10wan Privacy Policy — How We Handle Your Personal Data

1 About This Privacy Policy

This Privacy Policy is published by the operator of the 10wan platform ("10wan," "we," "us," "our") and applies to all personal data collected through the 10wan website, mobile-optimised interface, and all associated services accessible via 10wan.org (collectively, the "Platform"). This Policy should be read alongside the 10wan Terms & Conditions.

"Personal data" in this Policy means any information that identifies or could reasonably be used to identify you as a natural person — including your name, CNIC number, mobile number, email address, IP address, device identifiers, and financial transaction details. We handle all such data strictly in accordance with applicable data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, and security.

By registering an account, making a deposit, placing a wager, or otherwise using the Platform, you confirm that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein. If you do not agree, you should not use the Platform and may request Account closure by contacting [email protected].

2 Personal Data We Collect

2.1 Registration Data

When you create a 10wan Account, we collect:

• Full legal name (as on your CNIC or passport);
• Date of birth (to verify you are 21 years of age or older);
• Pakistani mobile number or email address;
• City or province of residence (e.g., Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi);
• Username and hashed password credentials.

2.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to process withdrawals, we collect:

• Copy of national identity card (CNIC), passport, or driving licence;
• Proof of address documentation (where required);
• Selfie or live photo for biometric identity matching (where applicable);
• Source of funds declarations for high-value accounts.

2.3 Financial Transaction Data

Each deposit and withdrawal on 10wan generates transaction records including:

• Payment method identifier (JazzCash number, EasyPaisa number, bank account number, card last four digits, USDT wallet address);
• Transaction amounts in PKR;
• Transaction timestamps and reference numbers;
• Deposit and withdrawal history for the lifetime of the Account.

2.4 Gaming & Wagering Activity Data

• Wagers placed, games accessed, session duration, win/loss records;
• Sportsbook betting selections and in-play betting activity;
• Bonus credits used, wagering requirement progress, promotional participation.

2.5 Technical & Device Data

• IP address and approximate geolocation at time of login;
• Device type, operating system, browser type and version;
• Session identifiers, login timestamps, and session duration logs.

2.6 Communications Data

• Support tickets, live chat transcripts, and email correspondence with 10wan;
• Feedback, complaints, and dispute communications.

3 How We Collect Your Data

10wan collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact support, or otherwise interact with any 10wan interface;
• Automatically — through cookies, web beacons, server logs, and similar technologies embedded in the Platform that record your device, IP address, browsing behaviour, and session activity;
• From payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa/Mastercard networks, and cryptocurrency platforms transmit transaction confirmation data to 10wan upon completion of a deposit or withdrawal;
• From identity verification providers — third-party KYC services may provide verified identity data and sanctions-screening results as part of the onboarding process;
• From fraud detection services — aggregated risk indicators from third-party fraud prevention tools may be associated with your Account profile.

4 Why We Use Your Data

10wan processes your personal data for the following purposes:

• Account management — creating, operating, and securing your 10wan Account;
• Age & identity verification — ensuring all users are 21 years of age or older and confirming identity for KYC compliance;
• Payment processing — facilitating deposits and withdrawals via JazzCash, EasyPaisa, and other accepted payment methods, and preventing payment fraud;
• Service delivery — enabling access to cricket betting, live dealer games, slots, Star Fishing, and all other Platform features;
• Regulatory compliance — meeting anti-money laundering (AML), counter-terrorism financing (CTF), and licensing authority obligations;
• Security & fraud prevention — detecting and preventing unauthorized Account access, bonus abuse, cheating, and money laundering;
• Responsible gaming — monitoring gameplay patterns to identify potential problem gambling behaviour and enabling the deployment of protective tools at the player's or 10wan's initiative;
• Customer support — resolving queries, complaints, and disputes efficiently;
• Platform improvement — analysing aggregated usage data to improve game selection, interface design, and payment infrastructure;
• Marketing communications — sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.

5 Legal Bases for Processing

10wan processes personal data under the following legal bases:

• Contractual necessity — processing required to create and operate your Account, process payments, and deliver gaming services under the 10wan Terms & Conditions;
• Legal obligation — processing required to comply with AML/CTF regulations, KYC requirements, licensing authority rules, and any applicable court orders or law enforcement requests;
• Legitimate interests — fraud prevention, security monitoring, responsible gaming oversight, and Platform analytics, where these interests are not overridden by your fundamental rights;
• Consent — marketing communications and any non-essential cookies, which you may withdraw at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

10wan does not sell, rent, or trade personal data. We share data only where necessary and only with the following categories of recipients:

• Payment service providers — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Visa, Mastercard, and USDT platforms, strictly for the processing of your transactions;
• Identity verification and KYC providers — third-party services that assist with document verification, age confirmation, and sanctions screening;
• Game content providers — licensed game studios providing slots, live dealer content, and other game formats may receive anonymised session data for technical performance purposes;
• Fraud prevention and security services — aggregated risk data may be shared with fraud detection providers to protect all Platform users;
• Regulatory and licensing authorities — 10wan will disclose data to its licensing authority, relevant government bodies, law enforcement agencies, or courts where required by law or by the terms of its gaming licence;
• Professional advisers — legal counsel, auditors, and compliance consultants where strictly necessary and under binding confidentiality obligations.

