ac55 Privacy Policy

01 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information relating to an identified or identifiable natural person — including your name, CNIC number, mobile number, email address, financial details, and IP address.
• "Processing" means any operation performed on personal data, including collection, storage, use, transfer, deletion, or any combination thereof.
• "Data Controller" refers to ac55, the entity that determines the purposes and means of processing your personal data.
• "Data Processor" refers to a third party that processes personal data on behalf of ac55, such as payment service providers or identity verification vendors.
• "Player," "you," "your" refers to any registered user of the ac55 platform.
• "Platform" means the ac55 website, web application, and all associated services.
• "KYC" means Know Your Customer — the identity and payment verification process required under ac55's licensing obligations.

02 Who We Are

ac55 is an online casino and sports betting platform operating under an international gaming license. ac55 acts as the Data Controller for all personal data processed in connection with the ac55 platform.

ac55 is committed to maintaining the privacy and security of player data in compliance with our licensing obligations and the data protection principles described in this policy. Our primary contact for privacy-related matters is our support team, reachable at the contact details provided in Section 17 of this policy.

Our platform is specifically designed to serve Pakistani players, including residents of Karachi, Lahore, Islamabad, Faisalabad, Rawalpindi, and other cities across Pakistan. All data collection and processing activities described in this policy apply equally to all registered ac55 players regardless of city or province of residence.

03 Personal Data We Collect

ac55 collects the following categories of personal data from registered players and platform visitors:

3.1 Registration Data

When you create an ac55 account, we collect your full legal name, date of birth, email address, Pakistani mobile number, and a hashed version of your chosen password. We use this data to create and manage your account.

3.2 Identity Verification (KYC) Data

For the purposes of KYC compliance, ac55 collects copies of your Pakistani Computerised National Identity Card (CNIC) or other government-issued identification, a photograph or selfie for identity confirmation, and documentation confirming ownership of the payment method you use to deposit.

3.3 Financial Transaction Data

ac55 records details of all deposits, withdrawals, and bonus transactions associated with your account, including transaction amounts in PKR, timestamps, payment method references (e.g., JazzCash number, bank account name), and transaction statuses.

3.4 Gaming Activity Data

We collect records of all games played on ac55, including game type, bet amounts, session durations, win/loss outcomes, and bonus wagering progress. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.

3.5 Technical and Device Data

When you access ac55, our systems automatically collect your IP address, browser type and version, device type and operating system, referring URL, pages visited, and session timestamps. This technical data is used for security, fraud prevention, and platform optimisation.

3.6 Communication Data

If you contact ac55 support via live chat, email, Messenger, or Viber, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

04 How We Collect Your Data

ac55 collects personal data through the following means:

• Directly from you: When you register an account, submit KYC documents, make deposits or withdrawals, contact support, respond to surveys, or participate in promotions.
• Automatically: Through cookies, log files, and server records when you visit or use the ac55 platform.
• From third parties: From identity verification service providers (for KYC purposes), payment processors (for transaction verification), and fraud detection services (for account security).

05 Legal Basis for Processing

ac55 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the ac55 service to you under the Terms and Conditions you accepted at registration — including account management, payment processing, game operation, and customer support.
• Legal obligation: Processing required to comply with ac55's international gaming license, anti-money laundering (AML) obligations, and other applicable regulatory requirements — including KYC verification and transaction reporting.
• Legitimate interests: Processing necessary for ac55's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Where you have provided specific consent, such as opting into marketing communications. Consent can be withdrawn at any time as described in Section 12.

06 How We Use Your Personal Data

ac55 uses your personal data for the following purposes:

• Creating and managing your ac55 account and player profile.
• Processing deposits through JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, Raast, and USDT, and processing withdrawal requests to verified payment methods.
• Verifying your identity and age (21+) as required by our licensing and AML obligations.
• Operating and maintaining game records, transaction histories, and bet settlement records.
• Detecting and preventing fraud, money laundering, bonus abuse, and other prohibited activity as described in the ac55 Terms and Conditions.
• Monitoring gaming activity to identify at-risk players and administer responsible gaming tools where appropriate.
• Responding to your customer support enquiries and resolving disputes.
• Sending you service communications, including transaction confirmations, security alerts, and account notifications.
• Sending marketing communications where you have consented to receive them.
• Complying with requests from regulators, law enforcement, or our licensing authority where legally required.
• Analysing aggregated, anonymised platform usage data to improve the ac55 gaming experience.

07 Sharing Your Personal Data

ac55 does not sell your personal data. We share your data only in the following limited circumstances:

7.1 Licensed Game Providers

To operate games on the ac55 platform, we share necessary player session data with our licensed game providers. These providers are contractually bound to use such data only for the purpose of operating the relevant games and are prohibited from using it for any other purpose.

7.2 Payment Processors

To process your deposits and withdrawals, ac55 shares relevant transaction data with payment service providers including JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and our USDT processing service. These providers operate under their own privacy policies and applicable financial regulation.

7.3 Identity Verification Services

ac55 uses third-party identity verification vendors to assist with KYC processing. These vendors receive only the minimum data necessary to complete identity and document verification and are contractually prohibited from retaining or repurposing that data.

7.4 Regulatory and Legal Disclosure

ac55 may disclose your personal data to our licensing authority, financial intelligence regulators, or law enforcement agencies where required by applicable law, court order, or our licensing obligations. ac55 will notify you of any such disclosure where legally permitted to do so.

