55ace Privacy Policy

55ace ("we", "us", "our", "the Platform") operates the online gaming platform accessible at 55ace.site, offering casino games, sports betting, live dealer services, and related features to registered players in Pakistan and other permitted jurisdictions. This Privacy Policy sets out the basis on which any personal data we collect from you — or that you provide to us — will be processed by 55ace.

This Policy applies to all personal data collected through the 55ace website and platform, including data collected during account registration, KYC identity verification, deposit and withdrawal transactions, gameplay activity, customer support interactions, and communications via email or live chat. It does not apply to third-party websites or services that may be linked to or integrated with the 55ace platform — those parties govern their own data practices independently.

55ace is committed to collecting only the personal data that is necessary and proportionate for the purposes described in this Policy. We do not sell, rent, or trade your personal data to any third party for their own marketing purposes. This commitment is absolute and is not subject to exceptions.

For the purposes of applicable data protection law, the data controller responsible for personal data collected through the 55ace platform is the legal entity holding the international gaming license under which 55ace.site operates. 55ace determines the purposes and means of processing personal data collected through the platform in accordance with the obligations of that license, which include data handling, security, and retention standards that exceed baseline commercial requirements.

All data-related queries, subject access requests, correction requests, and deletion requests should be directed to the 55ace data team via the contact details provided in Section 16 of this Policy. Requests are acknowledged within 5 business days and resolved within 30 calendar days in the vast majority of cases, subject to the complexity of the request and applicable legal retention obligations.

55ace collects personal data in the following categories from Pakistani players and other platform users:

3.1 Registration Data

When you create a 55ace account, we collect: your Pakistani mobile number, chosen username, email address (where provided), chosen password (stored in irreversibly hashed form — never in plain text), and date of account creation.

3.2 Identity Verification (KYC) Data

To comply with our licensing obligations and to enforce the 21+ age restriction, 55ace requires identity verification before processing any withdrawal. KYC data includes: your full legal name as it appears on your CNIC, your CNIC number, your date of birth, your CNIC-registered address, and photographs of both sides of your CNIC card. This data is collected once, stored encrypted, and used only for identity and age verification purposes.

3.3 Financial Transaction Data

We record all deposit and withdrawal transactions associated with your 55ace account, including: transaction date and time, amount in PKR, payment method used (EasyPaisa, JazzCash, HBL, UBL, Meezan Bank, or USDT), transaction reference numbers, and transaction status. We do not store your EasyPaisa or JazzCash PIN, your bank account passwords, or your full payment account credentials — these are processed directly by the respective payment providers.

3.4 Gameplay and Sportsbook Activity Data

55ace records all gaming and betting activity associated with your account, including: games played, bets placed, wager amounts, outcomes, bonus usage, and session timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and internal analytics.

3.5 Technical and Device Data

We automatically collect technical data when you access 55ace.site, including: IP address, browser type and version, device type (mobile/desktop), operating system, screen resolution, and session duration data. This data is used for platform security, fraud prevention, and service optimisation — not for individual profiling or targeted advertising.

3.6 Communications Data

When you contact 55ace support via live chat or email, we retain a record of those communications including the content of your messages, the date and time of contact, and the resolution applied. This data is used for quality assurance, dispute resolution, and to improve support service quality.

55ace uses personal data collected from Pakistani players for the following purposes only. We do not use your personal data for purposes not listed here without obtaining your explicit consent in advance:

• Account Management: Creating, maintaining, and managing your 55ace player account, including processing login authentication and account security.
• Identity Verification & Age Compliance: Verifying your identity through the KYC process and confirming that you meet the 21+ age requirement before processing withdrawals. This is a licensing obligation.
• Payment Processing: Facilitating PKR deposits via EasyPaisa, JazzCash, and other supported methods, and processing withdrawal requests to your verified payment method.
• Game Provision & Sportsbook Operation: Delivering casino games, live dealer tables, cricket and sports betting markets, and all other 55ace platform features to your registered account.
• Bonus & Promotion Administration: Calculating and crediting bonus entitlements, tracking wagering requirement progress, and administering promotional campaigns including PSL cricket bonus events.
• Fraud Prevention & Security: Detecting and preventing unauthorised account access, suspicious transaction patterns, multi-accounting, bonus abuse, and money laundering activity. This is both a platform security measure and a licensing requirement.
• Responsible Gaming Monitoring: Monitoring account activity to identify patterns that may indicate problem gambling behaviour, and facilitating the application of responsible gaming tools including deposit limits, loss limits, and self-exclusion.
• Customer Support: Responding to queries submitted via live chat or email, investigating complaints, resolving disputes, and maintaining a record of resolutions.
• Legal Compliance: Meeting obligations under our international gaming license, including reporting requirements, audit obligations, and anti-money laundering procedures.
• Platform Analytics: Aggregated and anonymised platform usage analysis to improve game loading speeds, user experience, and payment flow performance for Pakistani players on mobile networks.

