1Who We Are
10win is an online gaming platform operated specifically for Pakistani players, offering casino games, sports betting, live dealer tables, slots, and PSL cricket coverage. When this Privacy Policy refers to "10win", "we", "us", or "our", it refers to the platform at https://10win.link and its operating team.
This Privacy Policy applies to all users of the 10win website and mobile application, including visitors who browse without registering and registered players who hold an active account. By using any part of the 10win platform, you acknowledge and accept the data practices described below.
For any privacy-related questions, the primary contact is support@10win.link. We aim to respond to all privacy queries within 5 business days.
2Data We Collect
10win collects personal data in two ways: information you provide directly, and information gathered automatically when you use the platform.
Information you provide directly:
- Registration data: Full name, date of birth, gender, email address, mobile phone number, and residential address.
- Identity verification (KYC): CNIC number and a copy of your CNIC, plus supporting documents such as proof of address.
- Payment information: Easypaisa account number, JazzCash account number, NayaPay or SadaPay wallet details, bank account details for IBFT transfers, or card details for Visa/Mastercard payments. Full card numbers are never stored on 10win servers – they are tokenised through our payment processor.
- Support interactions: Records of live chat conversations, emails, and any documents you share with the support team.
- Responsible gaming preferences: Deposit limits, session reminders, cool-off requests, and self-exclusion instructions you set in your account.
Information collected automatically:
- Device and browser data: IP address, device type, operating system, browser version, screen resolution, and device identifiers.
- Usage data: Pages visited, games played, bets placed, time spent on each section, and navigation paths within the platform.
- Session data: Login times, session duration, and logout events.
- Cookies and tracking technologies: As described in Section 8 of this policy.
| Data Category | Examples | Collected at |
|---|
| Identity | Name, CNIC, date of birth | Registration / KYC |
| Contact | Email, mobile number, address | Registration |
| Financial | Wallet number, bank account, card token | First deposit / KYC |
| Technical | IP address, device ID, browser | Every session |
| Behavioural | Games played, bets, session length | Every session |
| Communications | Support chat, emails | As they occur |
3Why We Collect Your Data
10win collects personal data only for specific, legitimate purposes. The main reasons are:
- Account management: To create and maintain your player account, verify your identity, and allow you to log in securely.
- Payment processing: To process PKR deposits and withdrawals through Easypaisa, JazzCash, NayaPay, bank transfer, and card channels.
- Compliance and fraud prevention: To meet legal obligations around Know Your Customer (KYC), anti-money laundering checks, and fraud detection. This is mandatory for any financial services platform.
- Responsible gaming: To monitor play patterns and flag accounts that may show signs of problem gambling. 10win takes this obligation seriously and uses behavioural data to proactively reach out to at-risk players.
- Customer support: To assist you with account queries, payment issues, technical problems, and complaints.
- Platform improvement: To understand how Pakistani players use 10win and improve the mobile experience, game catalogue, and payment flows accordingly.
- Security: To detect and prevent unauthorised account access, multi-accounting, and other security threats.
- Communications: To send you transactional messages (deposit confirmations, withdrawal alerts, security notifications) and, where you have opted in, promotional offers.
10win does not collect or use your personal data for purposes beyond those listed above. We do not build advertising profiles, sell behavioural data to marketers, or share your data with social media platforms for targeting purposes.
4Legal Basis for Processing
Every time 10win processes your personal data, it does so under one of the following legal bases:
- Contractual necessity: Processing your name, contact details, and payment information is necessary to fulfil the account agreement and process your transactions. Without this data, we cannot operate your account.
- Legal obligation: KYC and anti-money laundering checks are required by applicable regulations. 10win is legally required to verify player identity before processing withdrawals above certain thresholds.
- Legitimate interests: Fraud prevention, platform security, responsible gaming monitoring, and internal analytics are conducted under 10win's legitimate interest in operating a safe and sustainable platform. These interests do not override your rights.
- Consent: Where 10win sends you optional marketing communications (bonus offers, promotions, newsletters), it does so only where you have explicitly opted in. You can withdraw this consent at any time through your account settings or by contacting support.
5Payment Data and Financial Security
Pakistani players trust 10win with their PKR transactions. Here is specifically how financial data is handled:
- Easypaisa and JazzCash: Your mobile wallet number is stored against your account for withdrawal routing. The number is encrypted at rest and masked in all internal systems. It is only decrypted during an active withdrawal request.
- Card payments: 10win does not store full card numbers on its own servers. Card data is tokenised through our PCI-DSS compliant payment processor. 10win only retains the last four digits and card type for display purposes.
- Bank transfer (IBFT): Your account title, IBAN, and bank name are stored to facilitate withdrawals. This data is encrypted and only used for outbound payment processing.
- Transaction records: All deposit and withdrawal records are retained as required for financial compliance and are available to you in your account transaction history at any time.
All payment data stored by 10win is protected by AES-256 encryption at rest and TLS 1.3 in transit. Financial data is stored on servers with restricted access – only the payment processing team can access raw financial records, and all access is logged and audited.
6Sharing Your Data
10win does not sell your personal data. It is not shared with third-party advertisers, data brokers, or marketing platforms. The following are the only circumstances in which your data may be shared with external parties:
- Payment processors: Easypaisa, JazzCash, NayaPay, and card payment gateways receive the minimum data required to process your specific transaction. They operate under their own privacy policies and are bound by confidentiality agreements.
- Identity verification providers: If 10win uses a third-party KYC service to verify CNIC documents, that provider receives only the data required for that verification check and is contractually prohibited from using it for any other purpose.
