Privacy Policy
1. Introduction
This Privacy Policy ("Policy") describes how dona55 ("we", "us", "our", "the Platform", "the Operator"), accessible at dona55.cam, collects, uses, stores, shares and protects personal data relating to individuals ("User", "you", "your") who access or use the Platform.
dona55 is an English-language online sports betting and gaming information platform designed primarily for users in the Pakistani market. We understand that privacy is important to our users, and we are committed to handling personal data responsibly, transparently and in accordance with the principles set out in this Policy.
This Policy should be read alongside the Terms & Conditions and the Responsible Gambling Policy, all of which together govern your use of the Platform. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy.
2. Definitions
The following terms carry the meanings set out below when used in this Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information that relates to an identified or identifiable natural person, including name, email address, IP address, device identifiers and financial transaction records. |
| "Processing" | Any operation performed on personal data, including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data. For this Platform, the Data Controller is the operator of dona55.cam. |
| "Data Processor" | A third party that processes personal data on behalf of the Data Controller under a written agreement and in accordance with the Data Controller's instructions. |
| "Cookies" | Small text files placed on your device by the Platform to recognise your browser session, store preferences and support analytics. |
| "KYC" | Know Your Customer — the identity verification process used to confirm a User's identity and age before enabling full account functionality. |
| "AML" | Anti-Money Laundering — policies and procedures applied to detect and prevent the use of the Platform for financial crime. |
| "Platform" | The dona55 website accessible at dona55.cam, including all pages, features and services accessible via that domain. |
3. Personal Data We Collect
We collect the following categories of personal data in connection with your use of the Platform:
3.1 Identity & Contact Data
- Full legal name
- Date of birth
- Residential address (including city — for example, Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan or Peshawar)
- Email address
- Phone number (if provided)
- Government-issued identity document details (e.g., CNIC number, passport number) — collected during KYC verification
3.2 Account & Transaction Data
- Username and encrypted password
- Account registration date and history
- Deposit and withdrawal records, including amounts (referenced in PKR where applicable) and payment method type
- Betting and gaming history, including stakes, odds, results and winnings
- Bonus and promotional redemption records
3.3 Technical & Usage Data
- IP address and geolocation derived from IP
- Browser type and version
- Device type and operating system
- Session duration and page interaction data
- Referring URL and navigation path within the Platform
3.4 Communication Data
- Contents of support enquiries submitted via live chat or email
- Records of communications between you and the dona55 support team
3.5 Responsible Gambling Data
- Deposit limits, loss limits and session time limit settings
- Self-exclusion status and duration
- Any self-reported information about gambling habits provided to the support team
4. How We Collect Personal Data
Personal data is collected through the following channels:
- Direct registration: Information you provide when creating an Account, completing KYC verification or updating your profile.
- Platform interactions: Data generated automatically when you navigate the Platform, place bets, access casino games or contact support.
- Cookies and tracking technologies: Data collected via cookies, web beacons and similar technologies described in Section 11.
- Third-party verification services: Identity verification and fraud detection data received from KYC and AML service providers engaged by dona55.
- Payment processors: Confirmation data related to deposits and withdrawals processed through payment methods referenced on the Platform. Payment system names such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are referenced as examples of systems familiar to Pakistani users. None of these providers are affiliated with dona55 or endorse gambling operations.
5. Purposes of Processing
We process your personal data for the following purposes:
| Purpose | Description |
|---|---|
| Account administration | Creating, maintaining, securing and closing your Account; verifying your identity through KYC; managing login credentials. |
| Service delivery | Processing bets and casino game sessions; crediting winnings; settling markets; applying bonuses in accordance with promotional terms. |
| Payment processing | Processing deposits and withdrawal requests; verifying payment method ownership; complying with transaction limits. |
| Legal compliance | Fulfilling AML, KYC and fraud-prevention obligations; responding to lawful requests from regulatory or law enforcement authorities; retaining records as required by applicable law. |
| Responsible gambling | Applying deposit, loss and session time limits; implementing self-exclusion; monitoring for indicators of problem gambling behaviour in accordance with our Responsible Gambling Policy. |
| Platform security | Detecting and preventing fraud, account takeovers, collusion and other forms of abuse; monitoring for unusual betting patterns. |
| Customer support | Responding to enquiries, complaints and account-related requests submitted via live chat or email. |
| Platform improvement | Aggregated, anonymised analysis of usage data to improve Platform performance, interface design and content relevance. |
6. Legal Bases for Processing
Where data protection law requires a lawful basis for processing personal data, dona55 relies on the following bases:
- Contractual necessity: Processing required to perform the contract with you — i.e., providing the betting and gaming services you have signed up for, processing payments and settling bets.
