LEGAL REFERENCE

How k11win Handles Your Personal Data

At k11win, your personal data belongs to you — we collect only what we need to run your account, process your deposits through JazzCash, Easypaisa, SadaPay or Raast...

Transparent Data UseSecure Account StoragePakistan Region ScopeYour Rights, Clearly StatedNo Third-Party Selling
k11win How k11win Handles Your Personal Data

What We Collect and Why We Hold It

Service availability is jurisdiction-dependent. Users are responsible for checking local law before access.

REACH OUR PRIVACY DESK

How to Contact Us About Your Data

Our privacy team handles data requests, correction notices, and deletion queries. Reach us through any of the channels below and we will...

Email Privacy Desk Send your data request or correction notice to...
Live Chat Support Open the chat window inside your k11win account...
Callback Request Submit your phone number through the account settings...
HOW WE PROTECT YOU

The Standards Behind Our Privacy Commitments

We have built our data practices around six principles so you can verify our approach rather than simply take our word for it. Each commitment below reflects a concrete operational choice we...

Encrypted Storage

All account data — including payment method references for JazzCash and Easypaisa — is stored using AES-256 encryption at rest. Keys are rotated on a fixed schedule independent of account activity cycles.

Access Controls

Internal access to personal records is role-restricted. Staff who handle payment processing cannot view identity documents, and identity verification agents do not see full payment rail identifiers in their interface.

Breach Notification

If a data incident ever affects your account, we will notify you directly within 72 hours and explain what was exposed, what we did to contain it, and what steps we recommend on your side.

Third-Party Limits

Payment processors such as SadaPay and Raast receive only the minimum data needed to complete your transaction. They are contractually bound to the same retention and deletion standards we apply internally.

Cookie Transparency

We use session cookies to keep you logged in and analytics cookies to measure page performance. You can review and adjust cookie preferences from the footer of any page without affecting your account access.

Policy Review Cycle

This privacy policy is reviewed every six months. When material changes are made, we send an in-app notification and post a dated changelog so you can see exactly what changed and when.

How This Policy Aligns Across Our Platform

We apply the same data handling standards site-wide. The table below shows how the commitments in this policy match up with the practices described in our related policy...

Account Registration DataCollected at signup and governed by this policy; the same scope applies in our terms of service document.
Payment Rail IdentifiersJazzCash, Easypaisa, SadaPay and Raast references are handled identically whether the transaction originates from a deposit or a withdrawal flow.
Session and Device LogsRetention periods stated here match the periods referenced in our cookie policy and account security documentation.
Third-Party ProcessorsProcessor obligations described here are mirrored in the data processing addenda referenced in our terms document.
User Rights RequestsThe seven-day resolution window applies across all request types — correction, access, and deletion — consistently with our support commitment policy.
Breach Notification TimelineThe 72-hour notification window stated here is consistent with the incident response commitment outlined in our platform security page.
Policy Update NoticeThe six-month review cycle and in-app changelog notice described here match the update cadence stated in our terms of service.
PRIVACY DESIGN CHOICES

Key Elements Shaping How We Built This Policy

Six deliberate design choices define how our privacy framework feels to use. These are not aspirational statements — each one reflects a specific decision we made when building...

Plain Language First We wrote this policy in clear Pakistani English rather than...
Minimal Data Collection We collect only what is needed for account function and...
Your Request, Your Timeline Data access and deletion requests are acknowledged within one working...
Localised Compliance Scope Our data practices are calibrated for supported regions in Pakistan...
No Passive Consent We do not treat continued account use as blanket consent...
Auditable Change History Every version of this policy is archived and accessible. If...

Frequently Asked Questions About Our Privacy Policy

We collect your name, email address, phone number, and the payment identifiers associated with your chosen method — JazzCash, Easypaisa, SadaPay or Raast. We also log device type and session data to protect your account from unauthorised access.

We share only what payment processors need to complete your transaction. Processors like SadaPay and Raast receive transaction-specific data only and are contractually barred from using it for any purpose beyond completing that single payment.

Account data is retained for as long as your account is active and for the period required by applicable financial record-keeping obligations in supported Pakistan regions. You can request deletion once your account is closed and obligations are met.

Yes. Contact our privacy desk by email or live chat, and we will compile your data record and deliver it to you within seven working days. The record will include account details, transaction references, and session log summaries.

On account closure we begin a deletion process covering personal identifiers and session records. Payment references tied to regulatory retention obligations are held for the legally required period and then permanently deleted from our systems.

Send a correction request to our privacy desk with your account ID and the specific field you need updated. We will verify the change, apply it within seven days, and send you a written confirmation that the correction has been made.

Yes. When we make material changes, you will receive an in-app notification and we will post a dated entry in our policy changelog. We do not treat silence as acceptance — we require you to acknowledge significant changes before they take effect on your account.