Your Data, Your Rights

Privacy Policy – done55 Pakistan Online Casino

We believe you have a right to know exactly what personal information done55 collects, how it is used, who it is shared with, and what control you have over it. This page tells you everything — in plain language.

Last Updated: January 2025

Privacy at a Glance

The most important things to know about how done55 handles your personal data — full detail in each section below.

What We Collect

Name, contact details, payment info, device data, and activity logs — only what is necessary to run your account and keep the platform secure.

How We Use It

To operate your account, process payments, verify identity, provide support, and comply with legal obligations. Never for third-party advertising.

Who We Share With

Payment processors and identity verifiers only — under strict contracts. We never sell your data. We never share it for marketing purposes.

Your Rights

Access, correct, or delete your data at any time. Object to processing. Request a copy. All requests handled within 30 days — free of charge.

done55

Done55 is built for Pakistani players — and that includes protecting your personal data with the same care we bring to every other part of the platform.

1Who We Are

Done55 operates the online gaming platform accessible at done55.im, offering sports betting, live casino, poker, Aviator, Ludo Games, and related services to players in Pakistan. For the purposes of this Privacy Policy, done55 is the data controller — meaning we determine how and why your personal data is collected and used.

This Privacy Policy applies to all personal data collected through the done55 website, mobile interface, and any communications between done55 and its players, including customer support interactions via email or live chat.

If you have any questions about this policy or the way done55 handles your data, you can reach us at support@done55.im. We will always respond within 2 business hours during standard hours.

Plain language note: This policy is written to be as clear and readable as possible for Pakistani players. If anything is unclear, contact done55 support and we will explain it to you directly in simple terms.

2Personal Data We Collect

Done55 collects only the personal data that is genuinely necessary to operate your account, process your transactions, comply with legal obligations, and keep the platform secure. We do not collect data for the sake of it. The categories of personal data we may hold about you include:

Category Specific Data Points When Collected
Identity Data Full legal name, date of birth, CNIC or passport number, selfie with ID Registration and KYC verification
Contact Data Email address, mobile phone number, city of residence Registration
Financial Data Payment method details, transaction history (amounts, dates, method), wallet IDs Deposits and withdrawals
Device & Technical Data IP address, browser type, device type, operating system, screen resolution Every platform session
Gameplay Data Games played, bet amounts, win/loss records, session durations, hand histories Every gaming session
Communications Data Support chat transcripts, emails, any messages sent to done55 When you contact support
Marketing Preferences Whether you have opted in or out of promotional communications Account settings

We do not collect sensitive personal data such as biometric data (beyond selfie KYC verification), health information, political opinions, or religious beliefs.

3How We Collect Your Data

Done55 collects your personal data through the following channels:

  • Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
  • Automatically during platform use: Device and technical data (IP address, browser, session time) is collected automatically through server logs and platform analytics whenever you access done55.
  • Through cookies and similar technologies: Done55 uses cookies to maintain your session, remember your preferences, and analyse platform usage. See the Cookies section below for full details.
  • From third-party payment processors: When you make a payment through Easypaisa, JazzCash, NayaPay, SadaPay, IBFT, or card, the payment provider confirms transaction status and account ownership details to done55 as part of the payment process.
  • From identity verification providers: If done55 uses a third-party identity verification service to cross-check the documents you submit for KYC, that provider will share the result of the verification check with done55.

4Why We Use Your Personal Data

The table below sets out each purpose for which done55 uses your personal data and the type of data involved in each case:

Purpose Data Used
Creating and managing your done55 account Identity, contact data
Processing deposits and withdrawals Financial data, identity data
Verifying your identity (KYC compliance) Identity data, financial data
Delivering games and recording results Gameplay data, device data
Customer support and dispute resolution Identity, contact, communications, gameplay data
Detecting fraud, collusion, and bonus abuse Device data, gameplay data, financial data
Anti-money laundering monitoring Financial data, identity data, gameplay data
Responsible gaming monitoring and intervention Gameplay data, session data
Sending service communications (e.g. withdrawal confirmations) Contact data
Sending promotional offers (opted-in players only) Contact data, marketing preferences
Platform performance and security monitoring Device and technical data
done55

Done55 processes all personal data strictly in accordance with this policy — built around the needs of Pakistani players who value both great gaming and real data privacy.

