55ac Privacy Policy — Your Data, Protected

1. Data Controller

55ac ("we", "us", "our") is the data controller responsible for the personal information collected through the 55ac platform at 55ac.bio. As a data controller, 55ac determines the purposes for which, and the means by which, your personal data is processed. We operate under a valid international gaming license, which imposes specific regulatory obligations on how we collect, store, and handle personal data. All data processing activities conducted by 55ac are consistent with those licensing obligations.

Where 55ac engages third-party service providers to process data on its behalf — such as payment processors, KYC verification services, and game software providers — those parties act as data processors under contractual terms that require them to handle your data strictly in accordance with 55ac's instructions and applicable data protection standards.

2. Personal Data We Collect

55ac collects personal data across several categories. The specific data collected depends on the nature of your interaction with the 55ac platform:

2.1 Identity & Registration Data

• Full legal name as it appears on your CNIC
• Date of birth
• Pakistani CNIC number and copies of identity documents (front and back)
• Residential address and proof of address documents
• Email address and phone number
• Username chosen at registration

2.2 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method identifiers (e.g., JazzCash account number, EasyPaisa registered mobile, bank account details for HBL, UBL, or Meezan Bank transfers)
• Transaction history and account balance records
• Bonus and promotional credit records

2.3 Gaming Activity Data

• Game history, bet records, wager amounts, and outcomes across all 55ac products including slots, live casino, and the sportsbook
• Session duration and frequency data
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests)

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session identifiers and authentication tokens
• Log data including page views, feature interactions, and error reports

2.5 Communications Data

• Content of support chat conversations and email correspondence with the 55ac support team
• Feedback, complaints, and survey responses you submit to 55ac
• Records of marketing consent and communication preferences

3. How We Collect Your Data

55ac collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact our support team, or participate in promotions.
• Automatically — through cookies, web beacons, and server logs when you access and interact with the 55ac platform. Technical data is collected passively as a function of normal platform operation.
• From third parties — identity verification data may be supplemented by licensed third-party KYC and fraud-prevention services. Payment confirmation data is received from payment processors including JazzCash, EasyPaisa, and banking partners.

4. Purpose & Legal Basis for Processing

55ac processes your personal data only where a lawful basis for processing exists. The table below summarises the primary processing purposes and the corresponding legal basis:

5. Data Sharing & Disclosure

55ac does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

55ac works with a number of carefully vetted third-party service providers who process data on our behalf under strict contractual data protection terms. These include:

• Payment processors — JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and interbank transfer partners, to process your deposits and withdrawals.
• KYC and identity verification providers — licensed identity verification services that assist 55ac in fulfilling its regulatory KYC obligations.
• Game software providers — third-party providers whose games are hosted on the 55ac platform may receive session and bet-related data necessary for game operation and integrity.
• Cloud hosting and infrastructure providers — data storage and platform infrastructure providers operating under data processing agreements.
• Customer support software providers — live chat and ticketing system providers used to deliver 55ac's 24/7 support service.

5.2 Regulatory & Legal Disclosure

55ac may be required by law, court order, or directive from our licensing authority to disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities. Such disclosures are made only to the extent required and will not be preceded by prior notice to you where such notice is legally prohibited.

5.3 Business Transfers

In the event that 55ac undergoes a merger, acquisition, or sale of all or substantially all of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any resulting change to this Privacy Policy in advance of the transfer taking effect.

6. Data Retention

55ac retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations.

As a licensed gaming operator, 55ac is subject to regulatory retention requirements that mandate the preservation of certain records — including KYC documents, transaction records, and AML monitoring data — for a minimum period following the closure of an account. In practice, most account-related records are retained for a minimum of five years from the date of account closure, in line with standard international gaming license compliance requirements.

Marketing preference data and communications consent records are retained for as long as you maintain an active account, and for a reasonable period thereafter to demonstrate compliance with consent obligations. Data held solely for analytics purposes is anonymised or deleted within 12 months of collection.

7. Security Measures

55ac implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. Key measures include:

• TLS encryption on all data in transit between your device and the 55ac platform.
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment references.
• Role-based access controls ensuring that 55ac staff can only access personal data where it is necessary for their specific job function.
• Regular security audits and penetration testing conducted by independent third-party security specialists.
• Two-factor authentication available to all account holders and enforced for all internal staff with access to personal data systems.
• Intrusion detection systems and real-time monitoring of platform infrastructure for anomalous activity.

