1. Introduction
done55 ("done55", "we", "us", "our") operates the online betting and casino platform at done55.asia. We are committed to protecting the privacy and personal data of all users ("Player", "you", "your") who access or use our services.
This Privacy Policy ("Policy") describes how done55 collects, processes, stores, and protects personal information in connection with your use of the Platform, including registration, account management, deposits, withdrawals, wagering, and all related services.
By registering an account or otherwise using done55, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions and Responsible Gaming policy.
2. Data Controller
done55 is the data controller in respect of personal data collected through the Platform. Queries relating to this Policy or requests to exercise data subject rights should be directed to the done55 support team via live chat or by email to: [email protected] (plain text only — not a clickable link).
3. Personal Data We Collect
done55 collects the following categories of personal data:
- Identity Data: Full name, date of birth, gender, CNIC number or passport number, and photographic identification documents submitted for KYC verification.
- Contact Data: Email address, Pakistani mobile number (used for account communications and, where enabled, two-factor authentication), and postal address.
- Financial Data: Payment method details including JazzCash wallet identifiers, Easypaisa account numbers, bank account or IBAN details, and card information (processed via PCI-DSS compliant payment processors — full card numbers are not stored by done55 directly).
- Transaction Data: Records of all deposits, withdrawals, bets placed, bonuses credited, and account balance history.
- Technical Data: IP address, device type and identifier, browser type and version, operating system, time zone, and session data generated during use of the Platform.
- Usage Data: Information about how you interact with the Platform, including pages visited, games played, betting markets accessed, and session duration.
- Communications Data: Records of correspondence between you and the done55 support team, including live chat transcripts and email exchanges.
- Responsible Gaming Data: Self-reported information relating to responsible gaming assessments, deposit or loss limits set, and any self-exclusion requests submitted.
4. How We Collect Personal Data
done55 collects personal data through the following channels:
- Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or completing responsible gaming assessments.
- Automated technologies: Cookies, web beacons, server logs, and similar tracking technologies collect technical and usage data automatically when you access the Platform. See Section 8 for further details.
- Third-party sources: done55 may receive supplementary identity or fraud-screening information from third-party KYC verification service providers, payment processors, and fraud prevention agencies in connection with account verification and anti-money laundering compliance.
5. How We Use Your Personal Data
done55 processes your personal data for the following purposes:
- To create, manage, and maintain your done55 account;
- To process deposits, withdrawals, and all financial transactions;
- To verify your identity and age in compliance with KYC and anti-money laundering obligations;
- To detect, investigate, and prevent fraud, cheating, bonus abuse, and other prohibited conduct;
- To provide customer support services via live chat and email;
- To send transactional communications including account confirmations, deposit receipts, withdrawal notifications, and security alerts;
- To send promotional communications about done55 bonuses, PSL promotions, new games, and VIP rewards — where you have provided consent or where we have a legitimate interest in doing so;
- To personalise your Platform experience based on your game preferences and betting history;
- To operate responsible gaming tools including deposit limits, self-exclusion, and player activity monitoring;
- To comply with applicable legal, regulatory, and anti-money laundering obligations;
- To improve and develop the Platform, troubleshoot technical issues, and analyse aggregate usage patterns.
6. Legal Basis for Processing
done55 relies on the following legal bases for processing personal data:
- Contract performance: Processing necessary for the performance of the account agreement and provision of betting and casino services.
- Legal obligation: Processing required to comply with KYC, anti-money laundering, responsible gaming, and other applicable regulatory requirements.
- Legitimate interests: Processing necessary for fraud prevention, platform security, abuse detection, and service improvement, where such interests are not overridden by your data protection rights.
