ace55 Privacy Policy

1Who We Are

ace55 is an online casino and sports betting platform operating at ace55.biz, built primarily to serve players in Pakistan. The ace55 platform offers cricket betting, PSL markets, live dealer casino games, jackpot slots, Dragon and Tiger, and a range of other real-money entertainment products. For the purposes of this Privacy Policy, ace55 acts as the data controller in respect of all personal information collected through the Platform.

When we refer to "ace55," "we," "us," or "our" in this document, we mean the ace55 platform and its operating entity. When we refer to "you" or "your," we mean any individual who visits, registers on, or uses the ace55 Platform in any capacity.

2Scope of This Policy

This Privacy Policy applies to all personal data collected by ace55 through the following touchpoints:

• The ace55 website accessible at ace55.biz and any mobile-optimised version thereof.
• Account registration and the ongoing management of your ace55 account.
• Deposits, withdrawals, and all financial transactions conducted on the Platform.
• Customer support interactions via live chat, email, or any other communication channel provided by ace55.
• Marketing communications where you have opted in to receive them.
• KYC (Know Your Customer) identity verification processes.

This Policy should be read alongside the ace55 Terms & Conditions, which govern the overall use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding the handling of personal data, this Privacy Policy shall prevail.

3Data We Collect

ace55 collects personal information only to the extent necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the Platform. The categories of data we collect are set out below.

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, CNIC number, nationality	Registration & KYC verification
Contact Data	Email address, phone number, residential address	Registration & account updates
Financial Data	JazzCash / EasyPaisa account reference, bank account details, transaction history in PKR	Deposits, withdrawals, KYC
Technical Data	IP address, browser type, device type, operating system, session timestamps	Automatically on each visit
Usage Data	Pages visited, games played, bets placed, betting markets viewed, session duration	Automatically during platform use
Communication Data	Live chat transcripts, email correspondence, support ticket content	When you contact support
Marketing Preferences	Opted-in channels (email, SMS), promotion claim history	When you opt in or update preferences
Responsible Gaming Data	Deposit limits set, self-exclusion status, cool-off periods elected	When you use responsible gaming tools

4How We Use Your Data

ace55 uses the personal data we collect for the following clearly defined purposes:

• Account creation and management: To register your ace55 account, maintain your profile, and deliver the services you have requested.
• Identity verification (KYC): To verify that you meet the minimum age requirement of 21 years, confirm your identity in accordance with anti-money laundering obligations, and prevent fraudulent account activity.
• Payment processing: To facilitate deposits and withdrawals in PKR via JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, 1LINK, and other supported payment methods.
• Customer support: To respond to your queries, resolve disputes, and maintain records of support interactions for quality assurance.
• Platform security and fraud prevention: To monitor for suspicious activity, detect and prevent unauthorised account access, and protect the integrity of the Platform and the funds of all players.
• Legal and regulatory compliance: To meet our obligations under applicable anti-money laundering (AML) legislation, respond to lawful requests from regulatory or law enforcement authorities, and maintain required records.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to administer deposit limits, self-exclusion, and other responsible gaming tools you activate.
• Platform improvement: To analyse aggregated, anonymised usage data to improve the performance, design, and content of the ace55 Platform.
• Marketing communications (opt-in only): To send you promotional offers, bonus notifications, and platform updates where you have provided explicit consent to receive such communications.

ace55 does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required by AML or fraud-detection systems, in which case you have the right to request human review of any automated decision.

5Legal Basis for Processing

ace55 processes your personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to perform the contract between you and ace55 — including account operation, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable AML, KYC, and other regulatory obligations to which ace55 is subject.
• Legitimate interests: Processing carried out for ace55's legitimate business interests — such as fraud prevention, platform security, and service improvement — where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6Cookies & Tracking Technologies

ace55 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse platform usage. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies cannot be disabled as they are required for core services such as maintaining your login session, remembering your language preference, and securing transactions. No consent is required for these cookies.
• Functional Cookies: Used to remember preferences you have set — such as display settings, game history, and responsible gaming tool configurations — to improve your experience across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how visitors interact with the Platform. This helps ace55 identify popular content, improve navigation, and fix performance issues. Analytics data is never used to identify individual users.
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, such as account takeover attempts and bonus abuse, by identifying unusual access patterns.

You can manage cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ace55 Platform. ace55 does not use third-party advertising or behavioural tracking cookies.

7Third-Party Disclosure

ace55 does not sell, rent, or commercially disclose your personal data to any third party. We share data only in the limited circumstances described below, and only to the minimum extent necessary:

• Payment processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and 1LINK receive transaction data necessary to process your deposits and withdrawals. These partners operate under their own privacy policies and are bound by applicable financial regulations.
• KYC and identity verification providers: Third-party verification services receive your identity documents and CNIC information solely to complete the KYC process required to activate withdrawal functionality on your account.
• Fraud and AML screening providers: Transaction monitoring and fraud detection tools may process your financial data to identify suspicious activity and fulfil our AML compliance obligations.
• IT infrastructure and hosting providers: ace55's Platform is hosted on secure servers. Infrastructure providers are given access only to the technical data necessary to maintain system availability and security.
• Legal and regulatory authorities: ace55 will disclose personal data to law enforcement, regulatory bodies, or courts where required to do so by applicable law or in response to a valid legal order. ace55 will notify affected users of such disclosures where it is legally permissible to do so.

