done99 Privacy Policy

Introduction & Data Controller

This Privacy Policy ("Policy") describes how done99 ("done99", "we", "us", or "our") collects, uses, stores, shares, and protects the personal data of users ("you" or "Player") who access or register on the done99 platform at done99.club and any associated mobile interfaces.

done99 is the data controller responsible for your personal data collected through this platform. By registering an account or using any done99 service, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

If you have any queries about this Policy or wish to exercise any of your data rights, you may contact done99's data management team at [email protected].

Personal Data We Collect

done99 collects the following categories of personal data from registered users and platform visitors:

• Identity Data: Full name, date of birth, CNIC number, and CNIC image (collected during KYC verification).
• Contact Data: Mobile phone number, email address, and city of residence.
• Account Data: Username, encrypted password, account registration date, and account status.
• Financial Data: Deposit and withdrawal history, transaction amounts, and payment channel identifiers (e.g., JazzCash mobile number or bank account reference). done99 does not store full bank account numbers or complete Easypaisa credentials.
• Transactional Data: Bet history, game activity records, bonus usage, and wagering performance data.
• Technical Data: IP address, browser type, device type, operating system, session timestamps, and login location data.
• Communications Data: Records of your interactions with done99 support, including live chat transcripts and email correspondence.
• Usage Data: Pages visited on done99, features accessed, and navigation behaviour within the platform.

How We Collect Your Data

done99 collects your personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, or contacting done99 support.
• Automated Collection: Technical data collected automatically when you access done99, including IP address, device identifiers, and session data via server logs and cookies.
• Payment Processors: Transaction reference data received from JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other approved payment channels when you make deposits or request withdrawals.
• Third-Party Game Providers: Game session data and RNG audit logs provided by licensed game studios whose products are accessible via done99.

How We Use Your Data

done99 uses your personal data for the following purposes:

• Account Management: To create, maintain, and operate your done99 account, including processing deposits, withdrawals, and bonus credits.
• Identity Verification: To verify your age (18+) and identity in compliance with our KYC obligations, and to prevent under-age access to the platform.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and other prohibited conduct on done99.
• Customer Support: To respond to your support queries, resolve account issues, and improve the quality of our support service.
• Responsible Gaming: To monitor gambling behaviour patterns that may indicate problem gambling, and to facilitate the use of responsible gaming tools including deposit limits and self-exclusion.
• Service Improvement: To analyse usage data and improve the done99 platform, including game selection, interface design, and payment channel performance.
• Communications: To send you account-related notifications including transaction confirmations, security alerts, and, where you have opted in, promotional communications about done99 offers.
• Legal Compliance: To fulfil done99's obligations under applicable anti-money laundering, counter-terrorism financing, and data protection regulations.

done99 does not use your personal data for automated profiling that produces legal or similarly significant effects without human oversight.

Legal Basis for Processing

done99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the account agreement between you and done99, including operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required to comply with KYC, anti-money laundering, and age verification obligations under applicable law.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where done99's legitimate interests do not override your rights.
• Consent: Processing for optional marketing communications, where you have provided explicit opt-in consent. You may withdraw this consent at any time by contacting [email protected].

Data Sharing & Third Parties

done99 does not sell, rent, or trade your personal data to third parties for marketing purposes. done99 may share your personal data with third parties in the following limited circumstances:

• Payment Processors: Transaction reference data shared with JazzCash, Easypaisa, and banking partners solely to process deposits and withdrawals.
• Game Providers: Anonymised session data shared with licensed game studios for RNG auditing and dispute resolution purposes.
• KYC & Identity Verification Services: CNIC data may be shared with third-party identity verification providers to fulfil age and identity verification obligations.
• Legal Authorities: done99 will disclose personal data to law enforcement, regulatory authorities, or courts where required to do so by applicable law or valid legal process.
• Fraud Prevention Networks: Transaction and behavioural data may be shared with industry fraud prevention databases to protect all platform users.

All third parties with whom done99 shares personal data are contractually required to maintain appropriate data security standards and to use the data only for the specified purpose.

Data Retention

done99 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law or legitimate business need:

• Active Accounts: Personal and transactional data is retained for the duration of your account relationship with done99.
• Closed Accounts: Following account closure, done99 retains identity and transaction records for a minimum of five (5) years to comply with anti-money laundering record-keeping obligations.
• Marketing Data: Opt-in marketing preferences are retained until you withdraw consent. Following withdrawal, marketing communications cease immediately.
• Support Records: Customer support communications are retained for two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, done99 securely destroys or anonymises personal data in accordance with its internal data management procedures.

Data Security

done99 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration:

• All data transmitted between your device and done99's servers is encrypted using SSL/TLS protocols.
• Account passwords are stored in hashed form. done99 employees do not have access to your plaintext password at any time.
• Access to production databases containing personal data is restricted to authorised personnel on a strictly need-to-know basis.
• done99's infrastructure undergoes regular security assessments and penetration testing by independent security professionals.
• Two-factor authentication is available for all done99 accounts and is strongly recommended for additional account security.

While done99 takes every reasonable measure to protect your data, no internet transmission is completely immune from risk. In the event of a data breach that affects your personal data, done99 will notify affected users in accordance with applicable data breach notification obligations.

Cookies & Tracking Technologies

done99 uses cookies and similar tracking technologies to operate the platform and enhance your experience. The categories of cookies used on done99 are as follows:

• Essential Cookies: Required for the platform to function, including session management, authentication, and security features. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Store your platform preferences such as language settings, preferred game lobby view, and remembered login details (where you have enabled the "Remember Me" option).
• Analytics Cookies: Collect anonymised data about how users navigate the done99 platform, used to identify areas for improvement. No personally identifiable information is included in analytics data.

Most browsers allow you to manage or disable cookies through browser settings. Disabling essential cookies may affect your ability to use certain features of done99. done99 does not use third-party advertising cookies or retargeting pixels.

Your Rights

As a done99 account holder, you have the following rights with respect to your personal data:

• Right of Access: You may request a copy of the personal data done99 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to Erasure: You may request deletion of your personal data subject to done99's legal retention obligations. Requests for erasure will be assessed on a case-by-case basis; data required for AML compliance cannot be deleted prior to the expiry of the mandatory retention period.
• Right to Restriction: You may request that done99 restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time by contacting [email protected].

To exercise any of the above rights, submit a written request to [email protected]. done99 will respond within 30 days of receiving a verified request.

Children's Privacy

done99 is strictly an adult platform intended for users aged 18 and above. done99 does not knowingly collect personal data from persons under the age of 18. If done99 becomes aware that personal data has been collected from a minor, the account will be immediately suspended and the data deleted in accordance with applicable law.

Parents and guardians who believe that a minor may have registered on done99 are encouraged to contact [email protected] immediately. done99 takes under-age access extremely seriously and has implemented age verification procedures to prevent it.

Changes to This Policy

done99 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The date of the most recent revision is displayed at the top of this page.

Material changes to this Policy will be communicated to registered users via email or via a prominent notice on the done99 platform. Continued use of done99 following notification of any amendment constitutes your acceptance of the revised Policy.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the done99 data management team through the following channels:

• Email: [email protected] — responses within 4 hours.
• Live Chat: Available 24/7 directly on the done99 platform. Typical first response: under 5 minutes.

done99 support operates in English around the clock, including Pakistani public holidays and during major sporting events such as PSL season.