555ace Privacy Policy

This Privacy Policy ("Policy") is issued by 555ace ("we", "us", "our") and applies to all personal data collected from individuals who access, register for, or use the 555ace platform, available at 555ace.org (the "Platform"). It applies to all users regardless of location, including players in Pakistan and internationally.

This Policy should be read alongside the 555ace Terms & Conditions and the Responsible Gaming Policy. Together these documents govern your relationship with 555ace.

What this Policy covers: The collection, use, storage, sharing, and protection of personal data you provide to 555ace directly, or that is generated through your use of the Platform. It also describes your rights with respect to your personal data and how to exercise those rights.

What this Policy does not cover: The data practices of third-party payment processors (JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah), game content providers, or any other third-party services accessed through the Platform. Those services operate under their own privacy frameworks, which you should review independently.

By registering an account, making a deposit, or continuing to use the 555ace Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not register for or use the 555ace Platform.

555ace collects the following categories of personal data from players, depending on the stage of interaction and the services used:

Registration Data

KYC Verification Data

Financial Data

Gameplay & Behavioural Data

Technical Data

555ace does not collect any special categories of sensitive personal data (such as health data, biometric data beyond standard liveness verification, or political/religious information) except to the extent strictly required to fulfil anti-fraud and responsible gaming obligations.

555ace collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, contact customer support, participate in promotions, or respond to surveys.
• Automatically through your use of the Platform — technical data including IP address, device information, session data, and cookie data is collected automatically when you access the 555ace website or application.
• From third-party verification providers — 555ace may receive verification data from third-party identity verification and fraud prevention services as part of the KYC process. This is necessary to fulfil our regulatory obligations.
• From payment processors — transaction confirmation data (but not full card or bank credentials) is shared with 555ace by payment processors including JazzCash, Easypaisa, and 555ace's banking partners to confirm deposit and withdrawal completion.

555ace does not purchase personal data from third-party data brokers or marketing list providers.

555ace processes your personal data for the following purposes:

555ace will not use your personal data for any purpose other than those listed above, or for a new purpose materially incompatible with the original purpose without providing prior notice and, where required by applicable law, obtaining your consent.

555ace processes personal data on one or more of the following legal bases, depending on the purpose and applicable law:

• Contract Performance: Processing necessary to perform the contract between you and 555ace — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) requirements, age verification obligations, and regulatory reporting duties imposed by 555ace's licensing authority.
• Legitimate Interests: Processing necessary for 555ace's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for optional marketing communications. You may withdraw consent at any time by contacting 555ace at [email protected], without affecting the lawfulness of processing carried out before withdrawal.

555ace does not sell or rent your personal data. We may share your personal data with the following categories of third parties, strictly as necessary:

• Payment Processors: JazzCash, Easypaisa, HBL, UBL, Meezan Bank, Bank Alfalah, and other banking partners, to process your deposits and withdrawals. These providers process only the data necessary to execute and confirm transactions.
• Identity Verification Providers: Third-party KYC and anti-fraud service providers who assist with age verification, document authentication, and fraud risk scoring as required by our regulatory obligations.
• Game Content Providers: Software providers whose games are hosted on the 555ace Platform may receive session and game data necessary to operate the game. They do not receive your personal contact or financial details.
• IT Infrastructure & Cloud Providers: Service providers who host and maintain the 555ace Platform infrastructure. These providers operate under strict data processing agreements and are prohibited from using your data for their own purposes.
• Regulatory & Legal Authorities: 555ace will disclose personal data to regulatory bodies, licensing authorities, law enforcement agencies, or courts where required to do so by applicable law or a lawful order. 555ace will notify you of such disclosure where legally permissible to do so.
• Group Companies: Where 555ace operates as part of a group of companies, personal data may be shared within that group for the purposes of platform management, compliance, and internal reporting — under the same data protection standards as described in this Policy.

All third parties with whom 555ace shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose in accordance with applicable data protection law.

555ace uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that enable certain Platform functions and help us understand how players interact with the Platform.

Types of cookies used by 555ace:

• Essential / Strictly Necessary Cookies: Required for the Platform to function — including maintaining your login session, enforcing security, and enabling the deposit and withdrawal process. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (language, currency display, responsible gaming settings) to improve your experience on return visits to 555ace.
• Analytics Cookies: Collect anonymised information about how players navigate and use the Platform — pages visited, session duration, features accessed. This data is used in aggregate to improve the 555ace user experience. No personally identifiable information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent activity, including unusual login patterns, device fingerprinting for account security, and bot detection.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect Platform functionality. Detailed cookie controls are also available via the cookie preference centre accessible from the 555ace footer.

