Plain-language commitment: This Privacy Policy is written to be understood by actual people, not just lawyers. If something is unclear, contact Super Ace support and we will explain it to you directly. Your informed consent is meaningful only if you genuinely understand what you are consenting to.
1 Who We Are
Super Ace ("we", "us", "our") is the operator of the online gaming and sports betting platform accessible at superace-jit.com. Super Ace is a platform designed primarily for players in Pakistan, with all transactions processed in Pakistani Rupees (PKR). For the purposes of this Privacy Policy, Super Ace is the data controller – meaning we determine the purposes for which and the means by which your personal data is processed.
This Privacy Policy applies to all personal data collected through:
- The Super Ace website at superace-jit.com and any related subdomains.
- The Super Ace mobile browser experience.
- Communications between you and Super Ace customer support, including live chat, email and any other support channels.
- Any promotions, surveys or other activities conducted by Super Ace.
By registering an account or otherwise using Super Ace, you confirm that you have read this Privacy Policy and consent to the data practices described within it. This policy should be read together with our Terms and Conditions, which are available at superace-jit.com/terms-conditions.
2 Personal Data We Collect
The personal data Super Ace collects about you falls into the following categories. The volume chart below gives you a rough sense of how central each category is to our operations:
Identity & Registration DataEssential
Transaction & Financial DataEssential
Gaming Activity DataOperational
Device & Technical DataOperational
Communications DataSupport
Marketing PreferencesOptional
| Category | Specific Data Points | Required? |
|---|
| Identity & Registration |
Full name, date of birth, mobile number, email address, CNIC number (for KYC), residential city/province |
Yes – mandatory for account |
| Financial & Transaction |
Deposit and withdrawal amounts, payment method identifiers (Easypaisa number, JazzCash number, IBAN, card last 4 digits), transaction timestamps, currency |
Yes – required for payments |
| Identity Documents (KYC) |
CNIC front and back scan or photo, selfie for liveness check (may be required for withdrawals above Rs 50,000) |
Triggered by thresholds |
| Gaming Activity |
Game sessions played, bets placed, wagers, wins, losses, bonus usage, responsible gaming tool activations |
Yes – platform operation |
| Device & Technical |
IP address, browser type and version, operating system, device model, session timestamps, referral source |
Yes – security & fraud |
| Communications |
Content of live chat conversations, emails and any other messages sent to Super Ace support |
Only when you contact us |
| Marketing Preferences |
Opted-in email/SMS marketing consent status, promotion campaign responses |
No – optional |
3 How We Collect Your Data
Super Ace collects personal data through the following means:
3.1 Directly from You
The majority of the personal data we hold about you comes directly from information you provide. This includes your registration details, information provided during KYC verification, payment details entered during deposit and withdrawal transactions, and the content of any communications you send to our support team.
3.2 Automatically During Use
When you use Super Ace, our systems automatically collect certain technical and activity data. This includes your IP address, device identifiers, browser information, session times, pages visited and game activity. This data is collected using server logs, first-party cookies and analytics tools operated by Super Ace. It is used primarily for security, fraud prevention and platform optimisation.
3.3 From Third-Party Verification Services
Where identity verification is required, Super Ace may work with licensed third-party KYC providers to verify the authenticity of documents and identity claims. These providers may return a verification status and risk score to Super Ace. We do not receive raw biometric data from these providers beyond what is strictly required for the verification decision.
3.4 From Payment Processors
When you make a deposit or withdrawal, our payment processing partners (such as Easypaisa and JazzCash) may share limited transaction confirmation data with Super Ace for the purpose of crediting or processing your account. Super Ace does not store full payment credentials on our own servers.
Note: Super Ace does not purchase data lists from data brokers or any other third party. Every data point we hold about you originated from your interaction with our platform or a directly related verification or payment process.
