55ac Privacy Policy –
How We Protect Your Personal Data

Introduction

This Privacy Policy ("Policy") is published by 55ac ("we," "us," or "55ac"), the operator of the online gaming platform accessible at 55ac.bid. This Policy governs the collection, processing, storage, sharing, and protection of personal data relating to individuals ("Users," "Players," "you") who access or use the 55ac platform, including its sports betting, live casino, slot, and all ancillary services.

55ac operates under an international gaming license that imposes rigorous obligations regarding the protection of player personal data. This Policy reflects those obligations and our genuine commitment to treating Pakistani players' data with the respect and care it deserves. 55ac does not treat data protection as a compliance box to tick — we view it as a core component of the trust-based relationship we aim to build with every player across Karachi, Lahore, Islamabad, Faisalabad, and all of Pakistan.

This Policy should be read alongside the 55ac Terms and Conditions and the Responsible Gaming Policy, which together form the complete framework governing your use of the platform.

Data Controller

For the purposes of applicable data protection law, 55ac is the data controller in respect of all personal data collected from Users of the 55ac platform. As data controller, 55ac determines the purposes for which, and the means by which, personal data is processed. All data processing activities described in this Policy are carried out by 55ac or by third-party data processors acting strictly on 55ac's behalf and under 55ac's documented instructions.

Where 55ac engages third-party data processors — such as payment service providers facilitating JazzCash and EasyPaisa transactions, identity verification services, and game-content delivery platforms — those processors are contractually bound to process User data only as directed by 55ac and to maintain security standards consistent with those applied by 55ac itself.

What Personal Data We Collect

55ac collects the following categories of personal data from Users, depending on their interaction with the platform:

3.1 Registration & Identity Data

• Full legal name (as it appears on your CNIC);
• Computerised National Identity Card (CNIC) number;
• Date of birth (for age verification — all players must be 21 or older);
• Pakistani mobile number (primary account identifier and OTP delivery channel);
• Password (stored in irreversibly hashed form — never readable by 55ac);
• Residential address (city and province level, as provided during registration).

3.2 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and reference numbers;
• JazzCash or EasyPaisa wallet identifiers used for transactions;
• Bank account or sort code details where bank transfer methods are used (HBL, UBL, Meezan Bank);
• Transaction history and balance information associated with your 55ac account wallet.

3.3 Gaming Activity Data

• Bet placement records including market, odds, stake, and outcome;
• Casino and slot session data including game title, session duration, wager amounts, and results;
• Bonus claims, wagering progress records, and promotional participation history;
• Responsible gaming tool settings including deposit limits and self-exclusion status.

3.4 Technical & Device Data

• IP address at the time of each login and transaction;
• Device type, operating system, and browser version;
• Session timestamps and duration data;
• Cookie identifiers and session tokens (see Section 7).

3.5 Communications Data

• Content and metadata of communications you send to the 55ac support team via live chat or email;
• Records of promotional communications sent to you and your response or opt-out status.

How We Collect Your Data

55ac collects personal data through the following mechanisms:

• Directly from you: Information you provide during account registration, KYC verification submissions, deposit and withdrawal requests, and communications with the 55ac support team;
• Automatically through platform use: Technical and gaming activity data generated as a natural result of your interaction with the 55ac platform, including login events, betting activity, and session data;
• From third-party identity verification providers: Where 55ac uses a licensed third-party KYC service to verify the authenticity of your CNIC, that provider may return verification status and associated identity confirmation data to 55ac;
• From payment service providers: Transaction confirmation and status data returned by JazzCash, EasyPaisa, and banking partners when processing your deposits and withdrawal requests;
• Through cookies and similar technologies: Session management and analytics data collected via browser cookies and equivalent technologies as described in Section 7 of this Policy.

