ace777 Privacy
Policy

1. Introduction & Scope

This Privacy Policy ("Policy") is issued by ace777 ("we", "us", "our", "ace777") and governs the collection, use, storage, disclosure, and protection of personal data relating to all users of the ace777 online gaming platform, accessible at ace777.lol, including all associated pages, services, features, and gaming products.

This Policy applies to all individuals who interact with ace777 in any capacity, including registered account holders, applicants for account registration, visitors to the platform who have not yet registered, and any individual whose personal data ace777 processes in connection with the operation of the platform. By accessing ace777 or submitting personal data to us — whether through registration, a deposit transaction, a support interaction, or any other channel — you acknowledge and accept the data practices described in this Policy.

ace777 is committed to processing personal data in a manner that is lawful, fair, transparent, and consistent with the data protection obligations imposed by the international gaming regulatory framework under which the platform is licensed. This Policy should be read alongside ace777's Terms and Conditions and Responsible Gaming Policy, which collectively govern your relationship with the platform.

2. Data Controller

For the purposes of this Policy, ace777 acts as the data controller in respect of all personal data processed in connection with the operation of the platform and the provision of gaming services to users. As data controller, ace777 determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable data protection principles.

Questions, requests, and complaints relating to this Policy or to ace777's processing of your personal data should be directed to the ace777 Data Protection contact at [email protected]. ace777 will respond to all formally submitted data subject requests within 30 calendar days of receipt, or within such shorter period as may be required by applicable law.

3. Data We Collect

ace777 collects personal data across several categories, each of which is necessary for a defined operational or regulatory purpose. The categories of personal data we collect are set out in the table below:

ace777 does not collect special categories of sensitive personal data — such as racial or ethnic origin, political opinions, religious beliefs, biometric data, or health data — except where expressly required by regulatory obligations and with your explicit consent. We collect the minimum data necessary to fulfil the purposes described in this Policy.

4. How We Collect Your Data

ace777 collects personal data through the following primary channels:

• Direct Submission: Data you provide when creating an ace777 account, completing KYC verification, submitting a withdrawal request, contacting support, or participating in any platform feature that requires data input.
• Automated Technical Collection: Data collected automatically when you access the ace777 platform, including IP addresses, device identifiers, browser data, session information, and page interaction data via cookies and similar tracking technologies. See Section 9 for full cookie information.
• Payment Processor Data: Transaction confirmation data and payment status information received from third-party payment processors including JazzCash, EasyPaisa, and partner banking institutions when you make deposits or receive withdrawals through the ace777 platform.
• Third-Party Verification Services: Identity and address verification data received from KYC verification service providers used by ace777 to confirm your identity and satisfy regulatory due diligence requirements.
• Regulatory and Fraud Prevention Sources: Data received from regulatory authorities, law enforcement agencies, or fraud prevention services where ace777 is legally required or permitted to receive and process such data.

5. Purpose & Legal Basis for Processing

ace777 processes personal data only where there is a lawful basis for doing so. The following table sets out the primary purposes for which ace777 processes personal data and the corresponding legal basis under applicable data protection law:

• Performance of Contract: Processing necessary to create and manage your ace777 account, authenticate your identity, process deposits and withdrawals, settle bets, credit bonuses, and provide customer support. This is the primary legal basis for the majority of data processing on ace777.
• Legal Obligation: Processing required to comply with ace777's regulatory obligations — including KYC and Anti-Money Laundering (AML) verification, age verification, responsible gaming monitoring, and cooperation with regulatory authorities and law enforcement agencies under applicable gaming law.
• Legitimate Interests: Processing necessary to pursue ace777's legitimate business interests, including fraud prevention and detection, platform security monitoring, abuse prevention, and statistical analysis used to improve platform performance — provided that such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — particularly in relation to marketing communications and any non-essential cookies. You may withdraw consent at any time by contacting ace777 support or through the account preference settings where available.

6. Data Retention

ace777 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or to resolve disputes and enforce our agreements with users.

The following general retention periods apply to ace777 data categories, subject to any longer periods required by applicable regulatory obligations:

• Account and Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, as required by standard AML regulatory record-keeping obligations applicable to international gaming licensees.
• Financial Transaction Records: Retained for a minimum of seven (7) years from the date of each transaction, in accordance with financial record-keeping standards under applicable international gaming and AML frameworks.
• Technical and Usage Data: Retained for up to two (2) years from the date of collection, or longer where necessary for fraud investigation or regulatory compliance purposes.
• Support Communications: Retained for up to three (3) years from the date of the relevant interaction, or longer where an unresolved dispute or regulatory investigation exists.
• Self-Exclusion Records: Retained permanently or for the maximum period specified by applicable regulatory requirements, to prevent re-registration by self-excluded individuals.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ace777's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical purposes.

