This Privacy Policy applies to the ace555 platform accessible at ace555.biz and governs all personal information collected from or about players who register, deposit, play games, place bets or otherwise interact with ace555 in any capacity. It covers all services provided by ace555 including sports betting, casino and skill games, live cricket score features, the VIP Club programme and all promotional campaigns.
ace555 is committed to protecting the privacy of its registered players. We understand that Pakistani players who trust us with their personal details and financial information deserve to know exactly how that information is handled. This document is written in plain, direct language — not dense legal text that nobody reads — because we want you to actually understand what you're agreeing to.
By registering with ace555 and using the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your data as described herein. If at any point you do not agree with how ace555 handles your personal data, you may request account deletion by emailing privacy@ace555.biz.
ACE555 serves registered Pakistani players — your data is handled with full respect for local privacy expectations
ace555 collects only the data that is necessary to provide you with a functional, secure and personalised gaming experience. We do not collect data for its own sake. The following categories of personal data may be collected depending on how you use the platform:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full name, date of birth, CNIC number, nationality | Required |
| Contact Data | Mobile number, email address, city of residence | Required |
| Account Credentials | Username, hashed password, security questions | Required |
| Financial Data | Easypaisa/JazzCash account reference, deposit/withdrawal history, PKR balances | Required |
| Verification Documents | CNIC scan, selfie with ID, proof of payment method | When requested |
| Gaming Activity | Bet history, game session logs, wagering patterns, bonus usage | Automatic |
| Device & Technical Data | IP address, device type, OS version, browser, session timestamps | Automatic |
| Communication Data | Support chat transcripts, email exchanges, complaint records | When applicable |
| Marketing Preferences | SMS/email opt-in status, notification settings |
ace555 does not collect full payment card numbers, CVV codes or banking PINs. All payment processing is handled by our regulated payment partners. We never store sensitive authentication data for your bank, Easypaisa or JazzCash accounts.
ace555 collects personal data through several channels, all of which are directly connected to your use of the platform:
- Registration: When you create your ace555 account, you provide your name, mobile number, email address and date of birth directly. This is the primary source of identity and contact data.
- KYC Verification: When ace555 requests identity verification (typically before a large withdrawal or if unusual activity is detected), you upload documents such as your CNIC or a payment account screenshot. These are processed by our regulated identity verification partner and the result is stored in your account file.
- Deposits and Withdrawals: Every financial transaction on ace555 generates a record including the amount, method, timestamp and reference number. This is necessary for accounting, fraud prevention and regulatory compliance.
- Platform Usage: When you play a game, place a bet or navigate the platform, ace555's servers automatically log activity data including timestamps, game round IDs, bet amounts and outcomes. This data is used to resolve disputes, detect fraud and improve the platform.
- Device and Network Data: Your IP address and device fingerprint are collected automatically when you connect to ace555. This helps us detect suspicious access patterns and account sharing that may indicate fraud.
- Support Interactions: When you contact ace555 support by email or live chat, the content of those communications is stored as part of your account record.
- Cookies and Tracking Technologies: See Section 9 for full details on how ace555 uses cookies.
KYC Verification
Identity checks at ace555 are handled by a regulated third-party verification service. Your CNIC data is processed for verification purposes only — it is not used for marketing or shared with gaming partners.
Gaming Activity Logs
Every bet and game session at ace555 is logged. These logs serve as the definitive record for dispute resolution. Players can request their own activity log at any time via a support ticket.
ace555 uses personal data for specific, defined purposes. We do not process your data for any purpose beyond what is necessary to deliver and improve our services, comply with legal obligations and protect the integrity of the platform. The main purposes are:
- Account management: Creating, maintaining and securing your ace555 account, including authentication and password management.
- Payment processing: Processing deposits and withdrawals to and from your designated Pakistani payment account. Matching payment records with account activity for reconciliation.
- Identity and age verification: Confirming that you are who you say you are and that you meet the minimum age requirement of 18 years. This is both a legal obligation and a responsible gaming commitment.
- Fraud detection and prevention: Analysing activity patterns to identify account sharing, bonus abuse, match fixing signals, money laundering indicators and other prohibited activities as described in our Terms and Conditions.
- Customer support: Using your account history and communication records to resolve queries, disputes and complaints effectively.
- Regulatory compliance: Maintaining transaction records, player identification files and activity logs as required by applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how players interact with ace555 features and to prioritise product improvements.
- Marketing communications: Where you have opted in to receive them, sending promotional offers, match notifications and platform updates by SMS or email. You may opt out at any time.
- Responsible gaming: Monitoring account activity to identify players who may be exhibiting signs of problem gambling, and providing appropriate support tools or interventions as described in our Responsible Gaming policy.