7 International Data Transfers

10wan's platform infrastructure, game content servers, and certain third-party service providers may be located in jurisdictions outside Pakistan. When personal data is transferred internationally, 10wan implements appropriate safeguards, which may include standard contractual clauses, binding corporate rules, or reliance on jurisdictions that maintain adequate data protection standards as assessed by our licensing authority.

By using the Platform, you acknowledge and consent to the transfer of your personal data to processors in other countries for the purposes described in this Policy, where such transfers are conducted under the protective measures outlined above.

8 Data Retention

10wan retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following specific retention standards:

• Account and KYC data — retained for a minimum of five (5) years following Account closure, as required by standard AML and gaming licensing regulations;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction for audit and compliance purposes;
• Gaming activity logs — retained for three (3) years following the last recorded session, or for the duration of any ongoing dispute or investigation;
• Support communications — retained for two (2) years from the date of the communication, unless required longer for dispute resolution;
• Marketing consent records — retained until consent is withdrawn, plus a reasonable period thereafter as evidence of the consent having been obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with any identifiable individual.

9 Cookies & Tracking Technologies

The 10wan Platform uses cookies and similar tracking technologies to operate effectively. These include:

• Essential cookies — required for login session management, security token validation, and Platform functionality. These cannot be disabled without impairing your ability to use the Platform;
• Analytical cookies — used to collect aggregated, anonymised data about how users navigate the Platform, informing product improvements. These do not personally identify you;
• Preference cookies — store your language, display, and notification settings between sessions;
• Marketing cookies — used to deliver relevant promotions and measure the effectiveness of bonus campaigns, where you have consented to their use.

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not affect your core gaming experience on 10wan, though some personalisation features may be reduced.

10 Security Measures

10wan employs a multi-layered security framework to protect your personal data from unauthorized access, loss, misuse, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 10wan Platform;
• Encrypted storage of all sensitive personal data, including KYC documents and payment method details, at rest;
• Access controls ensuring that only authorised 10wan personnel with a documented business need can access identifiable personal data;
• Two-factor authentication (2FA) available on all user Accounts;
• Automated login anomaly detection — unusual access patterns trigger security alerts and, where appropriate, temporary Account holds;
• Regular security assessments and penetration testing of the Platform's infrastructure;
• Incident response procedures to detect, report, and respond to personal data breaches within the timeframes required by our licensing authority.

While 10wan takes all reasonable precautions, no internet-based system can guarantee absolute security. You are responsible for keeping your Account credentials confidential and for notifying [email protected] immediately if you suspect any unauthorized access to your Account.

11 Your Data Rights

Subject to applicable law and our regulatory obligations, you have the following rights in respect of your personal data held by 10wan:

• Right of access — you may request a copy of all personal data 10wan holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where retention is no longer justified, subject to our legal retention obligations (see Section 8);
• Right to restriction — you may request that we limit processing of your data while a correction or objection request is being assessed;
• Right to data portability — you may request your Account and transaction data in a structured, machine-readable format;
• Right to object — you may object to processing carried out on the basis of legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent — where processing is based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting prior processing.

To exercise any of the above rights, submit a written request to [email protected] with your Account mobile number or registered email address for verification purposes. 10wan will respond within thirty (30) days. In some cases — particularly where legal retention obligations apply — we may be unable to fulfil erasure requests in full; where this occurs, we will explain the reason in our response.

12 Children's Privacy

The 10wan Platform is strictly intended for persons aged twenty-one (21) and above. We do not knowingly collect personal data from individuals under the age of 21. If 10wan becomes aware that a registered Account belongs to a person under 21, the Account will be immediately suspended, all Wagers voided, and any real-money Funds returned to a verified parent or guardian following identity confirmation.

If you are a parent or guardian and believe that a minor under your care has registered an Account on 10wan, please contact [email protected] immediately. We will investigate and take prompt action. 10wan cooperates fully with regulatory bodies on underage access investigations.

13 Third-Party Services & Links

The 10wan Platform may contain references to third-party payment providers and game studios. These third parties operate their own privacy policies, which govern how they handle data arising from their own systems. 10wan is not responsible for the privacy practices of any third-party service provider beyond the contractual data processing obligations imposed on them by 10wan in our vendor agreements.

When you interact with a JazzCash or EasyPaisa payment interface, or with a live dealer game studio stream, the relevant third party may independently collect certain technical data. We encourage you to review the privacy documentation of any third-party service you interact with through the Platform.

14 Updates to This Policy

10wan may update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or the services we offer. Where changes are material — affecting the type of data collected, the purposes of processing, or your rights — we will notify you via the registered email address on your Account and/or through a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this page will always reflect when the current version took effect. We encourage you to review this Policy periodically. Continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

15 Contact Us & Complaints

For any queries or concerns about this Privacy Policy or about how 10wan handles your personal data, please contact:

If you are dissatisfied with 10wan's handling of a privacy complaint after raising it with us directly, you may escalate the matter to the relevant data protection or regulatory authority as applicable under the laws of the jurisdiction governing our operating licence. Details of the applicable authority are available upon request from our support team.