Privacy
Policy.

1. Data We Collect

By applying to the program, you consent to Media K9 collecting and processing the following data fields:

• Personal Details: Full Name, Father's Name, Email, and Phone Number.
• Academic Details: University Name, City, Province, Course of Study, and Graduation Year.
• Identity Verification Details: 13-digit Pakistani CNIC (National ID) Number, University Card image uploads, and Profile Picture. (Note: CNIC numbers are heavily protected via AES-256 field-level encryption).
• Social Media Links: Voluntary handles or websites submitted via form fields.

2. How We Use Your Data

Your personal details and documents are used solely for:

• Evaluating and verification of your application profile.
• Assigning unique BDM Partner tracking codes to approved accounts.
• Enabling access to the secure BDM performance dashboard.
• Communication, support tickets, and notifications relative to client applications you secure.

We do not sell, rent, share, or lease your personal data to any third-party marketing networks or external entities.

3. Data Protection & Security Controls

We deploy robust controls to safeguard your data at rest and during transit:

• Encryption: Sensitive numeric identifiers like CNICs are encrypted using AES-256-CBC field encryption before being stored in the database.
• Access Isolation: Document uploads are isolated using secure home-directory folders outside the public web root (with active Deny from all directives), accessible strictly through authorized, session-validated download gateways.
• Session Integrity: Double-gated authentication including CSRF validation tokens and two-factor code authentication (OTP via email).

4. Data Retention Limits

In accordance with data minimization principles:

• Unsuccessful Applicants: All personal details, application files, and logs are completely removed or anonymized within 6 months.
• Active Partners: Data is retained for the active duration of the partner engagement plus 2 years for historical reporting and audit verification.

5. Your Rights

Under the Pakistani legal and regulatory framework (including PDPB 2023 guidelines), you retain the right to:

• Access the personal details we hold about you.
• Request corrections to inaccurate details.
• Request full deletion of your profile details.
• Withdraw your consent to process your profile at any time.

To exercise any of these rights, please send your request from your registered email address to mediak997@gmail.com.

6. Policy Framework

This privacy framework is aligned voluntarily with the Prevention of Electronic Crimes Act, 2016 (PECA 2016) as amended in 2025, and the Personal Data Protection Bill, 2023 (PDPB 2023) of the Islamic Republic of Pakistan.