Privacy Policy

1. About This Policy

done55 ("done55", "we", "us", "our") operates the online gaming and sports betting platform accessible at done55.one. This Privacy Policy ("Policy") describes the types of personal information we collect from users ("you", "your") of the done55 Platform, the purposes for which that information is used, and the measures we take to protect it.

This Policy applies to all done55 users globally, including Pakistani users accessing the Platform from Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, and elsewhere in Pakistan. By creating a done55 account or using any done55 service, you confirm that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy should be read together with the done55 Terms & Conditions. Capitalised terms used but not defined in this Policy carry the meanings given to them in the Terms & Conditions.

2. Data We Collect

2.1 Registration Data

When you create a done55 account, we collect the personal information you provide, including: full name, date of birth, email address, mobile phone number, residential address, and username. This information is required to open and maintain your account, verify your identity, and comply with applicable regulatory obligations.

2.2 Identity Verification (KYC) Data

done55 is required to verify the identity of users before processing withdrawals above specified thresholds and in other circumstances required by applicable compliance frameworks. For this purpose, we may collect copies of government-issued identity documents (such as CNIC, passport, or driving licence), proof of address documents, and, where required, source-of-funds documentation.

2.3 Financial Transaction Data

We collect records of all financial transactions on your done55 account, including deposit amounts, withdrawal requests, payment method identifiers (such as your JazzCash or Easypaisa mobile number, or partial bank account details for HBL, UBL, Meezan Bank, or Bank Alfalah transfers), transaction timestamps, and reference numbers. Full payment card numbers, full bank account numbers, and wallet PINs are not stored by done55.

2.4 Gaming Activity Data

We collect data relating to your gaming and betting activity on the done55 Platform, including game sessions, bets placed, outcomes, wager amounts, and bonus usage. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory compliance.

2.5 Technical and Device Data

When you access done55, we automatically collect certain technical data including your IP address, browser type and version, operating system, device type, session duration, pages visited, and referring URL. This data is collected to operate the Platform securely, prevent fraud, and improve the user experience.

2.6 Communications Data

If you contact done55 support, we retain records of those communications, including the content of messages, email correspondence, and chat logs, for service delivery, training, and dispute resolution purposes.

3. How We Use Your Data

done55 uses your personal data for the following purposes:

• To create, manage, and maintain your done55 account;
• To verify your identity and age (18+) in accordance with our Terms and applicable requirements;
• To process deposits and withdrawals via JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other supported payment methods;
• To deliver gaming and betting services, including settling bets and crediting winnings;
• To administer bonuses, promotions, and loyalty programmes;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To monitor gaming behaviour for responsible gaming purposes and to enforce account limits or self-exclusion where applicable;
• To communicate with you regarding your account, transactions, and support requests;
• To send promotional communications where you have consented to receive them (you may opt out at any time);
• To comply with applicable legal and regulatory obligations;
• To improve the done55 Platform and personalise your experience.

4. Legal Basis for Processing

done55 processes your personal data on the following legal bases:

• Contractual necessity – processing required to perform our obligations to you under the Terms & Conditions, including account management and payment processing;
• Legal obligation – processing required to comply with applicable law, including identity verification, anti-money laundering checks, and record-keeping requirements;
• Legitimate interests – processing necessary for fraud prevention, platform security, and the improvement of done55 services, where those interests are not overridden by your rights;
• Consent – where you have expressly consented, such as to receiving promotional communications. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Sharing Your Data

done55 does not sell your personal data to third parties. We may share your information with the following categories of recipients, strictly to the extent necessary:

• Payment processors – JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, Skrill, Neteller, and other payment service providers, solely for the purpose of executing financial transactions;
• Identity verification providers – third-party KYC service providers who assist in verifying your identity documents;
• Game technology providers – software studios whose games are hosted on the done55 Platform, where player session data is required for game delivery;
• Regulatory and law enforcement authorities – where we are required to disclose information by law, court order, or at the request of a competent authority;
• Fraud prevention and security services – to detect and prevent fraudulent activity and unauthorised access.

All third-party recipients are contractually required to handle your data in accordance with applicable privacy standards and to use it only for the purposes for which it was shared.

6. Payment Data & PKR Transactions

All financial transactions on done55 are conducted in Pakistani Rupees (PKR) where applicable. When you make a deposit via JazzCash or Easypaisa, done55 receives confirmation of the transaction from the respective payment gateway, including the transaction reference, amount, and your registered mobile number. We do not receive or store your JazzCash or Easypaisa wallet PIN.

For bank transfers through HBL, UBL, Meezan Bank, or Bank Alfalah, done55 receives the transfer reference, amount, and sender account details as transmitted by the banking institution. This information is used solely to match the deposit to your done55 account and maintain transaction records.

Payment data is retained for the period required by applicable financial record-keeping obligations, which may extend beyond the closure of your done55 account.

7. Cookies & Tracking Technologies

done55 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies – required for the Platform to function, including maintaining your login session and processing transactions;
• Analytics cookies – used to understand how users interact with the Platform in aggregate, enabling us to improve functionality and performance;
• Security cookies – used to detect and prevent fraudulent access and to protect your account.

Most web browsers allow you to control cookie settings. Disabling essential cookies may affect your ability to use certain features of done55. Analytics and non-essential cookies may be disabled without affecting core functionality.

8. Data Retention

done55 retains personal data for as long as your account is active and for a further period as required by applicable legal, regulatory, and contractual obligations. In practice, this means:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with standard anti-money laundering record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years following the date of the transaction;
• Support communications are retained for a minimum of two (2) years;
• Technical log data is retained for shorter periods consistent with security and operational requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

9. Your Rights

Subject to applicable law, you may have the following rights with respect to your personal data held by done55:

• Right of access – to request a copy of the personal data we hold about you;
• Right to rectification – to request correction of inaccurate or incomplete data;
• Right to erasure – to request deletion of your data in circumstances where retention is no longer justified, subject to our legal retention obligations;
• Right to restriction – to request that processing of your data be limited in certain circumstances;
• Right to data portability – to receive your data in a structured, machine-readable format where processing is based on consent or contract;
• Right to withdraw consent – where processing is based on consent, to withdraw that consent at any time without affecting prior lawful processing.

To exercise any of these rights, contact done55 at [email protected] with your registered username and a clear description of your request. We will respond within thirty (30) days.

10. Security Measures

done55 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and the done55 Platform;
• Hashing of account passwords – passwords are never stored in plain text;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and monitoring of the Platform for vulnerabilities;
• Fraud detection systems that monitor account and transaction activity for anomalies.

Notwithstanding these measures, no electronic transmission or storage system is completely secure. You are responsible for maintaining the confidentiality of your done55 login credentials and for notifying us promptly if you suspect any breach of your account security.

11. Children's Privacy

The done55 Platform is strictly for individuals aged 18 years and above. done55 does not knowingly collect personal data from anyone under the age of 18. If we become aware that a user is under 18, the account will be immediately closed, all balances will be forfeited, and personal data will be handled in accordance with our retention obligations. If you believe a minor has registered on done55, please contact us at [email protected] so that we may investigate and take appropriate action.

12. Changes to This Policy

done55 reserves the right to update or amend this Privacy Policy at any time. The revised Policy will be published on this page with an updated "Last Updated" date. Where changes are material, we will endeavour to notify registered users via the email address on file. Your continued use of the done55 Platform following the publication of an amended Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to stay informed of how done55 handles your personal data.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact done55 at:

Email: [email protected]

Please include your registered username and a detailed description of your query or request. done55 aims to acknowledge receipt within two (2) business days and to respond in full within thirty (30) days.