Privacy Policy

Who We Are — Data Controller

ace55 is the data controller responsible for the personal data of players and users of the ace55 Platform. As data controller, ace55 determines the purposes and means by which your personal data is processed in connection with the provision of online casino, sports betting, and related gaming services.

ace55 operates under an internationally recognised gaming license. The licensing authority's regulatory framework includes mandatory data protection requirements that ace55 is obligated to comply with and is subject to independent audit against. These requirements inform and shape the data handling practices described in this Privacy Policy.

Personal Data We Collect

ace55 collects personal data only to the extent necessary for the purposes described in this policy. The following categories of personal data may be collected depending on your interaction with the Platform:

How ace55 Collects Your Data

ace55 collects personal data through the following means:

• Direct Submission: Data you provide when creating an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or responding to surveys and promotions.
• Automated Technical Collection: Data collected automatically through server logs, cookies, pixel tags, and similar tracking technologies when you access and interact with the ace55 Platform.
• Third-Party Verification Services: Identity and age verification data obtained through authorised KYC service providers in the course of fulfilling our regulatory verification obligations.
• Payment Processing Partners: Transaction confirmation data returned by JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment processors following deposit or withdrawal processing.
• Fraud and Risk Monitoring Systems: Data generated through automated risk scoring, fraud detection algorithms, and AML screening processes that run as part of normal Platform operation.

How ace55 Uses Your Personal Data

ace55 processes your personal data for the following purposes:

• Account Provision & Management: Creating and maintaining your ace55 account, authenticating your login, processing your bets and game sessions, managing your PKR wallet balance, and providing the full range of ace55 gaming services.
• Identity & Age Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and confirming your identity to satisfy the regulatory obligations of our gaming license.
• Payment Processing: Processing deposits and withdrawal requests through your chosen Pakistani payment method (JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, or bank transfer) and maintaining accurate financial records.
• Customer Support: Responding to your queries, resolving complaints, processing refund requests, and maintaining records of our support interactions for quality assurance purposes.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, money laundering, and other prohibited activity on the Platform.
• Responsible Gaming Compliance: Monitoring player behaviour for signs of problem gambling, enforcing self-imposed and regulatory limits, administering self-exclusion requests, and fulfilling player protection obligations under our gaming license.
• Legal & Regulatory Compliance: Meeting AML, KYC, tax reporting, and data retention obligations under applicable law and the terms of our gaming license.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, user experience, game selection, and features.
• Promotional Communications: Sending you relevant promotions, bonus offers, and Platform updates where you have not opted out of such communications.

Legal Basis for Processing

ace55 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between ace55 and you as described in the ace55 Terms & Conditions — including account creation, game operation, payment processing, and KYC verification.
• Legal Obligation: Processing required to comply with our regulatory obligations under the terms of our gaming license, including AML screening, age verification, responsible gaming monitoring, and data retention requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, security monitoring, Platform integrity protection, customer support quality assurance, and aggregated analytics — where these interests are not overridden by your individual rights.
• Consent: Processing for the delivery of promotional communications and certain non-essential cookies, where your consent has been obtained and can be withdrawn at any time.

Sharing Your Personal Data

ace55 does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other approved payment partners receive transaction data necessary to process your deposits and withdrawals. These parties are contractually bound to protect your data.
• KYC & Identity Verification Providers: Authorised third-party identity verification services receive the personal data necessary to perform age and identity verification on ace55's behalf, under strict data processing agreements.
• Fraud & AML Screening Services: Transaction and identity data is shared with accredited fraud detection and anti-money laundering screening services as required by our licensing obligations.
• Gaming Software Providers: Game providers who supply live dealer, slot, and other game content to the ace55 Platform may receive game session data necessary to operate those games. This is limited to data required for game functionality.
• Regulatory Authorities: ace55 may disclose personal data to its gaming license authority, financial regulators, or law enforcement agencies where required to do so by law or by the terms of our gaming license.
• Professional Advisors: Legal counsel, auditors, and compliance advisors may access personal data on a confidential basis where necessary in connection with legal proceedings, audits, or regulatory matters.

Data Retention

ace55 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law or regulation. Key retention parameters are as follows:

• Active Account Data: All personal data associated with an active ace55 account is retained for the duration of the account's existence.
• Closed Account Data: Following account closure, ace55 retains personal and financial records for a minimum period of five (5) years in compliance with AML, gaming license, and financial record-keeping requirements.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years from the date of verification, or longer where required by applicable regulation.
• Communication Records: Support interaction records and email correspondence are retained for a minimum of three (3) years for quality assurance and dispute resolution purposes.
• Self-Exclusion Records: Records of self-exclusion requests are retained indefinitely to prevent re-registration by self-excluded players, regardless of account status.
• Technical Logs: Server access logs and security event logs are retained for up to twelve (12) months for fraud and security investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data destruction procedures.

