done999 Privacy Policy — Your Data, Explained Clearly

01 Overview

done999 is an online gaming and entertainment platform serving adult players in Pakistan. When you register an account, make a deposit in PKR, play games or contact our support team, certain information is collected and processed as part of providing the service. This Privacy Policy sets out in plain language what that information is, why we need it and how it is handled.

This policy applies to all done999 accounts and covers all interactions with the platform — through the done999 website, mobile browser and the done999 app available for download. By registering an account or using done999 in any capacity, you acknowledge that you have read and understood this policy.

If anything in this policy is unclear, you are welcome to contact done999 support. We would rather you ask than remain uncertain about how your data is being handled.

02 What Information We Collect

done999 collects information in three main ways: directly from you when you register and use your account, automatically through platform activity, and from payment providers when transactions are processed.

Information you provide directly:

• Full legal name and date of birth provided at registration
• Contact details including your mobile number and email address
• Identity verification documents such as a copy of your CNIC or passport, where requested
• Payment method details — the JazzCash or Easypaisa account number, Raast ID, bank account details or card details used for deposits and withdrawals
• Any information you provide when contacting done999 support, including the content of support conversations
• Self-reported preferences such as responsible gaming limit settings

Information collected automatically:

• Device information including device type, operating system version and unique device identifiers
• IP address and approximate geographic location based on IP
• Session data including login times, session duration and pages or games accessed
• Game activity records including bet amounts, game outcomes and transaction history
• Cookie and tracking data as described in the Cookies section below

03 How We Use Your Information

The information done999 collects is used for specific, legitimate purposes directly related to operating the platform and serving your account. The table below summarises the main uses:

done999 does not use your personal data for any purpose not listed above without first notifying you. Where we wish to use your data for a new purpose, we will update this policy and communicate the change to active account holders.

04 Payment & Transaction Data

Processing deposits and withdrawals in PKR requires done999 to handle payment information. The way this is managed depends on the payment method you use.

For JazzCash and Easypaisa transactions, payment processing is handled directly by those providers. done999 receives confirmation of transaction completion and the associated account identifier but does not store your full JazzCash or Easypaisa credentials. The security of your mobile wallet credentials is governed by JazzCash and Easypaisa's own policies.

For bank transfers and card payments, transaction data is processed through secure payment gateways. Full card numbers are not stored on done999 systems. done999 retains transaction reference numbers, amounts, dates and the partial account identifiers required for withdrawal processing.

For Raast transfers, your Raast ID is used to process the relevant transaction and is stored only for the purpose of facilitating the withdrawal to the same account.

• All payment data is encrypted in transit using TLS.
• Withdrawal requests are always processed to the same payment account used for the original deposit — this is a fraud prevention measure as well as a convenience feature.
• Transaction history is retained for the minimum period required by our record-keeping obligations and is accessible to you through your account dashboard.

05 Sharing & Disclosure of Your Data

done999 does not sell your personal data to any third party for marketing or advertising purposes. Your information is shared only in the following specific circumstances:

• Payment providers: JazzCash, Easypaisa, Raast, banks and card processors receive only the transaction data required to complete your deposit or withdrawal. They operate under their own privacy policies and security standards.
• Identity verification services: Where a third-party verification provider is used to confirm your age or identity, the minimum necessary documents are shared for that purpose only.
• Platform technology providers: done999 uses third-party services for hosting, analytics and customer support tooling. These providers access data only as needed to perform services for done999 and are bound by confidentiality obligations.
• Fraud and security partners: Aggregated or flagged data may be shared with fraud prevention services to identify patterns of abuse, multi-accounting or money laundering across platforms.
• Legal obligations: done999 will disclose data where required to do so by a valid legal process, court order or applicable obligation. We will notify you of such disclosure where we are legally permitted to do so.

06 Cookies & Tracking Technologies

done999 uses cookies and similar tracking technologies to keep the platform working correctly, remember your session preferences and understand how the platform is being used at an aggregate level.

Essential cookies are required for the platform to function. These include session cookies that keep you logged in during a visit and security cookies that help prevent cross-site request forgery. Disabling essential cookies will prevent done999 from working correctly.

Functional cookies remember your preferences such as language settings and responsible gaming limit configurations between sessions. These make your experience more convenient but are not strictly required for platform operation.

Analytics cookies collect aggregated, anonymised data about how players navigate the platform — which pages are visited most, where sessions typically begin and end, and which game categories are most popular. This data is used to improve the platform experience and is not linked back to individual accounts.