55ace processes personal data on one or more of the following legal bases depending on the specific processing activity involved:

• Contractual Necessity: Processing necessary to fulfil our obligations to you under the 55ace Terms and Conditions — including account creation, game provision, payment processing, and support. Without this processing, we cannot provide the 55ace service.
• Legal Obligation: Processing required to comply with our international gaming license obligations — including KYC, age verification, anti-money laundering procedures, and regulatory reporting. This processing is non-optional for a licensed gaming operator.
• Legitimate Interests: Processing carried out in 55ace's legitimate business interests where those interests do not override your privacy rights — including fraud detection, platform security monitoring, aggregated analytics, and responsible gaming behavioural monitoring.
• Consent: Where consent is the applicable legal basis — for example, for optional marketing communications — you will be asked to provide explicit, informed consent at the relevant point. You may withdraw consent at any time by contacting 55ace support.

55ace does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial use. This is an unconditional commitment. Data is shared with third parties only in the following strictly defined circumstances:

6.1 Payment Processing Partners

Deposit and withdrawal transactions at 55ace are facilitated by third-party payment processors including EasyPaisa (Telenor Microfinance Bank), JazzCash (Mobilink Microfinance Bank), HBL, UBL, and Meezan Bank. These partners receive only the minimum data necessary to process your specific transaction. They are contractually bound by their own data protection obligations and are not permitted to use your data for any purpose other than processing your payment.

6.2 Identity Verification Partners

55ace may use third-party identity verification service providers to assist with processing CNIC-based KYC submissions. These providers operate under strict data processing agreements and are prohibited from retaining, using, or sharing your identity data for any purpose beyond the specific verification task.

6.3 Game Software Providers

Games available in the 55ace lobby are provided by third-party game studios and live casino operators. These providers may collect aggregated, anonymised gameplay data for the purpose of RNG certification auditing and game performance optimisation. They do not receive your personal identification data, payment details, or account credentials.

6.4 Legal and Regulatory Disclosure

55ace may be required to disclose personal data to its licensing authority, law enforcement agencies, financial intelligence units, or courts of competent jurisdiction where such disclosure is required by law, court order, or enforceable regulatory instruction. 55ace will not voluntarily disclose your data to any government or regulatory body beyond the minimum required by binding legal obligation.

6.5 Successor Entities

In the event of a merger, acquisition, or transfer of substantially all assets of the 55ace platform to a successor entity, player personal data may be transferred to that entity as part of the transaction, subject to the successor entity being bound by obligations no less protective than those in this Privacy Policy.

Given that the majority of Pakistani 55ace players use EasyPaisa and JazzCash as their primary deposit and withdrawal method, the following specific data handling commitments apply to mobile wallet payment data:

When you initiate a deposit via EasyPaisa or JazzCash on the 55ace platform, you are redirected to or interact with a secure payment interface controlled entirely by that payment provider. The 55ace platform does not have visibility of, nor does it intercept, any authentication steps — including OTP entry or PIN confirmation — that occur within that interface.

Transaction records stored by 55ace in relation to EasyPaisa and JazzCash payments contain: the transaction date, the PKR amount, a transaction reference number, the payment method label (e.g., "EasyPaisa"), and the transaction status (completed, pending, or failed). No wallet account credentials or authentication tokens are retained by 55ace in connection with these records.

For withdrawal processing, 55ace retains the EasyPaisa or JazzCash mobile number registered to your verified account solely for the purpose of routing your withdrawal to the correct destination wallet. This mobile number is treated as sensitive financial data and is stored with the same encryption protections as your CNIC identity data.

