Privacy Policy – Done999 Pakistan Gaming Platform

1. Overview

Done999 takes the privacy of its players seriously. This platform is designed for adults in Pakistan who enjoy sports betting, live casino, slots, and other gaming activity. As part of operating a responsible gaming platform, done999 collects certain personal data from users — but only the data that is genuinely needed to run the service safely and fairly.

This policy sets out, in plain language, what data done999 collects when you register, deposit, play, or contact support. It also explains how that data is used, who it may be shared with in limited circumstances, how long it is retained, and what rights you have over your own information.

Done999 does not sell personal data. Done999 does not share your data with advertisers or marketing networks. The information collected is used for the purpose of operating the platform, verifying accounts, processing transactions, and maintaining platform security — nothing more.

2. Data We Collect

Done999 collects data in three main ways: directly from you when you register or interact with the platform, automatically through platform usage, and from third-party payment providers when you make a deposit or withdrawal.

Information you provide directly:

• Full name, date of birth, and email address provided at registration.
• Identity verification documents submitted to confirm your age and identity — for example, a CNIC or similar government-issued ID.
• Mobile number if provided for account security or two-factor authentication purposes.
• Communications you send to done999 support, including the content of those messages and any attachments.

Information collected automatically:

• IP address and approximate geographic location at the time of login or platform activity.
• Device type, operating system, and browser version used to access the platform.
• Session data including login timestamps, pages visited, games played, bets placed, and session duration.
• Cookies and similar tracking technologies — see the Cookies section below for full detail.

Information from payment processors:

• Transaction references and confirmation codes from JazzCash, Easypaisa, Raast, and bank transfer networks.
• Partial payment account details sufficient to verify the source of deposits and process withdrawals to the correct destination.

3. How We Use Your Data

The personal data done999 collects is used for specific, clearly defined purposes. The table below summarises the primary uses:

Done999 does not use your data to serve third-party advertisements, build marketing profiles, or sell data to external parties. Any analytics done999 performs on user activity is either aggregated (not linked to you personally) or used solely to improve the platform experience for all players.

4. Legal Basis for Processing

Done999 processes your personal data on the following legal bases:

• Contract performance — Processing your registration details, deposits, withdrawals, and bet transactions is necessary to fulfil the service agreement between you and done999.
• Legitimate interests — Done999 has a legitimate interest in maintaining platform security, detecting and preventing fraud, and improving the service for all users. This processing does not override your privacy rights.
• Legal obligation — Certain data, including identity verification records and transaction history, may need to be retained or disclosed to comply with applicable legal obligations related to financial crime prevention.
• Consent — Where done999 sends you optional communications such as promotional updates or bonus notifications, this is done only with your consent. You can withdraw consent at any time through your account settings.

5. Data Sharing

Done999 does not sell, rent, or trade your personal data. There are limited circumstances in which your data may be shared with third parties, all of which are described clearly below:

• Payment processors — JazzCash, Easypaisa, Raast, and bank transfer services receive the minimum data necessary to process your transactions. Each of these services operates under its own privacy and security standards.
• Identity verification services — Done999 may use a third-party verification provider to confirm your identity and age. These providers handle document data securely and do not retain it beyond the verification process.
• Platform technology providers — Done999 uses third-party infrastructure services (such as hosting, content delivery, and game providers) that may process limited technical data as part of delivering the platform. These providers are contractually bound to handle data securely and only for the purpose of providing the service.
• Legal and regulatory authorities — Done999 may disclose personal data if required to do so by law, court order, or in connection with an investigation into financial crime, fraud, or other serious matter. Done999 will not disclose more than is required in such situations.

6. Payment Data and Transaction Records

All deposits and withdrawals on done999 are conducted in PKR. The platform supports JazzCash, Easypaisa, Raast, bank transfer, and mobile wallet payments. When you make a transaction, done999 records the following for operational and security purposes:

• Transaction type (deposit or withdrawal), amount in PKR, and timestamp.
• Payment method used — for example, JazzCash mobile number or bank reference.
• Transaction status and confirmation reference number from the payment network.

This transaction data is retained as part of your account history and is used to resolve any payment disputes, process future withdrawal requests to the correct account, and maintain a complete financial record associated with your done999 account. Done999 does not store sensitive payment credentials such as full mobile wallet PINs, complete bank account numbers, or card CVV codes.

If you raise a payment dispute, the support team may request transaction reference numbers from your payment provider to cross-verify the records on done999's end. This is a standard verification step and does not involve sharing your full payment account details with any third party.

7. Cookies and Tracking Technologies

Done999 uses cookies and similar technologies to operate the platform effectively and provide a consistent experience across sessions. Cookies are small text files stored on your device when you visit the platform. Done999 uses the following types of cookies:

• Essential cookies — Required for the platform to function. These handle session management, login state, and security tokens. Without these, the platform cannot operate correctly.
• Functional cookies — Remember your preferences such as language settings, previously selected games, and responsible gaming limits you have set within your account.
• Analytics cookies — Collect anonymised data about how players navigate the platform. This helps done999 understand which areas of the site are working well and where improvements are needed. No personally identifiable data is included in analytics reports.
• Security cookies — Help detect suspicious login activity, unusual device changes, and potential account takeover attempts.

