10wih Privacy Policy —
How We Collect, Use & Protect Your Data

This Privacy Policy governs the collection, processing, storage, and use of personal data by 10wih ("the Platform", "we", "us", "our") in connection with the operation of the 10wih online casino and sports betting platform at 10wih.net. 10wih is committed to handling the personal data of all registered players with transparency, care, and in accordance with applicable data protection principles.

By registering an account on 10wih, depositing funds, placing a wager, or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use the 10wih platform.

10wih takes its data protection obligations seriously. We only collect data that is necessary for the operation of the platform and the delivery of services to Pakistani players. We do not sell personal data to third parties for marketing or commercial purposes unrelated to the operation of 10wih.

10wih collects personal data in several categories depending on how you interact with the platform. The following table summarises the main categories of data collected:

We do not intentionally collect special category data (such as health or biometric information) unless specifically required by applicable KYC or responsible gaming obligations, in which case such collection will be clearly communicated to you in advance.

10wih collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 10wih account, you directly provide your name, date of birth, mobile number, and other identity information as required by the registration form.
• KYC Verification: When we request identity verification, you may submit a copy of your Pakistani CNIC, proof of address, or payment method documentation directly through the platform's secure upload facility.
• Platform Usage: As you use 10wih — placing bets, playing games, navigating between sections — we automatically collect gaming activity data and usage data as part of normal platform operation.
• Payment Transactions: When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, Raast, or USDT TRC20, transaction data is collected both by 10wih and by your payment provider.
• Cookies and Tracking Technologies: The 10wih website uses cookies and similar technologies to collect technical and usage data. See Section 8 for full details.
• Customer Support: When you contact 10wih through live chat or email, the content of that communication is collected and stored as part of your account record.
• Third-Party Sources: In limited circumstances, 10wih may receive data about you from third-party fraud prevention services, identity verification providers, or payment processing partners in order to verify your identity or prevent financial crime.

10wih uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your 10wih player account, including authentication and session management.
• Service Delivery: To provide access to the 10wih casino games, sports betting markets, live dealer tables, and all other platform features you use.
• Payment Processing: To process your PKR deposits and withdrawal requests through your chosen Pakistani payment method (JazzCash, EasyPaisa, etc.) accurately and securely.
• Identity Verification & KYC: To verify your identity and age in compliance with applicable know-your-customer requirements. 10wih operates a strict 21+ age policy and uses identity data to enforce it.
• Fraud Prevention & Security: To detect and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.
• Responsible Gaming: To monitor gaming patterns for indicators of problematic gambling behaviour and to apply responsible gaming tools such as deposit limits or self-exclusion where these have been set by the player or triggered by our responsible gaming processes.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of communications for quality assurance purposes.
• Legal Compliance: To comply with applicable legal and regulatory obligations, including responding to lawfully issued requests from law enforcement or regulatory authorities.
• Platform Improvement: To analyse aggregated usage patterns and improve the performance, design, and content of the 10wih platform for all Pakistani players.
• Marketing Communications: With your consent, to send you information about 10wih promotions, bonus offers, and new platform features. You may opt out of marketing communications at any time through your account settings or by contacting support.

10wih processes your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary for the performance of our contract with you — including account management, payment processing, and game delivery — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the 10wih service.
• Legal Obligation: Processing required for compliance with applicable legal obligations, including anti-money laundering (AML) requirements, age verification mandates, and lawful requests from competent authorities.
• Legitimate Interests: Processing carried out in pursuit of 10wih's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform performance analysis — provided such interests are not overridden by your own privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, carried out only where you have provided clear and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

10wih does not sell your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly as necessary for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, SadaPay, Raast, HBL, UBL, Meezan Bank, and cryptocurrency processing partners receive the minimum necessary financial data to process your PKR transactions. Each provider handles your data under their own privacy terms and security standards.
• Identity Verification & KYC Partners: Accredited identity verification service providers may receive copies of your KYC documentation to carry out age and identity checks on behalf of 10wih.
• Game Software Providers: Third-party casino game providers (whose software powers games on the 10wih platform) may receive technical session data necessary for game delivery. Game providers do not receive your full identity profile or financial data.
• Fraud Prevention Services: Specialist fraud detection and AML compliance services may receive relevant account and transaction data to help 10wih identify and prevent financial crime on the platform.
• Legal & Regulatory Authorities: Where required by a lawfully issued court order, regulatory directive, or law enforcement request, 10wih will disclose the minimum necessary personal data in compliance with its legal obligations.
• Platform Infrastructure Providers: Cloud hosting, content delivery, and technical infrastructure providers who process data on 10wih's behalf under contractual data processing agreements that require them to maintain appropriate security standards.

Given that 10wih is specifically built for Pakistani players transacting in PKR, the platform's payment data handling deserves specific attention. When you deposit or withdraw via JazzCash or EasyPaisa, your mobile wallet ID and transaction reference numbers are processed by both 10wih and the relevant payment provider.

10wih records the following payment-related data for every transaction on your account:

• Transaction amount in PKR
• Payment method used (e.g., JazzCash, EasyPaisa, HBL bank transfer)
• Transaction timestamp and reference number
• Wallet ID or bank account number (partially masked in display)
• Transaction status (pending, completed, declined, reversed)

This payment data is retained for a minimum of five years from the date of the transaction to meet anti-money laundering record-keeping requirements. During this retention period, this data may be disclosed to relevant financial intelligence authorities if lawfully required.

