55ace Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by 55ace ("we", "us", "our", or "the Platform") and governs the collection, processing, storage, and disclosure of personal data belonging to users ("you", "your", or "the Player") of the 55ace online gaming platform, accessible at 55ace.ws.

This Policy applies to all personal data we collect and process in connection with your use of the 55ace platform — whether you access it via a desktop browser, mobile browser, or any other device. It covers data collected during account registration, identity verification (KYC), financial transactions, gameplay activity, customer support interactions, and general browsing of the platform.

By creating a 55ace account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data in the manner described herein. If you do not agree with any aspect of this Policy, you should not use the 55ace platform and may request account closure as described in our Terms & Conditions.

2. Data We Collect

55ace collects only the personal data that is necessary to provide a safe, functional, and legally compliant gaming service. The categories of personal data we collect are set out below.

3. How Data is Collected

55ace collects your personal data through the following channels and mechanisms:

• Direct Submission: Information you actively provide when registering an account, completing KYC verification, initiating deposits or withdrawals, or contacting customer support.
• Automated Technical Collection: Data gathered automatically when you visit or use the platform — including IP addresses, browser fingerprints, cookies, session identifiers, and device information. This collection occurs in the background and requires no action from you.
• Payment Processors: Transaction confirmation data received from licensed payment service providers such as JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateways. 55ace does not store raw payment credentials — only transaction reference numbers and confirmation statuses.
• Identity Verification Services: Where 55ace uses a third-party KYC provider to verify your CNIC or passport, that provider may share verification outcome data (pass / fail / refer) with 55ace. The underlying document images are processed by the KYC provider under their own privacy policy.
• Customer Support Interactions: Any information you volunteer during live chat sessions, email correspondence to [email protected], or other support channels.

4. Why We Use Your Data

Every piece of personal data that 55ace collects is used for a defined, legitimate purpose. We do not process your data beyond what is necessary for those purposes. The primary purposes and the legal basis for each are described below:

• Account Management: To create, maintain, and operate your 55ace player account, including authentication, session management, and account-level communications. (Basis: Contractual necessity)
• Identity Verification (KYC): To comply with anti-money laundering (AML) regulations and verify that you meet the minimum age requirement of 21+ before processing withdrawal requests. (Basis: Legal obligation)
• Payment Processing: To process deposits, withdrawals, and refunds in PKR via your chosen payment method. Financial transaction data is retained as required by applicable financial record-keeping regulations. (Basis: Contractual necessity / Legal obligation)
• Platform Security & Fraud Prevention: To detect and prevent fraud, account takeovers, money laundering, bonus abuse, and other prohibited conduct. Technical data including IP addresses is central to this function. (Basis: Legitimate interest)
• Responsible Gaming Compliance: To honour self-exclusion requests, enforce deposit limits, and ensure that players who have opted into cooling-off periods are not actively marketed to or re-admitted before the exclusion period expires. (Basis: Legal obligation / Legitimate interest)
• Customer Support: To respond to your queries, resolve complaints, and improve the quality of our support service based on interaction history. (Basis: Contractual necessity)
• Legal Compliance: To fulfil obligations under applicable gaming regulations, tax laws, financial reporting requirements, and any lawful requests from regulatory or law enforcement authorities. (Basis: Legal obligation)
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the platform, optimise game performance, and tailor the user experience. This analysis does not involve individually identifiable data. (Basis: Legitimate interest)
• Marketing Communications: To send you promotional emails, SMS notifications, or in-platform messages about bonuses and offers — but only where you have explicitly opted in to receive such communications. You may withdraw your consent at any time through your account settings. (Basis: Consent)

5. Data Sharing

55ace does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share data only in the limited circumstances described below, and only to the extent necessary for the stated purpose:

