done55game Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy ("Policy") explains how done55game ("we", "us", "our", "the Company") collects, processes, stores, transfers, and protects personal data provided by users ("you", "your") of the done55game platform at done55game.games and all associated services. This Policy applies to all users globally, including all Pakistan players who access done55game from Karachi, Lahore, Islamabad, Peshawar, Quetta, and every other location across the country.

done55game is committed to protecting the privacy of all platform users and processing personal data in a manner that is transparent, fair, and consistent with applicable data protection laws. By registering a done55game account, completing our done55game login process, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein.

This Policy should be read alongside done55game's Terms & Conditions and Responsible Gaming Policy, all of which are accessible on done55game.games.

2. Data Controller

For the purposes of applicable data protection legislation, done55game is the data controller responsible for personal data collected through the done55game platform. As data controller, done55game determines the purposes and means of processing your personal data as described in this Policy.

done55game has appointed a designated Data Protection contact who can be reached at [email protected] for all privacy-related enquiries, subject access requests, and data rights exercises. All correspondence should reference "Privacy / Data Protection" in the subject line.

3. Personal Data We Collect

3.1 Account Registration Data

When you create a done55game account, we collect:

• Full legal name
• Date of birth (for age verification — 18+ requirement)
• Pakistan mobile number (used as primary account identifier and for OTP delivery)
• Email address
• Password (stored in encrypted, irreversible hash format — never in plaintext)
• Country of residence (Pakistan)

3.2 Identity Verification (KYC) Data

To process PKR withdrawals and comply with anti-money-laundering regulations, done55game requires:

• CNIC (Computerised National Identity Card) number and scanned copy
• Selfie photograph for facial matching against CNIC
• Proof of payment method ownership (e.g., screenshot of Easypaisa or JazzCash account in your name)
• Source of funds declaration for high-value PKR transactions

3.3 Financial Transaction Data

done55game records all PKR financial transactions including:

• Deposit and withdrawal amounts, timestamps, and method identifiers
• Mobile wallet numbers (Easypaisa, JazzCash, Raast, SadaPay)
• Bank account details (masked IBAN, bank name — e.g., HBL, Meezan Bank, MCB Bank)
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)
• Transaction reference numbers

3.4 Gameplay Data

done55game records all gaming activity on your account including game sessions, bet amounts in PKR, game results, bonus activations, and wagering progress. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical & Device Data

When you access done55game, our servers automatically collect:

• IP address (used for geolocation, fraud detection, and login security monitoring)
• Browser type and version
• Device type, operating system, and screen resolution
• Mobile network operator (Jazz, Zong, Telenor, Ufone, or Warid)
• Session timestamps and duration
• Referral URL (the page from which you navigated to done55game)

3.6 Communications Data

done55game retains records of all communications between you and our support team — including WhatsApp messages, live chat transcripts, and email correspondence — for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

done55game collects personal data through the following channels:

• Directly from you: Information you provide during registration, KYC submission, payment processing, support interactions, and promotional sign-ups.
• Automatically: Technical and device data collected through cookies, server logs, and analytics tools when you access done55game.games.
• Third-party verification providers: Identity verification data cross-checked against NADRA records or equivalent services for Pakistan CNIC validation.
• Payment processors: Transaction confirmation data from Easypaisa, JazzCash, Raast, and banking partners to verify PKR deposits and withdrawal completions.
• Fraud prevention services: Risk signals and device fingerprints shared by fraud detection partners to protect your done55game account from unauthorised access.

5. Why We Use Your Personal Data

6. Legal Basis for Processing

done55game processes your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide you with done55game account services, including account management, PKR banking, and game access.
• Legal Obligation: Processing required to comply with applicable anti-money-laundering laws, age verification requirements, gambling licence conditions, and financial regulatory obligations.
• Legitimate Interests: Processing for fraud prevention, account security, platform analytics, and responsible gaming monitoring — where these interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional cookies, and any other activity where done55game has obtained your explicit, informed, and freely given consent. You may withdraw consent at any time.

7. Data Sharing & Third Parties

done55game does not sell or rent your personal data to any third party. We may share your data only in the following strictly defined circumstances:

• Payment Processors: PKR transaction data is shared with payment service providers (Easypaisa, JazzCash, Raast, banking partners, Visa, Mastercard) solely to execute your deposit and withdrawal instructions.
• Identity Verification Providers: CNIC and KYC data is shared with identity verification services for age and identity confirmation, in compliance with done55game's licence requirements.
• Game Software Providers: Anonymised gameplay data may be processed by game studios (Pragmatic Play, PG Soft, JILI, Evolution Gaming, etc.) to deliver game functionality. These providers do not receive personally identifiable information.
• Fraud Prevention & Security Partners: Device fingerprinting and risk signals are processed by security technology providers to protect done55game accounts from unauthorised access and fraudulent activity.
• Regulatory & Law Enforcement Authorities: done55game may disclose personal data to financial intelligence units, gambling regulators, or law enforcement agencies where required by applicable law or court order — without prior notice to you where permitted.
• Corporate Transfers: In the event of a merger, acquisition, or sale of substantially all assets of done55game, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8. International Data Transfers

done55game's platform infrastructure is hosted on servers located in multiple jurisdictions. As a result, your personal data may be transferred to and processed in countries outside of Pakistan. done55game ensures that any international transfer of personal data is subject to appropriate safeguards — including standard contractual clauses, binding corporate rules, or adequacy decisions recognised under applicable data protection frameworks.