55ace uses cookies and similar tracking technologies on the 55ace.site platform for the following purposes:

• Strictly Necessary Cookies: Session management cookies that are essential for maintaining your login state, navigating between games, and processing transactions. These cookies cannot be disabled without preventing you from using the 55ace platform. They do not collect personal data for profiling purposes and expire when your browser session ends.
• Security Cookies: Anti-fraud and security tokens that help 55ace detect unauthorised account access attempts and abnormal session behaviour. These typically persist for the duration of a logged-in session and are regenerated on each new login.
• Analytical Cookies: Aggregated, anonymised data about how players navigate the 55ace platform — which games are opened most frequently, which deposit flows experience drop-off, and which pages load slowest on Pakistani mobile networks. This data is used to optimise platform performance and is never linked to individual player identities in our analytics systems.
• Preference Cookies: Cookies that remember your language settings, lobby display preferences, and last-visited game categories to personalise your 55ace experience across sessions.

55ace does not use third-party advertising or behavioural targeting cookies. We do not share cookie data with advertising networks or data brokers. You can control cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the 55ace platform.

55ace retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or for as long as is required by applicable licensing or legal obligations — whichever period is longer. The following retention periods apply:

• Account and KYC Data: Retained for the full duration of your account with 55ace, and for a period of five (5) years following the permanent closure of your account. This retention is required by anti-money laundering regulations applicable under our gaming license.
• Financial Transaction Records: Retained for the full duration of your account and for five (5) years post-account closure. Transaction records may be retained for longer periods where required by a specific legal investigation or regulatory audit.
• Gameplay and Sportsbook Activity: Retained for the full duration of your account and for five (5) years following account closure, to support dispute resolution, responsible gaming audits, and licensing compliance reviews.
• Support Communications: Retained for a period of three (3) years from the date of the most recent communication in a given support thread, subject to earlier deletion at the Player's verified request where no ongoing dispute exists.
• Technical and Device Data: Retained on a rolling 13-month basis. Data older than 13 months is deleted from active systems automatically unless it has been flagged as relevant to an ongoing investigation.
• Anonymised Analytics Data: Retained indefinitely in aggregated, non-identifiable form for platform improvement purposes. Once data is fully anonymised it is no longer personal data and falls outside the scope of this Privacy Policy.

When personal data is no longer required under the applicable retention period, it is securely deleted from 55ace's systems using methods that render recovery impossible. CNIC photographs are specifically deleted by secure overwrite rather than simple file deletion.

55ace implements and maintains technical and organisational security measures appropriate to the sensitivity of the personal data it handles. Key security measures include:

• Transport Layer Encryption: All data transmitted between your browser or device and the 55ace platform is encrypted using TLS 1.3 with 256-bit AES cipher suites. This applies to all platform pages — including the login form, deposit and withdrawal flows, and the live casino interface.
• At-Rest Encryption: Sensitive personal data stored in 55ace databases — including CNIC data, hashed passwords, and financial transaction records — is encrypted at rest using AES-256 encryption.
• Access Controls: 55ace staff access to personal data is governed by role-based access controls. Only staff members with a documented, legitimate need to access specific data categories are granted that access. All staff data access events are logged and subject to periodic audit review.
• Password Security: Player passwords are stored using a one-way cryptographic hash function with per-account salting. 55ace never stores or has access to your password in plain text. If you forget your password, it cannot be retrieved — it must be reset via the verified mobile number on your account.
• Vulnerability Management: The 55ace platform undergoes periodic security reviews. Critical vulnerabilities are addressed within defined remediation timelines. Payment processing integrations are reviewed with each major update to EasyPaisa and JazzCash API versions.
• Incident Response: In the event of a data security incident that presents a risk to players' personal data, 55ace will assess the incident within 24 hours of becoming aware of it and will notify affected Players and relevant authorities in accordance with applicable obligations under our gaming license.

