Privacy Policy – done555 Pakistan Gaming Platform

Section 1

Who We Are

done555 is an online casino and sports betting platform operating under an international gaming licence and serving Pakistani players through the website https://done555.app. done555 acts as the data controller in respect of all personal data collected through the platform — meaning we determine the purposes and means by which your personal information is processed.

done555 is committed to handling all personal data in a manner consistent with internationally recognised data protection principles, including purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality. Where we engage third-party processors to handle data on our behalf, we do so under strict contractual data processing agreements.

Data Controller: done555 Platform. For all privacy-related inquiries, please contact our Data Protection Officer at [email protected] with the subject line "Privacy / DPO Inquiry".

Section 2

Data We Collect

done555 collects personal data through several channels: directly from you when you register or interact with the platform, automatically as you browse and play, and in limited cases from trusted third-party verification services. The categories of personal data we collect are set out in the table below.

Category	Data Points Collected	Collection Method
Identity Data	Full name, date of birth, CNIC / passport number, nationality	Registration form; KYC submission
Contact Data	Email address, mobile number (including WhatsApp if provided), residential address in Pakistan	Registration form; account settings
Financial Data	JazzCash / EasyPaisa account numbers, bank account details (HBL, UBL, Meezan, Allied), SadaPay handle, USDT TRC20 wallet address, deposit and withdrawal transaction records in PKR	Payment processing; wallet operations
Identity Verification Data	CNIC scan / photograph, selfie photograph, proof of payment method ownership documents	KYC verification process
Technical Data	IP address, device type, operating system, browser type and version, screen resolution, session duration, login timestamps	Automatic collection via server logs and cookies
Usage Data	Pages visited on done555, games played, bet amounts and outcomes, bonus activity, session history	Automatic collection via platform analytics
Communications Data	Support chat transcripts, email correspondence with done555, feedback submissions	Customer support interactions
Marketing Preferences	Opted-in or opted-out marketing preferences, preferred notification channels (email / SMS)	Account settings; consent at registration

Special Category Data: done555 does not intentionally collect special category personal data (such as health data, religious beliefs, or political opinions). Please do not include such information in any communication with done555 support unless it is directly relevant to a responsible gaming request.

Section 3

How We Use Your Data

done555 uses the personal data it collects solely for legitimate, specified purposes. We do not use your data for purposes that are incompatible with those for which it was originally collected. The primary purposes for which done555 processes your personal data are:

3.1 — Account Registration & Management

To create and maintain your done555 account, verify your identity and age (21+ requirement), authenticate your login sessions, and communicate account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts.

3.2 — Payment Processing

To process your deposits and withdrawals via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, SadaPay, and USDT TRC20; to maintain your PKR wallet balance; and to comply with anti-money laundering (AML) obligations by recording and monitoring financial transactions.

3.3 — Provision of Gaming Services

To deliver cricket betting markets, live casino games, slots, and fishing arcade titles; to record bet placement and game outcomes; to apply bonus credits and calculate wagering requirement progress; and to maintain a complete gaming history within your account dashboard.

3.4 — Regulatory Compliance & Fraud Prevention

To fulfil done555's obligations under its international gaming licence, including KYC verification, responsible gaming monitoring, AML transaction screening, and detection of prohibited conduct such as bonus abuse, account duplication, and use of automated software.

3.5 — Responsible Gaming

To monitor your gaming activity for indicators of problem gambling; to apply deposit limits, session reminders, and self-exclusion periods that you have voluntarily set; and to contact you proactively if your account activity suggests that responsible gaming intervention may be appropriate.

3.6 — Marketing Communications

To send you promotional offers, PSL season bonuses, welcome packages, and platform updates via email or SMS — but only where you have provided your explicit opt-in consent at registration or subsequently through your account settings. You may withdraw your marketing consent at any time without affecting the operation of your account.

3.7 — Platform Improvement

To analyse aggregated, anonymised usage data for the purpose of improving done555's platform performance, user experience, game selection, and customer support quality. This analysis does not involve profiling individual users for automated decision-making.

Section 4

Legal Basis for Processing

done555 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

Contractual Necessity: Processing required to perform our contract with you — including account creation, payment processing, and delivery of gaming services — is based on the fact that it is necessary for the performance of our Terms and Conditions.
Legal Obligation: Processing required to comply with applicable law — including KYC identity verification, AML transaction monitoring, and regulatory reporting — is based on done555's legal obligations under its international gaming licence.
Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics is based on done555's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
Consent: Processing for direct marketing communications is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by updating your notification preferences in your account settings.

No Automated Decision-Making: done555 does not make decisions about you — including account suspension, withdrawal approval, or bonus eligibility — using fully automated processing without human involvement. Where automated tools are used to flag accounts for review, a member of the done555 compliance team conducts a manual review before any adverse action is taken.