Legal Bases for Processing

55ac processes personal data only where a valid legal basis exists. The following table identifies the legal basis applicable to each principal category of data processing activity conducted by 55ac:

How We Use Your Personal Data

55ac uses the personal data it collects for the following specific purposes:

• Account creation and management: To create your 55ac account, verify your identity, maintain your account, and process changes you request to your account settings;
• Service delivery: To enable you to access and use sports betting markets (including PSL, T20I, and other cricket events), live casino tables, slot games, and all other 55ac services;
• Financial processing: To process deposits via JazzCash and EasyPaisa, facilitate withdrawals to your registered payment accounts, maintain your PKR wallet balance, and generate accurate transaction records;
• Regulatory compliance: To fulfil all obligations imposed by 55ac's international gaming license, including anti-money laundering (AML) screening, source of funds verification, and mandatory reporting obligations;
• Age and identity verification: To verify that all registered players are 21 years of age or older and that the identity information provided is accurate and genuine;
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, apply player-requested limits and exclusions, and proactively reach out to players who display patterns associated with harmful gambling behaviour;
• Fraud prevention: To detect, investigate, and prevent fraudulent activity including multi-accounting, bonus abuse, money laundering through gaming activity, and use of prohibited tools;
• Customer support: To respond to your queries, resolve complaints, and maintain records of support interactions for quality and compliance purposes;
• Marketing communications: To send you information about bonuses, promotions, and new features on 55ac, subject to your marketing communication preferences and consent status;
• Platform improvement: To analyse aggregate usage patterns, identify performance issues, and enhance the 55ac platform experience for all Pakistani players.

Cookies & Tracking Technologies

55ac uses cookies and similar browser-based technologies to provide essential platform functionality, maintain your login session, and improve your experience. The following categories of cookies are used on the 55ac platform:

• Strictly Necessary Cookies: These cookies are essential to the operation of the 55ac platform. They include session management cookies that keep you logged in during an active gaming session and security cookies that help detect and prevent fraudulent access attempts. These cookies cannot be disabled without impairing core platform functionality.
• Functional Cookies: These cookies remember your account preferences — including your preferred game lobby view and responsible gaming settings — so that you do not have to reconfigure them each time you log in to 55ac.
• Analytics Cookies: 55ac uses anonymised analytics data to understand how players navigate the platform, which features are most used, and where technical performance can be improved. Analytics cookies do not identify you personally and are processed in aggregate form only.
• Marketing Cookies: With your consent, 55ac may use cookies to measure the effectiveness of promotions presented to you on the platform. You may withdraw consent to marketing cookies at any time through your account settings without affecting your ability to use the platform.

You can manage cookie settings through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the 55ac Login and other core platform functions. Standard browser controls for disabling cookies vary by browser — consult your browser's help documentation for guidance.

Data Sharing & Disclosure

55ac does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following carefully controlled circumstances:

• Payment service providers: JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank process transaction-specific financial data as necessary to complete deposit and withdrawal requests. These providers receive only the minimum data necessary to process each transaction and are contractually prohibited from using that data for any other purpose.
• Identity verification providers: Licensed KYC service providers process CNIC data on 55ac's behalf to confirm identity and age. All such providers are bound by data processing agreements requiring them to process data solely as directed by 55ac.
• Game content providers: Third-party game studios delivering casino and slot content to the 55ac platform may receive limited gameplay session data to facilitate game delivery and resolve disputes. This data does not include financial account details or CNIC information.
• Regulatory authorities: 55ac is required to disclose player data to the regulatory authority under whose license it operates, and to financial intelligence units or law enforcement agencies, where legally required under AML regulations or court orders. 55ac will challenge any overly broad disclosure requests.
• Professional advisers: Legal counsel, accountants, and auditors engaged by 55ac may access personal data on a strictly confidential and need-to-know basis in connection with the provision of professional services.

International Data Transfers

55ac operates under an international gaming license, and some personal data processing — particularly in connection with game content delivery infrastructure and identity verification services — may involve the transfer of data to servers or service providers located outside Pakistan. Where such international transfers occur, 55ac ensures that appropriate safeguards are in place to protect the personal data of Pakistani players to a standard consistent with the requirements of 55ac's licensing jurisdiction.

Such safeguards may include contractual data transfer agreements incorporating standard data protection clauses, transfers to jurisdictions that maintain adequate data protection laws as recognised by 55ac's licensing authority, or other legally recognised transfer mechanisms appropriate to the regulatory context. The specific safeguards applied to any given international transfer are available upon request from the 55ac data protection contact.

