Privacy Policy — 10cric

When you register an account, make a deposit, or contact our support team, you voluntarily provide us with personal data that may include:

• Identity data: Full legal name, date of birth, gender, and a copy of your government-issued photo ID (National ID Card, passport, or driving licence).
• Contact data: Email address, mobile phone number, and residential address including city, district, and postal code.
• Financial data: bKash account number, Nagad account number, Rocket wallet number, Upay details, bank account information, or card details used to fund your 10cric account. We do not store full card numbers; payment credentials are tokenised by our payment service providers.
• Verification data: Proof of address documents, selfie photographs submitted during KYC verification, and any additional documentation requested to fulfil our identity verification obligations.
• Communications data: Records of your support chat transcripts, emails, and any other correspondence you send to us.

When you visit or use the Platform, we automatically collect certain technical and usage data through cookies, log files, and similar tracking technologies:

• Device and connection data: IP address, device type, operating system, browser type and version, mobile network operator, screen resolution, and device identifiers.
• Usage data: Pages visited, features accessed, games played, bets placed (amounts, markets, outcomes), session start and end times, and navigation paths through the Platform.
• Location data: Approximate geographic location derived from your IP address. We do not collect precise GPS location data unless you explicitly grant that permission on a mobile device.
• Cookie data: Information stored via first-party and third-party cookies, web beacons, and local storage objects as described in our Cookie section below.

10cric processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data are set out below, alongside the legal basis we rely on in each case:

To operate the Platform effectively, 10cric engages a limited number of carefully selected third-party service providers. These providers act as data processors on our behalf and are permitted to use your personal data only in accordance with our documented instructions. Categories of third-party processors we work with include:

• Payment processors: bKash, Nagad, Rocket, Upay, and banking partners who handle the technical execution of deposit and withdrawal transactions.
• Identity verification providers: KYC and age-verification platform operators who assist in confirming the identity and eligibility of players.
• Game providers: Studios such as Evolution Gaming, Pragmatic Play, Ezugi, NetEnt, Microgaming, and Spribe, who operate the game logic for casino and live-casino products. These providers receive only the minimum data necessary to facilitate gameplay (e.g., a session token) and do not receive your full personal profile.
• Analytics providers: Aggregated, anonymised usage data may be shared with analytics partners to help us improve Platform performance. No personally identifiable information is included in these data transfers.
• Fraud and AML screening services: Transaction monitoring and fraud detection platforms that help protect both you and 10cric from financial crime.

All third-party processors are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and prohibit them from using your data for their own independent purposes.

10cric may disclose your personal data to competent governmental or regulatory authorities, law enforcement agencies, or courts of competent jurisdiction where we are required to do so by applicable law, regulation, legal process, or enforceable governmental request. In such cases, we will disclose only the minimum data necessary to comply with the applicable obligation and, where legally permitted to do so, will notify you of the disclosure request.

10cric implements a multi-layered approach to data security that includes both technical controls and organisational procedures. Our key security measures include:

• 256-bit TLS encryption for all data in transit between client devices and our servers.
• Encryption of sensitive data at rest, including financial records and identity documents.
• Strict role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required by their job function.
• Regular internal security audits and third-party penetration testing to identify and remediate vulnerabilities.
• Secure, geographically distributed data storage with redundant backups and disaster-recovery procedures.
• Two-factor authentication (2FA) enforcement for all staff with access to systems containing personal data.

Despite these measures, no method of data transmission over the internet or electronic storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 10cric will notify affected users without undue delay in accordance with our incident-response procedures.

10cric reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we provide. The date of the most recent revision is displayed at the top of this page.

Where changes are material — meaning they significantly affect your rights or the way we use your personal data — we will notify you by email to your registered address or via a prominent notice on the Platform at least 14 days before the changes take effect. For minor, clarificatory changes, the updated Policy will simply be published on this page with a revised effective date.

Your continued use of the Platform after any updated Policy has taken effect constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using the Platform and contact us to close your account and arrange deletion of your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data we hold about you, please contact the 10cric Data Protection team using the details below. We are committed to addressing all privacy-related enquiries promptly and transparently.