7.5 Business Transfers

In the event of a merger, acquisition, or sale of ac55 or its assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify registered players of any such transfer and the privacy protections that apply to transferred data.

08 Cookies & Tracking Technologies

ac55 uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve your experience. The categories of cookies used by ac55 are as follows:

• Essential Cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled without breaking the ac55 service.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymised data about how players use the ac55 platform, which pages are visited, and how long sessions last. This data is used in aggregate to improve the platform.
• Security Cookies: Assist in fraud detection by tracking unusual access patterns, device fingerprinting, and IP consistency checks.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your ac55 account.

09 Data Security

ac55 implements robust technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: Personal and financial data is encrypted at rest using AES-256. All data transmitted between your device and ac55 servers is protected by TLS 1.3.
• Access Controls: Access to personal data within ac55's systems is restricted on a strict need-to-know basis. Staff with access to sensitive player data undergo background checks and are bound by confidentiality obligations.
• Two-Factor Authentication: ac55 provides 2FA for all player accounts. We strongly recommend enabling it.
• Penetration Testing: ac55 conducts regular security assessments to identify and remediate vulnerabilities in the platform.
• Incident Response: ac55 maintains a data breach response plan. In the event of a breach that affects your personal data, you will be notified within the timeframe required by our licensing obligations.

While ac55 takes all reasonable precautions, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials.

10 Data Retention

ac55 retains your personal data for the following periods:

• Active accounts: Personal data is retained for the duration of your active account relationship with ac55.
• Following account closure: KYC documentation, transaction records, and gaming activity data are retained for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering regulations and our international gaming license requirements.
• Support communications: Customer support records are retained for three (3) years following the resolution of the relevant query or dispute.
• Marketing data: Email addresses and communication preferences for marketing purposes are retained until you withdraw your consent or request deletion, after which they are removed from marketing systems within 30 days.

Once the applicable retention period expires, ac55 securely deletes or anonymises your personal data so that it can no longer be associated with you.

11 Your Privacy Rights

As an ac55 player, you hold the following rights with respect to your personal data. To exercise any of these rights, contact ac55 support as described in Section 17.

• Right of Access: You may request a copy of the personal data ac55 holds about you. ac55 will respond to verified access requests within 30 days.
• Right of Rectification: If any personal data held by ac55 is inaccurate or incomplete, you may request that it be corrected.
• Right to Erasure: You may request the deletion of your personal data. Note that ac55 is legally required to retain certain data for AML compliance purposes, so erasure requests cannot be fulfilled for data that must be retained under applicable regulations.
• Right to Restrict Processing: In certain circumstances, you may request that ac55 restrict the processing of your data — for example, while a dispute is being investigated.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ac55, for the purpose of transferring it to another service provider.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to Withdraw Consent: Where ac55 processes your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

12 Marketing Communications

ac55 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, tournaments, and special offers — but only where you have provided your consent to receive marketing communications at registration or subsequently.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email from ac55.
• Replying "STOP" to any marketing SMS.
• Updating your communication preferences in your ac55 account settings.
• Contacting ac55 support and requesting removal from marketing lists.

Opting out of marketing communications does not affect service communications — you will continue to receive transaction confirmations, security alerts, and other account notifications that are necessary for the operation of your ac55 account.

13 Children's and Minors' Privacy

The ac55 platform is strictly for individuals aged 21 years and above. ac55 does not knowingly collect personal data from any person under the age of 21. If ac55 discovers or suspects that an account has been registered by a person under 21, that account will be immediately suspended, KYC verification will be initiated, and if the player is confirmed to be underage, all data will be processed in accordance with our legal obligations before deletion.

If you believe that a minor has registered an ac55 account or is using the platform, please contact ac55 support immediately so that we can investigate and take appropriate action.

14 International Data Transfers

As an internationally licensed gaming platform, ac55 may process and store your personal data on servers located outside Pakistan. Where such transfers occur, ac55 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this policy.

Safeguards employed for international transfers include:

• Contractual clauses requiring recipient parties to maintain equivalent data protection standards.
• Transfers only to jurisdictions or service providers that operate under recognised data protection frameworks.
• Technical controls ensuring data remains encrypted during transfer and at rest at the destination.

15 Third-Party Links

The ac55 platform may contain links to third-party websites, including our licensed game providers' informational pages. This Privacy Policy applies only to the ac55 platform. ac55 is not responsible for the privacy practices of any third-party websites. We encourage you to review the privacy policies of any external sites you visit.

16 Changes to This Privacy Policy

ac55 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will notify registered players by email or through an in-platform notice at least 7 days before the changes come into effect.

The date of the most recent update is displayed at the top of this page. Your continued use of the ac55 platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised policy, you may close your account and request withdrawal of your balance prior to the effective date.

17 Contact & Privacy Complaints

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a privacy-related complaint, please contact ac55 through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat widget on the ac55 platform
• Messenger / Viber: Daily 8am – 2am PKT

ac55 will acknowledge privacy complaints within 24 hours and aims to resolve them within 10 business days. If you are not satisfied with the outcome of a privacy complaint after completing our internal process, you may escalate the matter to the relevant data protection authority in the jurisdiction of ac55's licensing, or to the Pakistan Telecommunication Authority where applicable to digital services.