don55 Privacy Policy

This Privacy Policy applies to all personal data processed by don55 in connection with the operation of its online casino and sports betting platform at don55.ws. It covers data collected from registered members, prospective members who have initiated but not completed registration, and visitors who browse the platform without creating an account.

don55 operates as the data controller for the personal information described in this policy. As data controller, don55 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection obligations under the platform's international operating jurisdiction.

This policy should be read alongside the don55 Terms & Conditions, which form the overarching contractual framework governing your use of the platform. Where the Terms & Conditions and this Privacy Policy address the same matter, this Privacy Policy governs in respect of data protection matters specifically.

don55 collects personal data across several categories depending on the nature of your interaction with the platform. The following table summarises the categories of data we may hold about you:

don55 does not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information except where such information is voluntarily disclosed by the member in the context of a responsible gaming or self-exclusion request, in which case it is handled with the highest level of confidentiality and used solely for the purpose disclosed.

don55 collects personal data through the following channels:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to promotions.
• Automated collection: Technical and usage data collected automatically as you navigate and interact with the don55 platform, including through cookies, session tracking, and server logs.
• Payment processors: Transaction confirmation data received from JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card networks when you initiate a financial transaction. don55 does not store full card numbers — only tokenised references provided by the payment processor.
• Identity verification providers: Where don55 uses a third-party KYC service to verify document authenticity, that provider may share verification outcome data with don55. don55 does not receive raw biometric data from these providers beyond what is necessary for the verification decision.
• Fraud prevention systems: Data received from third-party fraud screening tools used to protect the platform and its members from unauthorised access, account takeover, and financial crime.

don55 processes your personal data for the following defined purposes:

• Account registration and management: Creating and maintaining your don55 account, authenticating your identity at login, and managing account settings and preferences.
• KYC and AML compliance: Verifying your identity and age (21+ requirement), meeting Anti-Money Laundering obligations, and fulfilling reporting duties required under the platform's operating licence.
• Payment processing: Processing deposits and withdrawals via your chosen payment method, reconciling transaction records, and investigating payment disputes.
• Platform operation and game delivery: Delivering casino games, cricket and PSL betting markets, and all other platform features to your device.
• Customer support: Responding to your queries, resolving complaints, and maintaining a record of support interactions for quality assurance purposes.
• Responsible gaming: Monitoring account activity for signs of problematic gambling behaviour, administering self-exclusion requests, enforcing deposit and loss limits, and directing members to appropriate support resources.
• Fraud prevention and security: Detecting and preventing fraudulent activity, account takeover, money laundering, and other prohibited conduct as defined in the Terms & Conditions.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform features, game offerings, and user experience.
• Marketing communications: Sending you information about promotions, bonuses, and new features at don55 — but only where you have given explicit consent to receive such communications, and subject to your right to opt out at any time.
• Legal and regulatory compliance: Meeting obligations under applicable laws and responding to lawful requests from regulatory or law enforcement authorities.

don55 processes your personal data only where a valid legal basis exists. The following bases apply to the processing activities described in this policy:

• Contractual necessity: Processing required to perform the contract between you and don55 — including account registration, payment processing, and game delivery — is carried out on the basis that it is necessary to provide the services you have requested.
• Legal obligation: Processing required for KYC verification, AML reporting, age verification (21+), and responses to lawful regulatory requests is carried out on the basis of compliance with legal obligations applicable to don55 under its operating licence.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics is carried out on the basis of don55's legitimate interests in operating a secure, compliant, and well-functioning platform, provided those interests are not overridden by your fundamental rights.
• Consent: Processing for direct marketing communications is carried out only on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time by using the unsubscribe link in any marketing email or by contacting support at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

don55 does not sell your personal data. Data sharing with third parties is limited to the following categories of recipients, each bound by strict data processing agreements:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and card network processors receive only the financial data necessary to process your specific transaction. These providers process data under their own privacy policies and applicable banking regulations.
• KYC and identity verification providers: Third-party verification services receive identity document data solely to perform the age and identity verification required for account activation. Results are returned to don55; raw document data is not stored by don55 beyond the period necessary for compliance record-keeping.
• Fraud prevention platforms: Anonymised or pseudonymised risk signals may be shared with fraud detection services to identify patterns associated with account takeover, bonus abuse, or financial crime. These services do not receive data that identifies you by name to third parties.
• Game content providers: Casino game providers whose titles are offered through don55 may receive a session token and anonymised player ID to deliver the game experience. They do not receive your name, contact details, or financial information.
• Regulatory and law enforcement authorities: don55 will disclose personal data to competent regulatory, law enforcement, or judicial authorities where required to do so by applicable law, court order, or binding regulatory direction. don55 will notify you of such disclosure where legally permitted to do so.
• Professional advisers: Legal counsel, compliance consultants, and auditors may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

don55 retains personal data only for as long as is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law or regulatory obligation. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data must be retained beyond the standard period due to an active legal dispute, regulatory investigation, or pending complaint, retention will continue until the matter is resolved.