4 Why We Use Your Personal Data
Super Ace uses the personal data we collect for specific, legitimate purposes. We do not use data for purposes that are incompatible with those for which it was originally collected. The primary purposes are:
- Account creation and management: Registering your Super Ace account, verifying your identity, managing your preferences and settings, and communicating service-critical information such as password resets and account notifications.
- Payment processing: Executing your deposit and withdrawal requests, reconciling transactions, identifying and resolving payment failures, and maintaining the financial records required by applicable law.
- Providing gaming services: Running game sessions, tracking bets and winnings, calculating bonuses and processing promotional credits, and settling esports and sports betting markets.
- Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, prohibited multi-accounting, and unauthorised access. IP address and device data play a key role in this function at Super Ace.
- Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, and enforcing self-imposed limits and self-exclusion requests. This is a purpose we take seriously because it protects you.
- Legal and regulatory compliance: Maintaining records required by applicable anti-money laundering (AML) regulations, responding to valid law enforcement requests and exercising our rights in legal proceedings.
- Customer support: Responding to your enquiries, resolving disputes and improving the quality of our support based on interaction history.
- Platform improvement: Analysing aggregated, anonymised usage data to understand how Pakistani players use Super Ace and to improve the product experience. This analysis does not involve identifying individual users.
- Marketing (with consent): Sending promotional emails or SMS messages about Super Ace offers, new games and promotions, where you have opted in to receive these communications. You can withdraw consent at any time.
5 Legal Basis for Processing
Every data processing activity at Super Ace has a defined legal basis. The four bases we rely on are:
- Contract performance: Processing necessary to provide you with the Super Ace service you have signed up for. This covers account management, payment processing and game delivery. Without this processing, we cannot provide the service.
- Legal obligation: Processing required to comply with applicable laws, including AML regulations, KYC requirements and responses to valid law enforcement or regulatory requests. Super Ace cannot opt out of processing in this category.
- Legitimate interests: Processing necessary for Super Ace's legitimate operational interests where those interests are not overridden by your privacy rights. This covers fraud detection, platform security, responsible gaming monitoring and anonymised analytics. We have conducted a balancing assessment for each of these activities and are satisfied that our interests do not override your privacy rights.
- Consent: Processing based on your explicit opt-in, specifically for marketing communications. You can withdraw consent at any time with no effect on your right to use Super Ace.
What this means for you: Super Ace does not process your data on vague or broad grounds. Each processing activity has been assessed and assigned to a specific legal basis. If you want to know the specific basis for any particular processing activity, contact our support team and we will tell you directly.
6 Who We Share Your Data With
Super Ace shares personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose. We do not share data with anyone else.
6.1 Payment Processors
Easypaisa, JazzCash, NayaPay, SadaPay, Visa/Mastercard payment networks and our IBFT banking partners receive the transaction data necessary to process your deposits and withdrawals. Each of these partners is subject to their own privacy obligations and regulatory requirements.
6.2 Identity Verification Providers
Licensed KYC service providers receive your identity document data and verification request for the purpose of confirming your identity when Super Ace requires verification. These providers are contractually bound to use your data only for the stated verification purpose.
6.3 Technology and Infrastructure Partners
Super Ace uses third-party cloud hosting, data storage and analytics infrastructure. Providers in this category may technically process personal data on our behalf as data processors. They are bound by data processing agreements that restrict their use of your data to the services they provide to us.
6.4 Game Content Providers
Game studios and RNG certification bodies that supply games to the Super Ace platform may receive anonymised session data for the purpose of game performance monitoring and certification audits. Individual player identity is not shared with game studios.
6.5 Law Enforcement and Regulatory Bodies
Super Ace will disclose personal data to law enforcement agencies, regulatory bodies or courts where required to do so by a valid legal instrument such as a court order, production order or regulatory direction. We will notify you of such a request where legally permitted to do so.
6.6 Business Transfers
In the event that Super Ace undergoes a merger, acquisition or sale of assets, personal data may be transferred to the successor entity. You would be notified of any such transfer and the privacy terms applicable to your data in the new structure.
