10Cric privacy policy: how your data is protected

10Cric collects, stores, and processes personal data under Curacao eGaming licence B2C-9K44NCA2-1668/JAZ. This guide explains what data is collected, why, how it is used, and what rights you hold as a player.

Why a privacy policy matters on a betting platform

A betting account holds more sensitive information than most online services. Your name, address, date of birth, payment method details, identity documents, and transaction history all sit in one place. Understanding how that data is managed is not a bureaucratic exercise – it is a practical question about who can access your information, under what circumstances, and what happens if something goes wrong.

10Cric operates under Chancier B.V., registered and regulated in Curacao. The privacy framework governing the platform reflects both the Curacao licence conditions and international data protection standards. Players interacting with the platform from any location are covered by this policy, and the commitments made here are enforceable through the licence authority.

What data 10Cric collects and why

Data collection at 10Cric falls into three categories: data you provide directly, data generated by your activity on the platform, and data obtained from third parties such as payment processors. Each category serves a specific operational purpose, and none of it is collected beyond what is required for the platform to function, comply with regulatory obligations, or improve user experience.

Data you provide directly

When you register an account, you submit personal details including your full name, date of birth, email address, phone number, and residential address. During KYC verification – required before your first withdrawal – you submit identity documents such as an Aadhaar card, PAN card, passport, or driving licence alongside address proof like a utility bill or bank statement. If you contact support, the content of those communications is also stored.

This data is used to verify your identity, confirm you meet the minimum age requirement of 18 years, process deposits and withdrawals, and comply with anti-money laundering obligations under the Curacao licence. Without it, the platform cannot legally operate financial transactions or confirm account ownership.

Data generated by your activity

Every action you take on the platform generates a data record. Bets placed, games played, deposit and withdrawal transactions, login timestamps, device identifiers, IP addresses, and session durations are all logged. Browser type, operating system, and screen resolution are recorded for technical optimisation purposes.

This behavioural data serves two primary functions. First, it powers the responsible gambling monitoring system – unusual activity patterns such as rapid deposit sequences or extended sessions trigger internal alerts that may prompt outreach from the support team. Second, it helps the platform optimise performance, identify technical issues, and personalise the experience where relevant.

Data from third parties

When you deposit or withdraw through UPI, Paytm, PhonePe, Google Pay, Skrill, Neteller, or any other supported method, the payment processor shares transaction confirmation data with 10Cric. This is limited to what is necessary for reconciliation – amount, reference number, and status. Full card or bank account numbers are never transmitted to 10Cric by payment processors.

For identity verification, 10Cric may use third-party verification services to cross-reference the documents you submit against public or licensed identity databases. This accelerates the KYC process without requiring manual review of every submission.

How your data is stored and protected

All data stored by 10Cric is protected by SSL encryption during transmission and AES-256 encryption at rest. Player financial data and identity documents are held on servers that are physically and logically separated from general operational infrastructure. Access is restricted to authorised personnel on a need-to-know basis, governed by internal access control policies.

Account passwords are stored using one-way cryptographic hashing – 10Cric cannot retrieve your password, only reset it. Payment method details entered during transactions are processed through PCI-DSS compliant gateways and are never stored on 10Cric servers. This means that even in the event of a data breach affecting 10Cric’s systems, your payment credentials are not at risk from that breach.

Data retention periods

10Cric retains personal data for as long as your account is active plus a minimum period required by regulatory obligations. Financial transaction records are typically retained for five years following account closure to satisfy anti-money laundering audit requirements. Identity documents may be retained for the same period. Non-transactional data such as session logs and device identifiers is typically retained for a shorter period.

When the retention period expires, data is securely deleted or anonymised so it cannot be linked back to an individual. If you request account closure before the retention period ends, your account is deactivated and access is removed, but the underlying records remain stored until the legal retention obligation is met.

Who has access to your data

10Cric does not sell personal data to third parties for marketing purposes. Data sharing is limited to the categories below, each of which serves a specific operational or legal function.

No data is shared for advertising, remarketing, or data brokerage purposes. Promotional communications from 10Cric are based solely on your own activity and preferences, not on data purchased or obtained from external marketing databases.

Cookies and tracking technologies

10Cric uses cookies and similar technologies to maintain session state, measure platform performance, and provide a consistent experience across visits. Cookies fall into three categories: essential cookies required for the platform to function, analytical cookies that measure usage patterns, and preference cookies that remember your settings between sessions.

