Privacy Policy — ko37

01 Who We Are

ko37 operates the online casino and sports betting platform available at ko37.net, providing Pakistani players with cricket betting, PSL markets, live casino tables, slot games, and related gaming services. All player accounts, transactions, and personal data processed in connection with the ko37 platform are controlled by the ko37 operating entity, licensed under an international gaming authority.

For all privacy-related queries, data subject requests, or complaints, players may contact ko37's designated data protection contact via the support channels listed in Section 16 of this Privacy Policy. ko37 is committed to handling all privacy enquiries with full transparency and within the timelines set out in this policy.

02 Data We Collect

ko37 collects personal data in two primary categories: information you provide directly, and information collected automatically during your use of the platform.

2.1 Information You Provide

Data Category	Examples	Purpose
Identity Data	Full legal name, date of birth, CNIC or passport number	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, Pakistani mobile number, residential address	Account communications, support, withdrawal notifications
Financial Data	JazzCash/EasyPaisa account numbers, HBL/UBL/Meezan Bank details	Processing PKR deposits and withdrawals
Verification Documents	CNIC scan, proof of address, selfie photograph	KYC compliance, fraud prevention, licence obligations
Communications Data	Live chat transcripts, support emails, feedback submissions	Support resolution, quality assurance, dispute handling

2.2 Information Collected Automatically

Data Category	Examples	Purpose
Technical Data	IP address, device type, browser, operating system	Security monitoring, fraud detection, geolocation compliance
Usage Data	Pages visited, games played, bet history, session duration	Platform improvement, responsible gaming monitoring
Transaction Data	Deposit amounts, withdrawal requests, bet stakes, game results	Account management, regulatory reporting, dispute resolution
Cookie Data	Session cookies, preference cookies, analytics identifiers	Platform functionality, user experience personalisation

03 How We Collect Your Data

ko37 collects personal data through the following channels:

• Account Registration: When you create a ko37 account, you provide identity, contact, and credential data directly through the registration form.
• KYC Submission: When you complete identity verification, you upload documentation including your CNIC or passport and proof of address.
• Deposit and Withdrawal Processing: When you initiate a PKR transaction via JazzCash, EasyPaisa, HBL, UBL, or Meezan Bank, financial data is collected and processed.
• Platform Use: Technical and usage data is collected automatically as you browse ko37, play games, and place bets, through server logs and cookies.
• Support Interactions: When you contact ko37's support team via live chat or email, the content of those communications is recorded and stored.
• Responsible Gaming Tools: When you set deposit limits, activate self-exclusion, or use other responsible gaming features, your preferences and activation records are stored.

04 Legal Basis for Processing

ko37 processes personal data only where a valid legal basis exists. The following legal bases apply to ko37's data processing activities:

• Contractual Necessity: Processing required to fulfil ko37's obligations to you as a registered player, including account management, bet settlement, and PKR payment processing.
• Legal Obligation: Processing required to comply with our international gaming licence, anti-money laundering obligations, KYC requirements, and applicable data protection regulations.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the ko37 player experience, where these interests are not overridden by your rights.
• Consent: Where ko37 relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

05 How We Use Your Data

ko37 uses the personal data collected for the following purposes:

• Creating and managing your ko37 account, including login authentication and account settings
• Processing PKR deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank
• Verifying your identity and age (21+) in compliance with our gaming licence KYC requirements
• Settling sports bets including cricket and PSL markets, and casino game rounds
• Detecting and preventing fraud, money laundering, and collusion on the platform
• Monitoring gameplay patterns to support responsible gaming obligations and identify players who may need assistance
• Responding to customer support queries submitted via live chat or email
• Sending transactional communications including deposit confirmations, withdrawal notifications, and security alerts
• Sending promotional communications and bonus offers where you have opted in to receive them
• Complying with requests from regulatory authorities, law enforcement, or our licensing authority where legally required
• Improving ko37's platform features, game selection, and user experience through anonymised analytics

06 Data Sharing & Disclosure

ko37 does not sell, rent, or trade your personal data. Data is shared with third parties only in the following limited circumstances:

• Payment Processors: Financial data is shared with JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank solely for the purpose of processing your PKR transactions. These processors are bound by their own data protection obligations.
• KYC Verification Providers: Identity documents submitted during verification are shared with ko37's third-party KYC service provider for identity and document authentication. This provider processes data under a strict data processing agreement with ko37.
• Game Software Providers: Game outcome data and session data may be shared with ko37's licensed game software providers for the purpose of game operation, RNG certification, and dispute resolution.
• Fraud Detection Services: Technical data including IP addresses and device fingerprints may be shared with fraud prevention service providers to identify suspicious activity across the platform.
• Regulatory and Legal Authorities: ko37 will disclose personal data to its licensing authority, financial intelligence units, law enforcement agencies, or courts where required to do so by law or by the conditions of our gaming licence.
• Business Transfers: In the event of a merger, acquisition, or sale of ko37's business, personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified prior to data being transferred and subject to a new privacy policy.