5Legal Bases for Processing

Done55 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

  • Contract performance: Processing necessary to provide the services you have signed up for — account management, payments, game delivery, and support.
  • Legal obligation: Processing required to comply with applicable laws — including identity verification, anti-money laundering checks, and record-keeping obligations.
  • Legitimate interests: Processing for purposes that done55 has a legitimate reason to pursue — fraud detection, security monitoring, platform analytics, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights.
  • Consent: Processing for which you have given explicit opt-in agreement — specifically, marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Who We Share Your Data With

Done55 does not sell, rent, or trade your personal data to any third party for any purpose. The only circumstances in which done55 shares personal data with third parties are as follows:

  • Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay, and card processing partners receive the financial data necessary to process your transactions. These providers are bound by their own privacy policies and payment industry security standards.
  • Identity verification providers: Where done55 uses a third-party service to assist with KYC document verification, the relevant identity documents are shared for verification purposes only. The provider does not retain copies beyond the verification window.
  • IT infrastructure providers: Done55's platform runs on cloud infrastructure. Server and hosting providers may have technical access to data stored on their infrastructure, but are bound by strict data processing agreements prohibiting any independent use of that data.
  • Legal and regulatory authorities: Done55 will share personal data with law enforcement, regulatory authorities, or courts when required to do so by applicable law or a valid legal order. Done55 will, where legally permitted, notify you if such a request is received in relation to your account.
  • Professional advisors: Lawyers, auditors, and accountants who require access to personal data in the course of providing professional services to done55, under strict confidentiality obligations.

Done55 never shares your personal data with marketing companies, data brokers, or advertising networks. If you ever receive an unsolicited message claiming to be from done55 and asking for personal information, treat it as fraudulent and report it to support@done55.im.

7How Long We Keep Your Data

Done55 retains personal data only for as long as it is necessary for the purposes set out in this policy, or as required by applicable law. The specific retention periods that apply to different categories of data are set out below:

  • Account and identity data: Retained for the lifetime of your account and for a minimum of five years following account closure, to meet anti-money laundering record-keeping requirements.
  • Financial transaction records: Retained for a minimum of seven years from the date of each transaction, in compliance with financial record-keeping standards.
  • Customer support communications: Retained for three years from the date of the interaction, to support dispute resolution and quality monitoring.
  • Gameplay data: Retained for two years from the date of each gaming session, and used for responsible gaming monitoring during this period.
  • Device and technical data (session logs): Retained for 90 days for security monitoring purposes, then deleted.
  • Marketing preferences and consent records: Retained for the lifetime of your account plus two years, to demonstrate compliance with consent requirements.

When data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual. Anonymised aggregate data (for example, statistical analysis of platform usage) may be retained indefinitely as it no longer constitutes personal data.

8How We Protect Your Data

Done55 takes data security seriously and implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include:

  • Encryption of all personal and financial data in transit using TLS (Transport Layer Security) and at rest using AES-256 encryption.
  • Strict internal access controls — only done55 team members with a legitimate need to access specific categories of data are granted that access, and access logs are maintained.
  • Regular security testing of the done55 platform, including penetration testing and vulnerability scanning.
  • Two-factor authentication available for all player accounts and mandatory for done55 staff accounts.
  • A documented data breach response procedure — if a breach affecting player data occurs, done55 will notify affected players within 72 hours of becoming aware of the breach.

No online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their done55 account credentials. If you suspect your account has been compromised, contact done55 support immediately — we will act within minutes to secure your account.

done55

From the northern valleys to the southern coast — done55 protects the privacy of every registered player across Pakistan.

9Cookies and Tracking Technologies

Done55 uses cookies — small text files stored on your device — to make the platform work properly, remember your preferences, and understand how players use the site. The types of cookies done55 uses are as follows:

Cookie Type Purpose Can Be Disabled?
Essential Session management, login authentication, security tokens. These are required for the platform to function. No — required for core functionality
Functional Remembering your language, display preferences, and game settings between sessions. Yes — via browser settings
Analytics Understanding which pages are visited most, where players experience difficulties, and how the platform can be improved. Data is aggregated and not linked to individual accounts. Yes — via browser settings
Security Detecting unusual session behaviour, multiple account detection, and fraud prevention signals. No — required for account security

Done55 does not use advertising cookies or third-party tracking cookies for the purpose of serving targeted advertisements. You can manage cookie preferences through your browser settings. Note that disabling functional cookies may affect your experience on the platform.

10Your Data Rights

As a done55 player, you have the following rights in relation to your personal data. All requests are handled free of charge and within 30 calendar days of receipt. To exercise any right, contact done55 support at support@done55.im with your full name, account username, and a description of your request.

You have the right to request a copy of all personal data done55 holds about you. This is sometimes called a Subject Access Request (SAR). Done55 will provide a structured, readable summary of your data within 30 days. The copy will include the categories of data held, the purposes for which it is used, and with whom it has been shared.

If any personal data done55 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. For most contact and account data, you can update this yourself within your done55 account settings. For identity data that has been verified as part of KYC, corrections require you to submit updated documentation to done55 support.

You have the right to request that done55 delete your personal data. This right applies where the data is no longer necessary for its original purpose, you have withdrawn consent (where consent was the legal basis), or you object to processing and done55 has no overriding legitimate interest. Note that done55 is legally required to retain certain records — particularly financial transaction data — for defined periods. In these cases, done55 will delete all data that is not legally required and explain why any remaining data must be retained.