• Payment Service Providers: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, SadaPay, and USDT TRC20 gateway processors receive only the transaction data required to process your payment. These providers operate under their own privacy frameworks and are subject to applicable financial regulations.
• KYC / Identity Verification Providers: Where a third-party identity verification service is used to check your CNIC or passport, your identity document data is shared with that provider solely for verification purposes and is subject to that provider's data processing agreement with 55ace.
• Regulatory & Law Enforcement Authorities: 55ace will disclose personal data to competent governmental, regulatory, or law enforcement authorities where required to do so by law, court order, or binding regulatory directive. We will, where legally permissible, notify you of such a request.
• Fraud Prevention Networks: Anonymised or pseudonymised risk signals may be shared within licensed fraud prevention networks to identify and block known fraudulent patterns. No individually identifiable information is shared for this purpose beyond what is strictly necessary.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of 55ace's business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections. You will be notified of any such transfer.

6. Cookies & Tracking

55ace uses cookies and similar tracking technologies to operate the platform reliably, secure your login session, and understand how players interact with the site. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and protect against cross-site request forgery (CSRF) attacks. You cannot opt out of these cookies without ceasing to use the platform.
• Functional Cookies: These remember your preferences — such as your preferred payment method display or recently viewed game categories — to improve your experience. They do not track you across external sites.
• Analytics Cookies: Aggregated, anonymised data about how players navigate the site is collected to identify performance bottlenecks and improve the user experience. No individually identifiable data is included in analytics reports.
• Security Cookies: Used to detect fraudulent login attempts, flag unusual account activity, and support our anti-bot mechanisms. These cookies are critical to platform security and cannot be disabled.

You can manage cookie preferences through your browser settings. Please note that disabling cookies beyond strictly necessary ones may affect platform functionality. 55ace does not use third-party advertising cookies or pixel trackers that report user behaviour to external advertising networks.

7. Data Retention

55ace retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are outlined below:

• Account & Identity Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with anti-money laundering record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in line with financial reporting obligations.
• KYC Documents: Retained for the duration of the account relationship and for five (5) years after account closure. Document images are securely deleted at the end of the retention period.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction, to support complaint resolution and service quality review.
• Self-Exclusion Records: Retained indefinitely where a permanent self-exclusion has been requested, to prevent re-registration. Temporary exclusion records are retained for five (5) years after the exclusion period ends.
• Technical & Log Data: Server logs and IP address records are retained for up to twelve (12) months, after which they are deleted or anonymised.
• Marketing Consent Records: Retained for as long as you remain opted in, plus three (3) years after consent is withdrawn, to demonstrate compliance with consent requirements.

When the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. Where anonymisation is not technically feasible, data is placed in a restricted archive accessible only to our compliance team for the purpose of responding to regulatory requests.

8. Security Measures

Protecting your personal data is a technical and operational priority for 55ace. We implement a layered security architecture that includes both technical controls and internal governance measures:

• SSL / TLS Encryption: All data transmitted between your device and 55ace servers is encrypted using industry-standard TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection.
• Password Hashing: User passwords are never stored in plain text. They are hashed using a modern, salted cryptographic hashing algorithm (bcrypt or equivalent) before storage. Even 55ace staff cannot retrieve your original password.
• Two-Factor Authentication (2FA): Players are strongly encouraged to enable 2FA on their accounts. When 2FA is active, access requires both your password and a one-time code delivered to your registered mobile number.
• Access Controls: Access to personal data within the 55ace organisation is restricted on a strict need-to-know basis. Customer support agents can view account metadata but cannot access unmasked financial credentials or KYC document images without documented justification and management approval.
• Infrastructure Security: 55ace's servers are hosted in data centres with physical security controls, intrusion detection systems, firewalls, and regular security patching schedules.
• Penetration Testing: The platform undergoes periodic security assessments, including penetration testing by qualified security professionals, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, 55ace will notify affected users and relevant authorities within the timeframes required by applicable regulations, and will publish a summary of the incident and remediation steps taken.

