done222 Privacy Policy

1. Introduction

done222 ("we", "our", "us", or "the Platform") is committed to protecting the privacy and personal information of all users who access and use done222.app (the "Site"). This Privacy Policy describes in detail how done222 collects, processes, stores, shares, and protects the personal data of registered members and visitors, with particular regard to players based in Pakistan.

By creating an account on done222, depositing funds, placing bets, or simply browsing the Site, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree, you should not use the Platform.

done222 operates in accordance with applicable international data protection frameworks and the privacy obligations set by our gaming licensing authority. This policy covers all services available on done222, including cricket betting, live casino tables, online slots, the Queen of Bounty game, and the done222 Rewards programme.

2. Information We Collect

done222 collects personal data through several means. The categories of information we may collect include:

2.1 Registration & Account Data

• Full legal name as it appears on your CNIC or passport
• Date of birth (used to verify you are 21 years of age or older)
• Email address and mobile number (used for account security, OTP, and communications)
• Residential address in Pakistan (e.g., Karachi, Lahore, Islamabad, Faisalabad)
• Username and encrypted account password

2.2 Know Your Customer (KYC) & Verification Documents

• Copy of CNIC (Computerised National Identity Card) or valid passport
• Proof of address (utility bill, bank statement dated within 3 months)
• Selfie or live verification photograph where required

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records in PKR
• Payment method identifiers (JazzCash account, EasyPaisa number, bank account details for HBL, UBL, or Meezan Bank)
• Transaction timestamps, amounts, and reference numbers

2.4 Gaming & Betting Activity

• Bet history, wager amounts, and game session logs
• PSL and international cricket betting history
• Slot game play records, bonus utilisation, and reward redemption data
• Responsible gaming settings and self-imposed limits

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session duration, pages visited, and click behaviour on done222.app
• Referral source (if you arrived via an affiliate link)

2.6 Communications Data

• Support ticket correspondence and live chat transcripts with done222 customer service
• Email and SMS communication history
• Feedback and survey responses you voluntarily submit

3. How We Use Your Data

done222 processes your personal data only for legitimate purposes. Specifically, we use your information to:

• Operate your account — authenticate logins, process PKR deposits and withdrawals, and provide full access to all done222 features
• Comply with legal and regulatory obligations — including AML (Anti-Money Laundering), responsible gaming requirements, and KYC verification mandated by our international gaming licence
• Prevent fraud and ensure platform security — detect unusual activity, prevent account takeovers, and protect the integrity of betting markets
• Personalise your experience — recommend relevant games (cricket betting, slots, done222 Casino live tables) and tailor bonus offers through the done222 Rewards programme, subject to your preferences
• Communicate with you — send account notifications, security alerts, and (where you have opted in) promotional offers via email or SMS
• Improve our services — analyse aggregated usage data to enhance platform performance, fix bugs, and develop new features
• Resolve disputes — maintain records necessary to investigate and resolve complaints or disputes related to your done222 account

done222 does not use automated decision-making processes that would produce significant legal effects on users without human review. Responsible gaming interventions are always reviewed by our team before escalation.

4. Sharing Your Information

done222 does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

4.1 Service Providers & Processors

We engage trusted third-party processors — including payment gateway providers for JazzCash, EasyPaisa, and Pakistani bank integrations; KYC verification platforms; cloud hosting services; and analytics tools — who access your data solely to perform services on our behalf under binding data processing agreements.

4.2 Regulatory & Legal Authorities

done222 may be required to disclose personal data to competent regulatory, law enforcement, or judicial authorities when required by applicable law, court order, or regulatory instruction. We will notify you of such disclosures where legally permitted to do so.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of done222's business assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. We will inform you via email or a prominent notice on done222.app before your data becomes subject to a different privacy policy.

4.4 Affiliates

Where you registered via an affiliate partner, we may share limited confirmation data (such as registration status) with that affiliate for commission purposes only. No sensitive financial or KYC data is shared with affiliates.

