10game Privacy Policy

This Privacy Policy ("Policy") is published by 10game ("10game," "we," "us," "our") and applies to all users ("you," "your," "the Player") of the website located at https://10game.bio and all services, features, and products made available through it, including but not limited to sports betting, cricket wagering, live casino, and slot games.

10game operates as Pakistan's leading online gaming platform, serving players across Karachi, Lahore, Islamabad, Faisalabad, Peshawar, and beyond. The platform is built specifically for Pakistani mobile users and processes all real-money activity in Pakistani Rupees (PKR). Given the nature of our services — which require identity verification and financial transactions — the responsible handling of personal data is not merely a legal formality: it is fundamental to the trust relationship between 10game and every player on the platform.

By accessing 10game, registering an account, or using any platform feature, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the platform immediately.

For the purposes of applicable data protection law, 10game is the data controller in respect of personal data collected through the platform. As data controller, 10game is responsible for determining the purposes and means by which personal data is processed, and for ensuring that such processing is conducted lawfully, fairly, and transparently.

All data subject requests — including requests to access, correct, restrict, or delete personal data — should be directed to the 10game Data Privacy team via the contact details set out in Section 14 of this Policy. We will acknowledge all requests within 5 business days and provide a substantive response within 30 calendar days, in accordance with applicable regulatory requirements.

10game collects only the personal data that is necessary for the lawful operation of the platform, the fulfilment of regulatory obligations, and the delivery of a safe and personalised gaming experience. The categories of personal data we collect are set out below.

10game collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 10game account, you provide identity and contact data directly through the registration form.
• KYC Submission: When you submit identity verification documents — including CNIC copies and address confirmation — in response to a KYC request from 10game.
• Financial Transactions: When you make a deposit or request a withdrawal, financial data is captured through our integrated payment processing partners, including JazzCash, EasyPaisa, and bank transfer channels.
• Platform Usage: Technical data is collected automatically as you use the platform — including your IP address, device fingerprint, browser session information, and in-platform navigation patterns.
• Customer Support Interactions: When you contact 10game via live chat, email, or any other support channel, the content of those communications is recorded for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: Session cookies and analytics tools collect behavioural and preference data as described further in Section 10 of this Policy.
• Third-Party Verification: In certain circumstances, identity and fraud-risk data may be cross-referenced against third-party KYC or AML databases as part of our regulatory compliance obligations.

10game does not collect data from social media platforms, does not purchase data lists from data brokers, and does not run advertising pixels that feed user behaviour to external advertising networks.

Personal data collected by 10game is used exclusively for the following purposes:

• Account Management: Creating, maintaining, and securing your 10game player account, including enforcing the one-account-per-player rule and enabling account recovery.
• Identity and Age Verification: Confirming that you are aged 21 or above and that your identity matches the information provided at registration, in accordance with our licensing obligations.
• Payment Processing: Executing deposit and withdrawal transactions via your chosen payment method — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, or 1LINK — and maintaining accurate financial records.
• Regulatory Compliance: Fulfilling our obligations under anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and the conditions of our international gaming licence.
• Fraud Prevention and Security: Monitoring account and transaction activity for indicators of fraud, collusion, bonus abuse, and other prohibited conduct as defined in the 10game Terms & Conditions.
• Responsible Gaming: Monitoring gaming behaviour to identify signs of problem gambling, applying player-requested deposit limits and self-exclusion orders, and issuing reality check notifications.
• Customer Support: Responding to account queries, payment disputes, technical issues, and formal complaints submitted via the 10game support channels.
• Platform Personalisation: Using preference and activity data to surface relevant game recommendations, applicable promotions, and a localised interface experience.
• Platform Improvement: Analysing aggregated technical and usage data to identify bugs, optimise page performance, and enhance the overall gaming experience — particularly for users on Pakistani mobile networks.
• Legal Obligations: Retaining and disclosing data where required to do so by a valid legal order, regulatory directive, or court judgment issued by a competent authority.

10game processes personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the Terms & Conditions — including account management, payment processing, and customer support — is carried out on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with AML regulations, KYC requirements, tax reporting obligations, and any directive issued by our licensing authority is carried out on the basis of legal obligation.
• Legitimate Interests: Processing carried out for fraud detection, platform security, responsible gaming monitoring, and platform improvement is justified by 10game's legitimate interest in operating a safe, fair, and compliant gaming environment — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is based on your consent — for example, for optional marketing communications (where offered) — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Where processing is based on legitimate interests, 10game has conducted a legitimate interests assessment to confirm that the processing is proportionate, necessary, and balanced against the privacy rights of players.

10game does not sell personal data. Data is shared with third parties only in the limited circumstances described below, and always subject to appropriate data processing agreements and security controls:

• Payment Processors: Financial data necessary to execute your transactions is shared with your chosen payment service provider (e.g., JazzCash, EasyPaisa, HBL, UBL, Meezan Bank). These providers operate under their own regulatory frameworks and privacy policies.
• KYC and AML Verification Providers: Identity and document data may be shared with regulated third-party verification services for the purpose of confirming your identity and screening against sanctions lists or fraud databases.
• Gaming Software Providers: Technical session data is shared with the game providers whose products you use on the 10game platform, solely to deliver and record the relevant game sessions.
• Licensing Authority: 10game's gaming licence regulator may request access to player account data, transaction records, or gaming activity logs as part of regulatory audits or compliance checks. 10game is obligated to cooperate with such requests.
• Legal and Law Enforcement: Personal data will be disclosed to law enforcement agencies, courts, or other government bodies where 10game is compelled to do so by a valid legal order, subpoena, or regulatory requirement.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by 10game may have access to personal data on a strictly confidential, need-to-know basis.

