10wan Privacy Policy — How We Handle Your Data

10wan ("we", "us", "our", "the Platform") is an internationally licensed online gaming platform operating at 10wan.club. 10wan acts as the data controller in respect of the personal data it collects from users ("you", "your", "the Player") who access or register on the platform.

10wan is licensed under an international gaming licence issued by a recognised gaming regulatory authority. As part of its licensing conditions, 10wan is required to implement and maintain a data protection framework that meets defined standards for the collection, processing, storage, and transfer of personal data. This Privacy Policy fulfils those requirements and is designed to give you a clear and complete understanding of how your personal data is handled.

This policy applies to all personal data collected through the 10wan website at 10wan.club, any associated mobile interface, and all communications between you and the 10wan support team.

10wan collects the following categories of personal data from users:

We do not collect special category data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless you explicitly provide such information as part of a responsible gaming self-referral or medical documentation in connection with a support query.

10wan collects personal data through the following channels:

• Direct registration: When you create a 10wan account, you provide identity, contact, and (where applicable) financial data directly through the registration form.
• KYC document submission: When you submit identity verification documents in connection with your account or a withdrawal request, 10wan collects and processes the personal data contained in those documents.
• Transactional activity: Each deposit, withdrawal, bet placement, and game session generates activity data that is automatically recorded within your account record.
• Technical data collection: When you access the 10wan platform, your browser and device transmit technical data including IP address, browser type, and device identifiers. This data is collected automatically through server logs and, where applicable, cookies.
• Support communications: When you contact the 10wan support team via live chat, email, or any other channel, the content of that communication is recorded and retained as described in Section 7.
• Third-party payment providers: When you make a deposit or withdrawal via JazzCash, EasyPaisa, or a bank transfer, 10wan receives transaction confirmation data from the relevant payment provider. 10wan does not store full payment credentials — only the reference identifiers required to reconcile transactions.

10wan processes your personal data for the following purposes, each supported by a defined legal basis:

• Account registration and operation — Processing is necessary for the performance of our contract with you. Without processing your identity and contact data, we cannot provide you with a 10wan account.
• Identity verification and age confirmation (KYC) — Processing is required to comply with legal and licensing obligations. 10wan must verify that all users are aged 21 or above and that their identities are as stated. This is a non-negotiable condition of our international gaming licence.
• Payment processing — Processing is necessary for the performance of the contract with you and to comply with financial regulation and AML obligations applicable to our licence.
• Fraud prevention and security — Processing is in our legitimate interests to protect the platform, our users, and our licensing standing from fraudulent activity, money laundering, and account security breaches.
• Responsible gaming tool administration — Processing is necessary to comply with our licensing obligations and to protect the welfare of players, including enforcing self-exclusion requests, deposit limits, and cooling-off periods.
• Customer support — Processing is necessary for the performance of the contract with you and in our legitimate interests to maintain service quality and resolve disputes.
• Marketing communications — Where you have opted in, processing is based on your consent. You may withdraw consent at any time by contacting support or updating your account preferences.
• Platform analytics and improvement — Processing is in our legitimate interests to understand how users interact with the platform in order to improve performance, user experience, and game selection.
• Regulatory reporting — Processing is required to comply with the reporting obligations of our international gaming licence, including the submission of required data to the relevant regulatory authority.

10wan does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and Visa card processing partners receive the transactional data required to process your deposits and withdrawals. These providers are contractually bound to process your data in accordance with applicable data protection standards.
• KYC and identity verification providers: 10wan may engage specialist third-party identity verification services to support the KYC process. These providers receive only the identity documents and data required to perform the verification function.
• Game content providers: Certified slot and live casino game providers may receive a pseudonymous player identifier and session data necessary to deliver the game experience. These providers do not receive your full identity or financial data.
• Regulatory and licensing authorities: 10wan is required to submit defined reports and data to its regulatory authority as a condition of its gaming licence. This may include anonymised or aggregated data and, in specific circumstances, individual player data where required by law or licence condition.
• Law enforcement and legal process: Where 10wan receives a valid legal request from a competent authority — including in connection with an investigation into fraud, money laundering, or other criminal activity — we will disclose personal data to the extent required by applicable law.
• Professional advisors: Legal counsel, auditors, and compliance advisors engaged by 10wan may access personal data in the course of providing professional services to the platform. These parties are bound by confidentiality obligations.

All third parties with whom 10wan shares personal data are required to handle that data in accordance with applicable data protection requirements and are permitted to use it only for the specified purpose for which it was shared.

10wan operates as an international platform and, as a result, your personal data may be transferred to and processed in countries outside Pakistan. This may occur where our hosting infrastructure, payment processing systems, or third-party service providers are located in jurisdictions outside Pakistan.

Where such transfers occur, 10wan ensures that appropriate safeguards are in place to protect your personal data. These safeguards may include:

• Contractual provisions with the recipient that impose equivalent data protection obligations;
• Transfer to jurisdictions recognised as providing an adequate level of data protection by relevant international standards;
• Other legally recognised mechanisms appropriate to the nature of the transfer.

If you would like further information about the specific safeguards applied to any international transfer of your personal data, please contact the 10wan support team.