7. Data Sharing & Disclosure

ace777 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Your data is shared only in the circumstances and with the categories of recipient described below, and only to the minimum extent necessary for the relevant purpose:

• Payment Processors: JazzCash, EasyPaisa, HBL, UBL, Meezan Bank, and other payment service providers receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are not permitted to use your data for purposes beyond the specific payment transaction.
• KYC and Identity Verification Providers: Third-party KYC service providers receive identity documentation submitted by you for the purpose of verifying your identity and age in accordance with ace777's regulatory obligations.
• Game Technology Providers: Licensed game providers — including Playtech and other certified gaming software suppliers — may receive anonymised session and game data necessary to operate the gaming products on the ace777 platform. These providers do not receive personally identifiable data beyond what is technically necessary to deliver the game service.
• Regulatory Authorities: ace777 may disclose personal data to its licensing authority and other applicable regulatory bodies where required to do so by law or as part of regulatory reporting obligations.
• Law Enforcement and Legal Process: ace777 will disclose personal data to law enforcement agencies, courts, or other government authorities where required to do so by a valid legal order, warrant, or regulatory requirement. ace777 will, where permitted by law, notify affected individuals of such disclosures.
• Fraud Prevention Services: ace777 may share data with fraud prevention and AML monitoring services for the purpose of identifying and preventing fraudulent, money-laundering, or other illegal activity on the platform.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of ace777's assets, personal data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.

8. International Data Transfers

ace777 operates under an international gaming licence and may process or store personal data on servers and with service providers located outside Pakistan. Where personal data is transferred outside your country of residence, ace777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the regulatory framework applicable to ace777's international licence.

Such safeguards may include the use of standard contractual clauses approved by the relevant data protection authority, data processing agreements with applicable data protection provisions, or the processing of data only in jurisdictions that have been assessed to provide an adequate level of data protection. Where you wish to obtain further information about the specific safeguards applicable to international transfers of your personal data, please contact ace777 at [email protected].

9. Cookies & Tracking Technologies

ace777 uses cookies and similar tracking technologies on the platform for the purposes of authentication, session management, security, and platform performance monitoring. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the ace777 platform — including session authentication, security token management, and fraud detection. These cookies cannot be disabled as they are required for the platform to function. No consent is required for strictly necessary cookies.
• Functional Cookies: Used to remember your preferences — such as language, display settings, and "Remember Me" login state — to provide a more personalised and efficient user experience. These cookies may be disabled but doing so may affect platform functionality.
• Analytics Cookies: Used to collect anonymised information about how users interact with the ace777 platform — pages visited, session duration, and navigation patterns — to help ace777 improve platform performance and user experience. These cookies require your consent and may be declined.

ace777 does not use third-party advertising or retargeting cookies. Your browsing activity on ace777 is not shared with advertising networks for the purpose of displaying targeted advertisements on other websites or platforms.

You may manage or disable non-essential cookies through your browser settings. Note that disabling all cookies may impair your ability to log in to your ace777 account, as session authentication cookies are strictly necessary for platform access.

10. Data Security

ace777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. The key security measures employed by ace777 include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the ace777 platform is encrypted using industry-standard 256-bit SSL/TLS encryption, preventing interception of data in transit.
• Data Segregation: Player personal data and financial data are stored in logically segregated environments with strict access controls, ensuring that data is accessible only to authorised personnel with a defined operational need.
• Access Control: Access to systems containing personal data is restricted to authorised ace777 personnel and is governed by role-based access control policies, multi-factor authentication requirements, and comprehensive access audit logging.
• Penetration Testing and Security Audits: ace777's platform and data infrastructure are subject to regular security assessments — including penetration testing and vulnerability scanning — by qualified security professionals.
• Player Fund Segregation: Player PKR wallet balances are held in accounts segregated from ace777's operational funds, in accordance with applicable international licensing requirements, protecting player balances from ace777's business creditors.

Notwithstanding the above measures, no data transmission or storage system is entirely immune from security risks. ace777 cannot guarantee absolute security of your data and is not liable for losses arising from security breaches that are beyond our reasonable control. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ace777 will notify affected individuals in accordance with applicable regulatory requirements.