Where personal data is transferred to game software providers or payment processors outside Pakistan, those providers are contractually bound to handle your data in accordance with standards consistent with this Privacy Policy and applicable data protection law.

9. Data Retention Periods

done55game retains personal data for the minimum periods necessary to fulfil the purposes for which it was collected:

On expiry of the applicable retention period, done55game will securely delete or anonymise your personal data so that it can no longer be linked to your identity.

10. Cookies & Tracking Technologies

10.1 What Cookies done55game Uses

done55game uses the following categories of cookies and tracking technologies:

• Strictly Necessary Cookies: Essential for the done55game login session to function, maintaining your authenticated session state and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences (language, PKR display format, game lobby view settings) so done55game can deliver a personalised experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how Pakistan players navigate done55game — which pages are visited most, where users drop off during registration, and which game categories are most popular. This data is used solely to improve platform performance.
• Security Cookies: Used for fraud detection and bot prevention, including session fingerprinting and CAPTCHA challenge management.

10.2 Cookie Consent

On your first visit to done55game.games, you will be presented with a cookie consent banner. Strictly necessary and security cookies are activated without requiring your consent as they are essential to platform operation. All other cookie categories require your explicit opt-in consent before activation. You can manage or withdraw your cookie consent at any time through the Cookie Settings link in the done55game footer.

11. Data Security

done55game implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS 1.3 / 256-bit SSL encryption on all data in transit between your device and done55game's servers
• AES-256 encryption of sensitive personal data stored in done55game's databases
• Bcrypt hashing with per-user salts for all done55game login passwords — passwords are never stored in recoverable form
• Multi-factor authentication options for done55game accounts (SMS OTP via Pakistan mobile networks)
• IP-based login anomaly detection with automatic account alerts
• Role-based access controls limiting done55game employee access to personal data on a strict need-to-know basis
• Regular penetration testing and third-party security audits
• Automated session timeouts after inactivity periods to protect accounts on shared Pakistan devices

Despite these measures, no data transmission or storage system is completely immune to breach. In the event of a confirmed data security incident materially affecting Pakistan player data, done55game will notify affected users within 72 hours of confirming the breach and provide clear guidance on the protective steps you should take immediately, including changing your done55game login password and enabling 2FA if not already active.

12. Your Data Rights

As a done55game user, you have the following rights over your personal data, exercisable at any time by contacting [email protected]:

• Right of Access: You may request a copy of all personal data done55game holds about you, along with information about how it is being processed. done55game will respond within 30 days.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held in your done55game account — such as a misspelled name, incorrect date of birth, or outdated Pakistan mobile number.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to done55game's legal retention obligations. Note that AML and financial regulatory requirements may obligate done55game to retain certain records for up to 7 years even after account closure.
• Right to Restriction of Processing: You may request that done55game restricts processing of your data while a rectification or objection request is being reviewed.
• Right to Data Portability: You may request your personal data in a structured, machine-readable format suitable for transfer to another service.
• Right to Object: You may object to processing of your data based on legitimate interests, including direct marketing communications. done55game will cease such processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where done55game processes your data based on consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

13. Children's Privacy — 18+ Strict Policy

done55game is strictly an adult platform for users aged 18 and above. done55game does not knowingly collect personal data from any individual under the age of 18. If done55game discovers that personal data has been collected from a person under 18, that data will be immediately and securely deleted and the associated account will be permanently closed.

If you are a parent or guardian in Pakistan and believe that a minor under your care has registered a done55game account or otherwise provided their personal data to done55game, please contact [email protected] immediately. done55game will investigate and take prompt action to remove the minor's data and close the account.

14. Marketing Communications

done55game may send marketing communications about promotions, bonus offers, new games, and platform news to Pakistan players who have explicitly opted in to receive such communications during registration or via their account settings. Marketing messages are delivered via email and SMS to your registered Pakistan mobile number.

You can unsubscribe from done55game marketing communications at any time by clicking the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by adjusting your communication preferences in your done55game account settings. Withdrawal of marketing consent does not affect your ability to use the done55game platform or receive transactional messages (such as deposit confirmations, OTP codes, and account security alerts).

15. Changes to This Privacy Policy

done55game reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. Material changes — those that materially affect your rights or how done55game uses your personal data — will be communicated to registered Pakistan players via email at least 14 days before taking effect.

The "Last Updated" date at the top of this Policy reflects when the most recent version took effect. done55game recommends reviewing this Policy periodically. Your continued use of done55game following the effective date of any update constitutes acceptance of the revised Policy.

16. Contact & Data Protection Enquiries

For all privacy-related enquiries, data rights requests, or concerns about how done55game handles your personal data, please contact done55game using the following details:

• Privacy / Data Protection Email: [email protected] (subject: "Privacy / Data Rights")
• General Support Email: [email protected]
• Website: done55game.games
• Live Chat: Available 24/7 on the done55game platform (requires login)
• Response Time: Privacy enquiries responded to within 5 business days; subject access requests within 30 days