Your data at ace555 is used only to deliver a secure, personalised experience — never sold or exploited commercially
Every use of your personal data by ace555 rests on one of four lawful bases. We identify the applicable basis for each processing activity so you know exactly why your data is being used:
| Processing Purpose | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Payment processing and reconciliation | Contract performance |
| Identity and age verification (KYC) | Legal obligation |
| AML / fraud monitoring and reporting | Legal obligation |
| Customer support communications | Contract performance |
| Device and IP logging for security | Legitimate interest |
| Platform usage analytics (anonymised) | Legitimate interest |
| Responsible gaming monitoring | Legitimate interest |
| Promotional / marketing communications |
When ace555 relies on "legitimate interest" as the legal basis, it means we have weighed our business or safety interest against your privacy rights and determined that our interest does not override your rights. For example, logging IP addresses to detect account takeover attempts is a clear security necessity that a reasonable player would expect and accept.
ace555 does not sell, rent or trade your personal data to any third party for commercial purposes. Your data is only shared with third parties in the following specific circumstances:
- Payment processors: Easypaisa, JazzCash, NayaPay, SadaPay and banking partners receive the minimum information necessary to process your deposits and withdrawals. ace555 does not share your gaming history or bet data with payment providers.
- Identity verification providers: When KYC is triggered, relevant identity documents and personal details are shared with our regulated verification partner for the purpose of confirming your identity and age only. This partner is contractually bound to confidentiality and may not use your data for any other purpose.
- Fraud prevention services: ace555 participates in industry fraud-sharing arrangements where account identifiers associated with confirmed fraud (e.g., CNIC numbers used on accounts proven to be fraudulent) may be flagged across the network to protect Pakistani players from organised fraud rings.
- Legal and regulatory authorities: If required by a court order, regulatory directive, law enforcement request or AML reporting obligation, ace555 will disclose required data to the relevant authority. ace555 will notify you of such requests where legally permitted to do so.
- Platform service providers: Third-party technology providers who host ace555's infrastructure, provide customer support software or deliver push notifications may have access to data in the course of providing those services. All such providers operate under strict data processing agreements with ace555 and are prohibited from using player data for any purpose beyond the specific service they provide.
Some of ace555's third-party service providers are based outside Pakistan. Where data is transferred internationally, ace555 ensures appropriate safeguards are in place — including contractual clauses that require the receiving party to protect your data to a standard equivalent to what is applied within Pakistan.
ace555 applies technical and organisational security measures appropriate to the sensitivity of the data being protected. The following controls are in place:
- Encryption in transit: All communication between your browser or mobile app and ace555's servers is encrypted using TLS 1.2 or higher. This means your login credentials, personal details and financial data cannot be intercepted by third parties during transmission.
- Encryption at rest: Sensitive data fields stored in ace555's databases — including payment account references, identity document data and CNIC numbers — are encrypted at rest using industry-standard AES-256 encryption.
- Password hashing: ace555 never stores your password in plaintext. Passwords are hashed using a one-way algorithm before storage. This means even ace555 staff cannot see your password, and a database breach would not expose your actual credentials.
- Access controls: Access to player data within ace555 is restricted on a need-to-know basis. Customer support agents can see your account status and contact details but cannot see your full financial records or identity documents unless the specific support ticket requires it. Administrative access logs are maintained and reviewed regularly.
- Fraud monitoring: Automated systems continuously monitor for suspicious login patterns, unusual transaction activity and device anomalies that might indicate unauthorised account access.
- Security testing: ace555 conducts regular penetration testing and security audits of its platform to identify and remediate vulnerabilities before they can be exploited.
AES-256 Encryption
All sensitive personal and financial data stored by ace555 is encrypted using AES-256, the same standard used by major banks worldwide. Your CNIC data and payment references are never stored as plaintext.
Hashed Passwords
Your ace555 password is converted to a one-way hash immediately on creation. ace555 staff cannot read your password. If you forget it, a reset link is sent — we cannot retrieve the original because it no longer exists in readable form.
ace555 retains personal data only for as long as necessary to fulfil the purpose for which it was collected and to meet applicable legal, regulatory and business requirements. The following retention schedule applies:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account identity data | 5 years after account closure | AML regulatory requirement |
| Financial transaction records | 7 years after transaction date | Accounting and AML compliance |
| KYC / verification documents | 5 years after account closure | Regulatory obligation |
| Gaming activity logs (bets/sessions) | 3 years from date of activity | Dispute resolution capability |
| Support communications | 2 years from last contact | Service quality and disputes |
| Device and IP logs | 12 months from session date | Fraud detection |
| Marketing consent records | Until consent withdrawn + 12 months | Demonstrating consent lawfully |
Once the retention period for a given data category expires, ace555 securely deletes or anonymises the data. Anonymised data — from which no individual can be identified — may be retained indefinitely for aggregate analytics.
