done5 Privacy Policy – How We Handle Your Data

01 Introduction

done5 is an online gaming and sports betting platform designed for players in Pakistan. This Privacy Policy sets out in plain terms how done5 collects, uses, stores and protects the personal information of its users. It also explains what rights you have in relation to your personal data and how you can exercise those rights.

This policy applies to all services provided through the done5 website and the done5 mobile application, including casino games, sports betting, bingo, promotions, deposits and customer support interactions. It applies regardless of whether you access done5 on a desktop, a mobile browser or through the dedicated app.

done5 is committed to being straightforward about data practices. This policy is written in plain English so that players in Pakistan can understand exactly what is happening with their information without having to wade through confusing legal language. If anything here is unclear, reach out to done5 support and we will clarify.

This Privacy Policy should be read alongside the done5 Terms and Conditions, which govern the overall use of the platform. By using done5, you agree to both documents.

02 What We Collect

done5 collects personal information in the following categories. We only collect what is genuinely needed to operate the platform and serve you properly.

done5 does not collect sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health data or biometric data beyond what is strictly required for identity verification purposes.

03 Why We Collect It

Every piece of data that done5 collects has a specific purpose. Here is why we need each category of information:

• Identity and Contact Data — To verify that you are who you say you are, to confirm you meet the minimum age of 18, and to communicate with you about your account, deposits, withdrawals and promotions.
• Financial Data — To process your PKR deposits and withdrawals through JazzCash, Easypaisa, Raast, bank transfer, cards and mobile wallets, and to maintain an accurate transaction record for your account.
• Usage Data — To deliver the platform services you use, to personalise your experience where possible, and to monitor for responsible gaming concerns such as unusual betting patterns that may indicate a problem.
• Device and Technical Data — To maintain platform security, detect and prevent fraud, identify unauthorised account access, and ensure the platform works correctly on your device.
• Communications Data — To resolve support queries, handle complaints, and maintain a record of interactions for quality and dispute resolution purposes.

04 Sharing Your Data

done5 does not sell personal data. Data is shared only in the following specific, limited circumstances:

• Payment Processors: When you make a deposit or request a withdrawal, relevant transaction data is shared with your chosen payment provider — JazzCash, Easypaisa, Raast, your bank or card issuer — as required to complete the transaction. done5 does not store full card details on its own systems.
• Game Studio Providers: Studios such as Pragmatic Play, Evolution Gaming, Spribe and others receive technical session data necessary to deliver their games within the done5 platform. These providers operate under their own data agreements and do not use this data for independent marketing purposes.
• Technology and Infrastructure Partners: done5 uses third-party cloud and hosting services to operate the platform. These providers may process data on done5's behalf but are contractually restricted from using it for any purpose other than delivering the service to done5.
• Fraud Prevention and Security: In cases of suspected fraud, account abuse or security incidents, done5 may share relevant data with security service partners or, where required, with appropriate authorities.
• Legal Requirements: done5 may disclose personal data where required to do so by applicable law, court order or binding legal process. In such cases, done5 will disclose only the minimum data necessary to satisfy the legal requirement.

All third parties with whom done5 shares personal data are required to handle it securely and in accordance with applicable privacy standards. done5 does not permit third-party partners to use your data for their own marketing or commercial purposes.

05 Payment Data

Handling payment information responsibly is a top priority at done5. All PKR deposits and withdrawals on done5 are processed through trusted local payment channels including JazzCash, Easypaisa, Raast, bank transfer, debit and credit cards, and mobile wallets.

• Payment transactions are processed over encrypted connections. done5 does not store full card numbers, CVV codes or mobile wallet PINs on its own servers.
• Transaction records — including deposit amounts, dates, and payment methods used — are retained in your account history to support accurate accounting, withdrawal verification and dispute resolution.
• When you request a withdrawal, done5 will typically return funds to the same payment method used for your most recent deposit. Additional verification may be requested before a withdrawal is processed.
• done5 only accepts payments from the account holder. Third-party payments are not permitted. If done5 identifies a payment made from a method not belonging to the registered account holder, the deposit may be reversed and the account flagged for review.