What we do not do: Super Ace does not share personal data with advertising networks, data brokers, social media platforms or any other third party for the purpose of marketing your data to others. This is a firm commitment, not a default setting that could be changed.
7 Cookies and Tracking Technologies
Super Ace uses cookies and similar technologies on our platform. This section explains what we use, why, and how you can control it.
7.1 Essential Cookies
These cookies are strictly necessary for Super Ace to function. They enable session authentication (keeping you logged in during your visit), CSRF protection (preventing cross-site request forgery attacks) and load balancing. Essential cookies cannot be disabled without breaking core platform functionality.
7.2 Functional Cookies
These cookies remember your preferences such as your preferred game lobby view, language settings and responsible gaming reminder intervals. They improve your experience but the platform will function without them.
7.3 Analytics Cookies
Super Ace uses first-party analytics to understand how players navigate the platform, which features are used most, and where technical issues occur. This data is collected in aggregate and anonymised form. We do not use third-party advertising analytics tools that share your data with ad networks.
7.4 Managing Cookies
You can manage cookie preferences through your browser settings. Most modern mobile and desktop browsers allow you to view, delete and block cookies by domain. Blocking all cookies from Super Ace will affect essential functionality including login. We recommend allowing at minimum the essential cookies category.
8 Data Security
Super Ace implements technical and organisational security measures proportionate to the risk and sensitivity of the personal data we process. These measures include:
- Encryption at rest: All personal data stored on Super Ace servers is encrypted using AES-256 encryption. Encryption keys are managed separately from the data they protect.
- Encryption in transit: All data transmitted between your device and Super Ace servers is protected by TLS 1.3. We enforce HTTPS across the entire platform and HTTP Strict Transport Security (HSTS) is active on our domain.
- Access controls: Access to personal data within Super Ace is restricted to staff and systems that have a specific need for it. Role-based access controls are in place and access logs are maintained and reviewed.
- Two-factor authentication: Super Ace offers 2FA for all player accounts and requires it for all internal staff accounts with access to player data.
- Regular security assessments: Super Ace conducts regular security assessments, including vulnerability scanning and penetration testing, to identify and address potential weaknesses before they can be exploited.
- Incident response: Super Ace maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights, we will notify affected players promptly.
No system is 100% secure. While Super Ace takes security seriously and invests proportionately in protective measures, no online platform can guarantee complete security against all threats. You play an important role too – use a strong, unique password for your Super Ace account and enable two-factor authentication.
9 How Long We Keep Your Data
Super Ace does not retain personal data indefinitely. We retain data for as long as it is needed for the purposes for which it was collected, subject to the following specific rules:
- Active account data: Retained for the duration of your Super Ace account plus a post-closure period required by applicable law.
- Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, in line with standard financial record-keeping requirements applicable in our operating jurisdiction.
- KYC and identity documents: Retained for the duration of your account relationship plus 5 years post-closure, consistent with AML obligations.
- Gaming activity logs: Retained for 2 years from the date of the gaming session for operational and responsible gaming monitoring purposes.
- Support communications: Retained for 2 years from the date of the last interaction in a support case.
- Marketing consent records: Retained until you withdraw consent, plus 1 year for audit purposes.
- Closed accounts: Core account data is deleted or anonymised within 90 days of a verified account closure request, except where a longer retention period is required by law or an ongoing investigation.
When the applicable retention period expires, Super Ace either permanently deletes the data or renders it irreversibly anonymous so that it can no longer be attributed to an individual.
10 Your Data Rights
As a Super Ace player, you have the following rights in relation to your personal data. Click each right below to see what it means in practice and how to exercise it.
You can request a copy of all personal data Super Ace holds about you. We will provide this within 30 days of a verified request. The response will be provided in a commonly used, machine-readable format. To make an access request, contact Super Ace support with the subject line "Data Access Request" along with your registered mobile number for identity verification.
