ace778 Privacy Policy — How We Protect Pakistani Players' Personal Data

1 Data Controller Identity

ace778 ("we", "us", "the Platform", "ace778") is the data controller responsible for the personal data of Pakistani players who register and use the ace778 platform at ace778.games. As data controller, ace778 determines the purposes for which and the means by which personal data is processed.

This Privacy Policy applies to all personal data collected from Pakistani players through the ace778 website, account registration process, payment transactions, customer support interactions, and any other touchpoint between a Pakistani player and ace778. By registering an ace778 account, Pakistani players acknowledge this Privacy Policy and consent to the data processing activities described herein where consent is the applicable legal basis.

2 Personal Data We Collect

ace778 collects personal data from Pakistani players across several categories, depending on the nature of the player's interaction with the platform. We collect only the personal data that is necessary and proportionate to the purposes for which it is processed.

ace778 does not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data unless this is strictly required by applicable identity verification regulations, in which case it will only be processed with explicit player consent or as required by law.

3 How ace778 Uses Pakistani Players' Data

ace778 uses the personal data of Pakistani players for the following specific purposes, each of which is tied to a defined legal basis set out in section 4:

• Account Management: To create, maintain, and administer ace778 player accounts, including processing PKR deposits and withdrawals via Easypaisa, JazzCash, and other supported payment channels.
• Identity Verification (KYC): To verify that Pakistani players are who they claim to be, are at least 18 years of age, and are not subject to sanctions or exclusion orders, in compliance with anti-money-laundering obligations.
• Game Delivery and Platform Operation: To deliver games, process bets, calculate and credit winnings in PKR, and maintain the technical integrity of the ace778 platform for Pakistani players.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent account activity, money laundering, bonus abuse, and any other conduct that violates the ace778 Terms and Conditions.
• Regulatory Compliance: To meet all applicable legal obligations including record-keeping, reporting obligations, and response to lawful requests from regulatory authorities.
• Customer Support: To respond to Pakistani players' queries, complaints, and account-related requests efficiently and accurately.
• Responsible Gaming: To monitor player activity patterns for signs of problem gambling behaviour and to administer self-exclusion, deposit limits, and other player protection tools set by Pakistani players within their ace778 accounts.
• Marketing (with consent): To send promotional communications about ace778 bonuses, new games, and platform updates to Pakistani players who have explicitly opted in to receive such communications. Players may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the ace778 platform experience for Pakistani players — including game performance, payment flow optimisation, and mobile responsiveness.

ace778 does not use Pakistani players' personal data for any automated decision-making process that produces legal or similarly significant effects without human review.

4 Legal Basis for Processing

Every personal data processing activity at ace778 is conducted on a defined legal basis. ace778 relies on the following legal bases for processing Pakistani players' data:

• Contractual Necessity: Processing required to fulfil ace778's obligations under the player agreement — including account operation, game delivery, PKR transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable legal requirements — including KYC/AML identity verification, age verification, financial record-keeping, and responding to lawful regulatory enquiries.
• Legitimate Interests: Processing conducted to pursue ace778's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and technical platform improvement — where these interests are not overridden by Pakistani players' data rights.
• Consent: Processing conducted with the explicit consent of individual Pakistani players — primarily for marketing communications and optional features. Players may withdraw consent at any time by contacting ace778 support or adjusting their account communication preferences.

5 Data Sharing and Third Parties

ace778 does not sell Pakistani players' personal data to third parties. ace778 does not share personal data with third parties for their own independent marketing purposes. Personal data is shared only in the following tightly defined circumstances:

• Payment Processors: Easypaisa, JazzCash, Raast, HBL Bank, and USDT processing partners receive only the transaction data strictly necessary to process Pakistani players' PKR deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party KYC service providers may receive identity documents submitted by Pakistani players for the sole purpose of performing identity and age verification checks required under anti-money-laundering regulations.
• Game Software Providers: Game providers supplying titles available on the ace778 platform may receive anonymised or pseudonymised player identifier data necessary for game delivery and RNG certification purposes.
• Responsible Gaming Services: Self-exclusion database operators may receive the minimum data necessary to enforce cross-platform exclusion orders where applicable.
• Legal and Regulatory Authorities: ace778 will disclose Pakistani player data to law enforcement, regulatory bodies, or courts where required by applicable law or a valid court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants retained by ace778 may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

All third-party processors engaged by ace778 are required to process Pakistani players' personal data only on ace778's documented instructions and in accordance with data protection obligations at least equivalent to those described in this Privacy Policy.

6 Data Retention Periods

ace778 retains Pakistani players' personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of the player's active account relationship with ace778, plus a minimum of five years following account closure, as required under standard anti-money-laundering record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five years from the date of each PKR transaction, in compliance with financial record-keeping requirements applicable to online gaming platforms.
• Customer Support Communications: Retained for three years from the date of each interaction, or longer where a complaint remains open or unresolved.
• Marketing Preferences and Consent Records: Retained for the duration of the player's active account, plus one year following account closure or consent withdrawal, for audit purposes.
• Technical and Usage Data: Retained in aggregated or anonymised form for platform analysis purposes for up to two years from the date of collection.
• Responsible Gaming Records: Self-exclusion and problem gambling records are retained for the full duration of any exclusion order plus five years, to prevent circumvention of exclusion by re-registration.

