10ein Privacy Policy

1 Data Controller Identity

The data controller responsible for the personal data you provide to 10ein is the operating entity behind the 10ein platform, licensed under an international gaming regulatory framework. For all data-related enquiries, the primary point of contact is our dedicated privacy support team, reachable via the email address displayed in the footer of this page.

Where 10ein engages third-party processors — such as payment providers or identity verification services — those parties act strictly as data processors under written data processing agreements and may not use your data for any purpose beyond the specific service they are contracted to provide.

2 Data We Collect

10ein collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarises the primary categories of data we process:

3 How We Collect Your Data

10ein collects your personal data through the following channels:

• Direct interactions: Data you provide when registering a 10ein account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated technologies: Technical data collected automatically when you browse the 10ein platform, including cookies, web beacons, server logs, and session tracking tools. See Section 7 for full details on our cookie practices.
• Third-party sources: Data received from identity verification providers, payment processors (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank), fraud detection services, and advertising partners where you have consented to such sharing.
• Regulatory and legal sources: Where required under AML/CTF obligations, we may receive or cross-reference data from publicly available sanctions lists or regulatory databases.

4 Lawful Basis for Processing

10ein only processes your personal data where we have a valid lawful basis to do so. The principal bases on which we rely are as follows:

• Contractual necessity: Processing required to create and manage your 10ein account, process transactions, and deliver the gaming services you have contracted us to provide.
• Legal obligation: Processing necessary to comply with KYC, AML, CTF, and responsible gaming regulations imposed by our licensing authority and applicable law.
• Legitimate interests: Processing for fraud prevention, platform security, customer service improvement, and internal analytics — where these interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, non-essential cookies, and personalised promotions — where you have provided clear, freely given, and withdrawable consent.

Where we rely on consent as our lawful basis, you may withdraw that consent at any time by contacting our support team or adjusting your account notification preferences. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal.

5 How We Use Your Data

The personal data we collect is used for the following purposes:

• Creating, verifying, and maintaining your 10ein player account.
• Processing deposits and withdrawals via JazzCash, EasyPaisa, bank transfer, and card payment methods in PKR.
• Conducting KYC identity and age verification to confirm you meet the 21+ eligibility requirement.
• Monitoring transactions and gameplay for the detection and prevention of fraud, money laundering, and account misuse.
• Providing customer support and resolving account disputes fairly and efficiently.
• Administering promotions, bonuses, and loyalty programmes — including verifying eligibility and tracking wagering requirements.
• Sending you account-related communications such as deposit confirmations, withdrawal updates, and security alerts.
• Sending marketing and promotional communications where you have opted in — you may opt out at any time.
• Monitoring gaming patterns for responsible gaming purposes, including identifying players who may be showing signs of problem gambling behaviour.
• Improving the 10ein platform through internal analytics, user experience research, and technical performance monitoring.
• Complying with all applicable regulatory and legal obligations associated with 10ein's international gaming licence.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your express consent or demonstrating another valid lawful basis.

6 Data Sharing & Disclosure

10ein does not sell your personal data. We share data with third parties only in the following circumstances and only to the extent strictly necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and Visa/Mastercard processing partners receive the financial data necessary to process your transactions.
• Identity verification providers: Specialist KYC service providers who verify your CNIC and other identity documents on our behalf, operating under strict data processing agreements.
• Fraud prevention and security services: Third-party tools used to detect suspicious activity, prevent account takeovers, and ensure platform integrity.
• Regulatory and law enforcement authorities: Where we are legally required to disclose data — for example, in response to a valid court order, regulatory investigation, or AML reporting obligation — we will comply with that requirement.
• Group entities and service providers: Internal support functions and contracted service providers (e.g., hosting, email delivery, analytics) who process data solely on 10ein's documented instructions.

All third-party processors engaged by 10ein are contractually bound to implement appropriate technical and organisational security measures and to process your data only in accordance with our written instructions.

