ace55 Privacy Policy – How We Handle Your Data

This Privacy Policy ("Policy") is published by ace55 ("ace55", "we", "us", "our") and applies to all personal data collected, processed, and stored in connection with your use of the ace55 website at ace55.club and all associated services, products, and features ("Platform").

ace55 is committed to protecting the privacy of all players and visitors to the Platform. We operate in accordance with internationally recognised data protection principles and applicable privacy legislation. This Policy explains in plain terms what data we collect, why we collect it, how long we keep it, and what rights you have in relation to your personal information.

For the purposes of this Policy, ace55 is the data controller responsible for the personal data you provide or that is collected in connection with your use of the Platform. The data controller determines the purposes for which and the manner in which personal data is processed.

If you have any questions about how ace55 handles your personal data, you may contact the ace55 Data Protection team via the contact details set out in Section 16 of this Policy.

ace55 collects the following categories of personal data in connection with your use of the Platform:

• Identity data: Full legal name, date of birth, gender, nationality, and CNIC (Computerised National Identity Card) number or other government-issued identification document details.
• Contact data: Email address, Pakistani mobile number, and residential address (city, province, postal code).
• Financial data: Payment method details necessary to process deposits and withdrawals, including mobile wallet identifiers (JazzCash, Easypaisa) and bank account details (HBL, UBL, Meezan Bank, Bank Alfalah) as applicable. Full card or account numbers are not stored by ace55 – payment processing is handled by compliant third-party processors.
• KYC verification data: Copies of government-issued identification documents, proof of address documents, and selfie or live verification images as required by our Know Your Customer obligations.
• Account data: Username, encrypted password, account preferences, communication settings, and responsible gaming tool configurations.
• Transaction data: Records of all deposits, withdrawals, bets, wagers, game plays, bonus credits, and related financial activity on your ace55 account.
• Technical data: IP address, browser type and version, device type and operating system, time zone, referring URLs, and session activity logs.
• Usage data: Information about how you navigate and interact with the Platform, including pages viewed, games played, betting patterns, session duration, and click behaviour.
• Communications data: Records of your communications with the ace55 support team via live chat, email, or any other channel.

ace55 collects personal data through the following methods:

• Direct collection: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, or respond to any communication from ace55.
• Automated collection: Technical and usage data collected automatically as you interact with the Platform, using cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for further details on cookies.
• Third-party sources: ace55 may receive data about you from identity verification providers, fraud prevention services, payment processors, and publicly available sources where this is necessary for compliance, security, or legal purposes.

ace55 uses your personal data for the following purposes:

• To register and manage your ace55 account;
• To process deposits, withdrawals, bets, and gaming transactions;
• To verify your identity and age in compliance with our KYC obligations;
• To detect and prevent fraud, money laundering, and other prohibited activities;
• To administer bonuses, promotions, and loyalty programmes;
• To provide customer support and respond to your enquiries;
• To enforce our Terms & Conditions and other platform policies;
• To comply with applicable legal and regulatory obligations, including reporting requirements;
• To communicate service updates, security alerts, and policy changes to you;
• To send promotional communications where you have consented or where we have a legitimate interest in doing so, subject to your communication preferences;
• To monitor and improve the performance, security, and user experience of the Platform;
• To administer and enforce responsible gaming measures including deposit limits and self-exclusion.

ace55 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to register your account, execute bets and transactions, and deliver the services you have requested;
• Legal obligation: Processing required to comply with KYC, AML, responsible gaming, and other regulatory requirements applicable to licensed gaming operators;
• Legitimate interests: Processing for fraud prevention, platform security, technical improvement, and business analytics, where such interests are not overridden by your fundamental rights;
• Consent: Processing for direct marketing communications and certain non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

ace55 may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other payment service providers, for the purpose of processing your deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML service providers used to verify your identity and screen for prohibited persons lists;
• Fraud prevention services: Service providers that assist ace55 in identifying and preventing fraudulent account activity and financial crime;
• Gaming regulators and licensing authorities: Where required under the terms of ace55's gaming licence or applicable law;
• Law enforcement and government authorities: Where ace55 is required or permitted by law to disclose personal data in response to a valid legal request, court order, or regulatory instruction;
• Technology service providers: Cloud hosting, platform infrastructure, analytics, and security service providers engaged by ace55 under confidentiality and data processing agreements.

