doan55 Privacy Policy

doan55 is committed to protecting the personal data of all users who interact with our platform. This Privacy Policy has been prepared in alignment with internationally recognised data protection principles, including those set out under the General Data Protection Regulation (GDPR) and the requirements of our international gaming licence. While doan55 primarily serves Pakistani players, we apply a global standard of data privacy practice to all user data regardless of location.

This policy applies to all personal data collected through the doan55 website at doan55.com, any mobile-optimised version of the site, and all services, features, and communications provided by doan55. It covers data collected during account registration, identity verification, gameplay, deposits, withdrawals, bonus participation, customer support interactions, and any other activity undertaken on the doan55 platform.

We review and update this Privacy Policy periodically to reflect changes in our data practices or applicable legal requirements. The version number and effective date are displayed at the top of this document. We recommend checking this page periodically for any updates.

For the purposes of this Privacy Policy, doan55 acts as the data controller in respect of the personal data collected from users of the doan55 platform. As data controller, doan55 determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where doan55 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or customer support tools), those parties act as data processors and process your data only on doan55's documented instructions, subject to binding contractual data protection obligations.

doan55 collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the site, and in certain cases from third parties such as payment providers or identity verification agencies. The categories of data we collect are as follows:

3.1 Registration and Account Data

• Full legal name — as it appears on your Pakistani CNIC.
• Date of birth — to verify that you meet the 21+ age requirement.
• Email address — used as your primary contact and account identifier.
• Mobile number — used for account security notifications and two-factor authentication.
• City and province of residence — collected for account management and regulatory purposes.
• Username and encrypted password — used to secure access to your doan55 account.

3.2 Identity Verification (KYC) Data

• Pakistani CNIC number and scanned copies (front and back) — required by our licensing obligations for identity verification.
• Selfie with CNIC — may be requested to confirm the CNIC belongs to you.
• Proof of payment method — screenshot or confirmation of the JazzCash, EasyPaisa, or bank account used for deposits, to verify account ownership.

3.3 Financial Data

• Deposit and withdrawal records — transaction amounts in PKR, dates, and payment method used.
• Payment method identifiers — mobile wallet numbers (JazzCash, EasyPaisa) or bank account details (HBL, UBL, Meezan Bank) associated with your doan55 account.
• Bonus and promotional participation records — details of bonuses claimed, wagering progress, and outcomes.

3.4 Gameplay and Behavioural Data

• Game history — records of games played, bets placed, and outcomes on cricket markets, slots, live dealer games, and fishing games.
• Session data — login and logout times, session duration, and in-session activity patterns.
• Responsible gaming data — any deposit limits, session limits, loss limits, or self-exclusion requests you have set.

3.5 Technical and Device Data

• IP address — used for fraud detection, geographic verification, and platform security.
• Device type and operating system — used to optimise platform delivery.
• Browser type and version — used for technical compatibility monitoring.
• Cookie data — see Section 7 for full details of our cookie policy.

3.6 Communications Data

• Customer support correspondence — records of live chat, email, and any other support interactions you have with the doan55 team.
• Survey and feedback responses — if you voluntarily participate in any doan55 feedback or satisfaction surveys.

doan55 uses the personal data it collects for the following specific purposes:

doan55 does not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for such processing.

doan55 processes personal data only where a valid legal basis exists. The applicable legal bases under internationally recognised data protection frameworks are as follows:

• Contractual necessity: The majority of data processing by doan55 is necessary to perform the contract between doan55 and the Player — i.e., to provide the gaming services, process deposits and withdrawals, and manage the Player's account.
• Legal obligation: doan55 is required to process certain data — particularly KYC and financial transaction data — to comply with its obligations under its international gaming licence, including anti-money laundering (AML) and counter-terrorist financing (CTF) requirements.
• Legitimate interests: doan55 processes certain data (including IP addresses and device identifiers) on the basis of its legitimate interests in preventing fraud, ensuring platform security, and improving the user experience, provided those interests are not overridden by your privacy rights.
• Consent: Where doan55 sends you optional promotional communications or places non-essential cookies on your device, it does so on the basis of your consent. You may withdraw this consent at any time by contacting support or using the unsubscribe mechanism in any marketing email.

doan55 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data with the following categories of recipient, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment providers receive the minimum financial data necessary to process your deposits and withdrawals in PKR. These processors operate under their own privacy policies and regulatory obligations.
• Identity verification providers: Where doan55 uses a third-party KYC partner to assist with CNIC verification, that partner receives the identity documents you submit and returns a verification result to doan55. The KYC partner is bound by contractual data protection obligations.
• Gaming software providers: The third-party game studios whose titles appear on doan55 receive anonymised session data necessary to deliver the game. They do not receive your name, CNIC, or payment details.
• Customer support platform providers: Where doan55 uses a third-party customer support tool for live chat or email management, that provider may process support correspondence on doan55's behalf under strict data processing agreements.
• Regulatory and licensing authorities: doan55 may be required to disclose account, financial, or identity data to its licensing authority or to law enforcement agencies in response to a lawful request, court order, or to report a suspected money laundering or financial crime concern.
• Fraud prevention and security services: doan55 may share technical data (such as IP addresses or device fingerprints) with fraud prevention partners for the purpose of identifying and blocking fraudulent activity on the platform.