Subject to applicable data protection law and any overriding legal retention obligations, you have the following rights in relation to personal data that 55ace holds about you:

• Right of Access: You may request a copy of all personal data that 55ace holds about you. We will provide this in a structured, commonly used format within 30 calendar days of receiving a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request that it be corrected. For KYC data corrections, you will be required to submit updated CNIC documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of personal data that is no longer necessary for the purposes for which it was collected. This right is subject to overriding legal retention obligations — in particular, transaction records and KYC data must be retained for 5 years post-account closure under our licensing obligations and cannot be deleted earlier upon request.
• Right to Restriction of Processing: You may request that 55ace restricts processing of your personal data in certain circumstances — for example, where you contest the accuracy of data we hold, while that accuracy is being verified.
• Right to Data Portability: You may request a structured, machine-readable export of the personal data you have provided to 55ace, for the purpose of transferring it to another service. This applies to data processed on the basis of your consent or contractual necessity.
• Right to Object: Where processing is based on legitimate interests, you may object to that processing. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time by contacting 55ace support. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact the 55ace data team as described in Section 16. All requests will be acknowledged within 5 business days. We may require identity verification before acting on any data rights request to ensure we are responding to the verified account holder.

The 55ace platform is strictly intended for adults aged 21 years and above. 55ace does not knowingly collect personal data from individuals under the age of 21. The mandatory CNIC-based KYC verification process is specifically designed to detect and prevent under-age registration by confirming date of birth against an official government identity document before any withdrawal is permitted.

If 55ace becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, that data will be deleted immediately, the associated account will be permanently closed, and any funds deposited will be returned to the payment source net of any promotional value credited. Parents or guardians who believe a minor has registered on the 55ace platform should contact [email protected] immediately.

As an internationally licensed gaming platform, 55ace's infrastructure, data hosting, and operational teams may be located in jurisdictions outside of Pakistan. When personal data collected from Pakistani players is transferred to or processed in other jurisdictions, 55ace ensures that appropriate safeguards are in place to protect that data to a standard no less protective than the commitments made in this Privacy Policy.

Safeguards applied to international data transfers include contractual data processing agreements with all recipient organisations, technical access controls limiting who can access transferred data, and data minimisation practices ensuring that only data necessary for the specific cross-border processing task is transferred. Transfers of particularly sensitive data — including CNIC documentation — are subject to additional approval controls within 55ace's data governance framework.

Where 55ace uses third-party service providers located outside Pakistan — including game software providers, analytics platforms, or payment gateway infrastructure — those providers are selected on the basis of demonstrated data security practices and are subject to contractual data processing obligations that align with the commitments in this Policy.

The 55ace platform may contain references to or integrations with third-party services — including payment providers like EasyPaisa and JazzCash, game content providers, and software vendors. This Privacy Policy applies solely to personal data collected and processed by 55ace through 55ace.site and its platform features.

When you interact with a third-party service accessible from within the 55ace platform — including completing a payment through the EasyPaisa or JazzCash payment interface — you are interacting with that third party's own systems, which are governed by their own privacy policies. 55ace does not control and is not responsible for the privacy practices of third-party providers. We encourage you to review the privacy policies of EasyPaisa, JazzCash, and any other third-party service you interact with in connection with your 55ace account.

55ace reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, our platform features, or applicable legal requirements. When material changes are made to this Policy, we will notify registered Players via email to the address associated with their 55ace account, and the "Last Updated" date at the top of this page will be revised accordingly.

Material changes to this Privacy Policy will take effect 14 days after the notification email is sent to registered Players, giving you adequate opportunity to review the changes before they apply to your data. Continued use of the 55ace platform after the effective date of revised Policy terms constitutes acceptance of those revised terms.

Where changes to this Policy are required urgently due to a legal obligation or regulatory instruction, the effective date may be shortened, and 55ace will communicate the reason for the shorter effective date in the change notification. Non-material changes — such as clarifying edits or corrections to typographical errors — take effect immediately upon publication and may not be separately notified by email.

For any questions, concerns, or requests relating to this Privacy Policy or 55ace's handling of your personal data — including subject access requests, rectification requests, deletion requests, or consent withdrawal — please contact the 55ace data team through the following channels:

• Customer Support Email: [email protected]
• Live Chat: Available within the 55ace platform, 9:00 AM – 2:00 AM Pakistan Standard Time, seven days a week.
• Subject Line for Data Requests: PRIVACY REQUEST — [Your Registered Mobile Number]

All privacy-related requests are acknowledged within 5 business days and resolved within 30 calendar days in most cases. Where the complexity of a request requires additional time, you will be notified of the extended timeline within the initial 30-day period.

If you are unsatisfied with 55ace's response to a privacy complaint or data rights request, you may escalate the matter to the data protection oversight mechanism provided by 55ace's international gaming license authority. Details of the applicable oversight authority are available upon request from the 55ace support team.