done99 Privacy Policy

1 Introduction

done99 takes the privacy of its players seriously. As Pakistan's premier online casino and sports betting platform, we understand that the personal information you share with us is sensitive, and we are committed to handling it responsibly, lawfully, and transparently.

This Policy applies to all personal data collected by done99 in connection with your use of the Platform, whether you are a registered account holder, a visitor browsing the site, or a person who contacts done99 via live chat or email support.

This Policy should be read alongside the done99 Terms & Conditions and the done99 Responsible Gaming Policy, both of which form part of the overall agreement between you and done99.

2 Data Controller

For the purposes of applicable data protection law, done99 is the data controller in respect of all personal data processed under this Policy. done99 operates under an International Gaming License and is responsible for determining the purposes and means of processing your personal data.

If you have any questions about how done99 processes your data, or if you wish to exercise any of your data rights described in Section 12 of this Policy, you may contact done99 directly via live chat available 24/7 on the Platform, or by email at [email protected].

3 Personal Data We Collect

done99 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

4 How We Collect Your Data

done99 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting done99 support.
• Automated Collection: Technical data collected automatically when you access the done99 Platform, including IP address, browser type, device identifiers, and session activity logs. This data is collected via server logs and first-party cookies.
• Payment Processors: Confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers when you initiate a financial transaction on the Platform.
• Identity Verification Providers: Where done99 uses a licensed third-party KYC service to verify your identity documents, that provider may return verification results and associated data to done99.
• Fraud Prevention Systems: Data received from third-party fraud detection services used by done99 to protect the integrity of the Platform and its players.

5 How We Use Your Personal Data

done99 uses your personal data for the following purposes:

• Account Management: To create and maintain your done99 player account, authenticate your identity at login, and manage your account preferences.
• Service Delivery: To process bets, casino game rounds, deposits, and withdrawals, and to deliver the full range of done99 platform features to you.
• Identity & Age Verification: To verify that you are at least 21 years of age and to comply with our KYC obligations under our International Gaming License.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct on the Platform.
• Regulatory Compliance: To fulfill obligations imposed by our gaming license, anti-money laundering (AML) regulations, and other applicable legal requirements.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through live chat and email support channels.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the features, performance, and user experience of the done99 Platform.
• Responsible Gaming: To monitor gaming behaviour, apply player-requested limits, and identify indicators of problem gambling in accordance with our Responsible Gaming Policy.
• Marketing Communications: Where you have opted in to receive promotional communications from done99, to send you information about bonuses, promotions, and platform updates. You may opt out at any time.

6 Legal Basis for Processing

done99 processes your personal data on the following legal bases, depending on the purpose of processing:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your done99 account, process bets, and handle payments.
• Legal Obligation: Processing required to comply with AML laws, gaming license conditions, and other applicable regulatory requirements.
• Legitimate Interests: Processing carried out for done99's legitimate interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where done99 relies on your consent — for example, for optional marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Sharing Your Personal Data

done99 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment processors require transaction data to process your deposits and withdrawals.
• Identity Verification Services: Licensed KYC and age verification providers used to confirm your identity and age prior to withdrawal processing.
• Fraud Prevention & AML Providers: Third-party services used to detect suspicious activity, screen against sanctions lists, and assist done99 in meeting its AML obligations.
• Game Software Providers: Casino game and sportsbook software providers may receive limited session and game data necessary to deliver their games on the done99 Platform.
• Regulatory & Law Enforcement Authorities: Where required by law, court order, or gaming license condition, done99 may disclose personal data to relevant authorities. done99 will not disclose more data than is strictly required by such obligations.
• Professional Advisors: Lawyers, auditors, and accountants engaged by done99, subject to confidentiality obligations.

8 Payment Data & Financial Information

done99 handles payment-related data with particular care. When you make a deposit or request a withdrawal via JazzCash, EasyPaisa, or bank transfer, done99 receives confirmation and reference data from the payment provider sufficient to record and reconcile the transaction.

done99 does not store full payment account credentials (such as complete bank account numbers or mobile wallet PINs) on its servers. Payment authentication is handled directly by the respective payment service provider through their own secure systems.

9 Cookies & Tracking Technologies

done99 uses cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your logged-in session and remembering your language and currency preferences. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to understand how players navigate the Platform, which pages are most visited, and how the Platform performs across different devices. This data is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious device behaviour.

done99 does not use third-party advertising or retargeting cookies that would track your activity across other websites. You may manage cookie preferences through your browser settings, noting that disabling essential cookies will affect your ability to use the Platform.

10 Data Retention

done99 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following:

• Active Accounts: Personal data associated with an active done99 account is retained for the duration of the account relationship.
• Closed Accounts: Following account closure, done99 retains personal data for a minimum period required by applicable gaming license conditions and AML regulations, typically five (5) years from the date of closure.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to comply with anti-money laundering obligations.
• Support Communications: Live chat transcripts and support emails are retained for up to two (2) years following the date of the communication.

Following the expiry of the applicable retention period, done99 will securely delete or anonymize your personal data.

11 Data Security

done99 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the done99 Platform.
• Encryption of sensitive data at rest within done99's secure database infrastructure.
• Access controls limiting done99 staff access to personal data on a strict need-to-know basis.
• Regular security audits and vulnerability assessments of the Platform and supporting infrastructure.
• Two-factor authentication options available to players for additional account security.

12 Your Data Rights

Subject to applicable law, you have the following rights in respect of the personal data done99 holds about you:

• Right of Access: You may request a copy of the personal data done99 holds about you, along with information about how it is being used.
• Right to Rectification: You may request that done99 correct any inaccurate or incomplete personal data held about you.
• Right to Erasure: In certain circumstances, you may request that done99 delete your personal data. Note that this right is subject to done99's legal and regulatory retention obligations — in particular, AML and gaming license requirements may prevent full deletion.
• Right to Restriction: You may request that done99 restrict the processing of your personal data in certain circumstances, for example while a rectification request is being assessed.
• Right to Object: Where done99 processes your data on the basis of legitimate interests, you have the right to object to that processing. done99 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent (for example, marketing communications), you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact done99 via live chat on the Platform or by email at [email protected]. done99 will respond to all data rights requests within thirty (30) days of receipt. done99 may require you to verify your identity before processing a data rights request.

13 Minors

The done99 Platform is strictly intended for individuals aged 21 years and above. done99 does not knowingly collect personal data from persons under the age of 21. If done99 becomes aware that personal data has been collected from an individual under 21, that account will be immediately closed, all associated data will be deleted in accordance with applicable law, and the matter may be reported to the relevant authority.

If you believe that a minor may have registered an account on done99, please contact done99 support immediately via live chat or at [email protected].

14 International Data Transfers

done99 may transfer personal data to, and store personal data on, servers or systems located outside Pakistan. Where such transfers occur, done99 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with the receiving party that impose obligations equivalent to those applicable to done99 under this Policy.

Transfers of personal data to third-party payment processors such as JazzCash and EasyPaisa are governed by the data protection and privacy policies of those providers, in addition to the contractual obligations done99 imposes on all data processors.

15 Amendments to This Policy

done99 reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. Where changes are material, done99 will make reasonable efforts to notify registered players by email or by displaying a notice on the Platform.

Your continued use of the done99 Platform following the posting of a revised Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you must cease using the Platform and request account closure.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or done99's handling of your personal data, please contact us through either of the following channels:

• Live Chat: Available 24/7 directly on the done99 Platform — the fastest way to reach our support team.
• Email: [email protected] — we aim to respond to all privacy-related enquiries within one business day.