kanz1 Privacy Policy & Data Protection Notice

This Privacy Policy ("Policy") describes how kanz1 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("you", "User", "Player") who access or use any part of the kanz1 online casino and sports betting platform, including the website at kanz1.bio, any associated mobile-optimised interfaces, customer support channels, and promotional communications.

kanz1 is committed to protecting the privacy and personal data of all users — particularly those accessing the platform from Pakistan, including players in Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and across the country. We recognise that data privacy is a matter of significant personal importance, and we take our obligations as a data handler seriously.

This Policy applies to all personal data processed by kanz1, regardless of the channel through which it was collected. It covers data provided directly by you during registration, data generated through your use of our services, and data obtained from approved third-party sources such as payment processors and identity verification providers.

This Policy should be read in conjunction with kanz1's Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall legal framework governing your use of the kanz1 platform.

For the purposes of this Privacy Policy, kanz1 acts as the data controller in respect of all personal data collected from registered users and website visitors. As data controller, kanz1 determines the purposes for which your personal data is processed and the manner in which that processing is carried out.

kanz1 operates under internationally recognised online gaming standards and is committed to maintaining the confidentiality, integrity, and security of all personal data in its possession. Our platform and data infrastructure are hosted on secure, encrypted servers with restricted access limited to authorised personnel on a documented need-to-know basis.

Where kanz1 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification services), those providers act as data processors and are contractually bound to process data only according to kanz1's instructions and in compliance with applicable data protection standards.

kanz1 collects personal data through several channels — directly from you when you register and use our platform, automatically when you interact with our website, and from approved third-party sources where necessary for compliance and verification purposes. The categories of data we collect include the following.

Registration & Identity Data

• Full name as it appears on your government-issued identification document.
• Date of birth used to verify that you meet the 21+ minimum age requirement.
• CNIC number (Computerised National Identity Card) or equivalent government-issued ID number, collected during mandatory identity verification.
• Residential address including city, province, and postcode for Pakistani players.
• Email address used as your primary login credential and communication channel.
• Mobile phone number used for two-factor authentication and account security alerts.
• Username and encrypted password — passwords are stored in hashed, salted form and are never accessible in plaintext, even by kanz1 staff.

Financial & Payment Data

• JazzCash / EasyPaisa account numbers linked to your kanz1 account for deposit and withdrawal processing.
• Bank account details (HBL, UBL, Meezan Bank, Raast, 1LINK) where provided for bank transfer transactions.
• Card details — kanz1 does not store full card numbers on its own servers; card payments are tokenised by our PCI-DSS-compliant payment processor.
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method references, retained for regulatory and AML compliance purposes.

Technical & Usage Data

• IP address and approximate geolocation at the time of login and account activity.
• Device type, operating system, and browser information collected automatically for security and platform optimisation purposes.
• Session timestamps, login history, and session duration records.
• Game play records including game titles accessed, bet amounts, outcomes, and account balance changes.
• Customer support interaction logs including live chat transcripts and email correspondence.

Verification Documents

• Copies of government-issued identification (CNIC, passport, or driving licence) submitted during KYC verification.
• Proof of address documents such as utility bills or bank statements not older than three months.
• Source of funds documentation where requested by the compliance team for high-value or unusual transactions.

kanz1 processes your personal data for specific, clearly defined purposes. We do not use your data for any purpose incompatible with those disclosed at the point of collection. The primary purposes for which kanz1 processes personal data are as follows.

kanz1 will never use your personal data to make solely automated decisions that produce significant legal or similarly significant effects on you without providing you the opportunity to request human review of that decision.

kanz1 relies on the following recognised legal bases for processing your personal data, as described in internationally accepted data protection frameworks:

• Contract Performance: Processing that is necessary to provide you with the kanz1 platform services, including account management, deposits, withdrawals, and game access.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including Know Your Customer (KYC) obligations, Anti-Money Laundering (AML) requirements, responsible gaming mandates, and tax reporting obligations.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, network and information security, product improvement, and business analytics — provided that such processing does not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing and promotional communications, where your specific, informed, and freely given consent has been obtained. You may withdraw consent for marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.

Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of any processing carried out prior to withdrawal. Where processing is based on legal obligation, kanz1 is not able to cease such processing in response to a withdrawal request, and the relevant data will be retained for the duration required by the applicable legal or regulatory obligation.

kanz1 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the relevant purpose.

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and international card payment processors receive the minimum financial and identity data necessary to process your transactions securely.
• Identity verification providers: Approved KYC and AML compliance service providers process identity documents on kanz1's behalf to verify your identity and age as required by regulatory obligations.
• Game software providers: Third-party game studios (including Pragmatic Play, Evolution Gaming, NetEnt, and Red Tiger) receive anonymised session tokens and game interaction data necessary to deliver their games through the kanz1 platform. These providers do not receive your full identity or financial data.
• Customer support platforms: Approved live chat and support ticketing service providers handle your support communications under strict data processing agreements with kanz1.
• Legal and regulatory authorities: kanz1 will disclose personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by law, court order, or in response to a lawful request from a competent authority. kanz1 will notify affected users of such disclosure where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kanz1's business, personal data held by kanz1 may be transferred to the acquiring entity, subject to equivalent privacy protections being maintained.

kanz1 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data is anonymised rather than deleted, the resulting anonymised datasets no longer constitute personal data and fall outside the scope of this Policy.

kanz1 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures are reviewed and updated on a regular basis to reflect evolving best practices in data security.