8Data Retention

ace55 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The general retention principles are:

• Active accounts: Personal data is retained for as long as your ace55 account remains open and active.
• Closed accounts: Following account closure, ace55 retains identity, financial, and transaction records for a minimum period as required under applicable AML and financial record-keeping obligations. This period is typically five years from the date of the last transaction.
• KYC documents: Identity documents submitted for KYC verification are retained for the minimum legally required period following account closure and are then securely deleted or anonymised.
• Support communications: Live chat transcripts and email correspondence are retained for up to two years after the relevant interaction closes, for quality assurance and dispute resolution purposes.
• Marketing data: Where you have opted in to marketing, your preference and contact data for that purpose is retained until you withdraw consent or request deletion.

When personal data is no longer required and no legal obligation to retain it exists, ace55 will securely delete or irreversibly anonymise it.

9Data Security

ace55 takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ace55 Platform.
• Encryption at rest for sensitive stored data, including payment details and identity documents.
• Strict role-based access controls ensuring that only authorised ace55 personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Two-factor authentication (2FA) availability for all registered player accounts.
• Incident response procedures to detect, investigate, and notify affected users in the event of a confirmed data breach.

While ace55 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, please contact the ace55 support team immediately via live chat.

10Your Data Rights

As a user of the ace55 Platform, you have the following rights in relation to your personal data. To exercise any of these rights, please contact the ace55 support team via live chat or at [email protected].

• Right of Access: You may request a copy of the personal data ace55 holds about you, along with information about how it is used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Many account details can be updated directly via your account profile settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ace55's legal obligation to retain certain records as described in Section 8.
• Right to Restriction of Processing: You may request that ace55 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding its accuracy is being resolved.
• Right to Data Portability: You may request that ace55 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to the processing of your personal data where it is based on ace55's legitimate interests, and ace55 will cease such processing unless there are compelling legitimate grounds that override your interests.

ace55 will respond to all data rights requests within a reasonable timeframe and at no charge for standard requests. Where requests are manifestly unfounded or excessive, ace55 reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided.

11Children & Minors

The ace55 Platform is strictly for adults aged 21 years and over. ace55 does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all accounts seeking to access Real-Money Services.

If ace55 discovers that personal data has been collected from a person under the age of 21, all associated data will be deleted immediately, the account will be permanently closed, and any winnings will be forfeited in accordance with the ace55 Terms & Conditions.

If you are a parent or guardian and believe a minor in your care has registered on the ace55 Platform, please contact the support team immediately via live chat so the matter can be addressed without delay.

12Marketing Communications

ace55 sends promotional communications — including bonus offers, PSL betting market alerts, new game announcements, and platform updates — only to users who have explicitly opted in to receive them at the time of registration or via their account settings.

• You may withdraw marketing consent at any time by updating your preferences in the account settings section, or by contacting the ace55 support team.
• Withdrawing marketing consent will not affect your ability to use the Platform or access non-promotional communications such as account notifications, transaction confirmations, and security alerts.
• ace55 does not share your contact details with third-party marketers for the purpose of their own marketing activities.
• Transactional communications — such as deposit confirmations, withdrawal updates, and KYC requests — are sent to all registered users regardless of marketing opt-in status, as they are necessary for the operation of your account.

13Changes to This Privacy Policy

ace55 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or platform operations. When material changes are made, ace55 will notify registered users via a prominent notice on the Platform or by email to the registered address associated with your account.

The effective date displayed at the top of this page indicates when the current version of the Privacy Policy came into force. Your continued use of the ace55 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this page periodically to stay informed about how ace55 protects your information. If you disagree with any changes to this Privacy Policy, you are entitled to close your account in accordance with the account closure process described in the ace55 Terms & Conditions.

14Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way ace55 handles your personal data, please get in touch through any of the following channels:

• Live Chat: Available in-platform 24 hours a day, 7 days a week. This is the fastest route for urgent privacy-related queries.
• Email: [email protected] — for detailed written data requests or formal complaints. ace55 aims to acknowledge all written privacy requests promptly.

If you believe ace55 has not adequately addressed your privacy concern, you have the right to raise a complaint with the relevant data protection or regulatory authority in your jurisdiction. ace55 encourages direct contact first, as most concerns can be resolved quickly and informally through the support team.

This Privacy Policy was last reviewed and updated on 1 January 2026. If any provision of this Privacy Policy is found to be unenforceable, the remaining provisions shall remain in full force. This Privacy Policy is provided in English and, in the event of any translation being made available, the English version shall prevail.