Your privacy matters to us. This Privacy Policy covers all services and features accessible through firekirin.biz. By registering an account or using any part of the FireKirin platform, you confirm that you have read and understood how we handle your personal information. If anything is unclear, our team at support@firekirin.biz is available around the clock in both Urdu and English.
1Overview – Why This Policy Exists
FireKirin is an online gaming and sports betting platform built specifically for Pakistani players. When you use the platform — whether that's placing a bet on a PSL match, spinning a slot, playing a live Teen Patti table, or simply browsing virtual sports odds — certain information is generated and collected. This is unavoidable for any digital service: without knowing who you are, we cannot run a secure account, process PKR deposits, or pay out your winnings.
What this policy commits to is that FireKirin collects only what it needs, uses it only for the purposes described here, stores it securely, and never trades it for profit. The platform is operated by FireKirin and the data controller responsible for the information described in this policy is FireKirin itself, reachable at support@firekirin.biz.
This policy applies to every registered account holder, every visitor to firekirin.biz, and any person who contacts FireKirin through any channel — live chat, email, or any future support method the platform introduces. It applies equally whether you are accessing the platform from Karachi, Lahore, Islamabad, Peshawar, or anywhere else in Pakistan.
This policy should be read alongside the Terms and Conditions and the Responsible Gaming Policy, both of which are incorporated by reference into the overall agreement between you and FireKirin.
2What Information FireKirin Collects
The information FireKirin collects falls into three broad categories: information you provide directly, information generated automatically when you use the platform, and information received from trusted third parties involved in payment processing or fraud prevention.
Information you provide directly:
- Full name — as it appears on your CNIC or other government-issued identity document
- Date of birth — used solely for age verification to comply with our 18+ policy
- Pakistani mobile number — used for account security, two-factor authentication, and essential communications
- Email address — used for account communications, transaction confirmations, and support correspondence
- Residential address — collected during KYC verification for compliance purposes
- CNIC number and document scan — collected when identity verification is required before withdrawals
- Any information you provide voluntarily when contacting support, including the content of your messages
Information generated automatically:
- IP address and approximate geographic location derived from it
- Device type, operating system, and browser version
- Session timestamps — when you log in and log out
- Navigation data — which pages and sections of the platform you visit
- Betting and gaming history — all bets placed, games played, amounts staked, outcomes, and balances
- Deposit and withdrawal transaction records
- Cookie and session identifiers (see Section 9)
Information from third parties:
- Transaction confirmation data from Easypaisa, JazzCash, NayaPay, SadaPay, and other payment processors — confirming that a payment was made, but not storing your wallet credentials
- Identity verification results from third-party KYC providers where used
- Fraud and AML (Anti-Money Laundering) screening results where applicable
3Why We Collect Each Type of Data
FireKirin collects personal information only when there is a clear, specific reason for it. The table below maps each data type to its purpose so you can see exactly why each piece of information is needed.
| Data Type | Purpose | Can You Opt Out? |
|---|---|---|
| Name & Date of Birth | Identity verification, age confirmation (18+ requirement), and KYC compliance | No — required for registration |
| Mobile Number | Account security, two-factor authentication, essential notifications | No — required for registration |
| Email Address | Transaction confirmations, account alerts, support correspondence | Partially — marketing emails can be opted out |
| CNIC / ID Document | KYC verification before first withdrawal; fraud and AML compliance | No — required to process withdrawals |
| IP Address & Device Data | Security monitoring, duplicate account detection, fraud prevention | No — collected automatically |
| Betting & Gaming History | Account records, dispute resolution, responsible gaming monitoring | No — generated by platform activity |
| Transaction Records | Payment verification, withdrawal processing, regulatory compliance | No — required by payment and compliance obligations |
| Navigation / Session Data | Platform performance, bug detection, user experience improvements | Partially — via cookie preferences |
| Support Correspondence | Resolving queries, improving support quality, audit trail | No — inherent to support interaction |
4Legal Basis for Processing
FireKirin processes your personal data on the following legal grounds, each of which applies to specific categories of data and processing activity described above:
- Contractual necessity: The majority of data processing on FireKirin — running your account, processing PKR deposits, settling bets, paying out withdrawals — is necessary to fulfil the contract between you and the platform as set out in the Terms and Conditions. Without this processing, the platform simply cannot operate for you.
- Legal obligation: Certain processing activities — particularly KYC identity checks, transaction record retention, and AML screening — are legally required under applicable regulations. FireKirin cannot waive these requirements even at a player's request.
- Legitimate interests: FireKirin has a legitimate interest in maintaining platform security, preventing fraud, detecting duplicate accounts, and analysing usage patterns to improve the service. This processing is proportionate and does not override your privacy rights.
- Consent: Where FireKirin sends you marketing communications or uses non-essential cookies, this is based on your consent. You may withdraw this consent at any time through your account settings or by contacting support.
5Payment Data — Easypaisa, JazzCash & Other Methods
Given that FireKirin serves Pakistani players who primarily use Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, and bank cards, it is worth being specific about how payment data is handled — because this is the area players most commonly ask about.