Done999 does not use third-party advertising or retargeting cookies. You will not see done999-related advertisements following you around other websites as a result of visiting this platform.

Most browsers allow you to manage or delete cookies through your browser settings. Be aware that disabling essential cookies will affect your ability to log in and use the platform normally.

8. Data Retention

Done999 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below reflect the purposes for which each data type is held:

• Account registration data — Retained for the lifetime of your account and for a period of up to five years after account closure, primarily to support any post-closure disputes or legal enquiries.
• Transaction records — Retained for a minimum of five years from the date of each transaction, consistent with standard financial record-keeping practices.
• Identity verification documents — Retained for the period required to meet the purpose of verification and for the applicable legal retention period thereafter. Copies are securely deleted once retention obligations are met.
• Support communications — Retained for up to three years from the date of the communication, allowing done999 to reference prior interactions in the event of related future queries.
• Session and gameplay data — Aggregated or anonymised after 12 months and retained in non-identifiable form for platform analytics purposes.

When data is no longer required for any of the above purposes, done999 deletes or anonymises it securely. You may request early deletion of certain data — see the Your Rights section below.

9. Security Measures

Done999 applies a range of technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:

• TLS encryption on all data transmitted between your browser or device and the done999 platform.
• Password hashing using modern cryptographic algorithms — done999 staff cannot read your password.
• Access controls ensuring that only authorised personnel can access personal data, and only to the extent needed for their specific role.
• Regular security reviews of the platform, including monitoring for unusual login patterns and automated threat detection.
• Secure, encrypted storage for identity verification documents with strict access logging.

No digital platform can guarantee absolute security — this is true of every online service. However, done999 treats data security as an ongoing priority and responds promptly to any identified vulnerability. If done999 becomes aware of a breach that is likely to affect your personal data, you will be notified in a timely manner through your registered contact details.

10. Your Privacy Rights

As a registered user of done999, you have the following rights over your personal data. To exercise any of these rights, contact done999 support using the email address at the bottom of this page.

• Right to access — You can request a copy of the personal data done999 holds about you. Done999 will respond within a reasonable timeframe and provide the information in a clear, readable format.
• Right to correction — If any of the personal data done999 holds about you is inaccurate or incomplete, you can request that it be corrected. You can also update basic account details directly through your account settings.
• Right to deletion — You can request that done999 delete your personal data. This right is subject to done999's legal obligations to retain certain data for defined periods — in such cases, done999 will explain what it is required to retain and why.
• Right to restrict processing — In certain circumstances, you can ask done999 to restrict how your data is used while a dispute or complaint is being resolved.
• Right to withdraw consent — Where processing is based on your consent (such as optional marketing communications), you can withdraw that consent at any time without affecting the legality of prior processing.
• Right to data portability — You can request that done999 provide your personal data in a structured, commonly used format so that you can transfer it to another service if you choose.

Done999 will not charge a fee for handling privacy rights requests in ordinary circumstances. If a request is unusually complex or repetitive, done999 may explain any applicable constraints. All requests are handled in good faith and with respect for your rights as a user.

11. Minors and Age Restrictions

Done999 is strictly an adult platform. Persons under the age of 18 are not permitted to register, access, or use any part of the done999 platform. Done999 does not knowingly collect personal data from anyone under 18 years of age.

As part of the registration and verification process, done999 collects date of birth and may request identity documentation to confirm that a user meets the minimum age requirement. If done999 discovers that an account has been registered by someone under 18, the account will be immediately closed, all funds will be returned where possible, and any data collected will be deleted in accordance with this policy.

12. Updates to This Privacy Policy

Done999 may update this Privacy Policy from time to time as the platform evolves, payment methods change, or operational practices are revised. When updates are made, the "Last Updated" date at the top of the page will reflect the revision date.

For significant changes that affect how your data is used or the rights available to you, done999 will make reasonable efforts to notify registered users through in-platform messages or email to the address registered on your account. However, it is good practice to review this policy periodically so you are always aware of the current terms.

Continued use of the done999 platform after a policy update has been published constitutes acceptance of the revised policy. If you do not agree with a material change, you should stop using the platform and request account closure so that your data can be handled appropriately.

13. Contact and Privacy Enquiries

If you have any questions about this Privacy Policy, want to exercise your privacy rights, or need to report a privacy concern related to your done999 account, you can reach the done999 support team at any time.

Done999 support is available around the clock and aims to respond to privacy-related enquiries promptly. When submitting a privacy request, please include your registered username and a brief description of your request so that the team can locate your account and assist efficiently.

Contact done999 support at: [email protected]

You can also find answers to common questions about account management, data access, and responsible gaming tools on the FAQ page. For details on how done999 approaches responsible gaming, visit the Responsible Gaming page.