done55 takes your privacy seriously. This Policy explains exactly what personal data we collect, why we collect it, how it is processed and what rights you have over your information.
This Privacy Policy (the "Policy") is issued by done55 ("done55", "we", "us" or "our") and governs the collection, use, storage, transfer and protection of personal data provided by or collected from users ("you", "your" or "User") who access or use the done55 platform available at https://done55.cam (the "Platform").
done55 is committed to handling your personal data responsibly and transparently. We process personal data only for legitimate, specified and lawful purposes, and we do not process it in ways that are incompatible with those purposes. This Policy explains what data we collect, why we collect it, how we use it and what choices and rights you have in relation to your information.
This Policy should be read alongside our Terms & Conditions and our Responsible Gambling Policy, both of which are incorporated herein by reference. By registering an Account or accessing the Platform, you confirm that you have read and understood this Policy.
The following terms carry the meanings set out below throughout this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that identifies or can be used to identify a living individual, directly or indirectly — including name, email address, CNIC number, IP address, device identifiers and financial details. |
| "Processing" | Any operation performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure or destruction. |
| "Data Subject" | The identified or identifiable natural person to whom Personal Data relates — in the context of this Platform, this means you, the User. |
| "Data Controller" | The entity that determines the purposes and means of processing Personal Data. done55 acts as Data Controller in respect of user data collected on the Platform. |
| "Data Processor" | A third party that processes Personal Data on behalf of the Data Controller, subject to written instructions and data processing agreements. |
| "Cookies" | Small text files stored on your device by a website to remember preferences, maintain sessions and collect anonymised usage analytics. |
| "KYC" | Know Your Customer — the regulatory identity and age verification process requiring submission of identity documents such as a CNIC or passport. |
| "Sensitive Data" | A subset of Personal Data requiring heightened protection, including biometric data, financial account details and government-issued ID numbers. |
done55 operates as the Data Controller for all Personal Data collected through the Platform. done55 does not maintain a Pakistan-based office and does not hold a Pakistani gambling license. The Platform is operated under an international licensing framework. All data processing activities are conducted in accordance with the data protection laws of the operator's license jurisdiction.
For all data-related enquiries, including requests to exercise your rights under applicable data protection law, please contact us using the details provided in Section 16 of this Policy.
done55 collects Personal Data from you in three principal ways: data you provide directly, data collected automatically through your use of the Platform, and data received from third parties such as identity verification providers or payment processors. The categories of data we collect include the following:
| Category | Examples | Source |
|---|---|---|
| Registration Data | Full name, date of birth, email address, phone number, username, password (hashed) | Provided by you at registration |
| Identity & KYC Data | CNIC number, passport details, selfie images, proof of address documents | Provided by you during KYC verification |
| Financial Data | Payment method details, deposit and withdrawal history, transaction amounts in PKR or other currencies | Provided by you and from payment processors |
| Usage Data | Pages visited, games played, bets placed, session duration, click paths, search queries within the Platform | Collected automatically via cookies and server logs |
| Technical Data | IP address, device type, browser version, operating system, screen resolution, time zone | Collected automatically on access |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Provided by you when contacting support |
| Preference Data | Responsible gambling limit settings, marketing preferences, language and display settings | Provided by you in account settings |
| Geolocation Data | Approximate location derived from IP address (city-level — e.g., Karachi, Lahore, Islamabad) | Collected automatically to support compliance checks |
done55 processes your Personal Data only where we have a lawful basis to do so. The legal bases on which we rely are as follows:
done55 uses your Personal Data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or being permitted to do so by law:
done55 does not sell your Personal Data to third parties. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:
done55 uses cookies and similar tracking technologies — including web beacons and local storage — to operate the Platform effectively, remember your preferences and analyse how the Platform is used. The types of cookies we deploy are as follows:
You may manage or withdraw your cookie consent at any time through your browser settings. Blocking strictly necessary cookies will impair the Platform's functionality and may prevent Account access.
done55 retains your Personal Data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal, regulatory and contractual retention requirements. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of Account plus 5 years after closure | Contractual obligation and AML compliance |
| KYC & Identity Documents | 5 years after Account closure or last transaction | AML regulatory requirement |
| Financial Transaction Records | 7 years from transaction date | Financial record-keeping legislation |
| Communication & Support Records | 3 years after last interaction | Legitimate interests (dispute resolution) |
| Usage & Technical Data | 13 months (rolling) in identifiable form | Platform performance and fraud analysis |
| Self-Exclusion Records | Minimum 7 years from exclusion date | Responsible gambling regulatory obligation |
| Marketing Consent Records | Until consent is withdrawn plus 2 years | Evidence of lawful marketing basis |
On expiry of the applicable retention period, Personal Data is securely deleted or anonymised such that it can no longer be attributed to you.