10game retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention schedule applies:

Upon the expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to an identifiable individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

10game implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• TLS/SSL Encryption: All data transmitted between your device and 10game servers is encrypted using TLS 1.2 or higher. HTTPS is enforced across the entire platform without exception.
• Encryption at Rest: Sensitive data categories — including CNIC numbers, financial account references, and KYC document files — are encrypted at rest using AES-256 encryption within our secure database infrastructure.
• Access Controls: Internal access to personal data is granted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and undergo regular data protection training.
• Intrusion Detection: 10game's infrastructure is monitored around the clock by automated intrusion detection systems that flag and quarantine anomalous access patterns in real time.
• Vulnerability Management: Regular penetration testing and vulnerability assessments are conducted on the platform's infrastructure. Identified vulnerabilities are triaged and remediated according to their severity rating.
• Incident Response: In the event of a personal data breach that poses a risk to affected players, 10game will notify relevant parties within the timeframes required by our licensing authority's incident reporting obligations.

While 10game takes every reasonable precaution to protect your data, no system can guarantee absolute security. You also have a responsibility to keep your 10game login credentials confidential and to notify us immediately if you suspect your account has been compromised.

10game uses cookies and similar tracking technologies on the platform to support its operation and improve the user experience. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They manage your login session, maintain your security token, and remember your preferences during a single session. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players navigate the platform — which pages are visited most frequently, where errors occur, and how load times vary across devices and network conditions. This data is used solely to improve platform performance.
• Functional Cookies: These cookies remember your language preference, game display settings, and other personalisation choices so that you do not need to reset them each time you visit.

10game does not use advertising cookies, retargeting cookies, or any tracking technology that feeds behavioural data to external advertising networks or social media platforms. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to log in and use the platform.

Subject to applicable law and our regulatory obligations, you have the following rights in relation to the personal data 10game holds about you:

• Right of Access: You may request a copy of the personal data 10game holds about you, along with information about how it is being used. This is commonly referred to as a Subject Access Request (SAR).
• Right to Rectification: If any personal data held about you is inaccurate or incomplete, you have the right to request that it be corrected or updated without undue delay.
• Right to Erasure ("Right to Be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, where you have withdrawn consent, or where processing was unlawful. This right is subject to our legal retention obligations — we cannot erase data we are required by law to retain.
• Right to Restriction: You may request that processing of your data be restricted in certain circumstances — for example, while a dispute about accuracy is being resolved.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that your data be provided to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing carried out on the basis of legitimate interests. 10game will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

To exercise any of these rights, contact the 10game Data Privacy team using the details in Section 14. Requests will be acknowledged within 5 business days and fulfilled within 30 calendar days, subject to identity verification. In complex cases the response period may be extended by a further 60 days, with advance notification provided to you.

The 10game platform is strictly intended for persons aged 21 years and above. 10game does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the registration process — no real-money account can be activated without successful CNIC-based age confirmation.

If 10game becomes aware that personal data has been collected from a person under the age of 21, the affected account will be immediately suspended, all personal data associated with that account will be permanently deleted (to the extent not required for legal retention), and any funds deposited may be returned to the originating payment method subject to verification.

If you are a parent or guardian and you believe that a minor may have registered on 10game using false age information, please contact the support team immediately via the contact details in Section 14. We take this matter extremely seriously and will investigate and act on all credible reports without delay.

10game reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, operational requirements, or applicable legal obligations. When material changes are made — meaning changes that significantly affect how your personal data is used or your rights in relation to it — 10game will provide advance notice by posting a prominent notice on the platform homepage or by sending a notification to your registered contact method.

The "Last Updated" date at the top of this page will always reflect when the most recent revision was made. We encourage all 10game players to review this Policy periodically, particularly before making large transactions or opting into new platform features. Your continued use of the 10game platform after any revision is posted constitutes your acceptance of the updated Policy.

If you disagree with a material change to this Policy, you have the right to close your 10game account and request deletion of your personal data subject to applicable retention obligations. Instructions for account closure are available through the 10game support team.

For all privacy-related matters — including data subject requests, questions about this Policy, complaints about how your data has been handled, or reports of suspected minor registration — please contact the 10game Data Privacy team through the following channels:

• Email: [email protected] — please include "Privacy Request" or "Data Subject Request" in the subject line so your message is routed to the correct team.
• Live Chat: Available 24/7 directly within the 10game platform after logging into your account. For data subject requests, the live chat agent will raise a formal ticket and provide you with a reference number.
• Languages: Privacy support is available in both English and Urdu around the clock.

When submitting a data subject request, please provide your registered 10game username and a clear description of your request. For access requests, specify the data categories you wish to receive. For deletion requests, confirm whether you also wish to close your account. This information will help us process your request accurately and within the required timeframes.

If you are dissatisfied with 10game's response to a privacy complaint or data subject request, you have the right to escalate the matter to the relevant data protection supervisory authority or to the independent dispute resolution body designated under 10game's international gaming licence. Details of the applicable bodies are available from the support team on request.