Third-party analytics tools may set their own cookies to measure traffic sources and user journeys. These tools receive aggregated, anonymised data rather than individual-level personal information. You can manage cookie preferences through your browser settings, though disabling essential cookies will prevent the platform from functioning correctly.

The mobile app uses equivalent device-level tracking technologies including a unique device identifier. This identifier is used for session management and push notifications, not for tracking your activity outside the 10Cric app.

Your rights over your personal data

As a registered player, you hold specific rights over the personal data 10Cric holds about you. These rights can be exercised by contacting the support team via live chat, phone (+911171816618), or email at any time.

Requests are processed within 30 days. In cases of complexity or high volume, the platform may extend this to 60 days with written notice. There is no charge for exercising any of these rights.

Marketing communications and opt-out

When you register, you are asked whether you wish to receive marketing communications including promotional emails, SMS notifications, and push alerts about bonuses and offers. If you opt in, you may receive information about the sports welcome bonus (150% up to ₹40,000 with code AFF150WB), the casino welcome package (up to ₹60,000 across three deposits), and ongoing promotions such as the 7% live casino cashback up to ₹10,000.

You can opt out of marketing communications at any time through your account settings or by contacting support. Opting out does not affect transactional communications – you will still receive emails about deposit confirmations, withdrawal processing, and account security alerts, as these are required for account management rather than promotional purposes.

Players who have activated self-exclusion are automatically removed from all marketing lists immediately upon exclusion. This applies to email, SMS, push notifications, and any retargeting activity.

Data security incidents

In the event of a data breach that affects your personal information, 10Cric is required to notify affected players within a timeframe consistent with the Curacao licence obligations and applicable data protection frameworks. Notification will be provided through your registered email address and will include a description of what data was affected, the likely consequences, and the steps being taken to address the incident.

10Cric maintains an incident response plan that is reviewed and tested regularly. This plan covers breach detection, containment, assessment, notification, and post-incident review. Players who believe their account has been compromised should contact support immediately at +911171816618 or through live chat so the team can freeze the account while the investigation proceeds.

Children and underage access

10Cric does not knowingly collect data from persons under 18 years of age. Age verification is performed during the KYC process using official identity documents. If the platform identifies that a registered account belongs to a minor, the account is immediately closed, any balance is returned through the original payment method, and all associated data is deleted outside of what is legally required to document the incident.

Parents or guardians who suspect a minor has registered using their personal details should contact support immediately. The team will investigate and act without requiring the minor’s cooperation.

Changes to this privacy policy

10Cric may update this privacy policy as regulatory requirements evolve or platform features change. Material changes – those affecting how your data is used or shared – will be communicated through your registered email address at least 14 days before they take effect. Minor clarifications may be published on the policy page without direct notification.

The current policy version and its effective date are displayed at the bottom of the policy page. Continued use of the platform after a policy update constitutes acceptance of the revised terms. If you do not agree with a material change, you may close your account before the change takes effect by contacting support.

FAQ

Does 10Cric sell my personal data to third parties?

No, 10Cric does not sell personal data for any purpose including advertising or marketing.

What data does 10Cric collect when I register?

10Cric collects your name, date of birth, email, phone number, address, and identity documents during KYC.

How is my payment data protected?

Payment details are processed through PCI-DSS compliant gateways and are never stored on 10Cric servers.

Can I request a copy of all data 10Cric holds about me?

Yes, submit a written request to support via live chat, phone, or email and it will be processed within 30 days.

How long does 10Cric retain my data after account closure?

Financial records are retained for a minimum of five years to meet anti-money laundering regulatory requirements.

How do I opt out of marketing emails?

Update your communication preferences in account settings or contact support – opt-out takes effect immediately.

Are self-excluded players removed from marketing lists?

Yes, self-exclusion automatically removes your account from all marketing communications immediately.

What happens to my data if there is a security breach?

10Cric will notify affected players by email within the timeframe required under the Curacao licence obligations.

Can I request deletion of my personal data?

Yes, though data subject to legal retention requirements cannot be deleted until those obligations expire.

How do I report suspected unauthorised access to my account?

Contact support immediately via live chat or phone at +911171816618 to freeze your account pending investigation.