10win Privacy Policy

10win ("the Platform", "we", "us", "our") is the data controller responsible for the personal data you provide when registering for and using the 10win platform at https://10win.lat. As data controller, 10win determines the purposes and means of processing your personal information in connection with the services it provides.

If you have any questions or concerns regarding the processing of your personal data, you may contact our support team at the email address provided in Section 13 of this policy. We aim to respond to all data-related enquiries within thirty (30) calendar days of receipt.

10win collects personal data in the following categories:

2.1 Registration Data. When you create a 10win account, we collect your full legal name, date of birth, email address, mobile phone number, and chosen username and password. This data is required to open and maintain your account.

2.2 Identity Verification (KYC) Data. To comply with Know Your Customer and Anti-Money Laundering obligations, we collect copies of government-issued identity documents (such as a National Identity Card, passport, or driving licence) and proof of address documents. This data is processed when you request a withdrawal or when required by our compliance procedures.

2.3 Financial Data. We collect details of your deposit and withdrawal transactions including payment method identifiers (e.g. JazzCash account reference, bank account last four digits), transaction amounts in PKR, and timestamps. We do not store full payment card numbers on our systems.

2.4 Usage Data. We automatically collect data about how you interact with the 10win platform, including pages visited, games played, bets placed, session durations, device type, operating system, browser type, IP address, and approximate geolocation derived from IP.

2.5 Communications Data. If you contact 10win support via live chat, email, or ticket system, we retain records of those communications including the content of your messages and any attachments provided.

2.6 Responsible Gaming Data. If you set deposit limits, request a cooling-off period, or self-exclude, we record these preferences and restrictions as part of our responsible gaming obligations.

10win uses the personal data described above for the following purposes:

• To create, maintain and secure your 10win account
• To verify your identity and age (18+) in accordance with our KYC obligations
• To process deposits and withdrawals in PKR via your chosen payment methods
• To provide access to all 10win services including sports betting, casino, slots and keno
• To detect and prevent fraud, money laundering and other illegal activity
• To administer bonuses, promotions and loyalty programmes
• To enforce our Terms & Conditions and responsible gaming commitments
• To provide customer support and respond to your enquiries
• To send transactional communications including deposit confirmations and withdrawal notifications
• To send promotional communications where you have opted in to receive them
• To analyse platform usage and improve the 10win user experience
• To comply with applicable legal and regulatory obligations

10win processes your personal data on the following legal bases:

Contract Performance. Processing your registration data, financial data, and usage data is necessary to perform the contract between you and 10win — i.e., to provide the platform services you have requested.

Legal Obligation. Processing KYC, AML-related data, and responsible gaming restriction records is required for 10win to comply with applicable legal and regulatory obligations.

Legitimate Interests. Fraud detection, platform security, analytics, and service improvement are processed on the basis of 10win's legitimate business interests, balanced against your right to privacy.

Consent. Promotional communications are sent only where you have provided opt-in consent. You may withdraw this consent at any time by updating your communication preferences within your 10win account settings or by contacting support.

10win does not sell, rent or trade your personal data to third parties for their own marketing purposes. We may share your data in the following limited circumstances:

5.1 Payment Processors. We share necessary transaction data with PKR payment providers including JazzCash, Easypaisa, and supported banking partners solely to process your deposits and withdrawals. These providers are contractually bound to protect your data.

5.2 Identity Verification Services. KYC document data may be shared with authorised identity verification service providers for the purpose of satisfying our regulatory obligations.

5.3 Technology Service Providers. We engage third-party technology partners for hosting, analytics, fraud detection, and customer support tooling. These providers process data only on our behalf and under strict data processing agreements.

5.4 Legal and Regulatory Authorities. We may disclose your personal data to law enforcement agencies, regulatory bodies, or courts when required to do so by applicable law, court order, or in response to a lawful governmental request.

5.5 Business Transfers. In the event of a merger, acquisition, or sale of all or part of 10win's business, your personal data may be transferred to the acquiring entity, subject to the same or equivalent privacy protections.

10win uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential cookies: Required to maintain your login session, store your account preferences, and enable core platform functionality. These cannot be disabled without impairing platform access.
• Analytics cookies: Used to understand how users navigate the 10win platform so that we can improve the user experience. Data collected is aggregated and anonymised where possible.
• Security cookies: Help detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

By using the 10win platform you consent to the use of essential and security cookies. Analytics cookies are used on the basis of our legitimate interests in improving the platform. You may manage non-essential cookie preferences through your browser settings; however, disabling essential cookies will affect your ability to use the platform normally.

10win retains your personal data for as long as your account is active and for a defined period thereafter to satisfy legal, regulatory, and legitimate business obligations. Specific retention periods are as follows:

• Account and registration data: retained for the duration of your account plus five (5) years after closure, or longer if required by applicable law
• KYC and AML data: retained for a minimum of five (5) years following the end of the business relationship, in line with standard anti-money laundering retention requirements
• Financial transaction records: retained for a minimum of five (5) years
• Support communications: retained for three (3) years from the date of the last communication
• Usage and analytics data: retained for up to two (2) years in identifiable form; aggregated anonymised data may be retained indefinitely

After the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Subject to applicable law, you have the following rights in relation to your personal data held by 10win:

• Right of Access: You may request a copy of the personal data 10win holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your data in certain circumstances.
• Right to Data Portability: Where technically feasible, you may request a machine-readable copy of data you have provided to 10win.
• Right to Object: You may object to processing based on our legitimate interests, including direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact our support team at the address in Section 13. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

10win implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 10win servers
• Encrypted storage of passwords using strong cryptographic hashing algorithms
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security testing and vulnerability assessments
• Intrusion detection systems and continuous server monitoring
• Optional two-factor authentication available to all 10win account holders

While we take all reasonable steps to protect your data, no internet-based system is completely secure. You are also responsible for maintaining the security of your own 10win login credentials. In the event of a data breach that is likely to result in significant risk to your rights, 10win will notify you and relevant authorities in accordance with applicable legal requirements.

10win operates as an international platform. Your personal data may be transferred to and processed in countries outside Pakistan, including countries where data protection laws may differ from those in your jurisdiction. Where such transfers occur, 10win takes steps to ensure appropriate safeguards are in place — including contractual clauses and data processing agreements with relevant service providers — to protect your data in accordance with the standards described in this policy.

The 10win platform is strictly for adults aged 18 and over. We do not knowingly collect personal data from persons under 18 years of age. If we become aware that a user under 18 has registered an account or provided personal data to 10win, we will immediately terminate that account and delete all associated personal data. If you believe a minor has accessed 10win, please contact our support team immediately so we can investigate and take appropriate action.

10win may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered users by email or via a notice on the platform with reasonable advance notice where practicable. The "Last updated" date at the top of this page indicates when the current version came into effect. Your continued use of 10win following any update constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 10win, please contact our support team:

Email: [email protected]

Support is available in English 24 hours a day, 7 days a week. Urdu-language assistance is available on request. You may also raise data-related concerns via the live chat or ticket system inside your 10win account dashboard.