Data Retention

55ac retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by regulatory obligation. The following general retention principles apply:

• Active account data: Personal data associated with an active 55ac account is retained for the duration of the account's active status;
• Transaction and betting records: Financial transaction and betting records are retained for a minimum of 5 years from the date of each transaction in accordance with anti-money laundering regulatory requirements applicable under 55ac's international gaming license;
• Identity verification records: KYC documentation and verification records are retained for a minimum of 5 years from the date of verification or from the date the account is closed, whichever is the later;
• Support communications: Customer support interaction records are retained for a period of 2 years from the date of the interaction, unless a longer period is required in connection with an ongoing complaint or regulatory investigation;
• Marketing consent records: Records of marketing consent (or withdrawal of consent) are retained for 3 years from the date of the consent event, to enable 55ac to demonstrate compliance with marketing obligations;
• Closed account data: Following account closure, personal data is retained for the minimum periods required by regulatory obligation and then securely and irreversibly deleted.

Data Security

55ac implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL encryption for all data transmitted between your device and the 55ac platform, including during the 55ac Login process, payment processing, and support interactions;
• Encryption at rest for all personal data stored on 55ac servers, including identity documents and financial records;
• Cryptographic password hashing ensuring that user passwords are stored in an irreversibly hashed format — 55ac staff cannot read your password and it is never transmitted or stored in plaintext form;
• Role-based access controls limiting access to personal data to those 55ac staff members and processors who require it to perform their designated functions;
• OTP two-factor authentication available to all registered players via their Pakistani mobile number to protect against unauthorised account access;
• Real-time login monitoring that detects and alerts on anomalous access patterns, including logins from unrecognised devices or geographic locations;
• Regular security assessments including penetration testing and vulnerability scanning of the 55ac platform infrastructure;
• Staff data protection training ensuring that all 55ac personnel with access to personal data understand their obligations under this Policy and applicable law.

While 55ac takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is entirely secure. If you have reason to believe that your 55ac account has been compromised, please contact the 55ac support team immediately via live chat.

Your Privacy Rights

As a 55ac player, you hold the following rights in respect of your personal data. These rights can be exercised by contacting the 55ac support team via live chat or the contact email address listed in Section 16. 55ac will respond to all substantiated rights requests within 30 days.

Children's Privacy

The 55ac platform is strictly intended for adults aged 21 years and above. 55ac does not knowingly collect or process personal data from individuals under the age of 21. All registration attempts are subject to CNIC-based age verification, which is designed to identify and reject registrations by minors.

If 55ac becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately and securely deleted, and the associated account will be closed with any deposited funds returned to the originating payment source. Parents or guardians who believe a minor may have successfully registered on the 55ac platform should contact the support team immediately via live chat.

Third-Party Links

The 55ac platform may contain links to third-party websites or resources — for example, to game providers' published RTP data or to responsible gaming support organisations. 55ac does not control these third-party sites and is not responsible for their privacy practices or the content they display. This Privacy Policy applies exclusively to the 55ac platform at 55ac.bid. We encourage you to review the privacy policy of any third-party website you visit, particularly before submitting any personal information to that site.

Updates to This Privacy Policy

55ac reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, our data processing practices, or the services we provide. Where updates are material — meaning they significantly affect the way in which we process your personal data or the rights available to you — we will notify you by displaying a prominent notice on the 55ac platform and by sending a notification to your registered Pakistani mobile number at least 7 days before the changes take effect.

Non-material updates (such as corrections to typographical errors, clarifications of existing provisions, or additions that expand rather than restrict your rights) may be made immediately upon publication. The "Effective" date displayed at the top of this Policy and in the hero section will always reflect the date of the most recent version. We encourage you to review this Policy periodically to remain informed of how 55ac handles your personal data.

Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 55ac, please contact our support team through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, in both English and Urdu. Access via the 55ac platform after logging in to your account.
• Email: support55ac.bid (plain text — not a clickable link)
• Typical Response Time: All privacy-related enquiries receive a substantive response within 5 business days. Urgent requests regarding potential data security incidents are treated as priority and responded to within 24 hours.
• Postal Enquiries: Formal written requests can also be submitted to the 55ac data protection contact via the live chat channel, where you will be provided with the appropriate mailing address for your jurisdiction.