• Encryption in transit: All data transmitted between your device and kanz1's servers is protected using TLS 1.2 or higher encryption, enforced across all platform connections.
• Encryption at rest: Personal data stored on kanz1's servers is encrypted using AES-256 encryption. Encryption keys are managed using a dedicated key management system with strict access controls.
• Access controls: Access to personal data is restricted to authorised kanz1 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data protection training.
• Password security: User passwords are stored exclusively as salted cryptographic hashes. kanz1 staff cannot access or retrieve your password in plaintext form under any circumstances.
• Two-factor authentication: 2FA is available for all kanz1 player accounts and is strongly recommended. kanz1 staff accounts with access to personal data are required to use 2FA.
• Intrusion detection and monitoring: kanz1's platform is subject to continuous automated security monitoring, with alerts configured for suspicious login patterns, unusual transaction activity, and potential unauthorised access events.
• PCI-DSS compliance: Card payment processing is handled exclusively by PCI-DSS certified payment processors. kanz1 does not store raw card data on its own infrastructure.
• Data breach procedures: kanz1 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, kanz1 will notify affected users without undue delay and take all necessary remedial steps to contain and mitigate the breach.

kanz1 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. This section explains what cookies we use, why we use them, and how you can manage your cookie preferences.

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites function correctly, to improve efficiency, and to provide information to the website owner. kanz1 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period or until manually deleted).

Managing Your Cookie Preferences

Essential cookies are required for the kanz1 platform to function and cannot be disabled. You may manage your preferences for functional and analytics cookies through your browser settings. Most modern browsers allow you to view, block, or delete cookies — consult your browser's help documentation for specific instructions. Please note that disabling certain functional cookies may affect your platform experience, such as requiring you to re-enter preferences on each visit.

kanz1 does not use advertising or retargeting cookies, and does not share cookie-derived data with advertising networks or social media platforms.

As a kanz1 user, you hold a number of rights in relation to your personal data. kanz1 is committed to honouring these rights promptly and without unnecessary obstacles. Your rights are summarised below.

To exercise any of the above rights, contact kanz1's data protection team at [email protected] with the subject line "Privacy Rights Request", including your registered username and a description of your request. kanz1 will acknowledge your request within 2 business days and provide a full response within 30 calendar days. In complex cases, this period may be extended by a further 30 days, with notification provided to you.

The kanz1 platform is strictly intended for users aged 21 years and above. kanz1 does not knowingly collect personal data from individuals under the age of 21, and we take all reasonable steps to prevent minors from accessing or registering on the platform.

During the registration process, all users are required to confirm their date of birth and to submit identity verification documents that confirm their age. Any account found to belong to a person under the age of 21 will be immediately suspended, all funds in the account will be frozen pending investigation, and any winnings accrued will be forfeited in accordance with kanz1's Terms & Conditions.

kanz1 encourages all responsible adults to make use of available parental control tools and internet filtering software to prevent underage individuals from accessing gambling websites. We support Pakistan's wider societal commitment to protecting young people from gambling-related harm.

As an internationally operating online platform, kanz1 may process and store your personal data on servers and systems located outside of Pakistan. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to that applicable in your country of residence, kanz1 ensures that appropriate safeguards are in place to protect your data.

These safeguards include the use of standard contractual clauses approved by recognised data protection authorities, contractual obligations imposing equivalent data protection standards on the receiving entity, and technical measures including end-to-end encryption that protect data in transit across international borders.

kanz1's core platform infrastructure is hosted on enterprise-grade cloud servers maintained by reputable providers with ISO 27001 certification and established data security track records. All data processing agreements with international service providers include provisions ensuring that your personal data is processed solely for the purposes disclosed in this Policy and is not retained beyond the periods specified herein.

If you would like further information about the specific safeguards applied to international transfers of your personal data, please contact our data protection team at [email protected].

kanz1 reviews and updates this Privacy Policy on a periodic basis to reflect changes in our data processing practices, applicable laws and regulations, and the services we offer. Any material changes to this Policy will be communicated to registered users via the email address on file and/or via a prominent notification displayed upon next login to the platform.

The updated Policy will be published on this page with a revised "Last Updated" date and version number. We encourage you to review this page periodically to stay informed of how kanz1 handles your personal data. The version history is maintained internally and is available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way kanz1 handles your personal data, we encourage you to contact our data protection team directly in the first instance. We are committed to resolving all privacy-related enquiries in a fair, transparent, and timely manner.

If you are not satisfied with kanz1's response to your privacy concern or data rights request, you have the right to escalate your complaint to the relevant data protection supervisory authority or independent dispute resolution body applicable in your jurisdiction. kanz1 will cooperate fully with any investigation conducted by a competent supervisory authority and will provide all relevant records and documentation upon receipt of a lawful request.

kanz1 is committed to maintaining the trust and confidence of all its players — from Karachi to Lahore, Islamabad to Faisalabad — and views responsible, transparent data handling as a fundamental pillar of that commitment. We thank you for taking the time to read and understand how your personal data is managed on our platform.