At done66, your personal data is handled with the same care we put into our gaming platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we protect it, and what rights you have as a done66 account holder in Pakistan.
Your Privacy, Our Commitment
Six core commitments that define how done66 approaches your personal data and privacy as a Pakistani player on our platform.
All data transmitted between your device and the done66 platform is protected by 256-bit SSL/TLS encryption. Whether you are logging in via JazzCash mobile or accessing done66 on desktop from Karachi, every byte of your personal data travels through a fully encrypted connection at all times.
done66 collects only the personal data that is strictly necessary for account registration, KYC verification, payment processing, and regulatory compliance. We do not collect excessive or unnecessary data. Every piece of information we hold about you serves a clear , documented purpose under this Privacy Policy.
done66 will never sell, rent, or trade your personal data to third-party marketers or data brokers. Your information is shared only where strictly necessary — with licensed payment processors like JazzCash and EasyPaisa, KYC verification partners, and regulatory authorities where required under our international gaming license obligations.
As a done66 account holder, you have the right to access, correct, and in certain circumstances request deletion of your personal data. You may also request a copy of the data we hold about you at any time. done66 will respond to all data subject requests within the timeframes required under applicable data protection standards.
All personal data held by done66 is stored on secured, access-controlled servers with strict internal access policies. Only authorised done66 personnel with a genuine operational need can access your personal data. We conduct regular security audits and maintain up-to-date data protection practices across all our infrastructure.
done66 will only send you promotional communications where you have given your consent at registration or subsequently opted in via your account settings. You may withdraw marketing consent at any time through your account dashboard or by contacting done66 support. Withdrawing marketing consent does not affect your ability to use the platform.
done66 is Pakistan's leading online gaming and sports betting platform, providing cricket betting, live dealer casino games, slots, and instant games to players across Karachi, Lahore, Islamabad, Faisalabad, and beyond. The trust our players place in us is something we take very seriously, and the responsible, transparent handling of your personal data is central to how we operate.
This Privacy Policy describes in plain, clear English exactly what personal data done66 collects from you, the legal basis on which we process it, how we store and protect it, who we share it with, and the full range of rights you have over your own data. We have designed this Policy to be as readable and straightforward as possible, without sacrificing the legal completeness that our players deserve.
done66 operates under an international gaming license and is committed to aligning its data protection practices with internationally recognised privacy frameworks, including principles drawn from the General Data Protection Regulation (GDPR) and other applicable data protection standards. We consider robust data privacy to be a non-negotiable component of responsible gaming and player safety.
This Policy applies to all personal data processed by done66 in connection with your use of the done66 website, mobile site, account, sportsbook, casino games, payment facilities, customer support channels, and all other services provided under the done66 brand.
For the purposes of this Privacy Policy, done66 acts as the data controller in respect of all personal data collected from registered account holders and site visitors accessing the platform from Pakistan and other permitted jurisdictions. As data controller, done66 determines the purposes and means by which your personal data is processed.
done66 is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy. If you have any questions about how done66 handles your personal data, or if you wish to exercise any of your data rights, you may contact the done66 data protection team using the contact details set out in Section 15 of this Policy.
When you create a done66 account, we collect the following information which is necessary to establish and maintain your account:
As required under our international gaming license and anti-money laundering obligations, done66 collects the following KYC documentation from players prior to processing their first withdrawal:
done66 collects and processes data relating to all financial transactions conducted through your account, including deposit amounts, withdrawal requests, bonus transactions, and payment method details. We store records of transactions as required for regulatory compliance and dispute resolution purposes. Full payment card or bank account numbers are never stored directly by done66 — these are handled by our licensed payment processing partners.
done66 collects detailed records of your gaming and betting activity on the platform, including game sessions, bet amounts, wagering history, win and loss records, and bonus usage. This data is used for account management, responsible gaming monitoring, fraud detection, and regulatory reporting.
When you access the done66 platform, we automatically collect certain technical data including your IP address, device type, operating system, browser type and version, screen resolution, session duration, and pages visited. This data is used for platform security, fraud prevention, and improving the user experience.
done66 retains records of all communications between you and our customer support team, including live chat transcripts, WhatsApp support messages, and email correspondence. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Legal Basis |
|---|---|---|
| Registration Data | Name, DOB, mobile, email, address | Contract performance |
| KYC / Identity Data | CNIC copy, proof of address | Legal obligation (AML) |
| Financial Data | Transaction history, payment method | Contract performance / Legal obligation |
| Gaming Activity | Bet history, session data, wins/losses | Contract performance / Legitimate interest |
| Technical Data | IP address, device info, browser | Legitimate interest (security) |
| Communication Data | Support chat logs, email records | Legitimate interest (dispute resolution) |
| Marketing Preferences | Opt-in/out status, campaign interactions | Consent |
done66 collects your personal data through the following channels:
done66 processes your personal data only where there is a clear, documented legal basis for doing so. The following table summarises the primary purposes for which we process your data and the corresponding legal basis under applicable data protection law:
done66 does not process your personal data for any purpose not listed above without first providing you with notice and, where required, obtaining your consent.