555ace retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is performed, the resulting anonymised data may be retained indefinitely for aggregate analytics purposes without being considered personal data.

555ace implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and 555ace servers is encrypted using TLS 1.3 with AES-256 cipher suites. The padlock icon in your browser confirms this encryption is active.
• Encryption at Rest: Sensitive personal data stored on 555ace servers — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to 555ace employees and contractors who require it to perform their job functions. Access is controlled via role-based permissions and requires multi-factor authentication.
• Infrastructure Security: 555ace's infrastructure is hosted in secure data centres with physical access controls, redundant systems, and regular third-party penetration testing.
• Password Security: Account passwords are stored as salted cryptographic hashes. 555ace employees cannot view your password in plain text.
• Incident Response: 555ace maintains a data breach incident response plan. In the event of a security incident affecting your personal data, 555ace will notify affected individuals and relevant authorities in accordance with applicable legal requirements.

While 555ace takes all reasonable steps to protect your data, no system is completely impervious to security threats. You are responsible for maintaining the security of your 555ace account credentials. Enable two-factor authentication on your account for an additional layer of protection.

Depending on applicable data protection law, you may have the following rights with respect to your personal data held by 555ace:

• Right of Access: Request confirmation of whether 555ace holds personal data about you and, if so, a copy of that data together with information about how it is processed.
• Right to Rectification: Request correction of inaccurate or incomplete personal data held about you. Note that certain data (e.g., registered name, date of birth) may require documentary evidence to amend.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you have withdrawn consent. This right is subject to overriding legal retention obligations.
• Right to Restrict Processing: Request that 555ace restricts the processing of your personal data in specific circumstances, for example while a rectification request is being assessed.
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to 555ace, for transfer to another controller, where processing is based on consent or contract.
• Right to Object: Object to processing of your personal data where it is carried out on the basis of legitimate interests. 555ace will assess your objection and cease processing unless compelling legitimate grounds override your interests.
• Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.

To exercise any of these rights, contact 555ace at [email protected] with the subject line "Privacy Rights Request" and a description of your request. 555ace will respond within 30 days. We may need to verify your identity before processing certain requests.

The 555ace Platform is strictly for adults aged 18 years and over. 555ace does not knowingly collect personal data from individuals under the age of 18. Age verification is a mandatory step in the registration and KYC process at 555ace.

If 555ace becomes aware that personal data has been collected from an individual under 18, the relevant account will be immediately closed, all associated personal data will be deleted to the extent required by law, and any funds deposited will be returned in accordance with applicable regulations.

If you are a parent or guardian and believe that a person under 18 has registered an account with 555ace, please contact us immediately at [email protected] with the subject line "Underage Account" and we will investigate and act promptly.

555ace may transfer your personal data to third-party processors or group companies located outside Pakistan. Where such transfers occur, 555ace ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that applied within the Platform's primary operating jurisdiction. Such safeguards may include: standard contractual clauses approved by the relevant data protection authority, binding corporate rules for intra-group transfers, or adequacy decisions where applicable.

By using the 555ace Platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside Pakistan where required for legitimate operational purposes, subject always to the safeguards described above.

555ace may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email to the address on file and/or by a prominent notice on the Platform prior to the changes taking effect.

The version date displayed at the top of this Policy identifies the currently effective version. We encourage you to review this Policy periodically. Continued use of the 555ace Platform following notification of a revised Policy constitutes your acceptance of the updated terms.

If you have concerns about any changes to this Policy, you may contact 555ace before the changes take effect. If you do not accept a revised Policy, you should close your account prior to the effective date of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 555ace, please contact us using the details below:

If you are not satisfied with 555ace's response to a privacy complaint, you may have the right to escalate the matter to the relevant data protection supervisory authority in your jurisdiction. 555ace supports your right to do so and will cooperate fully with any regulatory investigation.

555ace takes all privacy complaints seriously. Upon receipt of a privacy complaint, we will: acknowledge receipt within 5 business days, investigate the matter thoroughly, provide a substantive response within 30 calendar days, and implement any corrective measures found to be necessary.