Section 5

Data Sharing & Disclosure

done555 does not sell your personal data to any third party under any circumstances. We share your personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

KYC Verification Providers: Identity verification service providers who assist done555 in verifying your CNIC, age, and payment method ownership. These providers act as data processors under contractual data processing agreements with done555.
Payment Processors: Pakistani payment method operators including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, and SadaPay, who receive the transaction data necessary to process your deposits and withdrawals. USDT TRC20 transactions are processed on-chain and are subject to the privacy characteristics of the TRC20 blockchain network.
Gaming Content Providers: Third-party game studios whose live casino, slot, and arcade game titles are integrated into the done555 platform. These providers may receive a pseudonymous player identifier and bet data for the purpose of game delivery and dispute resolution.
Regulatory Authorities: Licensing authorities, financial intelligence units, and law enforcement agencies where done555 is legally required to disclose personal data — for example, in connection with an AML investigation or in response to a valid regulatory request.
Professional Advisers: Legal, audit, and compliance advisers engaged by done555 who process data under strict confidentiality obligations.

Data Processor Contracts: Every third party that processes personal data on behalf of done555 is bound by a written data processing agreement requiring them to process your data only on done555's documented instructions, maintain appropriate technical and organisational security measures, and not engage sub-processors without done555's prior written consent.

Section 6

Cookies & Tracking Technologies

done555 uses cookies and similar tracking technologies to operate the platform, remember your session, prevent fraud, and — where you have consented — to personalise your experience and measure the effectiveness of our communications. The categories of cookies used by done555 are as follows:

Cookie Type	Purpose	Consent Required?
Strictly Necessary	Session authentication, CSRF protection, load balancing, fraud detection signals	No — essential for platform operation
Functional	Remembering your language preference, preferred game lobby view, responsible gaming settings	No — necessary for personalised service delivery
Analytics	Aggregated page-view and session data used to improve done555 platform performance	Yes — consent via cookie banner
Marketing	Tracking whether you opened a promotional email or SMS and which offers you engaged with	Yes — consent via marketing opt-in

You may manage your cookie preferences at any time through your browser settings or through the done555 cookie preference centre accessible from the footer of the platform. Disabling strictly necessary cookies will impair the functionality of the done555 platform and may prevent you from logging in or completing transactions.

Section 7

Data Retention

done555 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, to satisfy AML and gaming regulatory record-keeping requirements.
Financial Transaction Records: Retained for a minimum of seven (7) years from the date of the transaction, in accordance with standard financial record-keeping obligations.
KYC Documents: Retained for the duration of your account and for five (5) years following account closure, or longer where required by applicable law.
Support Communications: Retained for three (3) years from the date of the last interaction, unless the communication is relevant to an ongoing dispute or regulatory matter.
Marketing Preferences & Consent Records: Retained for three (3) years from the date of last consent action, to demonstrate compliance with consent requirements.
Technical & Usage Data (Logs): Retained for twelve (12) months from collection, after which they are either deleted or irreversibly anonymised for aggregate analytics purposes.

Where retention beyond these periods is required by a specific legal obligation, done555 will retain the minimum data necessary for the minimum additional period required, and will document the justification for extended retention.

Section 8

Your Privacy Rights

As a done555 account holder, you hold a number of rights in respect of your personal data. done555 is committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights are summarised below:

Right of Access

Request a copy of all personal data done555 holds about you, together with information about how it is used.

Right to Rectification

Request correction of any inaccurate or incomplete personal data held in your done555 account or records.

Right to Erasure

Request deletion of your personal data where it is no longer needed, subject to done555's regulatory retention obligations.

Right to Restriction

Request that done555 restricts the processing of your data in certain circumstances, such as while an accuracy dispute is being resolved.

Right to Portability

Receive a copy of the personal data you have provided to done555 in a structured, commonly used, machine-readable format.

Right to Object

Object to the processing of your data based on done555's legitimate interests or for direct marketing purposes at any time.

Right to Withdraw Consent

Withdraw any previously given consent (e.g., for marketing emails) at any time without affecting the lawfulness of prior processing.

Right to Complain

Lodge a complaint with the relevant supervisory authority if you believe done555 is processing your data in breach of applicable law.

Exercising Your Rights: To exercise any of the rights listed above, please contact done555's Data Protection Officer at [email protected] with the subject line "Data Subject Request". done555 will respond to all verified requests within thirty (30) calendar days. There is no fee for submitting a rights request. done555 may need to verify your identity before processing your request to protect your data from unauthorised access.

