Privacy Policy — superace

Information We Collect

superace collects personal information from you in several ways: directly when you register or interact with our services, automatically when you use our platform, and from third parties such as payment providers and identity verification services. The categories of information we collect are described below.

Information you provide directly:

• Registration data: Full legal name, date of birth, email address, username, and account password when you create a superace account.
• Identity verification (KYC) documents: Government-issued photo ID (National ID Card, passport, or driving licence), proof of address documents, and payment method ownership confirmation when required by our verification process.
• Financial data: Mobile wallet numbers (bKash, Nagad, Rocket, Upay) or card details (Visa, Mastercard) provided when making deposits or requesting withdrawals. Card data is processed via encrypted payment gateways and is not stored in full on superace servers.
• Support communications: Any information you voluntarily share when contacting our support team via email or chat, including transaction details, account queries, and complaint records.
• Responsible gaming submissions: Self-exclusion requests, deposit limit settings, and session time preferences you set through our responsible gaming tools.

Information collected automatically:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, bet amounts, session duration, click paths, login timestamps, and platform interactions.
• Location data: Approximate geographic location derived from your IP address, used to verify eligibility and comply with access-control obligations.
• Cookie and tracking data: See Section 5 (Cookies and Tracking Technologies) for full details.

Information from third parties:

• Identity and age verification services that confirm the authenticity of KYC documents you submit.
• Payment processors who confirm transaction status and flag suspicious payment patterns.
• Fraud prevention and anti-money-laundering (AML) screening databases that may return risk-indicator information associated with your details.

How We Use Your Data

superace uses the personal information we collect for specific, clearly defined purposes. We do not use your data in ways that are incompatible with the purposes listed below without first obtaining your consent or establishing a separate lawful basis.

superace will never use your personal data to:

• Sell your information to unaffiliated third-party advertisers or data brokers.
• Build behavioural advertising profiles for use on external platforms.
• Share your identity or financial details with any party that does not have a direct operational role in the services described above.

If you have opted in to receive promotional communications from superace — including bonus offers, BPL cricket season promotions, or Eid special campaigns — you may opt out at any time by contacting support@superace. Opting out of marketing does not affect our ability to send you transactional or account-related notifications, which are necessary for the operation of your account.

Legal Basis for Processing

superace processes personal data on one or more of the following legal bases, depending on the specific processing activity:

• Contractual necessity: Processing required to fulfil our obligations under the account agreement — including account registration, payment processing, game access, and withdrawal services. Without this processing, we cannot provide the service.
• Legitimate interests: Processing carried out to pursue legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics — provided those interests are not overridden by your rights and freedoms.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering (AML) obligations, age verification requirements, and record-keeping mandates.
• Consent: Processing of your data for optional purposes — such as sending you promotional emails or personalising your game recommendations — where you have given explicit, informed consent. You may withdraw this consent at any time.
• Vital interests: In limited circumstances, where processing is necessary to protect your vital interests or the vital interests of another person (for example, in the context of responsible gaming interventions).

Where we rely on legitimate interests as a legal basis, we carry out a balancing assessment to ensure that our interests do not disproportionately override your privacy rights. If you would like more information about any specific balancing assessment, please contact support@superace.

Data Sharing and Disclosure

superace does not sell, rent, or trade your personal information. We share your data only in the limited circumstances described below, and only to the extent necessary for each purpose.

Service providers and operational partners: We share data with carefully selected third-party service providers who assist in operating the platform. These include:

• Payment processing partners (bKash, Nagad, Rocket, Upay, Visa, Mastercard networks) — receive transaction data necessary to process deposits and withdrawals.
• Identity verification and KYC service providers — receive document images and personal details to verify your identity and age.
• Game software providers (Pragmatic Play, Evolution Gaming, Ezugi, Microgaming, NetEnt, Spribe) — receive your player ID and relevant session data to deliver game content and maintain game history records.
• Anti-fraud and AML screening services — receive identifying details to screen against risk databases as required by our compliance obligations.
• IT infrastructure and cloud hosting providers — store platform data in secured server environments. All hosting providers are contractually bound to process data only on superace's instructions.

Legal and regulatory disclosures: superace may disclose personal data to law enforcement agencies, regulatory bodies, or courts of competent jurisdiction where we are required to do so by law, or where disclosure is necessary to defend or establish legal claims.

Business transfers: In the event of a merger, acquisition, or transfer of substantially all of superace's assets, personal data held by superace may be transferred to the acquiring entity. In such circumstances, we will take reasonable steps to ensure that the acquiring entity provides equivalent privacy protections before the transfer occurs.