don55 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key measures in place include:

• 256-bit SSL/TLS encryption: All data transmitted between your browser or app and don55 servers is encrypted using industry-standard TLS protocols. This applies to login sessions, payment transactions, and document uploads.
• Data encryption at rest: Sensitive personal data, including KYC documents and financial identifiers, is encrypted at rest on don55 servers using strong encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff who require access for their role are granted the minimum level of access necessary and are subject to mandatory data protection training and confidentiality obligations.
• Multi-factor authentication: Administrative access to systems holding personal data requires multi-factor authentication. don55 also offers two-factor authentication options to members for account security.
• Penetration testing and vulnerability management: don55 conducts regular security assessments and vulnerability testing of its platform infrastructure. Critical vulnerabilities are remediated within defined response timelines.
• Data breach response: don55 maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, don55 will notify affected members promptly and in accordance with applicable reporting obligations.

While don55 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. Members are encouraged to use strong, unique passwords for their don55 accounts and to contact support immediately if they suspect unauthorised account activity.

don55 uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your logged-in session, store your language and currency preferences, and enable core security features. These cookies cannot be disabled without significantly impairing platform functionality.
• Performance and analytics cookies: These collect anonymised data about how visitors use the don55 platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data is used in aggregate form to improve platform performance and is not linked to identifiable individuals.
• Functional cookies: These remember your preferences and settings to personalise your platform experience — including your preferred game categories, display settings, and responsible gaming tool configurations.
• Fraud prevention and security cookies: These help don55 identify suspicious login patterns, bot activity, and potential account takeover attempts.

don55 does not deploy third-party advertising cookies or tracking pixels that would allow external advertisers to profile your behaviour across the web. Cookies set by don55 are limited to the don55.ws domain.

As a don55 member whose personal data is processed by the platform, you hold the following rights in respect of your personal data. To exercise any of these rights, contact don55 at [email protected] with the subject line "Data Rights Request" and your full registered name and email address.

don55 will acknowledge all data rights requests within 5 business days and provide a substantive response within 30 days of receipt. Complex or high-volume requests may require an extension of up to a further 60 days, in which case you will be notified of the extension and the reasons for it.

don55 is strictly restricted to adults aged 21 and above. The platform does not knowingly collect personal data from individuals under the age of 21 under any circumstances.

Age verification is a mandatory step in the don55 account registration and KYC process. Where age cannot be confirmed to the satisfaction of the compliance team, the account is suspended pending document submission. Any personal data collected from an individual subsequently found to be under 21 will be permanently deleted from all don55 systems within 30 days of the discovery, and the account will be permanently closed.

don55 does not direct any marketing communications toward individuals under the age of 21 and does not use data from the platform to build advertising audiences that include minors on any third-party platform.

don55 operates as an internationally licensed platform. Some of the service providers used by don55 — including KYC verification vendors, fraud prevention platforms, and cloud infrastructure providers — may process personal data in jurisdictions outside Pakistan.

Where personal data is transferred internationally, don55 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that described in this Privacy Policy. These safeguards include:

• Contractual data processing agreements with all third-party processors that include data protection obligations consistent with applicable standards.
• Transfer only to providers whose data handling practices have been assessed by the don55 compliance team as meeting minimum acceptable security and privacy standards.
• Limitation of data transferred to the minimum necessary for the specific processing purpose.

don55 does not transfer personal data to jurisdictions identified as high-risk for data protection purposes without additional protective measures in place. If you would like further information about the international transfer safeguards applicable to your personal data, contact [email protected].

don55 may update this Privacy Policy from time to time to reflect changes in platform operations, applicable law, or regulatory guidance. The most current version will always be published at don55.ws/privacy-policy, with the "Last Updated" date revised accordingly.

For material changes — those that significantly affect how your personal data is processed or the rights available to you — don55 will provide at least 14 days' advance notice via email to your registered address before the change takes effect. Minor clarificatory changes may be implemented without advance notice.

Your continued use of the don55 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept a material change to the Privacy Policy, you may close your don55 account by contacting support, and your verified balance will be returned through the standard withdrawal process.

For all data protection queries, rights requests, and privacy-related complaints, contact the don55 Data Protection team directly:

• Email: [email protected] — use subject line "Data Rights Request" or "Privacy Complaint" as applicable
• Response time: Acknowledgement within 5 business days; substantive response within 30 days
• Escalation: If you are not satisfied with don55's response to a privacy complaint, you may escalate the matter to the relevant supervisory authority applicable under don55's operating jurisdiction