FireKirin Privacy Policy – How We Protect Your Data

1. Introduction

FireKirin is committed to protecting the privacy of every player who uses its platform. We know that handing over personal information — your phone number, your identity documents, your financial transaction history — requires trust, and we take that trust seriously. This policy is our commitment to being transparent about what we do with the data you share with us.

FireKirin Entertainment Ltd ("FireKirin", "we", "us") operates as the data controller for all personal data processed through the firekirin.ws platform. "You" or "the player" refers to any individual who visits the website, creates an account, or uses any part of the FireKirin service.

This policy is written to be read and understood by actual people — not buried in legalese designed to obscure what is really happening with your data. If you finish reading and still have questions about how a particular type of data is handled, our support team is available around the clock via live chat and will give you a direct answer.

Pakistani privacy law, including relevant provisions of the Prevention of Electronic Crimes Act (PECA) and applicable data handling regulations, forms part of the framework within which FireKirin operates. This policy is designed to be consistent with those legal requirements.

2. What Data FireKirin Collects

We only collect data that serves a specific, legitimate purpose. The categories below cover everything FireKirin may hold about you, with a brief explanation of why each category exists.

3. How We Collect Your Data

FireKirin collects data through three primary channels:

3.1 Directly From You

The most significant data collection happens when you actively provide information — when you fill out the registration form, submit KYC documents, contact our support team, set your deposit limits, or update your account details. This is data you knowingly and voluntarily provide.

3.2 Automatically During Platform Use

When you access firekirin.ws or use any feature of the platform, certain technical data is collected automatically. This includes your IP address, device identifiers, session timestamps, pages visited, game rounds participated in, and actions taken within the platform. This data is collected using server logs and, on the web platform, browser-based tracking mechanisms including cookies and local storage. See Section 9 for more detail on cookies.

3.3 From Third Parties

FireKirin may receive data about you from third parties in specific circumstances. Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, banks, Visa/Mastercard networks) share transaction confirmation data with us when you make a deposit or withdrawal. Identity verification services may confirm the validity of your CNIC against official records. Fraud detection partners may flag unusual patterns associated with your account based on data from their own systems.

4. How FireKirin Uses Your Data

Your data is used for specific, defined purposes. We do not use your data in ways that would surprise you or that fall outside the reasons listed here.

4.1 Providing the Service

The core purpose of almost all data collection is enabling FireKirin to function correctly for you. Your registration data lets us create and maintain your account. Your gameplay data is used to record bets, calculate winnings, and maintain a fair game environment. Your financial data enables deposits and withdrawals to be processed accurately and attributed to the correct account.

4.2 Identity Verification and Compliance

FireKirin operates under anti-money laundering and know-your-customer (AML/KYC) obligations. Identity data including CNIC information is used to verify that you are who you say you are, that you are of legal age to use the platform, and that your account is not being used for money laundering or fraud. This is a legal obligation, not an optional process.

4.3 Security and Fraud Prevention

Technical data including IP addresses, device identifiers, and session patterns is analysed by FireKirin's fraud detection systems to identify and block account takeovers, multi-accounting, bot activity, and financial fraud. This analysis happens in real time and is essential to protecting all players on the platform from fraudulent behaviour that would otherwise damage the integrity of games and the safety of player funds.

4.4 Customer Support

When you contact FireKirin's support team, the details you provide — and the records of any game rounds, transactions, or account events related to your query — are used to investigate and resolve your issue. Support transcripts are retained for quality assurance and compliance purposes.

4.5 Responsible Gaming

FireKirin uses gameplay data — session frequency, bet sizes, deposit patterns, win/loss trajectories — as part of its responsible gaming monitoring system. Unusual patterns that may indicate problematic gaming behaviour can trigger internal review and, where appropriate, proactive outreach from our support team. This processing is done in your interest and as part of our duty of care as a licensed gaming operator.

4.6 Platform Improvement

Aggregated, anonymised data about how players use the platform — which games are most popular, where players encounter friction in the interface, what device types and connection speeds are most common — is used to improve FireKirin's product. This analysis is done at the aggregate level and does not involve profiling individual players for commercial purposes.

