1Introduction
This Privacy Policy ("Policy") describes how donbet ("we", "us", "our"), the operator of the online betting and casino information platform available at donbet.cam ("the Platform"), collects, processes, stores and protects personal data relating to users of the Platform ("you", "your", "User").
Donbet is committed to protecting the privacy and personal data of all users, including Pakistani users who access the Platform from cities such as Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar. We process personal data in accordance with applicable data protection principles and are transparent about how that data is used.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we process your personal data as described herein, you should discontinue using the Platform. This Policy should be read alongside our Terms & Conditions.
Note for Pakistani Users: Pakistan does not currently have a comprehensive general data protection law equivalent to the EU's GDPR. Donbet nonetheless processes personal data in accordance with internationally recognised data protection principles. This Policy does not constitute legal advice regarding data rights under Pakistani law. Users are encouraged to seek independent legal guidance where required.
2Definitions
The following definitions apply throughout this Privacy Policy:
| Term | Meaning |
|---|---|
| "Personal Data" | Any information relating to an identified or identifiable natural person — including name, contact details, IP address, device identifiers and transactional data. |
| "Processing" | Any operation performed on personal data — including collection, recording, storage, use, disclosure, erasure or destruction. |
| "Data Controller" | The entity that determines the purposes and means of processing personal data — in this context, donbet. |
| "Data Processor" | A third party that processes personal data on behalf of donbet, under contractual instruction. |
| "Consent" | Freely given, specific, informed and unambiguous agreement by the User to the processing of their personal data for a stated purpose. |
| "Cookies" | Small text files placed on your device by a website that store session state, preferences and usage data. |
| "KYC" | Know Your Customer — the identity and age verification process conducted to confirm a user's identity and eligibility. |
3Data Controller
Donbet acts as the Data Controller in respect of personal data collected and processed through the Platform. As Data Controller, donbet determines the purposes for which your personal data is processed and the means by which that processing takes place.
Where donbet engages third-party service providers to process data on its behalf — such as hosting providers, analytics platforms, or payment processors — those parties act as Data Processors and are bound by contractual obligations requiring them to process data only in accordance with donbet's documented instructions and in compliance with applicable data protection requirements.
For all data protection enquiries, subject access requests or complaints, please contact the donbet data team using the contact details provided in Section 15 of this Policy.
4Personal Data We Collect
4.1 Data You Provide Directly
When you register an account or interact with the Platform, you may provide us with the following categories of personal data:
- Identity Data: Full legal name, date of birth, gender (where collected).
- Contact Data: Email address, mobile phone number, city and country of residence (e.g., Karachi, Lahore, Islamabad).
- Account Credentials: Username and hashed/encrypted password.
- KYC Documentation: Copies of identity documents such as CNIC or passport, proof of address and selfie/liveness verification images where required by the operator.
- Financial Data: Payment method references — which may include mobile wallet identifiers (e.g., Easypaisa or JazzCash account numbers), bank account references (e.g., HBL, UBL, Meezan Bank, Bank Alfalah account details) and cryptocurrency wallet addresses where applicable.
- Communication Data: Content of messages, support tickets or feedback submitted through the Platform.
4.2 Data Collected Automatically
When you use the Platform, certain data is collected automatically through technical means:
- Usage Data: Pages visited, time spent, click paths, search queries and feature interactions.
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution and referring URL.
- Session Data: Login timestamps, session duration and authentication activity logs.
- Cookie Data: Persistent and session cookie identifiers stored on your device. See Section 10 for full details.
4.3 Data from Third Parties
In limited circumstances, we may receive personal data about you from third parties — for example, from identity verification service providers used during the KYC process, or from payment processors confirming transaction status. Such data is handled in accordance with this Policy and the relevant third-party provider's own privacy commitments.