• You can manage cookie preferences through your browser settings at any time.
• Blocking functional or analytics cookies will not affect your ability to deposit, withdraw or play games on done999.
• done999 does not use cookies to track your activity on other websites or to serve you targeted advertising outside the platform.

07 How We Keep Your Data Secure

done999 takes data security seriously. The platform and account systems are built with several layers of protection to keep your personal information and account balance safe.

• Encryption in transit: All data exchanged between your device and done999 is encrypted using TLS. This applies to login, game play, deposit and withdrawal requests and any support communications.
• Encrypted storage: Sensitive account data including passwords (stored as hashed values, never in plain text) and identity documents are encrypted at rest.
• Access controls: Only authorised done999 staff with a legitimate need to access specific data categories are able to do so. Access is logged and reviewed.
• Fraud monitoring: Automated systems monitor account activity for patterns consistent with unauthorised access, multi-accounting or suspicious transaction behaviour.
• Two-factor considerations: done999 recommends using a strong, unique password for your account. Account security features are available within your account settings.

While done999 takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. If you believe your account has been compromised, contact done999 support immediately so the account can be secured.

08 How Long We Keep Your Data

done999 retains your personal data for as long as your account is active and for a defined period after account closure. The retention periods below apply as a general guide:

• Active account data — retained for the full duration of your account's active status plus a period following closure to handle any outstanding queries, disputes or obligations.
• Transaction records — financial transaction data including deposit and withdrawal history is retained for a minimum period required by standard record-keeping practices.
• Identity verification documents — retained for the period required following the completion of verification. Copies are securely deleted once the retention period expires.
• Support communications — retained for a reasonable period to allow for follow-up on related queries and to maintain service quality records.
• Game activity records — bet history and game logs are retained for a defined period and are accessible to you through your account dashboard during that time.

When data is no longer required, done999 deletes or anonymises it so that it can no longer be linked to your identity. You may request earlier deletion of your data subject to the constraints described in the Your Rights section below.

09 Your Rights Over Your Data

You have meaningful rights over the personal data done999 holds about you. These rights can be exercised by contacting done999 support with a clear description of your request.

• Right of access: You may request a summary of the personal data done999 holds about you at any time. done999 will respond within a reasonable timeframe.
• Right to correction: If any of the data held on your account is inaccurate or out of date, you have the right to request a correction. Some data — such as your registered name — may require supporting documentation to update.
• Right to deletion: You may request that done999 delete your personal data. This right is subject to limitations where retention is required for transaction record integrity, fraud investigation or other legitimate purposes. Account closure is a precondition for full data deletion requests.
• Right to restrict processing: You may request that done999 limit how your data is used in certain circumstances — for example, while a correction request is being reviewed.
• Right to data portability: You may request a copy of the personal data you have provided to done999 in a structured, commonly used format.
• Right to withdraw marketing consent: If you have opted in to receiving promotional communications from done999, you may withdraw that consent at any time by updating your account preferences or contacting support. Withdrawal of marketing consent does not affect any other aspect of your account.

10 Minors & Under-18 Protection

done999 is strictly an adults-only platform. No person under the age of 18 is permitted to register an account or use the done999 platform in any capacity. done999 does not knowingly collect personal data from anyone under 18.

If done999 becomes aware that an account has been registered by or on behalf of a person under 18, the account will be closed immediately and any associated data will be handled appropriately. If you believe a minor in your household may have accessed or attempted to register on done999, please contact support immediately.

Parents and guardians are encouraged to use device-level parental controls to restrict access to online gaming platforms. done999 supports responsible adult use and takes the protection of minors seriously.

11 Changes to This Privacy Policy

done999 may update this Privacy Policy from time to time to reflect changes in platform features, data handling practices or applicable requirements. When material changes are made, active account holders will be notified through the platform or via the contact details held on their account.

The date shown at the top of this page reflects when the policy was last reviewed and updated. We recommend reviewing this page periodically. Continued use of done999 following publication of an updated policy constitutes your acceptance of the changes.

If you disagree with any changes to this policy, you should cease using done999 and contact support to request account closure and data deletion where applicable.

12 Contact & Privacy Queries

If you have any questions about this Privacy Policy, want to exercise your data rights or have a concern about how your information has been handled, done999 support is available around the clock.

For responsible gaming queries or to activate self-exclusion, please visit the Responsible Gaming page. For a full overview of your account obligations, refer to the Terms and Conditions.