While 55ac takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. You are responsible for keeping your 55ac login credentials confidential and for using the platform on secure, private networks wherever possible.

8. Your Data Rights

As a data subject, you hold the following rights with respect to the personal data held by 55ac. To exercise any of these rights, contact the 55ac Data Protection team via the support channel listed in Section 14:

• Right of Access: You may request a copy of the personal data that 55ac holds about you. We will provide this within 30 days of a valid request.
• Right to Rectification: You may request that inaccurate or incomplete personal data held by 55ac be corrected. You may also update certain account details directly through your account settings.
• Right to Erasure: You may request that 55ac delete your personal data. This right is subject to any overriding legal or regulatory retention obligations. Where retention is required by law, we will inform you of the applicable retention period.
• Right to Restriction: You may request that 55ac restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding data accuracy is being resolved.
• Right to Data Portability: You may request that 55ac provide your personal data in a structured, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing communications. Marketing opt-outs take effect immediately upon receipt.
• Right to Withdraw Consent: Where processing is based on your consent (e.g., marketing emails), you may withdraw consent at any time without affecting the lawfulness of prior processing.

9. Cookies & Tracking Technologies

55ac uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit the 55ac website. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for core platform functions including authentication, session management, and security. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Remember your preferences such as language settings, last-played game, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymised data about how users navigate the 55ac platform, which pages are visited most, and where errors occur. This data helps us improve the platform experience. No personally identifiable information is included in analytics data.
• Fraud Prevention Cookies: Help 55ac detect and prevent suspicious activity and duplicate account creation.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect platform functionality. 55ac does not use third-party advertising cookies or retargeting pixels.

10. Marketing Communications

55ac may send you promotional communications — including bonus offers, tournament announcements, PSL cricket betting promotions, and platform updates — by email and SMS. All marketing communications from 55ac are sent only where you have explicitly opted in to receive them during registration or through your account settings.

You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link included in every marketing email from 55ac.
• Updating your communication preferences in your 55ac account settings panel.
• Contacting the 55ac support team directly and requesting removal from all marketing lists.

Opting out of marketing communications does not affect the delivery of transactional communications relating to your account, such as deposit confirmations, withdrawal notifications, security alerts, or important policy updates.

11. Minors & Age Restriction Policy

The 55ac platform is strictly intended for individuals aged 21 years and over. 55ac does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the KYC process for all 55ac account holders.

Where 55ac discovers or has reasonable grounds to believe that a registered account belongs to a person under 21, that account will be suspended immediately, all balances will be frozen pending investigation, and any winnings generated by the underage user may be forfeited. The underage individual's data will be retained only for the period necessary to complete the investigation and comply with regulatory reporting requirements, after which it will be securely deleted.

12. International Data Transfers

As an internationally licensed gaming operator, 55ac may transfer personal data to countries outside your country of residence in connection with the delivery of platform services — for example, to cloud hosting providers, game software providers, or KYC verification partners whose systems are based in other jurisdictions.

Where such transfers occur, 55ac ensures that appropriate safeguards are in place to protect your personal data. These safeguards may include contractual clauses obligating the recipient to maintain data protection standards equivalent to those applied by 55ac, or reliance on the recipient's compliance with an applicable data protection regulatory framework.

13. Changes to This Privacy Policy

55ac reserves the right to update or modify this Privacy Policy at any time. Where material changes are proposed, 55ac will notify all registered account holders via the email address associated with their account and will display a prominent notice on the platform no less than 14 days before any material change takes effect.

Minor amendments — such as clarifications, typographical corrections, or updates that do not affect your rights — may be made without prior notice, though the updated version will always be accessible on this page. The "Last updated" date at the top of this page reflects the date of the most recent version. Your continued use of the 55ac platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

14. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a data-related complaint, please contact the 55ac Data Protection team through any of the following channels:

• Live Chat: 24/7 support via the live chat widget on the 55ac platform. This is the fastest channel for urgent matters.
• Email: [email protected] — please include "Privacy Request" in the subject line for data rights enquiries.

55ac aims to acknowledge all privacy-related enquiries within 48 hours and to provide a substantive response within 30 days. Where a request requires additional time, we will notify you of the expected resolution timeline.

If you are not satisfied with 55ac's handling of a privacy complaint after using our internal process, you have the right to escalate the matter to the data protection supervisory authority relevant to 55ac's licensing jurisdiction, or to seek independent dispute resolution as outlined in the 55ac Terms and Conditions.