Security Measures

ace55 implements a comprehensive, multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and ace55 servers is encrypted using TLS 1.2 or higher with 256-bit encryption keys.
• Encryption at Rest: Sensitive personal data stored on ace55 servers, including identity information and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Database and system access is restricted using role-based access controls (RBAC). All internal access to personal data is logged, and access privileges are reviewed periodically.
• Two-Factor Authentication: Critical internal systems require multi-factor authentication for all personnel with access to player data.
• Penetration Testing: ace55 systems undergo regular third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Incident Response: ace55 maintains a documented data breach incident response plan. In the event of a breach affecting your personal data, affected players will be notified in accordance with applicable regulatory requirements.
• Staff Training: All ace55 personnel with access to personal data receive mandatory data protection training and are bound by confidentiality obligations.

Cookies & Tracking Technologies

The ace55 Platform uses cookies and similar tracking technologies to enable core Platform functionality, remember your preferences, and — where you have consented — analyse Platform usage and deliver relevant promotions. A cookie is a small text file stored on your device by your browser when you visit a website.

ace55 uses the following categories of cookies:

• Essential Cookies: These cookies are strictly necessary for the ace55 Platform to function. They enable session management, account authentication, security token validation, and game session continuity. Essential cookies cannot be disabled without rendering the Platform non-functional.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — including page visit frequency, session duration, and feature engagement — to help us improve the Platform experience. These are activated only with your consent.
• Preference Cookies: Store your Platform preferences such as display settings, notification preferences, and language selection so they are remembered across sessions.
• Marketing Cookies: Used to measure the effectiveness of ace55's promotional activity and to personalise bonus offers where consent has been provided. ace55 does not use marketing cookies to share data with advertising networks.

You may manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core functions of the ace55 Platform, though some preference-based features may not retain your settings between sessions.

Your Data Rights

ace55 respects your rights in relation to your personal data. The following rights are available to you, exercisable by contacting ace55 at [email protected]:

International Data Transfers

The operation of an international online casino platform requires that some personal data is processed by service providers and systems located outside Pakistan. Where your personal data is transferred internationally — for example, to game software providers, cloud infrastructure providers, or KYC verification services — ace55 ensures that appropriate safeguards are in place to protect your data at the receiving end.

These safeguards include:

• Contractual data protection clauses in all agreements with international sub-processors, requiring them to apply standards equivalent to those required under ace55's licensing framework;
• Transfers only to service providers operating in jurisdictions with recognised data protection frameworks or under binding contractual protections;
• Regular review of the data protection standards of our international service providers as part of our compliance audit process.

By using the ace55 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside Pakistan, subject to the safeguards described above.

Children, Minors & the 21+ Requirement

The ace55 Platform is strictly intended for adults aged 21 years and over. ace55 does not knowingly collect personal data from any person under the age of 21. The KYC verification process is specifically designed to identify and exclude users who do not meet this minimum age requirement.

If ace55 discovers that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all activity on the account will be reviewed, and the personal data of the underage individual will be deleted or handled in accordance with applicable regulatory requirements governing underage gambling incidents.

Parents and guardians are encouraged to use appropriate parental control software to prevent minors from accessing online gaming platforms. ace55 accepts no liability for access by minors using the credentials of an adult account holder, but will take appropriate action if any such access is reported or detected.

Anti-Money Laundering & Fraud Detection

As a licensed gaming operator, ace55 is subject to mandatory anti-money laundering (AML) obligations. Compliance with these obligations requires ace55 to collect, verify, monitor, and in certain circumstances report personal and financial data relating to player accounts and transactions.

Specifically in connection with AML and fraud prevention, ace55 may:

• Screen player identities against international sanctions lists and politically exposed persons (PEP) databases;
• Monitor transaction patterns for indicators of money laundering, structuring, or other financial crime;
• Request enhanced due diligence documentation from players whose transaction activity triggers risk-based monitoring thresholds;
• File suspicious activity reports (SARs) with relevant financial intelligence authorities where legally required, without notifying the subject player of the report (as required by applicable AML regulations);
• Freeze or suspend account access pending completion of an AML review.

Updates to This Privacy Policy

ace55 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, ace55 will notify players by displaying a prominent notice on the Platform and updating the "Last Updated" date at the top of this document.

Where changes materially affect the way ace55 processes your personal data and require your consent, we will seek your explicit consent before the updated processing begins. Your continued use of the ace55 Platform following notification of a Privacy Policy update constitutes your acknowledgement of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how ace55 handles your personal information. The version of this policy displaying the most recent "Last Updated" date is the currently operative version.

Contact ace55 About Privacy

If you have questions about this Privacy Policy, wish to exercise any of your data rights, want to report a suspected data breach, or have concerns about how ace55 handles your personal information, please contact the ace55 Data Protection team:

• Email: [email protected] — use the subject line "Privacy Enquiry" or "Data Rights Request"
• Live Chat: Available 24/7 through the ace55 Platform — average response under 3 minutes
• Response Commitment: ace55 commits to acknowledging all privacy-related correspondence within 2 business days and providing a substantive response within 30 days.

This Privacy Policy was last reviewed and updated on 1 January 2026. The English-language version of this document is the definitive operative version.