10wan retains personal data for the periods required to fulfil the purposes for which it was collected, subject to any longer retention period required by our licensing obligations, AML regulations, or applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum period of five years following account closure, in accordance with AML regulatory requirements.
• Transaction and betting records: Retained for a minimum of five years following the relevant transaction or bet, as required by financial regulation and licensing conditions.
• KYC documents: Retained for the period required by our licence conditions, typically a minimum of five years from the date of submission.
• Support communications: Retained for a minimum of two years from the date of the last communication, to support dispute resolution and quality assurance.
• Technical and session data: Retained for up to 12 months for security analysis and platform improvement purposes, after which it is aggregated or deleted.
• Marketing consent records: Retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance.

At the end of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data may be retained beyond the retention period for statistical analysis and platform improvement purposes.

10wan implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• Encryption in transit: All data transmitted between your device and the 10wan platform is encrypted using 256-bit SSL/TLS protocols. You can verify this by checking for the padlock indicator in your browser's address bar when visiting 10wan.club.
• Encryption at rest: Sensitive personal data held in 10wan's systems, including KYC documents and financial data, is encrypted at rest using industry-standard encryption methods.
• Access controls: Access to personal data within 10wan's systems is restricted to authorised personnel who require it to perform their specific functions. Access rights are reviewed periodically and revoked when no longer required.
• Two-factor authentication: 10wan offers optional two-factor authentication for player accounts via SMS to registered Pakistani mobile numbers. Internal system access for 10wan staff is protected by mandatory multi-factor authentication.
• Security monitoring: 10wan's systems are monitored continuously for anomalous activity, attempted breaches, and login irregularities. Security incidents are investigated and remediated in accordance with 10wan's incident response procedures.
• Vendor security standards: Third-party service providers who process personal data on behalf of 10wan are required to maintain security standards consistent with applicable data protection requirements as a condition of their engagement.

Subject to applicable law and the specific circumstances of your request, you have the following rights in relation to your personal data held by 10wan:

To exercise any of the above rights, please contact 10wan support via live chat or submit a written request to [email protected] with the subject line "Data Subject Request – [Your Account ID]". 10wan will acknowledge your request within 24 hours and respond substantively within 30 days. Where a request is complex or numerous, this period may be extended by up to a further 60 days, with notice provided to you.

Please note that certain rights are subject to exemptions where processing is required for compliance with a legal obligation, the performance of a public task, or the establishment, exercise, or defence of legal claims. Where an exemption applies, 10wan will inform you of the specific grounds for that exemption.

10wan uses cookies and similar tracking technologies on the platform to support core functionality, security, and user experience. The following types of cookies may be set when you access 10wan.club:

• Strictly necessary cookies: These cookies are essential for the operation of the 10wan platform, including session management, authentication, and security functions. They cannot be disabled without affecting platform functionality.
• Functional cookies: These cookies remember your preferences, such as language settings and responsible gaming limit configurations, to provide a consistent experience across sessions.
• Analytics cookies: These cookies collect anonymised information about how users interact with the platform — including pages visited, time spent on pages, and navigation patterns — to help 10wan improve the platform experience.
• Security cookies: These cookies help 10wan detect and prevent fraudulent account access by tracking login anomalies and device recognition signals.

Most browsers allow you to manage cookie preferences through browser settings. Blocking strictly necessary cookies will prevent you from using the 10wan platform. Blocking other cookie categories may affect platform personalisation and analytics functionality but will not prevent core platform access.

The 10wan platform is strictly intended for individuals aged 21 years and above. 10wan does not knowingly collect personal data from individuals under the age of 21. Where 10wan discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted and the associated account will be closed immediately.

Age verification is a mandatory step in the 10wan onboarding process. Government-issued photographic identification confirming date of birth is required before any real-money activity is permitted on the platform. If you have reason to believe that a minor has registered on 10wan using false information, please contact our support team immediately.

The responsible gaming tools available on 10wan — including deposit limits, session time reminders, cooling-off periods, and self-exclusion — require processing of your personal data to function effectively. Specifically:

• Deposit and loss limit enforcement requires 10wan to track your financial activity on the platform in real time against the limits you have set.
• Self-exclusion enforcement requires 10wan to retain a record of your self-exclusion status for the duration of the exclusion period, even if you request that your account data be deleted. Retention of self-exclusion data is required by our licensing obligations to prevent the re-registration of excluded players.
• Responsible gaming pattern monitoring may involve automated analysis of your account activity to identify indicators of problem gambling behaviour. Where such indicators are present, 10wan may initiate contact in accordance with its player welfare procedures.

The processing of your data for responsible gaming purposes is required to comply with 10wan's international licensing obligations and is not subject to opt-out. Further information about the responsible gaming tools available to you is set out in the Responsible Gaming policy.

10wan reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, our licensing obligations, platform functionality, or data processing practices. The effective date of the current version is displayed at the top of this page.

Where changes are material — meaning they substantively affect your rights or how your data is processed — 10wan will provide advance notice via email to your registered address or through a notification displayed within your account. Continued use of the platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

If you do not agree with any amendment to this Privacy Policy, you should contact the support team to discuss your options, including account closure in accordance with the Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 10wan, please contact the support team through any of the following channels:

• Live Chat: Available 24/7 in English and Urdu directly from any page on 10wan.club. Average response time under five minutes.
• Email: [email protected] — For formal data subject requests, use the subject line "Privacy Request – [Your Account ID]".

Formal privacy requests and data subject rights exercises will be acknowledged within 24 hours of receipt and responded to substantively within 30 days. If you are not satisfied with our response, you may have the right to escalate your complaint to the relevant data protection supervisory authority or to 10wan's gaming regulator under the applicable complaint procedures of our licence.