4.7 Promotional Communications

If you have opted in to marketing communications, FireKirin may send you information about promotions, new games, or special offers via the contact details on your account. You can opt out of marketing communications at any time from your account settings or by contacting support. Opting out of marketing does not affect transactional communications — you will still receive messages about your account activity, security alerts, and important policy updates.

5. Legal Basis for Processing

FireKirin processes your personal data on one or more of the following legal grounds:

• Contract performance: Processing necessary to provide the service you have registered for — game access, payment processing, account management
• Legal obligation: Processing required to comply with AML/KYC regulations, tax obligations, and responses to lawful requests from regulatory authorities
• Legitimate interest: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring — where these interests do not override your fundamental rights
• Consent: Marketing communications and optional features — where you have given explicit opt-in consent, which you may withdraw at any time

6. Who FireKirin Shares Your Data With

FireKirin does not sell your personal data to third parties. Data sharing is limited to the following categories of recipient, all of which have a specific, necessary role in delivering the FireKirin service or meeting our legal obligations:

6.1 Payment Processors

When you make a deposit or withdrawal, your payment details and the transaction amount are shared with the relevant payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank (for IBFT), or Visa/Mastercard networks. These providers process the transaction and confirm its status back to FireKirin. They operate under their own privacy policies and are bound by Pakistani financial services regulations.

6.2 Identity Verification Services

For KYC compliance, FireKirin may share your identity information with certified third-party verification providers who check the authenticity of the documents you submit and cross-reference your CNIC against official databases. These providers are contractually bound to use your data only for the verification purpose and not for any other use.

6.3 Fraud Detection Partners

Technical data including IP addresses and device fingerprints may be shared with specialised fraud detection services that help identify patterns associated with multi-accounting, bot activity, and payment fraud. These services process data under strict contractual data processing agreements with FireKirin.

6.4 Regulatory and Legal Authorities

FireKirin is legally required to share information with regulatory authorities, law enforcement agencies, and courts in specific circumstances — for example, if an account is flagged under AML obligations, if a court order requires disclosure, or if a regulatory inquiry requires the production of records. FireKirin will only disclose data in these circumstances to the extent legally required and will notify you if it is legally permissible to do so.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of FireKirin's assets, player data may be transferred to the acquiring entity as part of that transaction. Players would be notified before their data becomes subject to a different privacy policy.

7. How Long FireKirin Retains Your Data

FireKirin retains your data for as long as necessary to fulfil the purposes for which it was collected, subject to legal retention obligations. Here is a general guide to our retention approach:

• Account and registration data: Retained for the lifetime of your account and for a minimum of five years after account closure, in line with AML record-keeping requirements
• KYC documents: Retained for five years from the date of the most recent transaction on the account, as required by anti-money laundering regulations
• Financial transaction records: Retained for seven years to meet tax and financial compliance obligations
• Gameplay records: Retained for five years for dispute resolution and game integrity purposes
• Support communications: Retained for three years from the date of the interaction
• Technical logs: Retained for 12 months, after which they are either anonymised or deleted
• Marketing consent records: Retained for as long as you remain opted in, plus 12 months after opt-out as a record that consent was withdrawn

When data is no longer required under the applicable retention period and no legal obligation requires continued storage, FireKirin securely deletes or anonymises it.

8. How FireKirin Protects Your Data

Data security is not treated as an afterthought at FireKirin — it is built into the platform's architecture. The following measures are in place:

• Encryption in transit: All data transmitted between your device and FireKirin's servers is encrypted using TLS 1.2 or higher. The padlock in your browser address bar confirms this connection is active whenever you access firekirin.ws.
• Encryption at rest: Sensitive stored data — including KYC documents and financial records — is encrypted at rest in FireKirin's database infrastructure. Even in the event of an infrastructure breach, this data cannot be read without the encryption keys, which are stored separately.
• Password hashing: Your FireKirin password is never stored in plain text. It is hashed using a one-way cryptographic function, meaning FireKirin staff cannot read your password — only verify it.
• Two-factor authentication: 2FA is available for all accounts and is mandatory for certain high-value withdrawal requests. We strongly encourage all players to enable 2FA.
• Access controls: Access to player data within FireKirin is restricted on a need-to-know basis. Support agents can access the data needed to resolve your query; they cannot access full payment card details or KYC document images without senior-level authorisation.
• Regular security audits: FireKirin conducts periodic third-party security assessments of its infrastructure and application code to identify and remediate vulnerabilities before they can be exploited.
• Breach response: In the event of a data breach that poses a risk to player rights, FireKirin will notify affected players within 72 hours of becoming aware of the breach, as required by applicable data protection obligations.