- Legal obligation: Processing required to comply with applicable AML, KYC, fraud prevention and data retention obligations imposed by the operator's licensing jurisdiction.
- Legitimate interests: Processing for Platform security, fraud prevention, responsible gambling monitoring and aggregated usage analysis — where these interests are not overridden by your data protection rights.
- Consent: Where we rely on consent (for example, for non-essential cookies), we will request it separately and clearly. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
7. Data Sharing with Third Parties
dona55 does not sell or rent your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:
- KYC and AML service providers: Third-party identity verification and fraud detection platforms engaged to support the User verification process. These providers act as Data Processors under written agreements with dona55.
- Payment processing infrastructure: Technical intermediaries involved in routing deposit and withdrawal transactions. We share only the minimum data necessary to process the specific transaction. We do not share data with payment providers for their own marketing use.
- Platform technology providers: Hosting, content delivery, security and analytics vendors that process data on our behalf under strict contractual data processing terms.
- Legal and regulatory authorities: We may disclose personal data to law enforcement, regulators or courts where required by law, a valid legal process or a lawful government request.
- Professional advisers: Legal, financial and compliance advisers bound by professional confidentiality obligations where consultation is necessary.
8. International Data Transfers
dona55 may process or store personal data on servers located outside Pakistan. Where personal data is transferred to a country that does not provide an equivalent level of data protection, we apply appropriate safeguards — such as standard contractual clauses or equivalent transfer mechanisms — to protect the data in transit and at the destination.
dona55 does not claim to operate under Pakistani data protection law and does not hold any authorization from the Government of Pakistan or the Pakistan Telecommunication Authority (PTA) in relation to data processing. Users should be aware that data protection law in Pakistan is continuing to develop and that the PECA framework and proposed personal data protection legislation may affect the rights available to Pakistani residents. We encourage you to seek independent advice if this is relevant to your situation.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention principles apply:
- Active Account data: Retained for the duration of the Account relationship and for a reasonable period thereafter to handle post-closure queries, disputes or legal claims.
- KYC and identity verification documents: Retained for the minimum period required by the AML and identity verification obligations applicable under the operator's licensing framework — typically five years from the end of the business relationship.
- Transaction and betting records: Retained for a minimum of five years or such longer period as required by applicable regulatory obligations.
- Support communications: Retained for as long as reasonably necessary to resolve disputes and manage ongoing customer relationships.
- Technical and usage data: Retained in anonymised or aggregated form indefinitely for Platform analytics; identifiable technical data is deleted within a reasonable period after collection.
When personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our internal data management procedures.
10. Your Data Protection Rights
Depending on the data protection law applicable in your jurisdiction, you may have some or all of the following rights in relation to your personal data held by dona55. We will respond to verified requests within a reasonable timeframe:
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is being used and the legal basis for processing.
Right to Rectification
If personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or complete it without undue delay.
Right to Erasure
In certain circumstances, you may request deletion of your personal data. This right is subject to overriding obligations — including our AML record-keeping requirements — that may require us to retain certain data.
Right to Restriction
You may request that we restrict the processing of your personal data in specific circumstances — for example, while the accuracy of data is being contested or a legitimate interests objection is being evaluated.
Right to Portability
Where processing is based on consent or contractual necessity and carried out by automated means, you may have the right to receive your personal data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests at any time. Where the objection is to direct marketing (if applicable), processing will cease immediately upon receipt of the objection.
11. Cookies & Tracking Technologies
The Platform uses cookies and similar tracking technologies to support its operation and to understand how Users interact with the Platform. The following categories of cookies may be in use:
- Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
- Functional cookies: Store your preferences (such as language and display settings) to improve your experience on return visits.
- Analytics cookies: Help us understand aggregate usage patterns — such as which pages are visited most frequently — to guide Platform improvement. Data processed for analytics purposes is aggregated and does not identify individual users.
- Security cookies: Support fraud detection and bot-prevention measures applied to Platform login and registration flows.
Non-essential cookies (functional and analytics) are set only with your consent where required by applicable law. You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.
12. Data Security
dona55 applies technical and organisational security measures appropriate to the risk associated with processing personal data. These measures include but are not limited to:
- HTTPS/SSL encryption for all data transmitted between your browser and the Platform.