- Game software providers: Casino game providers (e.g. live dealer platform operators) receive a session token and your wagering data to operate the game. They do not receive your identity documents, payment details, or contact information.
- Legal and regulatory authorities: 10win will disclose your data to law enforcement, regulatory bodies, or courts when required to do so by applicable law, a valid court order, or to protect the platform and its users from fraud or illegal activity.
- Business transfers: In the unlikely event of a merger, acquisition, or sale of the platform, player data may be transferred to the acquiring entity. You would be notified in advance, and the new entity would be required to honour this Privacy Policy.
7How Long We Keep Your Data
10win retains personal data only for as long as it is needed for the purpose it was collected, or as required by applicable law. The following general retention periods apply:
- Active account data: Retained for the lifetime of your account plus a minimum of 5 years after account closure, as required for financial record-keeping and compliance purposes.
- KYC and identity documents: Retained for a minimum of 5 years following account closure in accordance with anti-money laundering obligations.
- Transaction records: Retained for 7 years following the transaction date.
- Support communications: Retained for 3 years from the date of the last interaction.
- Session and usage data: Retained for 13 months for analytics purposes, then anonymised or deleted.
- Marketing consent records: Retained until consent is withdrawn, plus 1 year for audit trail purposes.
When data reaches the end of its retention period, it is securely deleted or anonymised so it can no longer be linked to an individual player.
8Cookies and Tracking
10win uses cookies and similar technologies (local storage, session identifiers) to operate the platform, remember your preferences, and understand how players use the site. Cookies do not contain your personal data such as your name or CNIC number.
| Cookie Type | Purpose | Required? |
|---|
| Session cookies | Maintain your logged-in state while you play | Required |
| Security cookies | Detect fraud, suspicious login patterns, and bot activity | Required |
| Preference cookies | Remember your language, game filter, and display settings | Required |
| Analytics cookies | Understand which pages and games are used most | Optional |
| Performance cookies | Monitor page load speed and identify errors | Optional |
Required cookies are necessary for the platform to function and cannot be disabled without breaking core features. Optional cookies can be declined or withdrawn at any time through your browser settings. Declining optional cookies does not affect your ability to play games, deposit, or withdraw.
10win does not use third-party advertising cookies or pixel trackers from social media platforms. The analytics tools used by 10win are configured to anonymise IP addresses before processing.
9Your Data Rights
As a player on 10win, you have the following rights over your personal data. You can exercise any of these by emailing support@10win.link with your request:
Right of Access
Request a copy of all personal data 10win holds about you. We will provide this within 30 days in a readable format.
Right to Rectification
Ask us to correct inaccurate data. Update your name, address, or contact details at any time through your account or by contacting support.
Right to Erasure
Request deletion of your data. Note that legal retention requirements mean some data must be kept even after account closure.
Right to Restriction
Request that we limit how we process your data while a dispute or review is in progress, without deleting it entirely.
Right to Portability
Request your data in a machine-readable format (CSV or JSON) so you can transfer it to another service if you choose.
Right to Object
Object to specific types of processing, such as marketing communications or profiling for responsible gaming purposes.
All rights requests are handled within 30 days. Complex requests may take up to 60 days, in which case we will notify you of the extension. There is no fee for exercising your rights. 10win will never penalise you for making a data rights request.
10Children's Privacy
10win is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is part of the registration and KYC process to prevent underage use.
If you are a parent or guardian and you believe a minor has registered on 10win, please contact us immediately at support@10win.link. We will investigate promptly, close the account, and delete all associated data without requiring a formal data rights request.
11Security Measures
10win invests significantly in the security infrastructure that protects player data. The key measures in place include:
- Encryption in transit: All data transmitted between your device and 10win servers uses TLS 1.3 encryption. The padlock icon in your browser confirms this is active.
- Encryption at rest: Personal data and payment information stored on 10win servers is encrypted using AES-256.
- Access controls: Internal access to player data is role-based and need-to-know. Support staff can see your account details but cannot see your full payment information. Payment staff can process transactions but are not exposed to your gaming history.
- Two-factor authentication: Available for all player accounts. Highly recommended, particularly for players with significant account balances.
- Intrusion detection: Automated systems monitor for unusual access patterns, login attempts from unfamiliar locations, and other indicators of account compromise.
- Penetration testing: 10win's security infrastructure is tested by independent security professionals on a regular basis.
Despite these measures, no online system can guarantee absolute security. If you suspect your 10win account has been accessed without your permission, contact support immediately via live chat.
12Changes to This Privacy Policy
This Privacy Policy is reviewed and updated periodically to reflect changes in 10win's data practices, applicable law, and the services we offer. The "Last Updated" date at the top of this page shows when the most recent revision was made.
When material changes are made – for example, a new type of data collection, a new third-party processor, or a significant change to retention periods – 10win will notify registered players via email at least 14 days before the change takes effect. For minor clarifications or corrections that do not affect your rights, the policy will be updated without prior notice.
Continued use of the platform after a policy update constitutes your acceptance of the revised terms. If you do not agree with any changes, please contact support to request account closure before the effective date.
13Contact and Complaints
If you have any questions about how 10win handles your personal data, or if you wish to exercise any of your data rights, please contact us:
- Email: support@10win.link
- Subject line: "Privacy Request – [your registered name]"
- Live chat: Available 24/7 from your logged-in dashboard
- Response time: Within 5 business days for general queries; within 30 days for formal rights requests
If you believe 10win has not handled your personal data correctly and your complaint has not been resolved to your satisfaction after contacting the support team, you have the right to raise the matter with the relevant data protection authority.
All privacy-related communications are treated with strict confidentiality. Your data rights request will not affect your account standing or any services you are currently using on 10win.
