Privacy Policy – Your Data Is Safe With 10win

1. Introduction

This Privacy Policy applies to all players who register for and use the 10win platform — including the website at 10win.ml, the 10win mobile app for Android and iOS, and all related services such as sports betting, live casino, game lobby, deposits, withdrawals and the VIP programme.

When you create a 10win account, deposit funds, place a bet on cricket or PSL, play in the live casino or contact our support team, you share certain information with us. This policy explains what that information is, why we need it, how we handle it and what your rights are in relation to it.

By registering an account and using 10win, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle data, please do not register or use the platform. For any privacy-related concerns, you can reach us through the contact details in Section 12 of this policy.

This policy should be read alongside the 10win Terms and Conditions, which set out the broader rules governing use of the platform.

2. Data We Collect

10win collects only the personal data that is necessary to operate your account, verify your identity, process transactions and comply with applicable legal obligations. The categories of data we collect are set out below.

Registration Data

When you create a 10win account, we collect:

• Full name
• Date of birth (used to confirm you are 18 or older)
• Email address
• Mobile phone number
• Username and password (password is stored in hashed form only)
• Country and city of residence

Identity Verification Data

To comply with age verification requirements and to process withdrawals above certain thresholds, 10win may request:

• A copy of a government-issued identity document (such as a CNIC or passport)
• A selfie or photograph for identity confirmation purposes
• Proof of address in some circumstances

This verification data is used solely for identity confirmation and is not shared with third parties except where required for verification processing.

Usage and Activity Data

As you use the platform, we collect data about your activity. This includes:

This data helps us detect unusual activity, prevent fraud, improve platform performance and tailor your experience where relevant.

Data We Do Not Collect

10win does not collect sensitive personal data such as racial or ethnic background, religious beliefs, biometric data beyond what is needed for identity verification, or political opinions. We do not collect data from children and the platform is strictly for adults aged 18 and above.

3. How We Use Your Data

Every piece of data collected by 10win has a specific purpose. We do not hold data without a clear operational reason for doing so. The table below outlines the primary uses of your data.

10win does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without a human review process. If we ever propose to use your data in a materially new way not described in this policy, we will notify you and, where required, seek your consent before doing so.

4. Payment Data

All financial transactions on 10win are processed in Pakistani Rupees (PKR). Supported payment methods include JazzCash, Easypaisa, Raast, bank transfer, debit cards and mobile wallets. Each of these methods has its own data handling practices governed by the respective provider.

When you make a deposit or request a withdrawal, 10win captures the transaction reference, amount, method used and timestamp. This information is held as part of your account transaction history and is required for withdrawal verification, dispute resolution and audit purposes.

What 10win does not store:

• Full debit or credit card numbers — only the last four digits and card type are retained for reference.
• JazzCash or Easypaisa wallet PINs or passwords.
• Full bank account numbers — only the account reference needed to process a transfer is held.

All payment data is transmitted over encrypted connections (TLS). Third-party payment processors that handle your transaction data are contractually required to protect it in line with applicable data security standards. 10win does not share your payment data with any unrelated third parties.

If you believe there has been an unauthorised transaction on your 10win account, contact support immediately. Your account will be reviewed and, if required, suspended to prevent further activity while the matter is investigated.

5. Data Sharing

10win does not sell your personal data. We share data only where it is necessary to operate the platform or where we are legally required to do so. The specific circumstances under which data may be shared are:

• Payment processors: Transaction data is shared with JazzCash, Easypaisa, Raast and relevant banking partners solely to execute your deposit or withdrawal.
• Identity verification providers: Where third-party KYC or age verification tools are used, your identity document data is shared with those providers under strict data processing agreements.
• Game providers: Your account identifier and game activity may be shared with third-party game studios that power the 10win game lobby and live casino, to enable game session management and bet settlement.
• Fraud prevention services: Device fingerprint, IP address and behavioural data may be shared with fraud detection services to protect the platform and all players from abuse.
• Legal authorities: Where required by applicable law or a valid legal process, 10win may disclose your data to law enforcement or regulatory bodies. We will inform you of such a disclosure where we are legally permitted to do so.

All third parties that receive data from 10win are required to process it only for the specific purpose for which it was shared, and to maintain appropriate security standards. 10win does not permit third-party recipients to use your data for their own unrelated marketing or analytics purposes.

6. Cookies & Tracking

10win uses cookies and similar tracking technologies on the website and mobile app. These are small data files stored on your device that help the platform function correctly and allow us to understand how players use the site.

Types of cookies used by 10win:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and cookies that remember your language or regional preferences. These cannot be disabled without breaking platform functionality.
• Analytics cookies: Used to understand how players navigate the platform — which pages are visited most, how long sessions last and where players encounter issues. This data is aggregated and anonymised. It helps us improve platform performance and the overall user experience.
• Security cookies: Help us detect unusual login attempts, identify potentially compromised sessions and protect against cross-site request forgery (CSRF) attacks.

10win does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the platform. You will not see personalised ads from 10win across other websites based on your activity on our platform.

You can manage or clear cookies through your browser or device settings. Please note that disabling essential cookies will affect your ability to log in and use the platform normally.