9. Your Rights

As a data subject, you hold a set of rights with respect to the personal data that 55ace holds about you. These rights are described below. To exercise any of them, contact us at [email protected] with the subject line "Data Subject Request" and your registered username. We will respond within 30 days of receipt.

• Right of Access: You may request a copy of the personal data we hold about you. We will provide this in a structured, commonly used format.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. For KYC-related corrections, updated identity documents may be required.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data. However, this right is subject to our legal obligations — for example, AML and financial record-keeping requirements mean that transaction data must be retained for the statutory period regardless of an erasure request. We will inform you of any such limitations.
• Right to Restriction of Processing: You may request that we restrict the processing of your data (for example, during the period in which you are contesting the accuracy of data we hold).
• Right to Data Portability: You may request that we provide your personal data in a machine-readable format (JSON or CSV) for the purpose of transferring it to another service provider, where technically feasible.
• Right to Object: You have the right to object to processing based on legitimate interest — in particular, direct marketing communications. Objecting to marketing communications will take effect immediately; objecting to other legitimate-interest processing will be assessed case by case.
• Right to Withdraw Consent: Where processing is based on consent (such as marketing emails or SMS notifications), you may withdraw your consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

10. Minors & Age Verification

55ace is strictly an adult platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step in our KYC process, and any account found to have been registered by or used by a person under 21 will be immediately suspended.

In the event that we discover we have inadvertently collected personal data from a minor, we will:

• Immediately suspend the account and cease all processing of data related to that account.
• Permanently delete all personal data associated with the account from our active systems within 72 hours of identification.
• Return any deposited funds (after investigation) to the payment method used, following a brief verification process to confirm the account holder's identity and age.
• Review how the underage registration occurred to prevent recurrence, and strengthen age-gate controls if a systemic gap is identified.

11. International Data Transfers

55ace operates as an internationally licensed gaming platform. As such, certain data processing activities — including server hosting, KYC verification, and payment processing — may involve the transfer of your personal data to entities or infrastructure located outside of Pakistan.

Where personal data is transferred internationally, 55ace ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that described in this Policy. Such safeguards include:

• Contractual data processing agreements that impose privacy and security obligations on the recipient entity.
• Use of hosting providers and technology partners that hold recognised international security certifications (such as ISO 27001 or SOC 2 Type II).
• Limiting the scope of data transferred to only what is strictly necessary for the purpose of the transfer.

55ace does not transfer your personal data to any country where doing so would be unlawful or where we cannot ensure adequate protection for your data. Pakistani players' data is treated with the same standards regardless of where it is ultimately processed.

12. Policy Changes

55ace may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. When we make material changes, we will provide reasonable advance notice through one or more of the following channels:

• A prominent notice displayed on the 55ace platform homepage or within your account dashboard.
• An email notification to your registered email address, where we have a valid address on file and the changes are significant enough to warrant direct notification.
• An in-platform notification banner visible on your next login after the update is published.

The "Last Reviewed" date at the top of this Policy will always reflect when the most recent version was published. We encourage you to review this Policy periodically. Your continued use of the 55ace platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

Where changes require fresh consent (for example, a new marketing-related processing activity), we will request that consent explicitly and will not rely on your continued use of the platform as implied acceptance for consent-based activities.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way in which 55ace handles your personal data, please reach out to our support team. All privacy-related queries are handled confidentially and with priority.

Email: [email protected] (plain text — not a clickable link)

Please use the subject line "Privacy Query" or "Data Subject Request" as appropriate, and include your registered 55ace username so our team can locate your account efficiently. We aim to respond to all privacy-related correspondence within 3 business days and to resolve data subject requests within 30 calendar days.

Support is available 24 hours a day, 7 days a week. Our team includes staff familiar with the specific context of Pakistani players — so whether you are reaching out from Karachi, Lahore, Islamabad, or anywhere else across Pakistan, you will receive a relevant, informed response rather than a generic offshore reply.