your preferences on kklion, such as your preferred language, your notification settings, and your last visited section. They make your experience more personalised without being used for tracking across other websites.
• Analytics Cookies: kklion uses anonymised analytics data to understand which sections of the platform are most used, how players navigate between sections, and where technical issues are occurring. This data is aggregated and does not identify individual users. It is used exclusively to improve the kklion platform.
• Session Cookies: These are temporary cookies that expire when you close your browser. They are used for security purposes, including protecting your session against cross-site request forgery attacks.

kklion does not use third-party advertising cookies or tracking pixels that follow your activity across websites you visit outside of kklion.biz. The cookie banner displayed when you first visit kklion.biz gives you the option to accept or decline non-essential cookies. Essential cookies cannot be declined as they are required for the platform to function.

You can also manage cookies through your browser settings. Most browsers allow you to view, delete, and block cookies from specific websites. Note that blocking essential cookies will prevent you from logging in or using the kklion platform.

07 Who We Share Your Data With

kklion does not sell your personal data. We share it only where necessary to operate the platform, meet legal obligations, or protect the safety of our members. The categories of recipients who may receive your personal data are:

• Payment Processor Partners: Certified payment processors who handle Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and Visa/Mastercard transactions on behalf of kklion. These processors receive only the payment data necessary to complete the specific transaction and are contractually bound to use it for no other purpose.
• Identity Verification Services: In cases where enhanced verification is required, kklion may use third-party identity verification services. These services verify the authenticity of documents and confirm identity details. They do not retain your data beyond the verification check.
• Technology Infrastructure Providers: Providers of hosting, cloud storage, and cybersecurity services who support kklion's technical operations. These providers process data on kklion's behalf and are contractually required to protect it to the same standard as kklion itself.
• Customer Support Tools: kklion uses secure customer support software to manage Live Chat, email, and WhatsApp communications. Support conversation data is processed through these tools, which are configured to meet our privacy standards.
• Legal and Regulatory Authorities: kklion may share member data with law enforcement agencies, financial intelligence authorities, or regulatory bodies where legally required to do so – for example, in response to a valid legal order or as part of anti-money laundering reporting obligations. kklion will only share the specific data required by the relevant authority and will not go beyond what is legally necessary.
• Fraud Prevention Services: Industry-standard fraud detection and prevention services may process transaction and device data to identify suspicious patterns. These services are used solely for protecting kklion members and the platform from fraudulent activity.

All third parties with whom kklion shares personal data are required to handle that data confidentially, use it only for the specific purpose for which it was shared, and meet appropriate data security standards. kklion does not authorise any third party to use your personal data for their own marketing purposes.

08 How We Protect Your Data

kklion takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, loss, alteration, or disclosure. Key security measures in place at kklion include:

• SSL Encryption: All data transferred between your device and kklion.biz is encrypted using 256-bit SSL (Secure Sockets Layer) technology. The padlock icon in your browser address bar confirms that your connection to kklion is encrypted at all times.
• Secure Data Storage: Personal data is stored on servers protected by firewalls, intrusion detection systems, and access controls that restrict access to authorised kklion personnel only. Server access is logged and monitored.
• Password Security: Account passwords on kklion are stored in a hashed format – meaning that even kklion's own staff cannot read your password. In the event of a data breach, hashed passwords cannot be directly used by attackers.
• Payment Tokenisation: As described in Section 5, kklion stores only tokenised references to payment methods rather than full credentials. This means that even if kklion's systems were ever compromised, your full payment credentials would not be exposed.
• Access Controls: kklion staff access to personal data is restricted on a need-to-know basis. Support agents can access the data they need to resolve your query; they cannot access financial credentials or unrelated account data.
• Regular Security Reviews: kklion conducts regular internal security reviews and works with external cybersecurity specialists to identify and address potential vulnerabilities before they can be exploited.
• Incident Response: In the event of a data breach that poses a risk to your personal data, kklion has an incident response procedure in place to contain the breach, assess the impact, and notify affected members as quickly as possible.

09 How Long We Keep Your Data

kklion retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your kklion membership plus 5 years following account closure. The 5-year post-closure retention is required for financial compliance and anti-money laundering obligations.
• Transaction and Financial Records: Retained for a minimum of 5 years from the date of each transaction, in line with standard financial record-keeping requirements.
• Gaming Activity Records: Retained for 5 years from the date of each gaming session or bet.
• Support Communications: Retained for 3 years from the date of the communication, to allow for follow-up and dispute resolution reference.
• Identity Verification Documents: Retained for 5 years from the date of submission or from account closure, whichever is later.
• Device and Technical Data (Logs): Retained for 12 months from the date of collection, unless specific data is required to be retained longer for a fraud investigation or legal matter.
• Marketing Consent Records: Retained for 3 years from the date you gave or withdrew consent, so we can demonstrate compliance with your preferences.

When data reaches the end of its retention period and there is no legal or contractual reason to retain it further, kklion securely deletes or anonymises it. Anonymised data – which cannot be used to identify any individual – may be retained indefinitely for statistical and analytical purposes.

10 Your Privacy Rights

As a kklion member whose personal data we hold, you have a number of rights regarding that data. kklion respects and facilitates all of the following rights:

To exercise any of these rights, contact kklion at support@kklion.biz with the subject line "Privacy Request". We will respond within 30 days after verifying your identity. There is no charge for exercising your rights in normal circumstances.

11 Children's Privacy

kklion is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. The registration process includes an age confirmation step, and kklion uses age verification as part of its account verification process.

If kklion becomes aware that personal data has been collected from an individual under the age of 18, we will immediately suspend the associated account, delete the collected data, and take steps to prevent any further data collection from that individual.

If you are a parent or guardian and believe that your child has created a kklion account, please contact us immediately at support@kklion.biz and we will take prompt action to address the situation.

12 Policy Updates & Contact

kklion may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify all active members via a notice displayed on the kklion platform and/or a message sent to your registered mobile number. The effective date of the current version is always shown at the top of this document.

We encourage you to review this Privacy Policy periodically. Your continued use of kklion after a policy update takes effect constitutes your acceptance of the revised policy.

This Privacy Policy is written in English (en-PK). In the event of any discrepancy between a translated version and this English version, the English version shall take precedence.