doan55 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, and analyse how the site is used. A cookie is a small text file placed on your device by a website. Cookies do not contain your name, payment details, or CNIC — they contain a unique identifier that allows the platform to recognise your browser on subsequent visits.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the doan55 platform to function. These include session management cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without preventing use of the platform.
• Functional Cookies: Remember your preferences such as language selection, display settings, and last-visited game category. These improve your experience but are not strictly necessary.
• Analytics Cookies: Used to understand how Players navigate the doan55 platform — which pages are visited, how long sessions last, and which features are most used. This data is used in anonymised, aggregated form to improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unusual login patterns, and potential account compromise.

7.2 Cookie Control

When you first visit doan55, you will be presented with a cookie consent notice. You may accept all cookies or customise your preferences to accept only strictly necessary and functional cookies. You can also manage cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the doan55 platform.

doan55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security infrastructure includes:

• TLS 1.3 encryption for all data in transit between your device and doan55 servers.
• AES-256 encryption for sensitive data stored at rest, including CNIC data, payment identifiers, and account credentials.
• Bcrypt password hashing — your doan55 password is never stored in plain text. It is hashed using industry-standard algorithms before storage, meaning that even doan55 staff cannot read your password.
• Two-factor authentication (2FA) available for all accounts, adding an additional layer of security to your doan55 login.
• Real-time intrusion detection — doan55's security systems monitor for unusual access patterns and potential account compromise around the clock.
• Strict access controls — access to personal data within doan55 is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data receive data protection training.
• Regular security audits — doan55 conducts periodic internal and third-party security reviews of its data handling infrastructure.

Notwithstanding these measures, no internet transmission or electronic storage system is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, doan55 will notify affected users and the relevant regulatory authority within the timeframes required by applicable law.

doan55 retains personal data only for as long as is necessary for the purposes described in this policy, or as required by our licensing obligations and applicable law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to our international gaming licence.
• Financial transaction records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with financial record-keeping requirements.
• Gameplay and session data: Retained for two (2) years following the last recorded session, after which it is anonymised or deleted.
• Customer support correspondence: Retained for three (3) years following the resolution of the relevant matter, or longer if the matter relates to an ongoing dispute or regulatory inquiry.
• Marketing consent records: Retained for as long as the consent is active, plus three (3) years following withdrawal of consent, to demonstrate compliance.
• Cookie and analytics data: Session cookies are deleted at the end of your browser session. Persistent analytics data is retained for a maximum of thirteen (13) months before aggregation and deletion of individual identifiers.

When a retention period expires, doan55 securely deletes or anonymises the relevant data using industry-standard data destruction procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

As a doan55 user, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with the subject line "Privacy Rights Request." We will respond within 14 business days.

doan55 is strictly an adults-only platform. The minimum age to register and use any doan55 service is 21 years. doan55 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Age verification is a mandatory step in the doan55 account registration process, requiring submission of a valid Pakistani CNIC which confirms both identity and date of birth.

If doan55 becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to suspend the relevant account, delete all associated personal data, reverse any financial transactions where possible, and report the matter to the relevant authority if required by law. Parents or guardians who believe a minor may have registered on doan55 should contact the support team at [email protected] immediately.

doan55 operates as an international gaming platform. As a result, your personal data may be processed by doan55 or by our authorised third-party service providers in countries outside of Pakistan. This may include countries where data protection laws differ from those applicable in Pakistan.

Where personal data is transferred outside Pakistan or the European Economic Area (EEA), doan55 ensures that appropriate safeguards are in place to protect your data. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by relevant data protection authorities, incorporated into our agreements with international service providers.
• Adequacy decisions — transfers to countries recognised as providing an adequate level of data protection by the relevant regulatory authority.
• Binding corporate rules where applicable within corporate group structures.

By using the doan55 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside Pakistan for the purposes described in this Privacy Policy, subject to the safeguards described above.

doan55 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the services we offer, or applicable legal requirements. All changes will be published on this page with an updated effective date. Where a change is material — meaning it significantly affects your rights or how your data is used — doan55 will notify registered users by email prior to the change taking effect.

Your continued use of the doan55 platform following publication of a revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with any changes to this policy, you should discontinue use of the doan55 platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or doan55's data protection practices, please do not hesitate to get in touch. Our privacy team is available to assist you 24 hours a day, 7 days a week.

• Email: [email protected] — for all privacy rights requests, data protection enquiries, and complaints.
• Subject Line: Please use "Privacy Rights Request" or "Privacy Enquiry" so your message is routed to the correct team promptly.
• Response Time: We acknowledge all privacy correspondence within 2 business days and provide a substantive response within 14 business days.
• FAQ: For common questions about account data, cookies, and marketing preferences, visit the doan55 FAQ page.

If you are not satisfied with doan55's response to a privacy complaint, you have the right to lodge a complaint with the data protection supervisory authority relevant to doan55's licensing jurisdiction. Details of the applicable authority are available from the doan55 support team upon request.