dune55 Privacy Policy — How We Handle Your Personal Data

1. Introduction

This Privacy Policy describes how dune55 ("the Platform", "we", "us") collects, uses, stores and shares personal data from users ("you") of the dune55 website and mobile application. It applies to all registered account holders and to visitors who browse the platform without registering.

By creating an account on dune55 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you have questions about how we handle your data, you can contact our support team at any time through the live chat function available on the platform.

This Policy should be read alongside the dune55 Terms and Conditions, which set out the broader rules governing use of the platform. Where this Policy and the Terms and Conditions overlap on data-related matters, this Policy takes precedence for privacy questions specifically.

2. Data We Collect

The information we collect falls into the following categories. Not all data types are collected from every user — some are only gathered in specific circumstances, such as when you initiate a withdrawal or request an account review.

2.1 Registration Data

When you create an account on dune55, we collect the information you provide during the registration process. This includes:

• Full name as it appears on your official identification document.
• Date of birth — used to confirm you meet the 18+ age requirement.
• A valid Pakistan mobile number.
• Email address where you choose to provide one.
• Username and encrypted password credential.

2.2 Identity Verification Data

dune55 may require identity verification before processing withdrawals, when fraud is suspected or as part of responsible gaming procedures. Verification documents we may request include:

• Copy of your CNIC (Computerised National Identity Card) or passport.
• Proof of address where required — for example, a recent utility bill or bank statement.
• Selfie or live photo for biometric confirmation where applicable.

Verification documents are processed securely and are not retained longer than necessary for the purposes for which they were collected.

2.3 Transaction Data

We record details of all deposits, withdrawals and betting activity associated with your account. This includes transaction amounts in PKR, timestamps, payment method references and bet settlement records. This data is used for account management, dispute resolution and anti-fraud purposes.

2.4 Device and Usage Data

When you access dune55 through a browser or the mobile app, we automatically collect technical information including your IP address, device type, operating system, browser type and session activity logs. This information is used for platform security, fraud detection and service improvement — not for profiling or targeted advertising.

3. How We Use Your Data

dune55 uses the personal data we collect for the following purposes:

• Account management — creating, maintaining and securing your account, processing login requests and managing account settings.
• Transaction processing — handling deposits and withdrawals in PKR via JazzCash, Easypaisa, Raast and other supported methods; settling bets and applying bonus credits.
• Identity verification — confirming that you meet the age and eligibility requirements and that your identity matches the account you are operating.
• Fraud and security — detecting and preventing unauthorised access, suspicious account activity and abuse of promotions or betting markets.
• Responsible gaming — applying deposit limits, session controls and self-exclusion settings you have requested; monitoring for patterns that may indicate problem gambling behaviour as part of our duty of care.
• Customer support — responding to queries, resolving disputes and maintaining records of communications for quality and compliance purposes.
• Marketing communications — sending information about promotions, bonuses and platform updates, but only where you have opted in to receive such communications.
• Platform improvement — analysing aggregated, anonymised usage data to understand how the platform is used and where the experience can be improved.

4. Legal Basis for Processing

We process your personal data on one or more of the following legal grounds:

• Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you accepted when registering, including account management and transaction processing.
• Legitimate interests — fraud prevention, security monitoring and platform improvement, where our interests do not override your rights.
• Legal obligation — where we are required to retain or disclose data by applicable law, including requests from law enforcement or financial regulators where legally mandated.
• Consent — marketing communications and any other non-essential data processing, which you can withdraw at any time without affecting your ability to use the platform.

5. Data Sharing

dune55 does not sell your personal data to third parties. We may share limited information with the following categories of service providers and only to the extent necessary to operate the platform:

5.1 Payment Processors

Transaction data and relevant account references are shared with JazzCash, Easypaisa, Raast and other payment partners to process deposits and withdrawals. These providers have their own data handling obligations and dune55 does not control how payment processors manage their own records.

5.2 Identity Verification Providers

Where we use third-party verification services to confirm your CNIC or other identity documents, the relevant documents are shared with those providers under data processing agreements. Verification data is used solely for the purpose of confirming your identity and is not retained by verification providers beyond the verification process.

5.3 Game Software Providers

The Live Casino, slot game titles and some sports betting markets are provided by third-party software partners. Technical session identifiers and bet placement data may be shared with these providers to facilitate game operation and settle results. Personal details beyond what is required for the game session are not shared.