When personal data is no longer required for any of the above purposes and no legal obligation to retain it persists, ace778 will securely delete or anonymise it in accordance with established data destruction procedures.

7 Data Security Measures

ace778 implements a comprehensive set of technical and organisational security measures to protect Pakistani players' personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Pakistani players' devices and the ace778 platform.
• Encryption at rest for all databases storing sensitive personal and financial data, including PKR transaction records and KYC documents.
• Strict access controls limiting internal access to Pakistani players' personal data to authorised personnel on a need-to-know basis, with all access logged and auditable.
• Multi-factor authentication for internal ace778 systems that process personal data.
• Regular penetration testing and security vulnerability assessments by qualified independent security professionals.
• Comprehensive staff training on data protection obligations and secure data handling procedures.
• An incident response plan governing the detection, containment, and notification of any data security breach affecting Pakistani players' personal data.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of Pakistani players, ace778 will notify affected players without undue delay and take immediate steps to contain the breach and mitigate its impact.

8 Cookies and Tracking Technologies

ace778 uses cookies and similar tracking technologies on the ace778.games platform to ensure the platform functions correctly, to analyse how Pakistani players use the platform, and to remember player preferences. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the ace778 platform to operate. These include session authentication cookies that keep Pakistani players logged in during their gaming session and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember Pakistani players' platform preferences such as language settings, preferred view, and session display options. These improve the usability of ace778 for returning players.
• Analytics Cookies: Collect anonymised and aggregated data about how Pakistani players navigate and use the ace778 platform, which pages they visit most, and where they encounter difficulties. This data is used solely to improve the ace778 platform experience and is not linked to identifiable individuals.
• Responsible Gaming Cookies: Manage session time reminders and display responsible gaming information in accordance with player-set preferences. These are considered strictly necessary for player protection purposes.

ace778 does not use third-party advertising or tracking cookies that share Pakistani player data with external advertising networks for targeted marketing purposes. Pakistani players can manage browser cookie settings directly within their browser preferences. Note that disabling strictly necessary cookies will affect the ability to log in and use the ace778 platform.

9 Pakistani Players' Data Rights

Pakistani players whose personal data is processed by ace778 hold the following rights in relation to that data. These rights may be exercised by submitting a written request to ace778 at [email protected]. ace778 will respond to all data rights requests within 30 days of receipt.

• Right of Access: You may request a copy of the personal data ace778 holds about you, the purposes for which it is processed, and the categories of third parties with whom it is shared.
• Right to Rectification: You may request correction of any personal data ace778 holds about you that is inaccurate or incomplete, including updating your registered contact details or correcting an error in your identity records.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing based on legitimate interests. This right is subject to legal obligations that require ace778 to retain certain data for defined periods.
• Right to Restriction of Processing: You may request that ace778 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability: You may request that ace778 provide your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract.
• Right to Object: You may object at any time to ace778's processing of your personal data based on legitimate interests, including profiling for responsible gaming monitoring purposes. ace778 will cease that processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent — primarily for marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

10 Protection of Minors

ace778 is strictly an 18+ platform. ace778 does not knowingly collect or process personal data from any person under the age of 18. Age verification is a mandatory step in the ace778 account registration and KYC process. Pakistani players must confirm they are aged 18 or above at the point of registration, and KYC documentation verifying date of birth is required before any PKR withdrawal is processed.

If ace778 becomes aware that personal data has been collected from a person under 18 — whether through a misrepresentation at registration or any other means — ace778 will immediately close the account, delete all associated personal data, and return any deposited PKR funds in accordance with its responsible gaming and minor protection obligations.

Parents and guardians who believe a minor has created an ace778 account should contact ace778 support immediately at [email protected]. ace778 will investigate and take appropriate action without delay.

11 Changes to This Privacy Policy

ace778 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing activities, or our business operations. Material changes to this Privacy Policy — particularly those that affect how Pakistani players' personal data is used — will be communicated to registered players via email to their registered address and/or via a prominent notice displayed within their ace778 account.

The effective date of any revision will be clearly stated at the top of the updated Privacy Policy document. Pakistani players are encouraged to review this Privacy Policy periodically to remain informed about how ace778 protects their personal data. Continued use of the ace778 platform following notification of a material change constitutes acceptance of the revised Privacy Policy.

Previous versions of this Privacy Policy are archived and available to Pakistani players on request by contacting ace778 support.

12 Contact and Complaints

Pakistani players with questions, concerns, or requests relating to this Privacy Policy or ace778's data processing practices are encouraged to contact ace778's data protection team in the first instance. ace778 is committed to resolving all privacy-related queries and complaints promptly and transparently.

To exercise any of the data rights described in section 9, or to raise a concern about ace778's data processing practices, Pakistani players should submit a written request to: [email protected]. Please clearly identify your ace778 account and the specific request or concern in your communication. ace778 will acknowledge all privacy-related requests within 48 hours and provide a substantive response within 30 days.