07 Cookies & Tracking Technologies

7.1 What Cookies ko37 Uses

ko37 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged into your ko37 account. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred deposit method, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised data about how players navigate ko37, which games are most popular, and where players encounter difficulties. This data is used to improve the platform.
• Security Cookies: Used by ko37's fraud detection systems to identify unusual login patterns or suspicious activity on your account.

7.2 Managing Cookies

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your ko37 account. Disabling functional cookies may result in a degraded platform experience. Analytics and non-essential cookies can be disabled without affecting core account functionality.

08 Data Retention

ko37 retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account Data: Retained for the duration of your active ko37 account plus five (5) years following account closure, in line with anti-money laundering regulatory requirements applicable to our gaming licence.
• KYC Documentation: Retained for five (5) years from the date of submission or the date of account closure, whichever is later, in compliance with our licensing authority's KYC record-keeping obligations.
• Transaction Records: PKR deposit, withdrawal, and bet records are retained for five (5) years following the date of each transaction.
• Support Communications: Live chat transcripts and email correspondence are retained for two (2) years from the date of each interaction.
• Technical and Usage Data: Server logs and session data are retained for twelve (12) months, after which they are anonymised or deleted.
• Marketing Consent Records: Records of your marketing opt-in or opt-out preferences are retained for the duration of your account plus two (2) years.

09 Your Data Rights

As a ko37 player, you have the following rights in respect of your personal data. To exercise any of these rights, contact ko37 support as described in Section 16. ko37 will respond to all data subject requests within thirty (30) days.

10 Children's Privacy

ko37 is strictly an adults-only platform. Access is prohibited for individuals under the age of 21. ko37 does not knowingly collect personal data from individuals under 21. If ko37 becomes aware that personal data has been collected from an underage individual, that account will be immediately closed, all associated data will be deleted, and any winnings will be forfeited. Parents or guardians who believe a minor has registered a ko37 account should contact support immediately via live chat or email at [email protected].

11 Data Security

ko37 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Security measures in place include:

• 256-bit TLS encryption for all data transmitted between your device and ko37's servers
• Encryption of personal data and financial records stored in ko37's databases
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing of ko37's platform infrastructure
• Two-factor authentication available for player account logins
• Automated fraud detection systems monitoring for suspicious login and transaction activity
• Secure destruction of physical documents containing personal information

While ko37 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your ko37 login credentials confidential and for notifying ko37 immediately if you suspect any unauthorised access to your account.

12 International Data Transfers

ko37 is operated under an international gaming licence, and some personal data processing activities may involve transfers to servers or service providers located outside Pakistan. Where personal data is transferred internationally, ko37 ensures that appropriate safeguards are in place, including data processing agreements incorporating standard contractual clauses or equivalent protections recognised by applicable data protection frameworks. ko37 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without ensuring equivalent contractual protections are in place.

13 Marketing Communications

ko37 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, PSL betting markets, and special offers — but only where you have given your consent to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your ko37 account settings, or by replying to any marketing email with an unsubscribe request. Withdrawal of marketing consent will not affect your ability to continue using the ko37 platform, and you will continue to receive essential transactional communications regardless of your marketing preferences.

14 Third-Party Services

The ko37 platform integrates third-party services including game software providers, payment processing partners, and customer support tools. These third parties operate their own privacy policies governing how they handle personal data in the context of their services. ko37 is not responsible for the privacy practices of third-party game providers or payment processors beyond the data processing agreements in place with those parties. Players should review the privacy policies of any third-party service they interact with independently.

15 Updates to This Privacy Policy

ko37 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. Material changes to this Privacy Policy will be communicated to registered players by email notification and by a prominent notice on the ko37 platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. We encourage Pakistani players to review this Privacy Policy periodically. Your continued use of the ko37 platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes.

16 Contact & Complaints

For any questions about this Privacy Policy, to exercise your data rights, or to raise a privacy complaint, please contact ko37's support team through the following channels:

• Live Chat: Available on all pages of ko37, 24 hours a day, 7 days a week, in both English and Urdu
• Email: [email protected] — privacy-related requests receive a formal response within 30 days

When submitting a data subject request, please include your registered email address and a brief description of your request so that ko37 can locate your account and respond accurately. ko37 may request proof of identity before actioning access, rectification, or erasure requests to ensure data is not disclosed to or deleted at the request of an unauthorised party.

This Privacy Policy was last reviewed and updated on 1 January 2026. ko37 recommends that players review this page periodically to stay informed of any updates.