All third parties with whom ace55 shares personal data are required to maintain appropriate security standards and to use the data only for the purposes for which it was shared.

ace55 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files placed on your device that allow us to recognise returning users, maintain session state, and collect usage analytics.

The types of cookies used by ace55 include:

• Strictly necessary cookies: Required for the Platform to function, including session management and security tokens. These cannot be disabled without disrupting your use of the Platform;
• Functional cookies: Remember your preferences, language settings, and account configurations to personalise your experience;
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help ace55 improve navigation, performance, and content;
• Security cookies: Assist in detecting and preventing fraudulent sessions and bot activity.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core features of ace55, but may affect personalisation and analytics functionality.

ace55 retains your personal data for as long as your account is active and for a period after closure as required by applicable legal and regulatory obligations. Specific retention periods include:

• KYC and identity documents: retained for a minimum of 5 years after account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction records: retained for a minimum of 5 years after the date of each transaction;
• Communication records: retained for a minimum of 3 years after the communication;
• Technical logs: retained for a period of up to 12 months for security and fraud analysis purposes.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with ace55's data disposal procedures.

ace55 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Security measures include:

• 256-bit SSL/TLS encryption of all data in transit between your device and ace55 servers;
• Encryption of sensitive data at rest, including KYC documents and financial details;
• Role-based access controls restricting staff access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• Incident response procedures for detecting, containing, and reporting data security breaches.

While ace55 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You play a role in security too – keep your account credentials confidential and notify ace55 immediately if you suspect any unauthorised access.

Subject to applicable law, you have the following rights in relation to the personal data ace55 holds about you:

• Right of access: Request a copy of the personal data ace55 holds about you;
• Right to rectification: Request correction of inaccurate or incomplete personal data;
• Right to erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to restriction: Request that ace55 restricts the processing of your data in certain circumstances;
• Right to object: Object to processing based on legitimate interests, including direct marketing;
• Right to data portability: Request a machine-readable copy of the personal data you have provided to ace55 where technically feasible;
• Right to withdraw consent: Withdraw consent to processing based on consent at any time, without affecting prior lawful processing.

To exercise any of the above rights, contact the ace55 Data Protection team using the contact details in Section 16. ace55 will respond within the timeframe required by applicable law, typically within 30 calendar days. Verification of your identity will be required before any rights request is actioned.

ace55 is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 18. If ace55 becomes aware that personal data has been collected from a person under 18, the relevant account will be immediately closed and the data deleted, subject to any mandatory legal retention requirements.

If you are a parent or guardian and believe that a person under 18 may have registered on ace55 using your contact details or payment methods, please contact ace55 support immediately.

ace55 uses player transaction, session, and behavioural data to identify patterns consistent with problem gambling and to administer responsible gaming obligations. This may include automated analysis of betting frequency, deposit patterns, and session duration to trigger responsible gaming interventions.

Where a player self-excludes from ace55, their exclusion record is retained to prevent re-registration during the exclusion period. Self-exclusion records may be shared with responsible gaming organisations and multi-operator exclusion schemes as required to give effect to the exclusion. Visit our Responsible Gaming page for full details of available tools.

The ace55 Platform may contain references to third-party services such as payment processors whose privacy practices are governed by their own privacy policies. ace55 is not responsible for the privacy practices of third-party services and encourages you to review the relevant policies before sharing your personal data with any third party.

ace55 reserves the right to update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or platform features. Material changes will be communicated to registered users via email or on-platform notification at least 14 days before taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of ace55 after the effective date of a revised Policy constitutes acceptance of the changes.

For any questions, concerns, or rights requests relating to this Privacy Policy or your personal data, please contact the ace55 Data Protection team:

• Live Chat: Available 24/7 via the Help button on ace55.club;
• Email: support ace55.club

ace55 will acknowledge your request promptly and respond in full within the timeframe required by applicable law.