ac55 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ac55 ("ac55", "we", "us", "our") collects, processes, uses, stores, and discloses personal information about users ("you", "your") of the ac55 platform available at ac55.app (the "Service"). This Policy forms part of the ac55 Terms and Conditions and should be read in conjunction with them.

By registering an account with ac55, accessing the Service, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

ac55 is committed to protecting your privacy and processing your personal data in accordance with applicable data protection principles. If you have any questions about how ac55 handles your data, please contact us at [email protected].

2. Personal Data We Collect

ac55 collects the following categories of personal data in the course of providing the Service:

2.1 Identity & Contact Data

• Full legal name as it appears on your CNIC.
• Date of birth (for age verification purposes).
• CNIC number and copies of identity documents submitted for KYC verification.
• Residential address (city, province — e.g., Karachi, Lahore, Islamabad, Rawalpindi).
• Email address registered on your ac55 account.
• Pakistani mobile phone number linked to your account.

2.2 Financial Data

• JazzCash account number or Easypaisa mobile wallet number used for deposits and withdrawals.
• Bank account details (account number, bank name — HBL, UBL, Meezan Bank, Bank Alfalah, etc.) where bank transfers are used.
• Masked card details (last four digits, expiry) where Visa or Mastercard is used.
• Transaction history: deposit amounts, withdrawal amounts, bet amounts, and winnings in PKR.

2.3 Account & Usage Data

• Username and (hashed) password.
• Login timestamps and session durations.
• Betting and gaming activity: games played, markets wagered on, bet amounts, outcomes.
• Responsible gaming settings configured by you: deposit limits, loss limits, self-exclusion records.
• Customer support communications and complaint records.

2.4 Technical Data

• IP address at the time of registration and each login.
• Device type, operating system, and browser type.
• Approximate geolocation derived from IP address.
• Cookie identifiers and session tokens (see Section 9).

3. How We Collect Your Data

ac55 collects personal data through the following mechanisms:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically: Through cookies, session tokens, and server logs as you interact with the ac55 platform. Technical data such as IP address and device information is collected automatically with each session.
• From third parties: Identity verification and KYC service providers may return data confirming or supplementing the information you have provided. Payment processors return transaction status data. Fraud detection services may flag risk signals associated with your session or payment method.

4. How We Use Your Personal Data

ac55 processes your personal data for the following purposes:

ac55 does not use your personal data for automated profiling that produces legal or similarly significant effects without human review.

5. Legal Basis for Processing

ac55 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and delivering betting and gaming services.
• Legal obligation: Processing required to comply with applicable laws, including AML obligations, age verification requirements, and regulatory reporting duties.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, and service analytics — where these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent (such as for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.

6. Data Sharing & Disclosure

ac55 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Service Providers

ac55 engages trusted third-party service providers to assist in operating the platform, including payment processors (JazzCash, Easypaisa integration partners), KYC and identity verification providers, fraud detection services, and cloud infrastructure providers. These providers process your data only on ac55's instructions and are contractually bound to maintain appropriate data security standards.

6.2 Legal Compliance and Regulatory Disclosure

ac55 may disclose your personal data to law enforcement, regulatory authorities, or other government bodies where required to do so by applicable law, court order, or binding regulatory direction. ac55 will disclose only the minimum data necessary to satisfy the legal requirement and will notify you where permitted.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of ac55's business assets, user personal data may be transferred as part of the transaction. You will be notified of any such transfer and the identity of any new data controller via the platform.

6.4 Protection of Rights

ac55 may disclose personal data where necessary to investigate, prevent, or take action against suspected fraud, bonus abuse, money laundering, or other breaches of the ac55 Terms and Conditions.

7. Data Retention

ac55 retains personal data for the following periods:

• Account data: For the duration your ac55 account is active, plus a period of up to 7 years following account closure to satisfy legal, regulatory, and dispute resolution obligations.
• KYC and identity documents: For the period required by applicable AML regulations from the date of last account activity, typically 5 to 7 years.
• Transaction records: For a minimum of 7 years following the transaction date, consistent with financial record-keeping obligations.
• Self-exclusion records: Retained for the duration of the exclusion period and a defined period thereafter to prevent circumvention of exclusion by re-registration.
• Technical and log data: Typically 12 months, unless required to be retained longer for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ac55's data deletion procedures.

8. Data Security

ac55 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and ac55 servers.
• Encryption of sensitive data at rest, including financial data and identity document copies.
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need.
• Multi-factor authentication for administrative access to data systems.
• Regular security assessments and penetration testing of the ac55 platform infrastructure.
• Incident response procedures governing the detection, investigation, and notification of data security incidents.

Despite these measures, no method of internet transmission or electronic storage is 100% secure. ac55 cannot guarantee absolute security and is not responsible for breaches attributable to your failure to protect your own login credentials or your use of insecure devices or networks.

9. Cookies & Tracking Technologies

ac55 uses cookies and similar tracking technologies on the ac55.app platform. Cookies are small text files placed on your device that help us recognise you, maintain your session, and improve your experience.

9.1 Types of Cookies Used

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in to your ac55 account and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking the platform.
• Functional cookies: Remember your preferences such as language and responsible gaming settings.
• Analytics cookies: Collect anonymised data about how users interact with the platform to help us improve the ac55 Service. Data collected is aggregated and not linked to individual user identities.
• Fraud prevention cookies: Help ac55 identify and prevent fraudulent activity by tracking device and session characteristics.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent you from logging in to your ac55 account. Blocking functional or analytics cookies will not prevent you from using the core platform features but may affect your experience.

10. Your Data Rights

You have the following rights in relation to your personal data held by ac55:

• Right of access: You may request a copy of the personal data ac55 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that override this right.
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing of your personal data where ac55 relies on legitimate interests as the legal basis.
• Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to restrict processing: You may request that ac55 restrict processing of your personal data in certain circumstances.

To exercise any of the above rights, contact us at [email protected]. ac55 will respond to verified requests within 30 days. We may need to verify your identity before processing a data rights request.

11. Minors

The ac55 Service is strictly for users aged 18 and over. ac55 does not knowingly collect or process personal data of individuals under the age of 18. If ac55 becomes aware that personal data has been collected from an individual under 18, it will take prompt steps to delete that data and close the associated account. If you believe that ac55 may have inadvertently collected data from a minor, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

ac55 reserves the right to update or amend this Privacy Policy at any time. Updated versions will be posted on this page with a revised "Last Updated" date. For material changes, ac55 will provide notice through the platform or via the email address registered on your account. Your continued use of the ac55 Service following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not accept the updated Policy, you should cease using the Service and request account closure.

13. Contact & Data Enquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ac55, please contact our data protection team:

Email: [email protected]

ac55 aims to respond to all privacy-related enquiries within 30 days. For responsible gaming concerns, please also visit our Responsible Gaming page.