5. Cookies & Tracking Technologies

done222 uses cookies and similar tracking technologies to enhance your browsing experience, maintain your session state, and gather analytical insights.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for done222 to function. These enable login sessions, deposit flows, and security features. You cannot opt out of these without affecting platform functionality.
• Analytics Cookies: Help us understand how players use done222.app — which games are most popular, where players drop off, and how performance can be improved. Data is aggregated and anonymised.
• Preference Cookies: Remember your settings, language preferences, and display options so you don't have to reconfigure them each visit.
• Marketing Cookies: Used to serve relevant promotional content to you, subject to your opt-in consent. You can manage these through your account settings or browser controls.

5.2 Managing Cookies

You can control non-essential cookies through your browser settings or the cookie preference centre available on done222.app. Disabling analytics or marketing cookies will not prevent you from using the platform.

6. Your Rights

As a done222 player, you have the following rights with respect to your personal data:

• Right of Access: Request a copy of all personal data done222 holds about you.
• Right to Rectification: Ask us to correct any inaccurate or outdated personal information in your account.
• Right to Erasure: Request deletion of your account and associated data, subject to our legal retention obligations (e.g., AML record-keeping).
• Right to Restriction: Ask done222 to restrict processing of your data in certain circumstances while a dispute or complaint is being resolved.
• Right to Data Portability: Receive your personal data in a commonly used, machine-readable format where technically feasible.
• Right to Object: Object to processing of your data for marketing or profiling purposes at any time.
• Right to Withdraw Consent: Where processing is based on consent (e.g., promotional communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact done222's support team at [email protected]. We will respond within 30 days. Complex requests may take up to 60 days; we will notify you if an extension is required.

7. Data Retention

done222 retains personal data for as long as necessary to fulfil the purposes described in this policy or as required by applicable law:

• Active Account Data: Retained for the duration of your account and for 5 years following account closure, in line with AML and gaming licence record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of verification as required by anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of 5 years to comply with financial reporting obligations.
• Support Communications: Retained for 2 years following resolution of the relevant support case.
• Marketing Consent Records: Retained for 3 years from the date consent was given or withdrawn.
• Technical Logs: Retained for 12 months in an identifiable form, then anonymised for aggregate analysis.

After the applicable retention period, your data is securely deleted or fully anonymised so that it can no longer be linked to your identity.

8. Security Measures

done222 takes the security of your personal data seriously and implements a range of technical and organisational measures, including:

• Transport Layer Security (TLS 1.2+) for all data transmitted between your device and done222.app
• At-rest encryption for sensitive data fields including KYC documents and payment identifiers
• Role-based access controls ensuring only authorised staff can access personal data
• Regular security audits, penetration testing, and vulnerability assessments
• Multi-factor authentication requirements for administrative access to data systems
• Incident response procedures with defined notification timelines in the event of a data breach

While done222 takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately at [email protected] if you suspect unauthorised access to your account.

9. Minors & Age Restriction

done222 is strictly an adult platform. Registration, access, and participation in any gaming or betting activity on done222.app is permitted only to individuals who are 21 years of age or older. This is an absolute requirement with no exceptions.

done222 does not knowingly collect personal data from anyone under the age of 21. As part of our KYC process, all accounts are subject to age verification using CNIC or passport documentation. If done222 discovers that an account has been created by or on behalf of a person under 21, the account will be immediately suspended, all funds will be handled in accordance with our responsible gaming policy, and all associated data will be deleted as promptly as legally possible.

If you are a parent or guardian and believe a minor has accessed done222, please contact us immediately at [email protected].

10. Policy Changes

done222 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to your registered email address summarising the key changes
• Display a prominent notice on done222.app upon your next login

Your continued use of done222.app after notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material changes, you have the right to close your account and request deletion of your data as described in Section 6.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how done222 handles your personal data, please contact our Data Protection team:

• Email: [email protected] (plain text — not a clickable link)
• Response Time: We aim to acknowledge all privacy-related enquiries within 5 business days and provide a full response within 30 days.
• Language: Communications may be conducted in English or Urdu as preferred.

done222 is committed to resolving all privacy concerns fairly and transparently. Where you are not satisfied with our response, you have the right to escalate to the relevant supervisory authority under our licensing jurisdiction.