Cookies and Tracking Technologies

superace uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and understand how players interact with the site. A cookie is a small text file placed on your device when you visit superace.

The types of cookies used on superace are as follows:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, prevent cross-site request forgery, and ensure the correct language and currency settings are applied. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: These cookies remember your preferences — such as your preferred payment method, game sort order, and responsible gaming settings — so you do not need to re-enter them each session.
• Analytics cookies: superace uses internal analytics tools to collect aggregated, anonymised data about how players navigate the site. This helps us improve page layouts, game discovery, and deposit flows. Analytics data is not linked to individual player identities in reports.
• Security cookies: Used to detect and prevent fraudulent activity, including login anomalies, unusual betting patterns, and bot activity. These cookies are strictly necessary for platform integrity.

superace does not use third-party behavioural advertising cookies. We do not place advertising network trackers on our platform.

Most browsers allow you to view, manage, and delete cookies through the browser settings menu. Please note that disabling strictly necessary cookies may prevent you from logging in to your superace account or accessing certain platform features. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Data Retention

superace retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your account being open, plus a minimum of 5 years following account closure, to comply with financial record-keeping and AML obligations.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of submission, as required by applicable anti-money laundering regulations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of 5 years from the date of each transaction.
• Support communications: Retained for 3 years from the date of the last interaction, or longer if the communication forms part of an active dispute or legal proceeding.
• Marketing consent records: Retained for the duration of your consent, plus 2 years following withdrawal of consent, to demonstrate compliance.
• Anonymised analytics data: Retained indefinitely in aggregated, non-identifiable form for internal platform development purposes.

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised. If you request deletion of your account and associated data, superace will action the deletion within 90 days, subject to any overriding legal retention obligations described above. Where data must be retained to comply with legal obligations, it will be segregated and access-restricted until the retention period expires.

Your Data Rights

superace respects your rights over your personal data. The following rights are available to all registered players. To exercise any of these rights, contact support@superace with the subject line "Data Rights Request" and include your registered email address. We will respond within 5 business days.

Please note that some rights are subject to conditions and exceptions. For example, the right to erasure does not override our obligation to retain transaction records for AML compliance purposes. Where a request cannot be fully actioned, we will explain the reason clearly and identify what data can be addressed.

Data Security Measures

superace implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL encryption: All data in transit between your browser or mobile device and superace servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms this encryption is active.
• Encrypted data storage: Sensitive data fields — including identity document images, financial account details, and passwords — are stored in encrypted form at rest. Passwords are hashed using industry-standard algorithms and are never stored in recoverable plain text.
• Access controls: Access to personal data by superace staff is governed by a strict role-based access control (RBAC) policy. Staff members access only the data necessary for their specific operational role. All access is logged and audited.
• Network security: The superace platform is protected by firewalls, intrusion detection systems, and regular vulnerability assessments to identify and address security weaknesses promptly.
• Incident response: superace maintains a documented security incident response plan. In the event of a data breach that poses a risk to your rights and freedoms, affected players will be notified without undue delay.
• Staff training: All staff with access to personal data receive regular training on data protection obligations and security best practices.

While superace takes all reasonable steps to protect your data, no internet-based system can guarantee absolute security. You are also responsible for keeping your own account credentials secure. Do not share your password with anyone, and contact support@superace immediately if you suspect your account has been compromised.

Minors and Privacy

superace operates a strict 18+ policy. Our services are not directed at, and are not intended for use by, any person under the age of 18. We do not knowingly collect personal data from minors.

During the registration process, all applicants are required to confirm that they are 18 years of age or older. superace may request date-of-birth confirmation and identity documents to verify age at any point in the account lifecycle. If we become aware that personal data has been collected from a person under the age of 18, we will immediately close the associated account, delete the data in question, and return any deposits made (net of any bonuses received) in accordance with our standard account closure procedure.

If you are a parent or guardian and believe that your child has registered an account on superace, please contact us immediately at support@superace. We will investigate and take prompt action.

Updates to This Policy

superace may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or operational structure. When material changes are made, we will notify registered players by email to the address on file at least 7 days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised effective date. We encourage you to review this page periodically to stay informed about how we protect your personal data. Your continued use of the superace platform after the effective date of any revision constitutes acceptance of the updated policy.

If you have questions about any aspect of this Privacy Policy, or wish to exercise any of the data rights described in Section 7, please contact the superace data team at: