This Privacy Policy applies to all personal data processed by done555 in connection with your use of our website and services. By registering an account or using done555, you confirm that you have read and understood this policy. The data controller responsible for your personal data is done555. For any privacy-related queries, contact us at support@done555.biz.
Personal Data We Collect
done555 collects personal data in several ways — data you provide directly when registering or using the platform, data generated automatically as you use our services, and in some cases data received from third-party providers that help us verify your identity and process payments.
Registration data. When you create an account on done555, we collect your full name, date of birth, mobile number or email address, and the login credentials you choose. This is the minimum information required to create and manage your account. Where Pakistani KYC (Know Your Customer) verification is required, we may also collect a copy of your CNIC (Computerised National Identity Card), a recent bank statement, or a utility bill in your name.
Payment data. When you make a deposit or request a withdrawal on done555, we collect transaction details including the payment method used (Easypaisa, JazzCash, NayaPay, SadaPay, bank IBFT, or card), the amount in PKR, and the timestamp of the transaction. done555 does not store full card numbers — payment card data is handled directly by our PCI-DSS-compliant payment processing partners.
Usage and behaviour data. done555 automatically collects information about how you use the platform, including which games you play, which sports markets you bet on, the size and timing of your bets, session duration, and the device and browser you use to access the platform. This data is used to improve the platform, personalise your experience, and fulfil our responsible gaming obligations.
Technical data. We collect your IP address, device type, operating system, and browser version when you access done555. This data is used for security monitoring, fraud detection, and geographic compliance purposes.
Communication data. If you contact done555's support team via live chat, WhatsApp, Telegram, or email, we retain records of those communications for customer service quality, dispute resolution, and compliance purposes.
Why done555 Collects Your Data
done555 only collects personal data for specific, legitimate purposes. We do not collect data speculatively or sell your personal information to third parties for their own marketing use. Below are the purposes for which done555 uses your data:
- Account creation and management. Your name, contact details, and login credentials are necessary to create and maintain your done555 account and provide you with access to our services.
- Identity verification (KYC/AML). As a regulated platform, done555 is legally required to verify the identity of players before processing withdrawals above certain thresholds. This is an anti-money-laundering obligation and is not optional for either the platform or the player.
- Payment processing. Transaction data is required to process deposits and withdrawals in PKR via Easypaisa, JazzCash, and other supported payment methods.
- Platform improvement. Behavioural and usage data helps done555 understand how players use the platform, identify technical issues, and improve the overall experience — including making sure the mobile interface works well on the devices Pakistani players actually use.
- Responsible gaming. done555 is obligated to monitor player behaviour for signs of problem gambling. Betting patterns, session lengths, and account activity data are used to identify players who may benefit from responsible gaming tools and to enforce limit settings that players have put in place for themselves.
- Fraud prevention and security. Technical data including IP addresses and device fingerprints are used to detect suspicious activity, prevent duplicate accounts, and protect your account from unauthorised access.
- Marketing communications. Where you have given consent, done555 may contact you with information about promotions, new games, and special offers. You can withdraw consent at any time through your account settings or by contacting support.
- Legal and regulatory compliance. done555 retains certain data as required by the terms of its operating licence and applicable anti-money-laundering regulations. This data is kept for the minimum period required and is not used for any other purpose.
How done555 Stores and Protects Your Data
done555 takes the security of your personal data seriously. We apply technical and organisational measures appropriate to the sensitivity of the data we hold. The following protections are in place across the done555 platform:
- TLS/SSL encryption is applied to all data transmitted between your browser or mobile device and the done555 servers. Any data you send to done555 — including login credentials and payment information — is encrypted in transit.
- At-rest encryption is applied to sensitive personal data fields in our databases, including identity document copies and payment account details.
- Access controls. Done555 staff access to personal data is restricted on a strict need-to-know basis. Support team members can see the information necessary to handle your query; they cannot access full payment card numbers or CNIC document images unless specifically authorised for a compliance review.
- Regular security audits. done555 conducts periodic internal and third-party security assessments of its data handling systems. Vulnerabilities are assessed and resolved on a priority basis.
- Data breach response. In the unlikely event of a data breach affecting personal data, done555 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law. Notifications will be sent to the contact details registered on the affected accounts.
No internet-based platform can guarantee 100% security from all possible threats. done555's security measures significantly reduce risk, but players should also take personal responsibility for keeping login credentials secure, enabling two-factor authentication where available, and notifying support immediately if they suspect unauthorised access to their account.
Who done555 Shares Your Data With
done555 does not sell your personal data to any third party. We share personal data with external parties only where it is necessary to provide the platform's services or where we are legally required to do so. The categories of third parties who may receive your data are:
Payment processors. To process deposits and withdrawals in PKR, done555 shares the minimum necessary transaction data with payment partners including Easypaisa, JazzCash, NayaPay, SadaPay, and bank and card processing providers. These providers process data under their own privacy policies and are selected based on their security and compliance standards.
Identity verification providers. Where third-party KYC or age verification services are used to support done555's compliance obligations, relevant identity data is shared with those providers under strict data processing agreements. These providers are prohibited from using your data for any purpose beyond the verification task they are contracted to perform.
Technology and infrastructure providers. done555 uses third-party cloud hosting, analytics, and communications tools to operate the platform. These providers may process data on our behalf but are bound by data processing agreements that restrict how they handle personal information.
Regulatory and law enforcement authorities. done555 is obligated to share data with its licensing authority, financial intelligence units, and law enforcement agencies where required by law or where we suspect fraud, money laundering, or match-fixing activity. We do not require your consent to share data in these circumstances, and we are generally prohibited from informing you that such a disclosure has been made.
Responsible gaming partners. Where a player has been referred to an independent responsible gaming or counselling organisation at their own request, limited contact information may be shared with that organisation to facilitate the referral. This is done only with explicit player consent.
Cookies and Tracking Technologies
done555 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. A cookie is a small text file stored on your device by your browser. Below is a breakdown of the types of cookies done555 uses:
You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent done555 from functioning correctly. Blocking optional cookies will limit analytics and marketing measurement but will not affect your ability to play or withdraw.
Your Rights Over Your Personal Data
done555 respects your rights over your personal data. The following rights are available to all done555 account holders. To exercise any of them, contact us at support@done555.biz with your account details and a description of your request. We will respond within 30 days.
Right to Access
Request a copy of the personal data done555 holds about you. We will provide this in a readable format within 30 days of a verified request.
Right to Rectification
If any personal data done555 holds about you is inaccurate or out of date, you have the right to request that it be corrected. Minor updates can be made via your account settings directly.
Right to Erasure
Request deletion of your personal data. Note that done555 may be legally required to retain certain data (e.g. transaction records) for a defined period regardless of this request.
Right to Restriction
In certain circumstances you may request that done555 restrict processing of your data — for example while a dispute is under investigation — without deleting it entirely.
Right to Portability
Request your personal data in a structured, machine-readable format so you can transfer it to another service. Applies to data you have provided directly to done555.
Right to Object
Object to done555 processing your data for marketing purposes at any time. Also applies to processing based on legitimate interests where you have grounds relating to your particular situation.
Children's Privacy
done555 is strictly an 18+ platform. We do not knowingly collect, process, or store personal data belonging to anyone under the age of 18. Age verification checks are performed during registration and before processing withdrawals to enforce this restriction.
If done555 discovers that personal data has been collected from a person under 18 — whether through a false declaration at registration or any other means — that data will be deleted immediately, the account will be closed, and any funds deposited will be reviewed in line with our terms of service.
If you believe your child has registered an account on done555, contact us immediately at support@done555.biz with details of the account. We will investigate and take action within 24 hours of receiving a credible report.
Parents and guardians are encouraged to use parental control software to restrict access to gambling websites. done555 supports initiatives that help prevent underage access to online betting platforms, and we encourage anyone aware of underage access to contact us without hesitation.
Changes to This Privacy Policy
done555 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or the services we offer. The current version date is displayed at the top of this page and will be updated whenever material changes are made.
Where changes materially affect how done555 processes your personal data, we will notify you in advance via the email address or mobile number registered on your account, giving you at least 14 days' notice before the changes take effect. For minor clarifications that do not alter the substance of the policy, we will update the document without prior notification.
Continued use of done555 after any updated Privacy Policy takes effect constitutes acceptance of the updated terms. If you do not accept an updated policy, you may close your account by contacting support@done555.biz before the effective date.
Data Retention Periods
done555 retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law and our operating licence conditions. The following retention periods apply:
When data reaches the end of its retention period, done555 securely deletes or anonymises it. Anonymised aggregate data (with no identifying information) may be retained indefinitely for statistical analysis and platform improvement.
Contact done555 About Privacy
For any question, concern, or request relating to your personal data and how done555 handles it, you can reach our privacy and data team through the following channels:
- Email: support@done555.biz — mark your message "Privacy Request" in the subject line.
- Live chat: Available 24/7 from the done555 website — ask to be connected to the privacy team.
- Response time: done555 will acknowledge privacy requests within 48 hours and provide a substantive response within 30 days.
If you are unsatisfied with done555's response to a privacy concern, you have the right to escalate your complaint to the relevant data protection authority in the jurisdiction where done555 is licensed.
Stay Informed. This Privacy Policy works alongside done555's Terms and Conditions and Responsible Gaming page. Together these three documents explain your rights and obligations as a done555 player. Questions? Contact support@done555.biz anytime — our team is available 24/7.