The 10wih platform uses cookies and similar technologies (including local storage and session tokens) to deliver its services and improve the player experience. The following categories of cookies are used on 10wih.net:

• Strictly Necessary Cookies: These cookies are essential for the 10wih platform to function. They enable core features such as account login sessions, game loading, and payment page security. These cookies cannot be disabled without breaking platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how players interact with the 10wih platform — which pages are visited most, how long sessions last, and where players navigate from. This data helps us improve platform performance and content organisation.
• Functional Cookies: These cookies remember your preferences on 10wih — such as your preferred language, display settings, and responsible gaming tool configurations — so you don't have to set them again on each visit.
• Security Cookies: Used to detect fraudulent activity, prevent bot access, and protect the integrity of the 10wih platform and player accounts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the 10wih platform from functioning correctly. For analytics and functional cookies, your preferences can be managed through the cookie consent interface on the 10wih website.

10wih retains personal data for only as long as is necessary for the purposes described in this Policy, subject to applicable legal obligations. The following retention periods apply:

• Active Account Data: Retained throughout the duration of your active 10wih account relationship and for a period of up to five years following account closure.
• Transaction and Financial Records: Retained for a minimum of five years from the date of the transaction to meet AML and financial record-keeping requirements. In some cases, regulatory obligations may require longer retention.
• KYC Documentation: Retained for the duration of your account relationship and for five years following account closure or the completion of the KYC process, whichever is later.
• Customer Support Records: Communication records (live chat transcripts, email correspondence) retained for up to three years from the date of the interaction.
• Gaming Activity Data: Retained for up to five years from the date of the relevant gaming activity for responsible gaming monitoring, dispute resolution, and regulatory compliance purposes.
• Marketing Consent Records: Records of marketing consent and withdrawal of consent are retained for as long as they remain relevant, or for a minimum of three years from the date the consent was given or withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 10wih's data destruction procedures.

10wih implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS Encryption: All data transmitted between your device and the 10wih platform is encrypted using industry-standard SSL/TLS protocols. This applies to account logins, payment transactions, and all other data exchanges.
• OTP Two-Factor Authentication: 10wih uses one-time password (OTP) verification via your registered Pakistani mobile number to secure account login and high-value transactions.
• Access Controls: Access to player personal data within 10wih's internal systems is restricted on a strict need-to-know basis. Staff access is logged and monitored.
• Encrypted Data Storage: Sensitive personal data — including financial information and KYC documentation — is stored in encrypted form within 10wih's secure infrastructure.
• Fraud Detection Systems: Automated systems continuously monitor account activity for indicators of fraudulent behaviour, unauthorised access attempts, and unusual transaction patterns.
• Regular Security Reviews: 10wih's technical infrastructure undergoes regular security reviews and vulnerability assessments to identify and address potential risks proactively.

While 10wih takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. You also have a responsibility to keep your own account credentials secure. In the event of a data security incident that is likely to result in a high risk to your rights, 10wih will notify affected players as required by applicable law.

As a 10wih player, you have the following rights regarding your personal data, subject to applicable legal limitations:

• Right of Access: You have the right to request a copy of the personal data 10wih holds about you. Requests will be responded to within a reasonable timeframe, subject to identity verification.
• Right to Rectification: If any personal data held by 10wih about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. This right is subject to limitations where 10wih has legal obligations to retain data (such as AML retention requirements).
• Right to Restriction of Processing: In certain circumstances, you may request that 10wih restrict the processing of your personal data while a dispute is resolved or a request is reviewed.
• Right to Data Portability: Where processing is based on consent or contractual necessity and is carried out by automated means, you may request that your data be provided to you in a structured, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to Object: You have the right to object to processing carried out on the basis of legitimate interests, including profiling. 10wih will cease such processing unless there are compelling legitimate grounds that override your rights.

To exercise any of these rights, please contact the 10wih support team via live chat or email at [email protected]. We will respond to all valid requests within 30 days. Complex requests may require up to 60 days, in which case we will notify you of the extension.

10wih is strictly for individuals aged 21 years and over. The 10wih platform does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for or attempt to use the 10wih platform.

If 10wih becomes aware that personal data has been collected from an individual under 21 — whether through registration, underage access, or any other means — we will immediately and permanently close the associated account and securely delete the personal data in question, subject to any mandatory retention obligations arising from the investigation.

10wih may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, 10wih will make reasonable efforts to notify registered players through the platform interface, registered email, or SMS to the registered Pakistani mobile number prior to the changes taking effect.

The effective date at the top of this document will be updated to reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how 10wih protects your personal data. Continued use of the 10wih platform following the publication of an updated Privacy Policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 10wih handles your personal data, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the 10wih platform. This is the fastest way to reach our support team for any privacy-related query.
• Email: [email protected] — privacy-related queries receive a response within 2 hours during normal operating conditions, and within 30 days for formal data rights requests.

When contacting 10wih about a privacy matter, please include your registered mobile number (for account identification) and a clear description of your query or request. Do not include sensitive personal data such as your full CNIC number in initial correspondence — our support team will guide you through the secure submission process.

For responsible gaming support — including self-exclusion, deposit limit requests, or concerns about problem gambling — please visit the 10wih Responsible Gaming page or contact support directly via live chat.