5Lawful Basis for Processing
Donbet processes personal data only where a recognised lawful basis exists. The primary bases applicable to our processing activities are:
| Lawful Basis | When It Applies |
|---|---|
| Contractual Necessity | Processing required to fulfil our contractual obligations to you — including account management, processing deposits and withdrawals, and delivering platform features. |
| Legal Obligation | Processing required to comply with applicable law — including AML (Anti-Money Laundering) obligations, KYC requirements and regulatory reporting duties. |
| Legitimate Interests | Processing necessary for donbet's legitimate business interests — including fraud prevention, platform security, service improvement and responsible gambling monitoring — where those interests are not overridden by your rights. |
| Consent | Processing activities where we have obtained your explicit, freely given consent — primarily for non-essential cookies and direct marketing communications. |
6How We Use Your Data
Donbet uses the personal data it collects for the following purposes:
- Account Administration: Creating and managing your registered user account, verifying your identity and maintaining account security.
- Service Delivery: Processing deposits and withdrawals, managing bonuses and promotions, and providing access to all platform features and content.
- KYC & Compliance: Verifying your identity, age and residential address to meet AML obligations and responsible gambling requirements.
- Fraud Prevention & Security: Detecting, investigating and preventing fraudulent activity, account compromise, money laundering and other prohibited conduct.
- Responsible Gambling: Monitoring account activity to identify potential signs of problem gambling and to administer responsible gambling controls such as deposit limits, cooling-off periods and self-exclusion requests.
- Customer Support: Responding to support requests, complaints and general enquiries submitted in English or Urdu.
- Platform Improvement: Analysing aggregated usage data to improve site performance, content quality, navigation and the overall user experience for Pakistani users.
- Legal Compliance: Meeting our obligations under applicable law and responding to lawful requests from competent authorities.
- Marketing Communications: Sending you promotional communications where you have opted in to receive them. You may withdraw this consent at any time.
7Data Sharing & Disclosure
Donbet does not sell, rent or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of third party where necessary and under appropriate data protection agreements:
- Identity Verification Providers: Third-party KYC services that process your identity documents and liveness checks to complete age and identity verification.
- Payment Processors: Financial service providers and payment gateways that process deposit and withdrawal transactions. Pakistani payment references such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah are mentioned as contextual references only — their inclusion does not imply they endorse gambling or that they process gambling transactions on donbet's behalf.
- Infrastructure & Hosting Providers: Cloud hosting and data centre providers that store platform data on our behalf under contractual data processing agreements.
- Analytics Providers: Aggregate, anonymised usage data may be shared with analytics platforms to help us improve platform performance. Personally identifiable data is not shared for this purpose.
- Legal & Regulatory Authorities: Where required by law, court order or regulatory mandate, donbet may be obligated to disclose personal data to competent authorities.
- Business Succession: In the event of a merger, acquisition or sale of all or part of donbet's business, personal data may be transferred to the acquiring entity subject to equivalent privacy protections.
Important: Donbet will never share your CNIC, passport details, financial account details or KYC documents with any party other than authorised identity verification providers and, where legally required, regulatory or law enforcement authorities.
8Data Retention
Donbet retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The retention periods applicable to different categories of data are determined by the nature of the data and our legal obligations.
| Data Category | Typical Retention Period |
|---|---|
| Account & Identity Data | Duration of account relationship plus a reasonable period following account closure to comply with legal obligations. |
| KYC Documents | As required by applicable AML regulations — typically a minimum of five years from the date of the relevant transaction or account closure. |
| Transaction Records | Minimum of five years from transaction date to comply with financial record-keeping requirements. |
| Support Communications | Up to three years from the date of the communication, or longer where the subject matter relates to an ongoing legal or compliance matter. |
| Technical & Log Data | Typically up to 12 months from collection, unless required for longer in connection with security investigations. |
| Cookie Data | Session cookies expire when the browser is closed. Persistent cookies expire as specified in Section 10. |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to any individual.
9International Data Transfers
Donbet operates internationally and your personal data may be processed in countries outside Pakistan. When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data — including contractual clauses, data processing agreements and, where applicable, transfers to jurisdictions that maintain adequate data protection standards.