- Encryption of sensitive data fields (including passwords, stored as hashed values) at rest.
- Access controls that restrict internal access to personal data to authorised personnel with a legitimate operational need.
- Regular security assessments and monitoring of the Platform infrastructure for vulnerabilities and anomalous activity.
- Data Processing Agreements with all third-party vendors that handle personal data on our behalf.
While we apply reasonable security standards, no online platform can guarantee absolute security. If you become aware of any unauthorized access to your Account or suspect a security breach, please contact our support team immediately via live chat.
13. Minors
The Platform is strictly intended for adults aged 18 years and above — or the higher minimum age required by the operator's licensing jurisdiction or the User's local jurisdiction, whichever is greater. dona55 does not knowingly collect or process personal data from individuals under the minimum eligible age.
If we become aware that personal data has been collected from a User below the minimum eligible age, we will immediately close the associated Account, void any pending transactions and delete or anonymise the relevant personal data, subject to any overriding legal retention obligations.
Parents and guardians who believe a minor has registered on the Platform are requested to contact our support team immediately so that appropriate action can be taken without delay.
14. Specific Notice for Pakistani Users
dona55 is designed with Pakistani users in mind and is presented in English to serve that audience clearly. The following specific points are relevant to Pakistani residents:
- dona55 does not claim to operate under the jurisdiction of Pakistan data protection law, nor does it hold authorization from the Government of Pakistan, the PTA, the State Bank of Pakistan or any Pakistani provincial authority in relation to data processing or gambling operations.
- Payment system names referenced on this Platform — including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah — are familiar payment context references for Pakistani users. None of these providers have endorsed, affiliated with, or authorized dona55 to reference their name in connection with gambling services. These names are used solely to describe the types of payment systems commonly used in Pakistan.
- Pakistani users should be aware that the Prevention of Electronic Crimes Act (PECA) and related digital regulation may be relevant to online activity, including online gambling. dona55 does not provide legal advice and encourages all users to seek independent counsel regarding their obligations under Pakistani law.
- Communications from dona55 will be in English. Urdu-language support is available on request through the live chat channel.
15. Amendments to This Policy
dona55 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law or operational requirements. When material changes are made, registered Users will be notified by email or via an in-platform notification before the updated Policy takes effect.
The "Effective Date" and "Last Updated" fields at the top of this page will be revised each time the Policy is updated. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgement of the updated Policy.
16. Contact Us
If you have any questions about this Privacy Policy, wish to exercise any of your data protection rights, or want to raise a concern about how your personal data has been handled, please contact us through the following channels:
- Live Chat: Available 24/7 directly on the Platform — the fastest channel for Account-related data queries.
- Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line to ensure prompt routing.
- Response time: We aim to acknowledge privacy-related queries within 48 hours and to provide a substantive response within 30 days, or sooner where required by applicable law.
Privacy at a Glance
Six core principles that define how dona55 approaches your personal data.
We Don't Sell Your Data
Your personal data is never sold, rented or traded to third parties for marketing or advertising. It is used only to operate the Platform, comply with legal obligations and deliver the services you have requested.
SSL Encryption on Every Page
All data in transit between your browser and dona55 is encrypted via HTTPS/SSL. Sensitive stored data — including passwords — is protected by encryption and hashing at rest.
Minimum Data, Clear Purpose
We collect only the personal data that is necessary for the purposes described in this Policy. We do not collect data speculatively or "just in case." Every data category has a documented purpose and legal basis.
You Control Your Data
Subject to applicable law, you can request access to your data, ask for corrections, request deletion or restrict processing. All requests are handled by our support team and responded to within the timelines set out in this Policy.
Transparent Retention Periods
We keep your data for no longer than necessary. Specific retention periods for different data categories are disclosed in Section 9. KYC and transaction records are retained as required by AML obligations — all other data is deleted when it is no longer needed.
Material Changes, Advance Notice
When this Policy is materially updated, registered Users are notified by email or in-platform notification before changes take effect. The Effective Date at the top of this page is always kept current.
Your Privacy Is Taken Seriously at dona55
Now that you have reviewed our Privacy Policy, return to the homepage to explore the Platform — or visit the FAQ for answers to common account and data questions.
🔞 Adults 18+ only — or the higher minimum required by the operator/license jurisdiction. Local laws in Pakistan may restrict gambling. Please play responsibly.