7 Cookies & Tracking Technologies

The 10ein platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to gather analytics data that helps us improve your experience. The types of cookies we use are described below:

• Strictly necessary cookies: Essential for the platform to function. These cookies manage your login session, maintain your basket of active bets, and enable security features. They cannot be disabled.
• Performance and analytics cookies: These cookies collect anonymised data on how players interact with the 10ein platform — which pages are visited most, where users drop off, and how features are used — to guide product improvements.
• Functional cookies: These remember your preferences such as language settings, display options, and notification choices to deliver a more personalised experience.
• Marketing cookies: Used only where you have explicitly consented, these cookies help us understand the effectiveness of promotional campaigns and deliver relevant content.

You can manage your cookie preferences at any time via your browser settings. Disabling non-essential cookies will not affect your ability to access or use the core 10ein platform.

8 Data Retention

10ein retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by our regulatory and legal obligations. The following retention periods apply as a general guide:

• Account and identity data: Retained for the full duration of your account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction to satisfy AML, CTF, and audit compliance obligations.
• Customer support communications: Retained for up to three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Marketing preference data: Retained until you withdraw consent or for up to two (2) years following your last meaningful interaction with 10ein marketing material, whichever is earlier.
• Technical and usage data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted.

On expiry of the applicable retention period, data is securely deleted or anonymised in a manner that prevents re-identification.

9 Security Measures

10ein implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• 256-bit TLS encryption for all data transmitted between your device and the 10ein platform.
• Encrypted storage of sensitive data fields, including identity documents and financial account references, at rest.
• Role-based access controls ensuring that internal staff can only access the minimum data necessary to perform their specific job functions.
• Multi-factor authentication requirements for all internal administrative system access.
• Regular third-party penetration testing and vulnerability assessments of the platform infrastructure.
• Continuous automated monitoring for anomalous access patterns and potential data breach indicators.
• A documented data breach response procedure, including notification protocols in the event of a significant data incident.

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for keeping your own 10ein login credentials secure and for notifying us promptly if you suspect any unauthorised access to your account.

10 Your Data Rights

As a data subject, you hold the following rights in respect of the personal data we process about you. To exercise any of these rights, please contact our support team using the email address shown in the footer of this page. We will respond within the timeframe required under applicable data protection law, and in any event within thirty (30) days of receiving your request.

• Right of access: You may request a copy of the personal data we hold about you, together with information about how it is being processed.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you without undue delay.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal or regulatory retention obligations.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances — for example, while the accuracy of your data is being contested.
• Right to data portability: Where processing is based on your consent or on a contract, you may request that we provide your data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests at any time, and you have an absolute right to object to direct marketing processing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

11 Children's Privacy

The 10ein platform is strictly restricted to individuals who are at least 21 years of age. We do not knowingly collect, process, or store personal data from anyone under the age of 21. Our registration process includes mandatory age verification via CNIC to enforce this restriction.

If we become aware that personal data has been collected from an individual under the age of 21 — whether through a falsified registration or any other means — we will immediately close the associated account, delete all related personal data, and refund any deposited funds to their source payment method.

12 Third-Party Links

The 10ein platform may from time to time contain references or links to third-party services such as payment gateways and identity verification portals. Once you navigate away from the 10ein platform to a third-party website or service, this Privacy Policy no longer applies.

10ein has no control over the content, privacy practices, or data processing activities of third-party websites and accepts no liability for any data collected by those parties. We strongly encourage you to review the privacy policy of any third-party service before submitting your personal data to them.

13 Changes to This Privacy Policy

10ein reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. Where changes are material, we will notify registered players by displaying a prominent notice on the platform or by sending a notification to your registered email address prior to the changes taking effect.

The effective date at the top of this document will always reflect the date on which the current version came into force. Your continued use of the 10ein platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with any changes, you should cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed of how 10ein protects and processes your personal data.

14 Contact & Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 10ein processes your personal data, please contact our privacy support team in the first instance. We are committed to resolving all data-related enquiries promptly and fairly.

You may contact us via the live chat feature available on the 10ein platform (24 hours a day, seven days a week) or by emailing us at the address shown below. Please include your registered account username and a clear description of your query or complaint to help us respond efficiently.

If you remain dissatisfied after contacting 10ein directly, you may have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction. Details of the applicable authority will be provided upon request.