Your privacy matters to us at done22. This policy explains what personal information we collect when you use the done22 platform, how we use it, who we may share it with, and what rights you have over your own data. We have written it in plain English because legal documents should actually be readable — especially for players in Pakistan who deserve to know clearly how their information is handled.
These cards cover the headlines. The full policy sections below contain all the detail. Please read both.
done22 collects the personal information required to operate your account, process PKR deposits and withdrawals, verify your identity and communicate with you. We do not collect data for its own sake.
done22 does not sell, rent or trade your personal information to third-party marketers. Your data is used to run your account and improve the platform — not to generate revenue from data brokers.
PKR transactions via JazzCash, Easypaisa, Raast and bank transfer are processed through secure payment integrations. done22 does not store full card numbers or mobile wallet PINs.
You can request a copy of the data done22 holds about you, ask for corrections, or request deletion. These rights are explained in full in the Your Rights section of this policy.
done22 uses cookies and similar technologies to keep you logged in, remember your preferences and understand how the platform is used. You can manage non-essential cookies in your browser settings.
If done22 sends you promotional emails or messages, you can opt out at any time. We will continue to send essential account communications — such as verification requests and withdrawal confirmations — regardless of marketing preferences.
This Privacy Policy applies to done22, available at done22.app. done22 is an online gaming and sports betting platform serving players in Pakistan. References to "done22", "we", "us" and "our" throughout this document refer to the operator of the done22 platform.
done22 is the data controller for the personal information you provide when using our platform. This means we are responsible for deciding how and why your personal data is collected and processed. If you have any questions about how done22 handles your data, contact us using the details in Section 13.
Scope: This policy covers all done22 services — the website at done22.app, the done22 mobile app, sports betting, slot games, live casino, bingo, the VIP programme, and any communications done22 sends to registered players.
done22 collects personal data in two broad categories: information you provide directly, and information generated automatically when you use the platform.
| Data Type | Examples | When Collected |
|---|---|---|
| Identity | Full name, date of birth, CNIC number (where requested for verification) | Registration & verification |
| Contact | Mobile number, email address | Registration |
| Payment | JazzCash / Easypaisa number, bank account details, card type and last 4 digits | Deposit & withdrawal |
| Verification Documents | CNIC image, utility bill or other proof of address/identity | KYC verification process |
| Communications | Support chat transcripts, emails, feedback you submit | When you contact done22 support |
Payment security: done22 does not store full debit or credit card numbers, CVV codes or JazzCash / Easypaisa PINs. Full card data is handled directly by our PCI-compliant payment processor and is not accessible to done22 staff.
done22 collects personal data through the following channels:
done22 uses your personal data for the following purposes. We only use data where we have a legitimate reason to do so — see Section 5 for the legal basis that applies to each purpose.
To create and maintain your done22 account, process logins, verify your identity, manage your PKR balance and handle deposits and withdrawals to and from your account.
To process PKR transactions via JazzCash, Easypaisa, Raast, bank transfer and card, including communicating with payment processors to complete, verify and where necessary reverse transactions.
To verify that you are who you say you are, that you meet the minimum age requirement of 18 years, and that your account is not being used for money laundering or other illegal financial activity. This may involve sharing your data with third-party identity verification services.
To detect and prevent fraudulent activity, account compromise, bonus abuse, and other conduct that violates the done22 Terms and Conditions. This includes automated monitoring of account activity for unusual patterns.
To respond to your queries, investigate complaints, manage disputes and provide you with the support you need when using done22.
To understand how done22 is being used, identify areas for improvement, test new features and make the platform better for Pakistan players. This uses aggregated and anonymised data where possible.
To send you information about done22 promotions, VIP programme updates and offers that may be relevant to you — where you have not opted out of marketing. You can opt out at any time by contacting done22 support or using the unsubscribe link in any marketing message.
To monitor play patterns for indicators of problem gambling and, where appropriate, proactively contact players or apply responsible gaming measures such as deposit limits or cooling-off periods.
done22 processes your personal data under one or more of the following legal bases depending on the purpose:
done22 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including legal and regulatory retention requirements.
When data is no longer required, done22 securely deletes or anonymises it in accordance with our data retention practices.
done22 takes the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration and destruction.
done22 cannot guarantee security against all threats. You play an important role in keeping your account secure. Use a strong, unique password for your done22 account, do not share your login credentials with anyone, and contact done22 support immediately if you suspect your account has been accessed without your authorisation.
Data breach: In the event of a personal data breach that is likely to affect your rights and freedoms, done22 will notify affected players as quickly as practicable and take steps to contain and remediate the breach.
done22 uses cookies and similar tracking technologies when you access the done22 website and app. Cookies are small data files stored on your device. They help done22 function correctly, remember your preferences and understand how the platform is used.
You can control and delete cookies through your browser settings. Disabling essential cookies will prevent you from using done22 properly. For non-essential cookies, you can adjust browser settings without affecting your ability to use the platform. Note that clearing cookies will log you out of your done22 session.
done22 respects your rights over your personal data. Below are the rights available to you and how to exercise them.
You can request a copy of all personal data done22 holds about you. We will respond within a reasonable timeframe, typically 30 days.
If any data done22 holds about you is inaccurate or incomplete, you can ask us to correct it. Some corrections may require identity verification.
You can request deletion of your personal data in certain circumstances. Note that legal retention obligations may mean we cannot delete all data immediately upon request.
You can ask done22 to restrict how we process your data while a dispute or complaint is being resolved, or if you believe processing is unlawful.
You can object to processing based on done22's legitimate interests, including direct marketing. If you object to marketing, we will stop sending promotional communications promptly.
Where processing is based on your consent — such as marketing emails — you can withdraw consent at any time without affecting the lawfulness of prior processing.
How to exercise your rights: Contact done22 support at [email protected] (text only — do not use as a clickable link) or via the live chat in your account. We will verify your identity before acting on any data request and respond as promptly as possible.
done22 is strictly for adults aged 18 and above. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe a minor has created a done22 account or provided personal information, please contact done22 support immediately.
Upon confirmation that an account holder is under 18, done22 will close the account, delete the personal data collected and take any other steps required. We encourage parents and guardians to use parental control software to prevent minors from accessing online gaming platforms on shared or family devices.
done22 may update this Privacy Policy from time to time as the platform evolves, legal requirements change or our data practices are updated. When material changes are made, we will notify registered players via their registered contact details or by displaying a notice within the done22 platform upon next login.
The date at the top of this page indicates when the policy was last updated. We encourage you to review this policy periodically to stay informed about how done22 handles your personal data. Continued use of done22 following notification of changes constitutes acceptance of the updated policy.
The current version of this policy is always available at done22.app/privacy-policy. Previous versions can be requested from done22 support.
If you have any questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how done22 has handled your personal information, please get in touch.
The best way to reach done22 on a privacy matter is via the live chat support function within your account, or by emailing [email protected]. Please include "Privacy" or "Data Request" in the subject line so your query is directed to the right team quickly.
done22 will acknowledge your request and respond with a substantive reply as quickly as possible. For formal data subject access requests, allow up to 30 days for a full response.
Related documents: This policy should be read alongside the Terms and Conditions and the Responsible Gaming page. The FAQ section also covers common questions about account data and verification.
Now you know how done22 handles your data. Register a free account, deposit in PKR via JazzCash or Easypaisa, and start playing cricket betting, slots, bingo and more — with full confidence in how your information is treated.
18+ only. Please play responsibly and within your means. done22 provides deposit limits and self-exclusion in your account settings.