Privacy Policy – done555 Pakistan Online Betting Platform

1. Personal Data We Collect at done555

done555 collects personal information from you in three main ways: information you provide directly when registering and using your account, information generated automatically by your use of the platform, and — in limited circumstances — information shared with done555 by regulated third parties such as identity verification services and payment processors. Below is a full breakdown of each category.

1.1 Information You Provide Directly

When you register a done555 account or interact with our platform, we collect the information you provide. This typically includes your full legal name as it appears on your CNIC, your date of birth, your Pakistani mobile number, your email address, your chosen username and password (stored as an irreversible hash — done555 never stores plain-text passwords), your residential address in Pakistan, and your CNIC number for identity verification purposes. When you request a withdrawal or complete KYC verification, we may also collect a scanned copy or photograph of your CNIC and a selfie or proof-of-address document such as a recent utility bill or bank statement.

1.2 Payment Information

done555 collects details of your preferred payment methods — including your Easypaisa account number, JazzCash account number, NayaPay or SadaPay wallet ID, IBFT bank account details, or Visa/Mastercard debit card details. For card payments, done555 uses a PCI-DSS-compliant payment gateway — full card numbers and CVVs are never stored on done555 servers. We retain the last four digits of payment method identifiers solely to verify that deposits and withdrawals are going to and from your own accounts.

1.3 Automatically Collected Technical Data

When you access done555.ws via browser or the done555 mobile app, we automatically collect certain technical data. This includes your IP address, device type and model, operating system and version, browser type and version, screen resolution, your geographic location at a city or region level (derived from your IP address), session timestamps, pages visited and time spent on each section of the platform, and betting activity logs including markets viewed, bets placed, odds accepted, and results. This data is used for security monitoring, fraud prevention, responsible gaming analysis, and to improve the done555 platform experience.

2. How done555 Uses Your Personal Data

done555 uses personal data only for specific, legitimate purposes. We do not process your data in ways that are excessive, unnecessary, or inconsistent with the purposes described below. Every use of your data at done555 falls into one of the following categories.

2.1 Account Administration and Platform Operation

The primary reason done555 collects personal data is to operate your account — processing deposits and withdrawals in PKR, verifying your identity, responding to your support queries, and ensuring your betting history is correctly recorded. Without this data, done555 cannot provide you with a functional betting service. This processing is based on the contractual necessity of providing the service you signed up for.

2.2 Identity Verification and Fraud Prevention

done555 uses identity data — including your CNIC number, date of birth, and payment method details — to verify that you are who you say you are, that you are of legal age, and that your account is not being used for money laundering, fraud, or other criminal purposes. This processing is required by done555's legal and regulatory obligations and cannot be opted out of while maintaining an active account.

2.3 Responsible Gaming Monitoring

done555 uses your betting activity data — including bet frequency, stake sizes, session durations, and loss patterns — to monitor for signs of problem gambling. When our systems detect patterns consistent with problematic betting behaviour, done555's responsible gaming team may make contact to offer support tools. This data processing is carried out in your interest and is a core part of done555's duty of care to its players.

2.4 Platform Improvement and Personalisation

done555 uses aggregated and anonymised usage data to understand how players interact with the platform — which sports sections are most visited, which promotions are most popular, and where the mobile interface could be improved. Where permitted, done555 also uses your individual preferences to personalise your betting homepage — for example, showing PSL markets prominently if you are a frequent PSL bettor. You can opt out of personalisation from your account settings without affecting your ability to use done555.

3. When and How done555 Shares Your Data

done555 does not sell your personal data. We do not share it with advertisers, data brokers, or any third party for their commercial benefit. There are, however, specific limited circumstances in which done555 shares player data — each one is explained below.

3.1 Payment Processors

When you make a deposit or request a withdrawal, done555 shares the minimum necessary information with your payment provider — Easypaisa, JazzCash, NayaPay, SadaPay, your bank, or your card network — to process the transaction. This typically includes your name, account identifier, and transaction amount in PKR. done555 does not share your betting history or responsible gaming status with payment providers.

3.2 Identity Verification Services

done555 uses regulated third-party identity verification services to assist with KYC processing. When you submit your CNIC or other verification documents, the data is shared with our verification partner under a data processing agreement that restricts its use to identity verification only. Verification partners used by done555 are subject to the same data security standards as done555 itself.

3.3 Regulatory and Legal Requirements

done555 is required by law and by the terms of its operating licence to co-operate with regulatory authorities and law enforcement agencies. If done555 receives a valid legal order requiring disclosure of player data, we are obligated to comply. done555 will notify affected players of any such disclosure request unless legally prohibited from doing so.