If any personal data Super Ace holds about you is inaccurate or incomplete, you have the right to have it corrected. For most account details (name, mobile number, email), you can update these directly through your account settings. For identity document corrections, contact support with the updated document. We will process corrections within 14 days.
You can request that Super Ace delete your personal data. We will comply with this request subject to our legal obligations to retain certain records (primarily financial and identity records required by AML regulations). Where we cannot delete data due to a legal obligation, we will explain why and inform you of the earliest date at which deletion will occur. Erasure requests typically result in account closure.
In certain circumstances, such as when you have contested the accuracy of data we hold or objected to our processing on legitimate interest grounds while we assess your objection, you can request that Super Ace restrict further processing of your data. During the restriction period, we will store the data but not actively use it except for the specific permitted purposes.
For data that you have provided to Super Ace and which is processed on the basis of your consent or contract performance, you can request that we provide it in a structured, commonly used, machine-readable format. This right applies primarily to your account profile data and transaction history. Contact Super Ace support to request a portable data export.
You can object to Super Ace processing your data on the basis of legitimate interests. We will review the objection and either stop the processing or explain why our legitimate interests are sufficiently compelling to override your rights in the specific case. You also have an unconditional right to object to direct marketing processing at any time.
How to exercise your rights: Contact Super Ace support at support@superace-jit.com with the subject line "Privacy Rights Request". Include your registered mobile number for identity verification. We will acknowledge your request within 3 working days and respond in full within 30 days.
11 Children's Privacy
Super Ace is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Our registration process requires users to confirm that they are 18 or older, and our KYC verification process is designed to identify and remove underage accounts.
If Super Ace becomes aware that personal data has been collected from a person under 18, we will immediately suspend the account, delete all associated personal data and refund any deposits made, subject to verification that no prohibited activity has occurred. If you believe that a person under 18 has registered at Super Ace, please contact us immediately at support@superace-jit.com.
12 Third-Party Links
The Super Ace platform may from time to time contain references to third-party services such as payment wallet applications (Easypaisa, JazzCash) that you access outside our platform. This Privacy Policy applies only to data processed by Super Ace. We are not responsible for the privacy practices of third-party platforms and encourage you to read their privacy policies before sharing personal data with them.
Super Ace does not embed third-party advertising content on our platform. You will not see banner advertisements from external advertisers when you use Super Ace. The only promotional content on our platform is Super Ace's own promotions and offers.
13 Changes to This Privacy Policy
Super Ace may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law or the services we offer. We will notify registered players of material changes via email or through a prominent notice on the platform at least 7 days before the changes take effect.
The date of the most recent update is displayed at the top of this page. We maintain an internal version history of this policy. If you would like to see previous versions, contact our support team. By continuing to use Super Ace after changes take effect, you confirm acceptance of the revised Privacy Policy.
Tip: Bookmark this page and check it periodically. We change this policy only when there is a genuine reason to do so, and we always communicate changes clearly rather than relying on the fact that players rarely re-read policies.
14 How to Contact Us About Privacy
If you have any questions, concerns or requests related to this Privacy Policy or the way Super Ace handles your personal data, please contact us through any of the following channels:
- Email: support@superace-jit.com – mark the subject line "Privacy Enquiry" or "Privacy Rights Request" for prompt routing to the relevant team.
- Live Chat: Available 24/7 from any page on Super Ace. Provide your registered mobile number so the agent can verify your identity before discussing account-specific data.
- Response time: We will acknowledge privacy-related enquiries within 3 working days and provide a substantive response within 30 days. Complex requests may take longer, in which case we will notify you of the extended timeline before the 30-day mark.
Super Ace is committed to resolving privacy concerns directly wherever possible. If you are not satisfied with our response to a privacy concern, you may seek independent advice or escalate through the appropriate dispute resolution channel available in your jurisdiction.
