1.1 Data Collection

KAF collects the following admin data:

• Full name, contact details, and government-issued ID for verification.

• Access logs, IP addresses, and device information for security.

• Activity records (platform changes, dispute resolutions, etc.).

1.2 Data Use

• To authenticate and authorize admin access.

• To monitor platform integrity and prevent fraud.

• For compliance with Saudi regulations (e.g., ZATCA, NCA).

1.3 Data Protection

• Strict role-based access controls.

• Encryption of sensitive data (e.g., login credentials).

• Regular audits to ensure compliance.

1.4 Data Retention

• Retained for the duration of employment + 5 years (per Saudi labor laws).