10wim Privacy Policy – How We Protect Your Personal Data

This Privacy Policy ("Policy") is published by 10wim ("10wim", "we", "us", "our") and applies to all individuals who access or use the 10wim Platform, including its website, mobile-optimised interface, and any related services (collectively the "Platform"). This Policy describes how 10wim collects, processes, stores, shares, and protects personal information in connection with the provision of our online cricket betting, casino, and gaming services.

By registering an account with 10wim or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 10wim Platform.

This Policy should be read together with the 10wim Terms & Conditions, which also govern your use of the Platform.

---

2.1 Information You Provide Directly

When you register an account with 10wim, we collect the following categories of personal information that you provide directly:

Category	Examples	Purpose
Identity Data	Full name, date of birth, CNIC number, nationality	Account registration, KYC verification, age verification
Contact Data	Pakistani mobile number (03xx format), email address	Account communication, OTP delivery, support
Financial Data	JazzCash number, Easypaisa number, bank account details, card details	Deposit and withdrawal processing, fraud prevention
KYC Documents	CNIC scan or photo, proof of address, selfie verification	Identity verification, regulatory compliance
Communications	Support ticket content, chat logs, feedback submissions	Customer support, dispute resolution, service improvement

2.2 Information Collected Automatically

When you access and use the 10wim Platform, we automatically collect certain technical and usage information, including:

• Device information: device type, operating system, browser type and version, screen resolution
• Network information: IP address, mobile network provider (e.g. Jazz, Telenor, Zong, Ufone)
• Usage data: pages visited, features used, session duration, betting and gaming activity logs
• Session data: login timestamps, logout timestamps, session token identifiers
• Cookie and tracking technology data as described in Section 7

2.3 Information from Third Parties

In some circumstances, 10wim may receive information about you from third parties, including identity verification service providers engaged for KYC purposes, payment processing partners, and fraud detection services. Such third-party data is processed in accordance with this Policy.

---

10wim processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your 10wim account, including processing login authentication and two-factor verification via OTP.
• Service delivery: Enabling you to place bets, participate in casino games, access promotions, and use all features of the Platform.
• Payment processing: Processing deposits via JazzCash, Easypaisa, bank transfer, and other accepted payment methods; processing withdrawal requests; maintaining financial records.
• Identity and age verification: Verifying that you meet the 18+ age requirement and that your identity matches the information provided during registration.
• Regulatory compliance: Meeting anti-money laundering (AML), counter-terrorism financing (CTF), and other applicable regulatory obligations.
• Fraud prevention and security: Detecting, preventing, and investigating fraud, unauthorised account access, bonus abuse, and other prohibited activities.
• Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling; applying responsible gaming tools and limits where appropriate.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance with your 10wim account.
• Platform improvement: Analysing usage patterns to improve the Platform's functionality, performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates where you have not opted out of such communications.

---

10wim processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 10wim, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML, KYC, and financial record-keeping requirements.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications and non-essential analytics cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting 10wim support.

---

5.1 Third-Party Service Providers

10wim shares personal data with trusted third-party service providers engaged to assist in delivering Platform services. These include identity verification providers, payment processing partners, game software providers, cloud hosting services, and customer support platforms. All third-party providers are required to process personal data only as instructed by 10wim and in accordance with applicable data protection standards.

5.2 Legal and Regulatory Disclosure

10wim may disclose personal data to regulatory authorities, law enforcement agencies, or other government bodies where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be made only to the extent required and will be subject to appropriate confidentiality obligations where permitted.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of 10wim's business or assets, personal data may be transferred as part of that transaction. Users will be notified of any such transfer and any material changes to this Policy that result from it.

5.4 No Sale of Data

10wim does not sell, rent, lease, or otherwise commercially transfer your personal data to third parties for their own independent marketing or commercial purposes.

---

Financial data associated with your 10wim transactions — including JazzCash mobile wallet numbers, Easypaisa account details, bank account numbers, and card details — is handled with heightened security measures. 10wim does not store full card numbers on its servers; card transactions are processed through PCI-DSS compliant payment gateways. Mobile wallet transaction data is handled in accordance with the applicable policies of the respective wallet providers (Jazz/JazzCash, Telenor/Easypaisa). Bank transfer details are retained for the period necessary to comply with financial record-keeping obligations.

---

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 10wim Platform. They allow the Platform to recognise your device, maintain your session, and record certain usage information. 10wim also uses similar technologies including local storage, session tokens, and pixel tags for related purposes.

7.2 Types of Cookies Used by 10wim

• Strictly necessary cookies: Required for the Platform to function. These include session management cookies that maintain your logged-in state and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g. language, preferred casino lobby view) to improve your experience on return visits.
• Analytics cookies: Collect aggregated information about how users interact with the Platform to help 10wim improve its design and performance. These are optional and can be declined.

7.3 Managing Cookies

You can manage and delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the 10wim Platform and may prevent you from logging in or completing transactions.

---

10wim retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, tax, and accounting obligations. Specifically:

• Account data is retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in compliance with financial record-keeping requirements.
• KYC documentation is retained for a minimum of five (5) years following the completion of the relevant transaction or account closure, whichever is later.
• Customer support communications are retained for up to three (3) years from the date of the relevant interaction.
• Technical and usage logs are retained for up to two (2) years for security and fraud analysis purposes.
• Marketing preferences and consent records are retained until consent is withdrawn or the account is closed.

---

10wim implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include TLS encryption for data in transit, encrypted storage for sensitive data at rest, access controls limiting data access to authorised personnel only, regular security assessments, and incident response procedures for potential data breaches.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. 10wim cannot guarantee absolute security of your personal data and is not liable for security breaches outside of its reasonable control.

---

Subject to applicable law, you have the following rights in respect of your personal data held by 10wim:

• Right of access: You may request a copy of the personal data 10wim holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to 10wim's legal retention obligations.
• Right to restrict processing: You may request that 10wim limit the processing of your personal data in certain circumstances.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format where processing is based on consent or contractual necessity.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to object: You may object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact 10wim support at [email protected] with the subject line "Data Rights Request". We will acknowledge your request within a reasonable timeframe and respond within 30 days.

---

The 10wim Platform is strictly for adults aged 18 and above. 10wim does not knowingly collect personal data from individuals under 18. If we become aware that personal data has been collected from a minor, we will immediately take steps to delete that data and close the associated account. If you believe that a minor has registered on the 10wim Platform, please notify us at [email protected] so we can take appropriate action.

---

In connection with the provision of Platform services, personal data may be transferred to and processed in countries outside of Pakistan. Where such transfers occur, 10wim takes appropriate steps to ensure that personal data continues to receive an adequate level of protection, including through the use of contractual safeguards with recipient entities.

---

10wim reserves the right to update or modify this Privacy Policy at any time. When changes are made, the updated Policy will be published on the Platform with a revised "Last Updated" date. Where changes are material, 10wim will endeavour to notify registered users via the contact information held on their account. Your continued use of the Platform following publication of an updated Policy constitutes acceptance of the revised terms.

---

For all privacy-related enquiries, data access requests, or concerns regarding this Policy, please contact the 10wim data team:

Please include "Privacy Policy" or "Data Rights Request" in the subject line of your email so we can route your enquiry to the correct team promptly. All data rights requests will be acknowledged within a reasonable period and responded to within 30 days.