done66 shares personal data only with the categories of third parties described below, and only to the extent strictly necessary for the stated purpose:
All third-party service providers who process personal data on done66's behalf are required to enter into data processing agreements that bind them to appropriate data protection obligations consistent with this Privacy Policy and applicable law. done66 conducts due diligence on third-party partners to ensure adequate data protection standards are maintained.
done66 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:
At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with done66's data disposal procedures. If you request deletion of your data before the end of a mandatory retention period, done66 will explain which data must be retained and why, and will delete all other data as promptly as possible.
done66 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. Our security measures include:
While done66 employs industry-standard security measures, no digital platform can guarantee absolute security. In the unlikely event of a data security incident that is likely to affect your rights and freedoms, done66 will notify you in accordance with applicable data breach notification requirements as promptly as practicable.
Cookies are small text files placed on your device by a website when you visit it. done66 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, to maintain your login session, and to collect anonymised analytics data that helps us improve the platform experience for all Pakistani players.
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use the done66 platform, including your ability to log in and maintain a gaming session. done66 does not use third-party advertising cookies and does not participate in cross-site tracking for commercial advertising purposes.
As a done66 account holder, you have the following rights in relation to your personal data. done66 is committed to facilitating the exercise of these rights promptly and without undue bureaucracy:
To exercise any of these rights, please contact the done66 data protection team using the details in Section 15. We will verify your identity before processing any data rights request and will respond within the applicable statutory timeframe. done66 will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.
done66 implements age verification as a mandatory step in the account registration process and again during KYC verification. All players must provide a valid CNIC confirming they are 21 years of age or older. Parents or guardians who become aware that a minor has registered on done66 should contact our support team immediately so that the account can be closed and the data handled appropriately.
done66 also supports the use of parental control software by households with minors. While done66 is not a children's platform and does not target minors in any way, we acknowledge that parental supervision of internet use is an important component of child safety online.
done66 operates under an international gaming license, and some personal data processing activities may involve the transfer of data to servers or service providers located outside Pakistan. Where such international transfers occur, done66 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with this Privacy Policy and applicable data protection law.
Safeguards employed by done66 for international data transfers include contractual data protection clauses binding recipient third parties to appropriate data security and processing standards, and transfer only to jurisdictions or organisations that maintain adequate data protection frameworks. done66 does not transfer personal data to countries with inadequate data protection standards without implementing additional protective measures.
done66 may send you promotional emails, SMS messages, or WhatsApp notifications about bonuses, new games, PSL cricket betting offers, and other promotions where you have provided your consent to receive such communications at registration or through your account settings.
You can opt out of marketing communications at any time by:
Please allow up to five (5) business days for your opt-out request to take effect across all communication channels. Opting out of marketing communications will not affect transactional communications related to your account, including deposit confirmations, withdrawal notifications, and security alerts, which are necessary for the operation of your account.
done66 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or our services. Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — done66 will provide advance notice to registered players via email or a prominent notice on the platform prior to the changes taking effect.
The date of the most recent update to this Policy is displayed at the top of this page. We encourage you to review this Privacy Policy periodically, particularly if you have concerns about your personal data. Your continued use of the done66 platform following any update to this Policy constitutes your acknowledgement of the revised terms.
If you do not agree with any material change to this Policy, you should discontinue use of the platform and contact done66 support to request account closure. done66 will handle any data deletion requests arising from Policy disagreements in accordance with the retention obligations set out in Section 7.
If you have any questions, concerns, or complaints relating to this Privacy Policy or how done66 handles your personal data, or if you wish to exercise any of your data rights described in Section 10, please contact the done66 data protection team through any of the following channels:
done66 aims to acknowledge all privacy-related inquiries within two (2) business days and to provide a substantive response within thirty (30) calendar days of receipt. For complex data subject access requests, done66 may require up to sixty (60) days and will notify you of any extension within the initial thirty (30) day period.
When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so that done66 can verify your identity and process your request efficiently. done66 may ask for additional verification information where necessary to protect your data from unauthorised third-party access requests.
done66 takes all privacy complaints seriously. If you are not satisfied with our response to a privacy complaint, you have the right to escalate the matter to the relevant data protection authority or gaming regulatory body in your jurisdiction.
Privacy-First Gaming
Your personal data is protected by industry-standard encryption, strict access controls, and a no-sell policy. Explore cricket betting, slots, and live casino games knowing your privacy is in safe hands.