done22 Privacy Policy — Your Data, Your Rights

done22 ("the Platform", "we", "us") is committed to protecting the privacy of everyone who uses our online gaming and sports betting platform. This Privacy Policy explains in plain, straightforward language what personal information we collect from players in Pakistan, why we collect it, how we use it and who — if anyone — we share it with.

This policy applies to all interactions with done22, including use of the website, the done22 App, customer support communications, and all transactions processed through the platform. Whether you are depositing via JazzCash, placing a cricket bet on a PSL match, or simply browsing the platform, this policy covers how your data is handled throughout.

We keep this policy as straightforward as possible because we believe you deserve to know exactly what is happening with your information — without wading through pages of confusing legal language.

1 . What We Collect

When you register and use done22, we collect the following categories of personal information:

Registration Information: When you create an account, we collect your full name, date of birth, email address, mobile number and a username and password of your choosing. This information is required to create and manage your account securely.

Identity Verification Documents: To comply with our age verification and account security requirements, we may request a copy of your National Identity Card (CNIC) or other government-issued identification. These documents are used solely to verify your identity and are stored securely.

Financial Information: We collect records of deposits and withdrawals made through your done22 account, including transaction amounts in PKR, payment method used (such as JazzCash, Easypaisa, Raast, Bank Transfer or mobile wallets) and transaction timestamps. We do not store your full payment credentials — those are handled by the respective payment providers.

Gaming Activity: We maintain records of your betting and gaming activity on done22, including bets placed, games played, amounts wagered, bonuses claimed and outcomes. This data is used for account management, dispute resolution and responsible gaming monitoring.

Technical Data: When you access done22, we automatically collect certain technical information including your IP address, device type, browser type, operating system and session data. This helps us maintain platform security and optimise performance across different devices.

Communications: If you contact done22 support, we retain records of those communications — including messages, emails or chat logs — to help resolve your queries and improve our service.

2. How We Use Your Data

done22 uses the personal data we collect only for legitimate, clearly defined purposes. We do not use your data for anything beyond what is described here without obtaining your prior consent.

• Account Management: To create, maintain and secure your done22 account, process your login sessions and ensure only you can access your account.
• Payment Processing: To facilitate PKR deposits and withdrawals through your chosen payment method, verify transaction details and maintain accurate financial records for your account.
• Identity Verification: To confirm you meet the 18+ age requirement and to verify your identity before processing large withdrawals or as part of our standard security process.
• Customer Support: To respond to your queries, resolve disputes and provide assistance when you contact the done22 support team.
• Platform Improvement: To analyse how players use done22 — including which sports, casino games and features are most popular — so we can continue improving the platform experience for all users in Pakistan.
• Fraud Prevention and Security: To detect unusual account activity, prevent unauthorised access, identify potential bonus abuse and protect the integrity of the done22 platform for all players.
• Responsible Gaming: To monitor gaming activity and identify patterns that may suggest a player is experiencing difficulty managing their gaming. This allows us to proactively offer responsible gaming support tools and information.
• Communications: To send you important account-related notifications, including deposit confirmations, withdrawal updates, security alerts and — where you have opted in — information about relevant promotions and offers.

3. Sharing and Disclosure

done22 does not sell your personal data. We share your information only in the limited circumstances described below, and only to the extent necessary for each specific purpose.

• Payment Processors: When you make a deposit or withdrawal using JazzCash, Easypaisa, Raast, Bank Transfer or any supported mobile wallet, we share the minimum necessary transaction data with those payment providers to process your transaction. Each provider operates under their own privacy and security policies.
• Identity Verification Services: Where we use a third-party service to assist with CNIC or identity document verification, your submitted documents are shared with that service solely for verification purposes. Verification providers are contractually required to handle your data securely and to use it only for the stated purpose.
• Technology Service Providers: done22 works with carefully selected technology partners — including hosting, security and analytics providers — who may process certain technical data on our behalf. These partners are bound by strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal and Regulatory Requirements: If done22 is required by applicable law or a valid legal process to disclose certain player information, we will comply with that requirement. Where legally permissible, we will notify the affected player before disclosing their data.
• Protection of done22 and Players: In cases of suspected fraud, bonus abuse, money laundering or other serious misconduct, done22 may share relevant account information with relevant investigative bodies or legal counsel to protect the platform and its players.

In all cases, done22 takes reasonable steps to ensure that any third party receiving personal data is obligated to handle it with the same level of care and security that we apply ourselves.

4. Cookies and Tracking Technologies

done22 uses cookies and similar technologies to make the platform work properly and to improve your experience. A cookie is a small text file that is placed on your device when you visit done22. Here is how we use them:

• Essential Cookies: These are required for the platform to function. They keep you logged in during your session, remember your language and region preferences and maintain the security of your session. Without these cookies, done22 cannot work properly.
• Performance Cookies: These help us understand how players navigate done22 — for example, which pages are visited most, how long sessions last and where players encounter issues. This data is used in aggregate form to improve platform performance and is not tied to your individual identity.
• Functionality Cookies: These remember choices you make on done22 — such as your preferred deposit method or display settings — so you do not have to re-enter them every time you visit.

done22 does not use advertising or cross-site tracking cookies. We do not allow third-party advertisers to place cookies on the done22 platform.

5. Data Security

done22 takes the security of your personal data seriously and implements a range of technical and organisational measures to protect it. These include:

• Encryption of data in transit using industry-standard TLS protocols, so information exchanged between your device and done22 is protected.
• Encrypted storage of sensitive account data and identity documents on secure servers.
• Strict access controls ensuring that only authorised done22 staff with a legitimate operational need can access player personal data.
• Regular security assessments and monitoring to detect and respond to potential threats promptly.
• Secure payment processing — your full payment credentials (such as JazzCash PIN or bank account details) are never stored on done22 servers.

While done22 takes all reasonable steps to protect your data, no online platform can guarantee absolute security against all possible threats. Players are encouraged to use a strong, unique password for their done22 account and to keep their login credentials confidential. If you suspect your account has been compromised, contact done22 support immediately.

6. Data Retention

done22 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal obligations. In practical terms, this means:

• Active Accounts: While your done22 account is active, we retain all associated personal data, gaming records and financial history as needed to provide the service and manage your account.
• Closed Accounts: After account closure — whether at your request or due to a breach of our Terms and Conditions — we retain certain data for a period of time as required to comply with legal obligations, resolve disputes and prevent fraud. Financial transaction records may be retained for a longer period in line with standard financial record-keeping practices.
• Identity Documents: Copies of identity documents submitted for verification are retained for the period required to satisfy our verification obligations. After the retention period expires, these documents are securely deleted.
• Support Records: Communications with done22 support are retained for a reasonable period to assist with follow-up queries and to improve service quality, after which they are deleted.

When data is no longer required, done22 ensures it is securely deleted or anonymised so that it can no longer be linked to an individual player.

7. Your Privacy Rights

As a done22 player, you have the following rights regarding your personal data. You can exercise any of these rights by contacting done22 support:

To exercise any of the above rights, please contact done22 support. We will respond to all valid requests within a reasonable timeframe. Identity verification may be required before we can action a request, to ensure we are dealing with the rightful account holder.

8. Changes to This Privacy Policy

done22 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable requirements. When we make material changes, we will notify players via a notice on the platform and, where appropriate, by email to the address registered on your account.

The date at the top of this page shows when the policy was last updated. We encourage you to review this page periodically so you are always aware of how your information is being handled. Your continued use of done22 after any update to this policy constitutes your acceptance of the revised terms.