5.4 Legal and Regulatory Disclosure

We may be required to disclose personal data in response to a valid legal request from law enforcement or a court order. Where permitted by law, we will notify you of such requests before disclosing. We will only disclose the minimum information required to satisfy the legal obligation.

6. Payment Data and Financial Security

Financial transactions on dune55 — including deposits via JazzCash, Easypaisa and bank transfer, and withdrawals to your registered payment method — are processed through certified payment infrastructure. dune55 does not store full card numbers, mobile wallet PINs or online banking credentials on our own systems.

When you initiate a deposit or withdrawal, the transaction is processed directly between you and the payment provider using encrypted channels. dune55 receives confirmation of the transaction outcome but does not have access to the underlying financial credentials you use with the payment provider.

Transaction records — including amounts, timestamps, payment method types and account references — are retained as part of your account history for financial management, dispute resolution and compliance purposes.

7. Data Retention

We retain personal data for as long as your account is active or as needed to fulfil the purposes for which it was collected. The following general principles apply:

• Active account data is retained for the duration of the account relationship and for a reasonable period after account closure to handle any outstanding queries or disputes.
• Transaction records and bet history are retained for financial management and compliance purposes. Specific retention periods for financial records may be determined by applicable legal requirements.
• Identity verification documents are retained only for as long as required to fulfil the verification purpose and are securely deleted thereafter, subject to any legal obligation to retain them longer.
• Inactive accounts — where no login or transaction activity has occurred for 24 or more consecutive months — may be subject to account closure and data minimisation, after which only the minimum data required for legal compliance is retained.

8. Data Security

dune55 implements reasonable technical and organisational measures to protect personal data from unauthorised access, loss or misuse. These include encrypted data transmission, access controls limiting who can view personal data internally, and secure storage practices for sensitive information.

No online platform can guarantee absolute security against all threats. We encourage you to take steps to protect your own account by using a strong, unique password, not sharing your login credentials and logging out of your account when using shared devices. If you believe your account has been compromised, contact support immediately.

9. Cookies and Tracking

dune55 uses cookies and similar tracking technologies to support platform functionality and improve the user experience. Cookies are small data files stored on your device when you access the platform.

9.1 Functional Cookies

These are essential for the platform to work properly. They maintain your login session, store your account preferences and support core features like the bet slip and deposit flow. You cannot opt out of functional cookies and continue to use the platform.

9.2 Analytics Cookies

We use analytics tools to understand how users navigate the platform — which sections are most visited, where users drop off and how the mobile app performs. This data is aggregated and anonymised. You can opt out of analytics cookies through your browser settings without affecting platform functionality.

9.3 Marketing Cookies

If you have opted in to marketing communications, cookies may be used to track which promotions and content you engage with so that we can send more relevant offers. These cookies are only active where you have given consent and can be disabled through your account communication preferences.

10. Your Rights Over Your Data

You have a number of rights regarding the personal data dune55 holds about you. These rights can be exercised by contacting our support team through the live chat function or via the email address registered on your account.

We aim to respond to data rights requests within 30 days. Where a request is complex or we receive a high volume of requests, we may need up to an additional 60 days and will notify you of the extension within the initial 30-day period.

11. Minors and Under-18 Access

dune55 is strictly for users aged 18 and above. We do not knowingly collect or process personal data from individuals under the age of 18. If we become aware that an account has been registered by a minor, the account will be closed immediately and all associated data will be deleted except where retention is required to document the closure.

If you are a parent or guardian and you believe a minor has registered on the platform, please contact our support team immediately. We will investigate and take appropriate action as a priority.

12. Changes to This Policy

dune55 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features or applicable legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active account holders via the email address registered on their account or through a platform notification.

We encourage you to review this Policy periodically. Continued use of the platform following an update constitutes acceptance of the revised Policy. If you have concerns about any changes, please contact our support team before continuing to use the platform.

13. Contact and Data Queries

If you have any questions about this Privacy Policy, how your personal data is handled, or you wish to exercise any of your data rights, you can reach our support team through:

• Live chat — available on the platform during support hours, typically the fastest way to get a response.
• Email — [email protected] (plain text only — this address does not accept attachments containing identity documents; those should only be submitted through the verified upload process in your account).

For responsible gaming concerns — including self-exclusion requests, deposit limit changes or any queries about gaming behaviour management — please visit the Responsible Gaming page or raise the matter directly with our support team. Responsible gaming requests are treated as a priority and handled with full confidentiality.