What FireKirin does not store: Your Easypaisa or JazzCash PIN, your mobile wallet password, your full card number, or your CVV. These credentials are processed entirely within the payment provider's own infrastructure and never pass through or are stored on FireKirin's servers. When you make a deposit, you are interacting with the payment provider's secure gateway, not submitting sensitive credentials to FireKirin directly.
What FireKirin does store: A transaction reference number, the amount deposited or withdrawn in PKR, the date and time of the transaction, and the masked identifier of the payment method (e.g., the last four digits of a card number, or a partial mobile number). This information is stored to enable you to track your transaction history, to resolve any disputed transactions, and to satisfy financial record-keeping obligations.
Important: FireKirin will never ask you for your Easypaisa PIN, JazzCash password, or online banking credentials by email, live chat, or SMS. Any communication claiming to be from FireKirin that requests this information is fraudulent. Report it to support@firekirin.biz immediately.
All payment transactions are processed over encrypted connections (TLS 1.2 or higher). Payment provider integrations are reviewed regularly to ensure they continue to meet security standards.
End-to-End Encryption
All data transmitted between your device and FireKirin servers is encrypted using TLS 1.2 or higher. Account data at rest is encrypted using industry-standard protocols. Your login credentials are hashed — FireKirin employees cannot view your password under any circumstances.
No Data Selling — Ever
FireKirin does not and will not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial gain. The only parties who ever see your data are those listed in Section 6 of this policy, and only for the specific operational reasons described.
Full Account Control
You can update your email, mobile number, and communication preferences directly from your account settings at any time. Requests to access, correct, or delete your personal data are handled within 30 days of submission — see Section 11 for full details of your rights.
Regulatory Compliance
FireKirin maintains transaction records and identity verification documents for the periods required under applicable financial and anti-money laundering regulations. These records are held securely, accessed only by authorised compliance staff, and are never shared beyond legal obligation.
6Who We Share Your Data With
FireKirin does not share your personal information with third parties except in the specific circumstances listed below. In every case, sharing is limited to what is necessary for the stated purpose, and any third party that receives data is required to protect it to the same standard FireKirin applies.
- Payment processors (Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, Visa/Mastercard networks): FireKirin shares the minimum transaction data necessary to initiate and confirm your deposits and withdrawals. The payment processor's own privacy policy governs how they handle your financial data.
- Identity verification (KYC) providers: When your account reaches the withdrawal verification stage, your identity documents may be processed by a certified third-party KYC provider. This provider is bound by strict data handling agreements with FireKirin.
- Fraud and AML screening services: Transaction data may be passed to compliance screening services to fulfil anti-money laundering and counter-terrorism financing obligations. This is a legal requirement, not a discretionary data sharing practice.
- Technology and hosting providers: FireKirin uses third-party cloud and server infrastructure to run the platform. These providers store platform data but are contractually prohibited from accessing or using it for any purpose other than infrastructure operation.
- Legal and regulatory authorities: FireKirin will disclose account and transaction information to law enforcement, courts, or regulators where required by a valid legal order or where we have a good-faith belief that disclosure is necessary to prevent serious harm or crime.
FireKirin does not share data with advertisers, social media platforms, data analytics companies, or any party whose primary interest is in your data as a commercial asset.
7How Long We Keep Your Data
FireKirin retains personal data for as long as it is needed for the purpose it was collected and for as long as required by applicable law. The following retention periods apply:
- Active account data: Retained for the lifetime of your account. If your account is voluntarily closed, active profile data is marked inactive but not immediately deleted, to comply with retention obligations below.
- Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with financial record-keeping and AML regulations.
- Identity verification documents (CNIC scans, etc.): Retained for a minimum of 5 years after account closure or after the last associated transaction, whichever is later.
- Betting and gaming history: Retained for 5 years from the date of each event, for dispute resolution and regulatory audit purposes.
- Support correspondence: Retained for 3 years from the date of the interaction.
- Non-essential data (analytics, non-functional cookies): Retained for no more than 13 months, then anonymised or deleted.
After the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be linked to you as an individual.
8Security Measures
FireKirin takes platform and data security seriously because the personal and financial information of Pakistani players demands it. The following measures are in place to protect your data:
- Transport encryption: All communication between your browser or device and FireKirin's servers is encrypted using TLS 1.2 or higher. This means your login credentials, deposit instructions, and account data cannot be intercepted in transit.
- Password hashing: Your account password is stored as a one-way cryptographic hash. Even FireKirin's own technical staff cannot retrieve your password — only reset it through a verified process.
- Two-factor authentication: FireKirin supports and encourages two-factor authentication (2FA) via your registered mobile number. Enabling 2FA means that even if someone obtains your password, they cannot access your account without also having your phone.
- Access controls: Internal access to player data is restricted on a strict need-to-know basis. Staff roles determine which data they can access, and all access is logged. No employee has broad access to all player records.
- Regular security reviews: FireKirin's platform undergoes regular security assessments to identify and address vulnerabilities before they can be exploited.