9. Cookies and Tracking Technologies

FireKirin uses cookies and similar browser-based storage mechanisms to make the platform function correctly and to gather technical analytics. Here is what each category of cookie does:

9.1 Essential Cookies

These cookies are required for the platform to work at all. They maintain your login session, remember your language preference, and carry security tokens that authenticate your requests to FireKirin's servers. You cannot opt out of essential cookies — without them, the platform cannot function.

9.2 Analytics Cookies

FireKirin uses anonymised analytics data to understand how players navigate the platform — which pages load slowly, where players abandon a process, how different device types render the interface. This data is aggregated and does not identify individual players. You can disable analytics cookies from your browser settings, though this does not affect your ability to use FireKirin.

9.3 Session Storage

FireKirin uses browser session storage for temporary data — for example, your current game state or the contents of a form you are filling in. Session storage data is cleared automatically when you close your browser tab.

9.4 Managing Cookies

You can control cookie storage through your browser's settings. Most modern browsers allow you to view, delete, and block cookies from specific websites. Note that blocking all cookies from firekirin.ws will prevent you from logging in, as the session cookie that maintains your authentication is essential for the platform to work.

FireKirin does not use third-party advertising cookies or sell cookie-based data to advertising networks.

10. Your Rights Over Your Data

You have meaningful rights over the personal data FireKirin holds about you. These are not just paper commitments — they are enforceable and FireKirin has processes in place to fulfil them within reasonable timeframes.

To exercise any of these rights, contact FireKirin support via live chat or email at support@firekirin.ws. We will verify your identity before processing any request that involves access to or modification of personal data. Most requests are fulfilled within 14 days; complex requests may take up to 30 days.

11. Minors and Under-18 Access

FireKirin is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. The registration process includes an age declaration and our KYC verification process checks date of birth against submitted identity documents.

If FireKirin discovers that a registered player is under 18, the account will be immediately suspended, the data will be handled in accordance with our obligations regarding underage data subjects, and any deposits made while underage will be reviewed for return in line with our Terms and applicable law.

If you are a parent or guardian and believe that someone under 18 in your household has registered a FireKirin account, please contact our support team immediately via live chat. We will take prompt action and cooperate fully with your request.

12. Third-Party Links and Services

FireKirin's platform is self-contained and does not include links to third-party websites that are outside FireKirin's control. However, the payment methods available on FireKirin — Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa, Mastercard — are operated by third parties with their own privacy policies. When you make a transaction using one of these services, your interaction with that payment provider is governed by their policy, not FireKirin's.

FireKirin is not responsible for the privacy practices of any third-party service provider. We select our payment and verification partners based on their regulatory compliance and security standards, and we maintain contractual data processing agreements with all of them — but their primary relationship with you is governed by their own terms.

13. Changes to This Privacy Policy

FireKirin reviews this Privacy Policy periodically and updates it when our practices change, when new features are introduced that involve new data processing, or when applicable law or regulation requires an update. The "Last Updated" date at the top of this page reflects the most recent revision.

When material changes are made — changes that meaningfully affect how your data is used or what rights you have — FireKirin will notify registered players via an in-platform notification or by email to the address associated with your account. Minor clarifications that do not change the substantive content of the policy may be made without specific notification.

The current version of this policy always supersedes previous versions. If you continue to use FireKirin after a policy update, you accept the updated terms. If you do not accept a material change, you should contact support to close your account before the change takes effect.

14. Contact Us About Privacy

If you have any question about this Privacy Policy, want to exercise any of your data rights, or want to report a concern about how FireKirin handles personal data, you can reach us through the following channels:

• Live Chat: Available 24/7 from the main navigation on firekirin.ws — for fast responses to most privacy and data queries
• Email: support@firekirin.ws — for formal data access requests, deletion requests, and written correspondence requiring a documented response

When contacting us about a data rights request, please include your registered mobile number (for account identification), a clear description of the request, and any relevant context. We will verify your identity before acting on any request involving access to personal data, and we will respond within the timeframes stated in Section 10 of this policy.