- Consent: Marketing communications where consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
7. Data Sharing & Disclosure
done55 does not sell, rent, or trade personal data to third parties for their independent marketing purposes. done55 may share personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment processors: JazzCash, Easypaisa, card payment processors, and banking partners for the purpose of executing financial transactions;
- KYC and identity verification providers: Third-party identity verification services used to fulfil our age and identity verification obligations;
- Fraud prevention and security services: Agencies that assist done55 in detecting and preventing fraud, money laundering, and account abuse;
- IT and platform infrastructure providers: Hosting, data storage, and security technology vendors operating under data processing agreements with done55;
- Customer support technology providers: Live chat and CRM platform providers operating solely on done55's instructions;
- Regulatory and law enforcement authorities: Where required by applicable law, court order, or regulatory direction, done55 will disclose personal data to competent authorities without prior notice to the data subject where legally required to do so.
All third-party data processors engaged by done55 are required to process personal data only in accordance with done55's instructions and to maintain appropriate technical and organisational security measures.
8. Cookies & Tracking Technologies
done55 uses cookies and similar technologies including web beacons and local storage objects for the following purposes:
- Essential cookies: Necessary for the Platform to function, including maintaining your login session and remembering account preferences. These cannot be disabled without impacting Platform functionality.
- Performance cookies: Collect anonymised information about how players use the Platform, which pages are most visited, and where errors occur, to help done55 improve performance.
- Functional cookies: Remember your language preferences, display settings, and other personalisation choices.
- Analytics cookies: Used to analyse aggregate traffic patterns and Platform usage. Information collected is anonymised and used only for internal reporting purposes.
You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of done55. Your browser's help documentation provides instructions for managing cookie preferences.
9. Data Retention
done55 retains personal data for as long as your account remains active and for a reasonable period thereafter to satisfy applicable legal, regulatory, and anti-money laundering obligations. Specific retention periods include:
- Account and identity data: retained for a minimum of five (5) years following account closure, or longer where required by applicable law;
- Financial transaction records: retained for a minimum of seven (7) years in compliance with financial record-keeping requirements;
- Customer support communications: retained for a minimum of two (2) years from the date of the relevant interaction;
- Marketing consent records: retained for as long as required to demonstrate compliance with applicable consent obligations.
Where personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, done55 will securely delete or anonymise it.
10. Data Security
done55 implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, access controls limiting employee access to personal data on a need-to-know basis, regular security assessments and penetration testing of platform infrastructure, and PCI-DSS compliant processing for all card payment data.
While done55 takes security seriously, no transmission over the internet or electronic storage system is completely secure. Players are responsible for maintaining the confidentiality of their own login credentials and should contact done55 support immediately if they suspect unauthorised access to their account.
11. Your Data Rights
Subject to applicable law, you have the following rights in relation to personal data held by done55:
- Right of access: The right to request a copy of the personal data done55 holds about you;
- Right to rectification: The right to request correction of inaccurate or incomplete personal data;
- Right to erasure: The right to request deletion of your personal data where it is no longer required for the purpose for which it was collected, subject to overriding legal retention obligations;
- Right to restrict processing: The right to request that done55 limits its processing of your personal data in certain circumstances;
- Right to object: The right to object to processing based on legitimate interests, including for direct marketing purposes;
- Right to data portability: The right to receive personal data you have provided to done55 in a structured, commonly used, machine-readable format.
To exercise any of these rights, please contact done55 support via live chat or email at: [email protected]. done55 will respond to verified requests within a reasonable timeframe. Identity verification will be required before any data subject request is actioned.
Please note that certain rights may be limited where done55 has overriding legal obligations — for example, financial transaction records must be retained for regulatory compliance purposes regardless of an erasure request.
12. Children & Minors
done55 is strictly an 18+ platform. done55 does not knowingly collect personal data from persons under the age of eighteen (18). If done55 becomes aware that personal data has been collected from a minor, the account will be immediately closed and all data will be deleted. If you believe a minor has created a done55 account, please contact support immediately.
13. Changes to This Policy
done55 reserves the right to update or modify this Privacy Policy at any time. Where changes are material, done55 will notify registered players via email or platform notification prior to the changes taking effect. The "last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform following notification of changes constitutes acceptance of the revised Policy.
14. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by done55, please contact our support team:
- Live chat: Available 24/7 directly on the done55 platform;
- Email: [email protected] (plain text — not a clickable link).