done55 implements technical and organisational security measures commensurate with the sensitivity of the Personal Data processed and the risks involved. Our security framework includes the following safeguards:
done55 may transfer your Personal Data to countries outside your country of residence — including countries outside Pakistan — for the purposes described in this Policy. This includes transfers to service providers, payment processors and identity verification partners located in various jurisdictions globally.
Where Personal Data is transferred internationally, done55 takes appropriate steps to ensure that the recipient provides an adequate level of data protection, including through contractual safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under the applicable data protection framework of the operator's license jurisdiction.
Subject to applicable data protection law and where technically feasible, you may have the following rights in relation to your Personal Data. Please note that some rights may be limited by legal obligations, including AML and KYC retention requirements:
You have the right to request a copy of the Personal Data we hold about you and to be informed of how it is being processed. We will respond to verified access requests within 30 days.
If any Personal Data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require re-submission of KYC documents.
You may request the deletion of your Personal Data where it is no longer necessary for its original purpose. This right does not apply where retention is required by law — for example, AML record-keeping obligations.
You may request that we temporarily restrict processing of your data — for example, while the accuracy of the data is being contested or a legitimate interests assessment is reviewed.
Where processing is based on your consent or a contract, and is carried out by automated means, you may request a machine-readable copy of your data for transfer to another service provider.
You may object to processing based on legitimate interests, including direct marketing. Objections to marketing will be actioned immediately. Other objections will be assessed on their individual merits.
Submit your request by email to [email protected] (plain text — not a clickable link). Identity verification may be required before we process your request. We will respond within 30 days of receipt of a valid request.
done55 does not knowingly collect Personal Data from individuals under the age of 18, or the higher minimum age required by the operator's license jurisdiction. The Platform is strictly intended for adults who meet the applicable minimum age requirement.
Where we discover that Personal Data has been collected from a minor, we will immediately delete that data, close the associated Account and retain only such records as are legally required for AML or fraud investigation purposes. We actively enforce age verification through KYC controls at registration and at the point of first withdrawal.
The Platform may reference or link to third-party services, including game providers, payment processors and analytics tools. done55 is not responsible for the privacy practices of any third-party service provider. Each third-party service operates under its own privacy policy and done55 has no control over how such third parties collect or process your data beyond the scope of data processing agreements we hold with them as Data Processors.
Payment service references — such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — appear on this Platform for contextual purposes only. These providers operate their own data privacy frameworks independently. done55 shares only the minimum transactional data necessary with payment processors to complete deposit and withdrawal requests.
done55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations or Platform functionality. When material changes are made, we will notify you by email to the address registered on your Account or by a prominent notice displayed on the Platform.
The "Last Updated" date at the top of this Policy reflects the date of the most recent material revision. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request Account closure in accordance with our Terms & Conditions.
For all privacy-related enquiries, requests to exercise your data rights, or concerns about how done55 handles your Personal Data, please contact us using the details below. All contact details are displayed as plain text and are not clickable links.
We aim to respond to all data-related requests within 30 calendar days. For urgent Account security concerns, live chat support is available through the Platform around the clock.
Six key commitments that underpin how done55 handles your personal data.
done55 does not sell, rent or trade your Personal Data to third parties for their own marketing purposes. Your data is used only for the purposes described in this Policy.
TLS encryption protects all data in transit. Sensitive data including KYC documents is encrypted at rest. Internal access to your data is restricted on a strict need-to-know basis.
Access, rectify, erase or port your data by emailing [email protected]. We respond to verified requests within 30 days and will not penalise you for exercising your rights.
Data is held only as long as necessary — typically 5–7 years for regulated financial records, and shorter periods for analytics and communication data. Secure deletion follows on expiry.
We use only the cookie categories described in Section 8 of this Policy. Marketing cookies require your explicit consent. Analytics cookies collect anonymised data only. You can manage preferences at any time.
Where your data is processed outside Pakistan, done55 applies contractual safeguards to ensure an equivalent standard of protection applies in the receiving jurisdiction.
If you have read this Policy and still have questions about how done55 handles your data, reach out through our support channels or explore the rest of the Platform.