- Incident response: In the event of a data security incident that may affect your personal information, FireKirin will notify affected users within a reasonable timeframe and take immediate steps to contain and remediate the incident.
No digital platform can guarantee absolute security against all conceivable threats. FireKirin's security measures are industry-standard and regularly reviewed, but we encourage you to use a strong, unique password for your account and to enable 2FA. Do not share your login credentials with anyone.
9Cookies & Similar Technologies
FireKirin uses cookies and similar technologies to make the platform function correctly and to understand how it is used. A cookie is a small text file stored on your device when you visit a website. FireKirin uses the following categories of cookies:
- Strictly necessary cookies: These are required for the platform to work. They maintain your login session, remember your bet slip selections, and keep your account secure between page loads. These cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: These remember your preferences — such as language settings or whether you have dismissed a notification — to improve your experience. They are not strictly necessary but improve usability.
- Analytics cookies: These help FireKirin understand how players navigate the platform — which pages are visited most, where players encounter difficulties, and how performance can be improved. Analytics data is aggregated and anonymised. These cookies can be declined without affecting your ability to use the platform.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or be notified about cookies. Note that disabling strictly necessary cookies may impair your ability to log in or use the platform normally.
FireKirin does not use advertising or tracking cookies that follow you across other websites. The cookies placed by FireKirin are limited to the firekirin.biz domain.
10Children & Minors
FireKirin is strictly an 18+ platform. The collection of personal data from individuals under the age of 18 is not permitted under any circumstances, and the platform takes active steps to prevent it.
If FireKirin has reason to believe that an account has been opened by or for a person under 18, the account will be immediately suspended. Any funds in the account will be held pending verification and returned (without winnings) once the identity of the account holder is confirmed and the appropriate outcome determined.
If you are a parent or guardian and believe your child has registered an account on FireKirin, please contact us immediately at support@firekirin.biz. We will investigate and take action promptly. We will delete any personal data belonging to a minor upon confirmed identification, except where required to be retained for legal compliance purposes.
11Your Privacy Rights as a FireKirin Player
You have a number of rights in relation to the personal information FireKirin holds about you. These rights are described below. To exercise any of them, contact support@firekirin.biz with your request. FireKirin will respond within 30 days in most cases.
Request a copy of all personal data FireKirin holds about you. We will provide it in a clear format within 30 days.
If any information we hold is inaccurate or incomplete, you have the right to have it corrected. Update basic details in your account settings, or contact support for changes to verified data.
Request deletion of your personal data. This right is subject to legal retention obligations — transaction and identity records required for compliance cannot be deleted on request.
Request that FireKirin limits how it uses your data while a dispute or verification is ongoing, rather than deleting it immediately.
Request your personal data in a structured, machine-readable format to transfer to another service where technically feasible.
Object to processing based on legitimate interests, including profiling. FireKirin will stop unless there is a compelling legal ground that overrides your interests.
Exercising your privacy rights will not affect the quality of service you receive on FireKirin, except where the processing you object to is strictly necessary to operate your account — in which case account closure may be the outcome of the request.
12Third-Party Links & Services
FireKirin's platform may reference or link to third-party services in specific, limited contexts — for example, linking to a payment provider's support page or to an official responsible gaming resource. These third-party sites have their own privacy policies, which are entirely separate from this one. FireKirin has no control over how third parties collect or use your data and is not responsible for their privacy practices.
If you follow a link from FireKirin to a third-party site, you should read that site's privacy policy before providing any personal information. FireKirin's policy applies only to firekirin.biz and the services operated directly by FireKirin.
13Changes to This Privacy Policy
FireKirin may update this Privacy Policy from time to time. When changes are material — meaning they affect how we use your data, your rights, or who we share data with — we will notify you by email to your registered address at least 7 days before the changes take effect. A notice will also be displayed on the platform during that period.
Minor updates — such as correcting typographical errors, adding clarifying language that doesn't change substance, or updating contact details — may be made without advance notice. The "Last updated" date at the top of this page will always reflect the most recent revision.
Your continued use of FireKirin after updated Terms or Privacy Policy take effect constitutes your acceptance of the revised documents. If you do not accept an updated Privacy Policy, please contact us to discuss your options, which may include account closure and return of your verified balance.
14Contact Us About Privacy
If you have any question about this Privacy Policy, want to exercise any of your privacy rights, or want to raise a concern about how FireKirin handles your personal data, please get in touch through the following channels:
- Email: support@firekirin.biz — available 24/7, responses in both English and Urdu
- Live chat: Available directly on the platform — average response time under 3 minutes
When contacting us about a privacy request, please identify yourself clearly (name and registered email or mobile number) and describe your request specifically. This helps us locate your data and respond accurately within the 30-day response window.
If you are unhappy with how FireKirin has handled a privacy concern after receiving our response, you may escalate the matter through our formal complaints process, details of which will be provided in our initial response to your query.
This Privacy Policy was written in plain English and is available in Urdu translation upon request. Simply ask for the Urdu version when contacting support and it will be provided within 48 hours.