If you request deletion of your ace555 account, we will remove all data that is not subject to a legal retention requirement within 30 days. Data that must be retained for regulatory compliance (primarily financial records and identity verification files) will be held for the required period in restricted access storage and then deleted when the retention window expires.
ace555 uses cookies and similar tracking technologies on its website and mobile-optimised platform. Cookies are small text files stored on your device that help the platform remember your preferences, maintain your session and understand how the site is being used.
- Essential cookies: These are required for the platform to function at all. They manage your login session, remember your language preference and maintain your cart or bet slip during a session. Essential cookies cannot be disabled without breaking core platform functionality.
- Functional cookies: These remember optional preferences you've set, such as your preferred sports category, notification settings or display language. Disabling functional cookies means your preferences will reset with each visit.
- Analytics cookies: ace555 uses anonymised analytics tools to understand how players navigate the platform — which pages are most visited, where players drop off in the registration flow, and which game categories are most popular. This data is aggregated and does not identify individual players.
- Security cookies: Used to detect and prevent fraud, including CSRF protection tokens that prevent cross-site request forgery attacks on your account actions.
ace555 does not use third-party advertising cookies or sell browsing data to advertising networks. You can manage your cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in; blocking analytics cookies has no impact on your gameplay experience.
ACE555's mobile-optimised platform uses only essential and functional cookies — no advertising trackers
As an ace555 player, you have the following rights in relation to your personal data. These rights are available to all registered players regardless of their location in Pakistan:
To exercise any of these rights, email privacy@ace555.biz with your account details and a clear description of the right you wish to exercise. We will verify your identity before acting on any data request and will respond within 30 days.
ace555 operates strictly as an 18+ platform. We do not knowingly collect or process personal data belonging to anyone under the age of 18. Age verification is a core part of the registration and KYC processes at ace555 precisely to prevent underage access.
If ace555 discovers that a registered account belongs to a person under 18, all data associated with that account will be deleted and the account will be permanently closed. Any deposits made by underage users will be refunded to the original payment method after verification of ownership.
If you believe that a person under 18 may have accessed ace555 using your payment methods or personal details, please contact support immediately at support@ace555.biz so we can investigate and take appropriate action promptly.
Pakistani parents and guardians are encouraged to use device parental controls and to keep their financial account credentials (Easypaisa PIN, JazzCash PIN, bank app passwords) secure and inaccessible to minors. ace555 cannot be responsible for underage access that occurs through a minor using a parent's or guardian's device and credentials without authorisation.
ace555 may send promotional communications including bonus offers, PSL match notifications, new game launches and VIP programme updates. All marketing communications require your explicit opt-in consent before they are sent.
- You may opt in or out of marketing communications through the notification preferences section of your account dashboard at any time.
- Opting out of marketing does not affect transactional communications — you will still receive deposit confirmations, withdrawal notifications, security alerts and account verification messages regardless of your marketing preference.
- ace555 sends marketing via SMS to the registered Pakistani mobile number and/or by email to the registered email address. We do not use WhatsApp or other messaging platforms to send marketing without your explicit consent to that specific channel.
- Marketing consent records are maintained by ace555 as evidence that all communications were sent on a lawful basis.
Easy Opt-Out
Every marketing SMS and email from ace555 contains an unsubscribe option. You can also manage all communication preferences directly in your account settings without contacting support.
Transactional Messages
Withdrawal confirmations, deposit receipts and security alerts at ace555 are sent regardless of marketing preferences because they are essential to your account security and financial record-keeping.
ace555 reviews and updates this Privacy Policy periodically to reflect changes in data practices, applicable law or platform features. The effective date shown at the top of this document indicates when the current version was last updated.
For material changes — those that meaningfully affect how your personal data is collected, used or shared — ace555 will notify registered players by email to the registered account address at least 14 days before the changes take effect. This notice period is longer than for general Terms and Conditions changes because privacy matters deserve more time for consideration.
Minor updates such as clarifications, corrections to typos or formatting changes may be applied without advance notice. The effective date will be updated to reflect when any change is made.
If you do not agree with material changes to this Privacy Policy, you may request account deletion before the changes take effect. After the effective date, continued use of ace555 constitutes acceptance of the updated Privacy Policy.
If you have any questions, concerns or requests relating to this Privacy Policy or the handling of your personal data at ace555, please use the following contact options:
Privacy Requests
privacy@ace555.biz
For all data access, deletion, portability and correction requests. We respond within 30 days of identity verification.
General Support
support@ace555.biz
For account queries, payment issues and general platform questions. Live chat available 24/7 in Urdu and English.
ace555 has designated a data protection contact responsible for overseeing compliance with this Privacy Policy and applicable data protection obligations. If your privacy query is not resolved satisfactorily through our standard support channels, you may escalate to the data protection contact via privacy@ace555.biz with "DPO Escalation" in the subject line. We will acknowledge your escalation within 5 business days and provide a substantive response within 30 days.