Section 9

Data Security

done555 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

Encryption in Transit: All data transmitted between your device and done555's servers is encrypted using TLS 1.2 or higher. The done555 platform enforces HTTPS across all pages and API endpoints.
Encryption at Rest: Sensitive personal data — including identity documents, financial data, and CNIC records — is stored in encrypted form using industry-standard encryption algorithms.
Access Controls: Access to personal data within done555's systems is strictly limited to authorised personnel who require it to perform their job function. Role-based access controls and multi-factor authentication are enforced for all internal system access.
Intrusion Detection: done555's infrastructure is monitored for suspicious activity, intrusion attempts, and anomalous data access patterns on a continuous basis.
Password Hashing: Account passwords are stored as salted cryptographic hashes. done555 staff cannot retrieve your plaintext password and will never ask you for it.
Penetration Testing: done555's platform undergoes periodic independent security assessments to identify and remediate vulnerabilities.

Breach Notification: In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, done555 will notify affected account holders without undue delay, and in any case within 72 hours of becoming aware of the breach, in accordance with applicable data breach notification requirements.

Section 10

Children & Minors

21+ Platform — Strictly Enforced: The done555 platform is strictly for adults aged 21 years and above. done555 does not knowingly collect, process, or retain personal data from any individual under the age of 21. If you believe that a minor has accessed done555 or submitted personal data to the platform, please contact us immediately at [email protected].

done555 employs age verification as part of its KYC process to prevent underage access. Any account found to belong to a person under 21 years of age will be suspended immediately, all gaming activity on that account will be voided, and any deposited funds will be returned to the payment source following verification, in accordance with done555's regulatory obligations.

Parents and guardians in Pakistan who are concerned about underage gambling are encouraged to use parental control software to restrict access to online gaming platforms. done555 supports and promotes responsible digital parenting in the Pakistani community.

Section 11

International Data Transfers

done555 operates under an international gaming licence, and as a result, your personal data may be transferred to and processed in countries other than Pakistan — including the jurisdiction in which done555's licensing authority is based and the locations of done555's data hosting infrastructure.

Where your personal data is transferred outside Pakistan, done555 ensures that appropriate safeguards are in place to protect your data in accordance with internationally recognised standards. These safeguards may include:

Standard contractual clauses approved by recognised data protection authorities, incorporated into agreements with overseas data recipients;
Transfers to jurisdictions that maintain data protection laws providing a level of protection equivalent to internationally accepted standards; or
Transfers that are strictly necessary for the performance of a contract with you — for example, processing a USDT TRC20 blockchain transaction.

You may contact done555's Data Protection Officer at [email protected] to obtain further information about the specific safeguards in place for any international transfer of your personal data.

Section 12

Third-Party Services

The done555 platform integrates third-party gaming content and services — including live casino studio streams, slot game software, and payment gateway widgets — that may involve third-party data processing within the done555 interface. done555 maintains contractual data processing agreements with all such third parties and requires them to process data only for the purposes necessary to deliver their respective services within the done555 platform.

done555 does not embed third-party social media widgets, advertising networks, or external analytics services that would transmit your personal data to social media companies or ad-tech platforms without your explicit consent.

Payment Gateways: When you make a deposit or withdrawal using JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Allied Bank, or SadaPay, your transaction is processed through that provider's own payment infrastructure. The privacy practices of those providers are governed by their respective privacy policies. done555 only retains the transaction reference data necessary for wallet reconciliation and AML record-keeping.

Section 13

Policy Changes

done555 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When we make material changes to this Policy, we will notify you by:

Posting a prominent notice on the done555 platform homepage and within your account dashboard for a minimum of thirty (30) days following the update;
Sending an email notification to the address registered to your done555 account where the changes affect how we process your personal data in a materially different way; and
Updating the "Last Reviewed" date displayed in the hero section of this page.

Your continued use of the done555 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not agree with any changes to this Policy, you should discontinue use of the platform and may request account closure by contacting [email protected].

done555 recommends that all Pakistani players review this Privacy Policy periodically, particularly before making new deposits or engaging with new product features on the platform. Archived versions of prior Privacy Policy editions are available upon written request to done555's Data Protection Officer.

Section 14

Contact & Data Protection Officer

done555 takes all privacy inquiries seriously. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how done555 is handling your personal data, please reach out through the following channel:

Data Protection Officer — done555

Email: [email protected] (Subject line: "Privacy / DPO Inquiry")
Response time: Within 30 calendar days of receipt of your verified request.
Language: English (all formal correspondence must be submitted in English).

General Customer Support

For non-privacy account queries — including deposit issues, bonus questions, and game disputes — please contact done555 general support at [email protected] with a description of your issue and your registered account username.

Commitment to Pakistani Players: done555 understands that data privacy is a growing concern among Pakistani internet users. We are fully committed to transparent, responsible data handling and to keeping your personal information secure at every step of your done555 journey — from first registration in Karachi or Lahore, to every cricket bet placed during PSL season, to every withdrawal back to your JazzCash or EasyPaisa account.

done555 Privacy Policy