3.4 Responsible Gaming Partners

In circumstances where done555's responsible gaming team identifies a player who may benefit from specialist support, done555 may — with the player's consent — share limited contact information with an approved responsible gaming support organisation. This sharing is always voluntary, opt-in, and done555 will never share your full betting history or financial data with any support organisation without your explicit consent.

4. Data Storage, Security and Retention

done555 stores all player data on secure, access-controlled servers. The following security measures are in place at all times to protect your personal information from unauthorised access, loss, or misuse.

• All data in transit is encrypted using 256-bit TLS/SSL — this applies to the done555 website, mobile app, and all API connections
• Data at rest on done555 servers is encrypted using AES-256 encryption
• Server access is restricted to authorised done555 personnel only, using multi-factor authentication and role-based access controls
• done555 conducts regular independent security audits and penetration testing of its infrastructure
• Passwords are stored as irreversible cryptographic hashes — done555 employees cannot read your password
• done555 maintains an incident response plan — in the event of a confirmed data breach affecting Pakistani players, done555 will notify affected players within 72 hours
• Player responsibility: done555 urges all players to use a strong, unique password and to enable two-factor authentication from account settings

4.1 Data Retention Periods

done555 retains personal data for as long as your account is active and for a defined period after account closure, as required by applicable regulations. Financial transaction records — including PKR deposits, withdrawals, and bet history — are retained for a minimum of five years after account closure to comply with anti-money-laundering regulations. Technical log data is retained for a rolling 12-month period. KYC documents are retained for five years after account closure. Marketing preference records are deleted immediately upon opt-out.

5. Cookies and Tracking Technologies

done555 uses cookies and similar technologies to operate the platform, recognise returning players, and improve your experience. The following explains each type of cookie used at done555 and how you can manage your preferences.

You can manage your cookie preferences from the Cookie Settings panel accessible in the footer of done555.ws. Disabling analytics, preference, or marketing cookies will not affect your ability to bet, deposit, or withdraw at done555.

6. Your Data Rights as a done555 Player

done555 respects your rights over your own personal data. The following rights are available to all registered players and can be exercised by contacting done555 support at any time. done555 will respond to all data rights requests within 30 days.

7. Marketing Communications and How to Opt Out

done555 may send you marketing communications — including SMS, email, and push notifications — about bonuses, promotions, new sports markets, and platform updates. These communications are sent on the basis of your consent, which you provide when you register at done555 and tick the relevant marketing preference box.

7.1 Types of Marketing Communications

• SMS notifications — new promotions, deposit bonus alerts, PSL season reminders sent to your registered Pakistani mobile number
• Email newsletters — weekly promotions digest, PSL match previews, new feature announcements at done555
• Push notifications — live in-play alerts, match start reminders, withdrawal confirmations (via the done555 mobile app)
• done555 does not send unsolicited third-party marketing on behalf of other brands
• done555 does not cold-call players

7.2 Opting Out

You can opt out of any or all done555 marketing communications at any time without affecting your ability to use the platform. Options include: clicking the unsubscribe link in any done555 marketing email, replying STOP to any done555 SMS, disabling push notifications in the done555 app settings, or managing all communication preferences from the Notifications section of your account settings. Once you opt out, done555 will process your request within 48 hours. Note that transactional messages — such as withdrawal confirmations and security alerts — cannot be disabled as they are necessary for account security.

Players who have self-excluded from done555 through the responsible gaming tool are automatically removed from all marketing lists for the full duration of their self-exclusion period. This suppression is applied immediately when self-exclusion is confirmed.

8. Children and Minors — Under-18 Protection

done555 does not knowingly collect personal data from anyone under the age of 18. done555 is strictly an adults-only platform. If done555 becomes aware that an account has been registered by a person under 18, the account will be closed immediately and all personal data associated with that account will be deleted within 30 days, except where retention is required by law to process the account closure and refund any deposited funds.

9. Changes to This Privacy Policy

done555 reviews this Privacy Policy regularly and updates it when our data practices change or when legal requirements are updated. The effective date at the top of this page reflects the most recent update. When we make material changes — changes that significantly affect how your data is used or your rights as a player — done555 will notify registered players via email at least 14 days before the new policy takes effect.

Changes that reduce your privacy protections — for example, introducing a new category of data sharing that was not previously disclosed — will always require fresh consent where applicable. You will not be bound by a change that materially reduces your rights without having the opportunity to review it and close your account if you do not agree.

Your continued use of done555 after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. The current version of this policy is always accessible at done555.ws/privacy-policy and supersedes all previous versions.

10. Contact done555 About Your Privacy

If you have any question, concern, or request related to how done555 handles your personal data, please reach out to us. Our support team is available 24 hours a day, seven days a week, in both English and Urdu.