Where done55 processes your data on the basis of your consent or a contract with you, and the processing is carried out by automated means, you have the right to receive a copy of your data in a structured, commonly used, machine-readable format (such as CSV or JSON). You may also request that done55 transmit this data directly to another service provider where technically feasible.

You have the right to object to done55 processing your personal data where that processing is based on legitimate interests. Done55 will cease the processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise, or defence of legal claims. You may also object at any time to the processing of your personal data for direct marketing purposes — done55 will stop immediately upon receipt of such an objection.

You have the right to request that done55 restrict the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested, or while a legitimate interests objection is being assessed. When processing is restricted, done55 will retain the data but will not use it for any other purpose until the restriction is lifted.

11Children's Privacy

Done55 services are strictly for adults aged 18 and over. Done55 does not knowingly collect personal data from individuals under the age of 18. If a minor registers an account on done55, that account will be closed immediately upon discovery, all associated data will be deleted, and any deposits will be returned to the payment method used. If you believe a minor has accessed done55, please notify us immediately at support@done55.im so we can take action promptly.

Done55 actively uses age verification measures during registration and KYC processes to prevent underage access. We take this responsibility seriously and invest in both technical and procedural safeguards.

12Marketing Communications

Done55 sends promotional communications — including bonus offers, tournament announcements, and platform updates — only to players who have explicitly opted in to receive them. You can manage your marketing preferences at any time from your account settings, or by contacting done55 support.

Opting out of marketing communications has no effect on service communications — done55 will continue to send you transactional emails such as payment confirmations, withdrawal notifications, and security alerts regardless of your marketing preference, as these are necessary for account operation.

If you receive marketing communications from done55 after opting out, or receive communications you believe are fraudulent, contact support@done55.im immediately. Done55 will investigate and rectify any issue within 24 hours.

13Third-Party Links

The done55 platform may contain links to third-party websites in specific circumstances — for example, in responsible gaming information resources. Done55 is not responsible for the privacy practices of any third-party website. Visiting an external link from done55 means you are leaving our platform and are subject to that website's own privacy policy. Done55 recommends reviewing the privacy policy of any third-party website you visit before providing personal information to it.

14Changes to This Privacy Policy

Done55 reviews this Privacy Policy periodically and will update it when necessary to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, done55 will:

  • Update the "Last Updated" date at the top of this page.
  • Send a notification to all registered players by email, summarising what has changed.
  • Display a notice on the done55 platform for at least 14 days following any material change.

Continuing to use done55 after a privacy policy update constitutes acceptance of the revised policy. If you do not agree with any change, you may request account closure before the change takes effect — your eligible balance will be returned to you in full.

15How to Contact Us

For any privacy-related question, request, or complaint, you can reach done55 through the following channels. All privacy enquiries are treated with priority and handled by our dedicated data protection contact:

Email: support@done55.im — use the subject line "Privacy Request" for fastest routing.

Live Chat: Available 24/7 from within your done55 account. For data rights requests, live chat can initiate the process, but a written confirmation email will be required to authenticate and fulfil the request.

Done55 will acknowledge all privacy requests within 24 hours and will provide a full response within 30 calendar days. If your request is complex or if done55 receives a large volume of requests simultaneously, we will notify you if an extension of up to an additional 60 days is required — this extended timeframe is reserved for exceptional circumstances only.

How done55 Protects Your Privacy

Six concrete practices that demonstrate done55's commitment to data privacy — not just as a legal obligation, but as a fundamental part of how we operate.

End-to-End Encryption

All personal and financial data transmitted between your device and done55's servers is encrypted with TLS. Stored data is protected with AES-256 encryption at rest — the same standard used by major international banks.

No Data Selling, Ever

Done55 has never sold, rented, or traded player personal data to any third party. We do not share data with marketing companies, data brokers, or advertisers. Your data stays within done55's controlled environment.

Strict Access Controls

Personal data is accessible only to done55 team members who genuinely need it to perform their role. All access is logged and reviewed. Unauthorised access by staff is treated as a serious disciplinary matter.

Breach Notification Within 72 Hours

If a security incident occurs that affects your personal data, done55 will notify all affected players within 72 hours of becoming aware — explaining what happened, what data was involved, and what steps have been taken.

Data Deleted When No Longer Needed

Done55 does not hold data indefinitely. Each category of personal data has a defined retention period, after which it is securely deleted or anonymised. We never keep data "just in case."

Your Rights, Honoured Within 30 Days

Access requests, correction requests, deletion requests — all handled free of charge and within 30 calendar days. Done55 does not obstruct or delay the exercise of your data rights.

Your Privacy is Safe with done55 — Now Play with Confidence

You have read exactly how done55 handles your personal data. We collect only what is necessary, use it only for legitimate purposes, never sell it, and give you full control over it. Register your free done55 account knowing that your privacy is genuinely protected.

18+ only  ·  Done55 promotes responsible gaming  ·  All data protected