By using the Platform, you acknowledge that your personal data may be transferred to, stored and processed in jurisdictions outside Pakistan. Donbet takes reasonable steps to ensure that such transfers are made only to parties that provide appropriate levels of data protection.
10Cookies & Tracking Technologies
Donbet uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns and improve the overall user experience. This section explains the types of cookies we use and how you can manage them.
10.1 Types of Cookies Used
10.2 Managing Cookies
You can manage your cookie preferences at any time through your browser settings. Most browsers allow you to view, block and delete cookies. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies in common browsers are available in each browser's help documentation.
11Your Rights
Depending on the data protection laws applicable to you, you may have the following rights in respect of your personal data held by donbet. We will respond to valid requests within a reasonable timeframe and in any event within 30 days of receipt.
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Right to Restriction
You may request that we restrict the processing of your personal data in certain circumstances — for example, while a dispute about accuracy is being resolved.
Right to Portability
Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes. Objections to direct marketing will always be honoured.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that took place before withdrawal.
Right to Complain
You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have not been respected.
To exercise any of these rights, please contact us using the details provided in Section 15. We may need to verify your identity before processing any request. We will not charge a fee for reasonable requests, but may charge a reasonable fee for requests that are manifestly unfounded or excessive.
12Children's Privacy
The donbet Platform is strictly intended for adults aged 18 or above — or the higher minimum age required by the applicable operator's license jurisdiction. We do not knowingly collect personal data from individuals under the age of 18.
If we become aware that personal data has been collected from a person under the applicable minimum age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has accessed the Platform or provided personal data, please contact us immediately using the details in Section 15.
Donbet actively supports age verification tools and encourages the use of parental control software by families in Pakistan. Protecting minors from gambling content is a shared responsibility. Please visit our Responsible Gambling page for more guidance on protecting young people.
13Data Security
Donbet implements a range of technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction or disclosure. These measures are reviewed and updated regularly to reflect evolving security standards and threat landscapes.
13.1 Technical Measures
- HTTPS encryption is enforced across all Platform pages — data transmitted between your browser and our servers is encrypted in transit.
- Passwords are stored in a hashed, salted format and are never stored in plaintext.
- Access to personal data within donbet's systems is restricted to authorised personnel on a need-to-know basis.
- Regular security assessments and vulnerability testing are conducted on Platform infrastructure.
13.2 Organisational Measures
- Staff who handle personal data receive appropriate data protection training.
- Data processing agreements are in place with all third-party processors who handle personal data on donbet's behalf.
- Internal data access policies and incident response procedures are maintained and reviewed regularly.
13.3 Your Responsibilities
While donbet takes appropriate steps to protect your data, you also have a role to play. You are responsible for keeping your account credentials confidential, using a strong and unique password, and notifying donbet promptly if you suspect your account has been compromised. Never share your login details with any third party.
Security Notice: Donbet will never ask you to provide your full password via email, live chat or any channel other than the secure login page. If you receive any communication claiming to be from donbet and requesting your password, treat it as a phishing attempt and report it to our support team immediately.
14Policy Amendments
Donbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law or Platform functionality. When material changes are made, the "Last Updated" date at the top of this page will be revised.
Where changes are material and affect how we process your personal data, we will endeavour to provide advance notice through the Platform or by email to registered users. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.
We encourage you to review this Policy periodically to stay informed about how donbet protects your personal information.
15Contact Us
If you have any questions, concerns or requests relating to this Privacy Policy or the processing of your personal data by donbet, please contact our data protection team. We are committed to responding to all legitimate privacy enquiries promptly and in plain English.
Our support team is able to handle enquiries in English and Urdu. Where possible, please include sufficient detail about your request — such as the specific right you wish to exercise or the nature of your concern — to allow us to respond effectively.
Data Protection Contact:
[email protected]
This email address is displayed as plain text for your reference only. For security reasons, please do not send copies of your CNIC, passport, payment details or other sensitive documents by unsecured email. We will advise you of a secure submission method upon receipt of your request. Response times may vary depending on enquiry volume and complexity.