06 Cookies & Tracking

done5 uses cookies and similar tracking technologies on its website and app to make the platform function correctly, to remember your preferences and to improve your experience over time.

• Essential Cookies: These are required for core platform functions such as keeping you logged in during a session, remembering your selected language and ensuring the platform operates as expected. These cannot be disabled without breaking the platform.
• Analytics Cookies: done5 uses analytics tools to understand how players use the platform — for example, which games are most popular, where players spend time, and where technical issues occur. This data is aggregated and does not identify individual players.
• Functional Cookies: These remember choices you have made — such as your preferred deposit method or game settings — so you do not have to set them again each visit.
• Security Cookies: Used to detect unusual activity, prevent fraudulent logins and protect your account from unauthorised access.

You can adjust your browser settings to block or delete cookies at any time. However, disabling essential cookies will affect your ability to use the done5 platform properly. Analytics and functional cookies can be disabled without preventing access to the platform, though some features may behave differently.

07 Data Retention

done5 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable obligations. The following general retention principles apply:

• Account data — including registration information, identity verification records and transaction history — is retained for the duration of your account and for a period thereafter as required for legal and compliance purposes.
• Support communications are retained for a period sufficient to resolve disputes and for quality monitoring purposes, after which they are securely deleted.
• Technical and device data collected for security purposes is retained for a limited period consistent with fraud detection requirements.
• Where you voluntarily close your done5 account, done5 will retain core identity and transaction records for the applicable retention period before securely deleting or anonymising them.

When data is no longer needed and the retention period has expired, done5 securely destroys or permanently anonymises it so that it can no longer be linked to any individual.

08 Security Measures

done5 applies a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration or disclosure.

• Encryption: All data transmitted between your device and done5 servers is encrypted using TLS (Transport Layer Security). Sensitive stored data is encrypted at rest.
• Access Controls: Access to personal data within done5's systems is restricted to staff and service partners who genuinely need it to perform their role. Access is logged and monitored.
• Account Security: done5 requires a strong password at registration. You are responsible for keeping your login credentials confidential. done5 will never ask for your password through any channel.
• Fraud Monitoring: done5 operates automated monitoring systems that flag unusual account activity — such as logins from new devices or locations, unusual deposit patterns or suspicious betting behaviour.
• Incident Response: In the event of a data security incident affecting your personal information, done5 will take immediate steps to contain the incident and notify affected players as appropriate.

09 Your Rights

As a done5 player, you have the following rights in relation to the personal data we hold about you. To exercise any of these rights, contact done5 support.

done5 will respond to all valid rights requests within a reasonable period. done5 may ask you to verify your identity before processing a request to protect against fraudulent claims.

10 Minors & Under-18

done5 is strictly an adults-only platform. No person under the age of 18 is permitted to register, deposit or use any service on done5. done5 does not knowingly collect personal data from individuals under the age of 18.

As part of the registration process, done5 collects date of birth information and may request identity documentation to verify age. If done5 identifies or suspects that a registered account belongs to a person under 18, the account will be immediately suspended pending investigation. Any balance in such an account will be handled in accordance with the done5 Terms and Conditions.

If you are a parent or guardian and believe a minor has registered on done5, please contact done5 support immediately with relevant details. done5 will investigate and take appropriate action as quickly as possible.

11 Policy Updates

done5 may update this Privacy Policy from time to time. Changes may be made to reflect updates to platform features, changes in data processing practices, or other operational developments. When this policy is updated, the "Last Updated" date at the top of this page will be revised accordingly.

For significant changes — particularly those that affect how your personal data is used — done5 will endeavour to notify registered players via their registered contact details. However, it remains your responsibility to review this policy periodically to stay informed.

Continued use of the done5 platform following an update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should stop using done5 and contact support to close your account and request deletion of your data where applicable.

12 Contact Us

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how done5 has handled your personal information, please get in touch with the done5 support team.

• Support: Contact done5 support through the live chat facility available on the platform, or via the contact details in the footer of this page.
• Response Time: done5 aims to respond to all privacy-related queries within a reasonable timeframe. For formal rights requests, a response will be provided within the period required by applicable standards.
• Identity Verification: To protect your privacy, done5 may ask you to verify your identity before processing any request relating to your personal data.