7. Data Retention

10win retains your personal data for as long as your account is active and for a reasonable period thereafter, to comply with legal obligations, resolve disputes and enforce our agreements. The general retention periods we apply are:

• Account registration data: Retained for the duration of your account plus a minimum of five years after account closure, to meet record-keeping requirements.
• Transaction records: Deposit and withdrawal records in PKR are retained for a minimum of five years after each transaction, in line with standard financial record-keeping practice.
• Identity verification documents: Retained for the period required to confirm verification status and for a defined period after account closure. Documents are securely deleted once the retention period expires.
• Betting and game activity logs: Retained for the duration of account activity and for a defined period after account closure to support dispute resolution.
• Support communications: Correspondence with the 10win support team is retained for up to three years to provide context for ongoing or future queries.

When data is no longer required and the applicable retention period has passed, it is securely deleted or anonymised so it can no longer be linked to you as an individual. You may request early deletion of certain data — see Section 9 for details on your rights.

8. Security Measures

10win takes data security seriously and applies a range of technical and operational measures to protect your personal information from unauthorised access, loss, alteration or disclosure.

Key security measures in place include:

• TLS encryption: All data transmitted between your device and 10win servers is encrypted using Transport Layer Security. This applies to login sessions, deposits, withdrawals and support communications.
• Password hashing: Passwords are never stored in plain text. They are processed through a one-way hashing algorithm, meaning even 10win staff cannot view your actual password.
• Access controls: Internal access to player data is restricted on a need-to-know basis. Staff who do not require access to personal data to perform their role are not granted it.
• Account alerts: Unusual login attempts — such as access from a new device or location — trigger account security alerts sent to your registered email or phone number.
• Regular security reviews: 10win conducts periodic reviews of its data security practices and infrastructure to identify and address potential vulnerabilities before they can be exploited.

While 10win takes every reasonable precaution, no online platform can guarantee absolute security. You can significantly reduce the risk of unauthorised account access by using a strong, unique password for your 10win account and not sharing your login credentials with anyone.

If you suspect your account has been compromised, change your password immediately and contact 10win support so we can review your account activity and take any necessary protective action.

9. Your Rights

As a 10win player, you have rights in relation to the personal data we hold about you. These rights are:

• Right of access: You can request a copy of the personal data 10win holds about you at any time. We will respond to access requests within a reasonable timeframe.
• Right to rectification: If any data we hold about you is inaccurate or out of date, you can ask us to correct it. You can update basic account details such as your email address directly from your account settings.
• Right to erasure: You can request deletion of your personal data. Please note that where data must be retained to comply with legal obligations — such as transaction records — we may not be able to delete it immediately or in full. We will explain the position when responding to your request.
• Right to restrict processing: In certain circumstances you may ask us to limit how we use your data while a query or dispute is being resolved.
• Right to data portability: You may request your account data in a structured, commonly used format so you can transfer it elsewhere if you choose to do so.
• Right to object: Where data processing is based on legitimate interest rather than a legal obligation, you may object to that processing.

To exercise any of these rights, contact 10win support through the platform's support section. Please include your account username and a clear description of your request. We aim to acknowledge all data rights requests within five business days and resolve them within 30 days, though complex requests may take longer. If additional time is needed, we will let you know.

Please note that exercising some of these rights — particularly the right to erasure — may affect your ability to continue using the 10win platform, as some data is essential for account operation.

10. Minors

10win is strictly an adults-only platform. You must be at least 18 years of age to register an account and use any part of the service. We do not knowingly collect personal data from anyone under the age of 18.

Age verification is a mandatory part of the 10win account process. Where we have reason to believe that an account is held by or being used by someone under 18, that account will be immediately suspended and a full verification review conducted. If the account holder cannot confirm they are 18 or older, the account will be permanently closed.

If you are a parent or guardian and believe your child has registered on 10win, please contact our support team immediately so the account can be investigated and closed. Any funds deposited by a minor will be handled appropriately following our standard investigation procedure.

We encourage parents to use device parental controls and content filtering tools to prevent underage access to online gaming and betting platforms.

11. Policy Updates

10win may update this Privacy Policy from time to time to reflect changes in how we operate, changes in applicable legal requirements or improvements in how we communicate our data practices. The date of the most recent revision is always shown at the top of this page.

When material changes are made — changes that affect how your data is used or your rights in relation to it — we will notify active account holders through a notice on the platform or via your registered email address. The updated policy will take effect from the date stated in the notification.

Minor amendments such as wording clarifications or formatting changes that do not alter the substance of any section may be made without individual notification. The current version of the policy is always the authoritative version and is accessible from the footer of every page on the 10win platform.

We recommend bookmarking this page and checking it periodically, particularly if you are a regular 10win player, to stay informed of how your data is handled.

12. Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights or have a concern about how your personal information has been handled, please contact the 10win support team through the platform's support section. Our team is available around the clock and will route your query to the appropriate person.

When submitting a privacy-related query, please include your account username, the nature of your request and any relevant details so we can assist you efficiently. We take all privacy concerns seriously and aim to respond to every query promptly.

For account-related queries that are not specifically about data privacy, the FAQ page covers the most common questions about deposits, withdrawals, bonuses and sports betting on 10win.

For questions about the platform rules, account eligibility and betting conditions, refer to the Terms and Conditions.