11. Your Rights in Relation to Your Data

Subject to applicable data protection law and the exceptions and limitations prescribed therein, you have the following rights in relation to your personal data held by ace777:

• Right of Access: The right to request a copy of the personal data ace777 holds about you and information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data ace777 holds about you.
• Right to Erasure: The right to request deletion of your personal data, subject to limitations where ace777 is required to retain data by law or regulatory obligation (including the AML and gaming regulatory retention periods described in Section 6).
• Right to Restrict Processing: The right to request that ace777 restrict the processing of your data in certain circumstances — for example, where you contest the accuracy of data or object to processing based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where processing is based on your consent or the performance of a contract.
• Right to Object: The right to object to processing based on ace777's legitimate interests, including profiling for fraud prevention purposes, where you believe your individual rights override those interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time — without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Request". ace777 will respond within 30 calendar days of receiving your request, or notify you if an extension of time is required. ace777 will not charge a fee for reasonable requests but reserves the right to charge for manifestly unfounded or excessive requests.

12. Children & Minors

ace777 is strictly prohibited to persons under the age of 21 years. ace777 does not knowingly collect, process, or retain personal data relating to individuals under the age of 21. The platform employs age verification procedures at the point of registration and through the KYC process to prevent minors from accessing gaming services.

If ace777 becomes aware that personal data relating to an individual under 21 has been collected — whether through a fraudulent registration or any other means — we will immediately close the relevant account, delete the associated personal data to the extent permitted by regulatory obligations, and report the incident in accordance with applicable regulatory requirements.

If you are a parent or guardian and have reason to believe that a minor under your care may have created an account on ace777, please contact ace777 support immediately at [email protected]. We will investigate and take appropriate action without delay.

13. Third-Party Services & Links

The ace777 platform may reference or operate in conjunction with third-party services — including payment processors such as JazzCash and EasyPaisa, game technology providers, and identity verification services. These third parties operate under their own privacy policies and data protection frameworks.

ace777 is not responsible for the privacy practices or data protection standards of third-party services. Where ace777 shares data with third-party service providers as described in Section 7, we do so under contractual data processing agreements that impose data protection obligations on those providers.

We strongly advise you to review the privacy policies of any third-party payment service you use in connection with your ace777 account — particularly JazzCash, EasyPaisa, HBL, UBL, and Meezan Bank — to understand how those services handle your financial and personal data independently of ace777.

14. Marketing Communications

ace777 may send promotional communications — including bonus offers, tournament announcements, PSL season promotions, and platform updates — to Account Holders via SMS to the registered Pakistani mobile number or via in-platform notification. Marketing communications from ace777 are sent only where you have opted in or where permitted under applicable law.

You may opt out of receiving marketing communications from ace777 at any time by contacting ace777 support at [email protected] or by adjusting your communication preferences within the account settings where available. Opting out of marketing communications will not affect the delivery of essential account communications — such as OTP verification messages, withdrawal confirmations, and regulatory notices — which are sent independently of marketing preferences as they are necessary for account operation.

ace777 does not engage in unsolicited bulk marketing, cold SMS campaigns to non-registered individuals, or any form of spam communication. If you receive a communication purporting to be from ace777 that you did not expect, please report it to us immediately — it may be a phishing attempt by a third party impersonating the ace777 brand.

15. Policy Amendments

ace777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ace777's data processing practices. All amendments will be published on this page with an updated effective date. Where amendments are material, ace777 will provide advance notice to active Account Holders via their registered mobile number or via in-platform notification, at least seven (7) days prior to the amendment taking effect.

Your continued use of the ace777 platform following publication of an amended Privacy Policy constitutes acceptance of the revised Policy. If you do not accept an amendment, you must cease using ace777 and may request closure of your account. ace777 recommends reviewing this Policy periodically to remain informed of current data practices.

16. Contact & Complaints

For all privacy-related enquiries, data subject requests, or complaints regarding ace777's data processing practices, please use the following contact:

• Email: [email protected]
• Subject Line: "Privacy Enquiry" or "Data Subject Request"
• Response Time: Within 30 calendar days of receipt
• Support Languages: Urdu and English
• Operating Hours: 24/7, Pakistan Time (PKT, UTC+5)

If you are not satisfied with ace777's response to a privacy complaint, you have the right to escalate the matter to the relevant supervisory authority under ace777's international gaming licensing framework. Details of the applicable supervisory authority are available from ace777 support upon request.