Ace & Zero

Privacy Notice

Last updated: 6 October 2026

This notice supplements the Corevix IT Consultancy Privacy Policy and applies specifically to the Ace & Zero game for iPhone and Android. Where this notice and the general policy differ, this notice prevails for Ace & Zero. The rules of the game itself are in the Ace & Zero Terms of Service.

Summary. Ace & Zero is a social casino game played with virtual chips only. It has no ads and no analytics or tracking. You can play as a guest without giving your name or email. You can also buy packs of virtual chips: Apple or Google handles the payment, and we never see your payment details. To run the game, we keep an account ID, a device identifier, your chip balance, a record of your games and a record of any purchases on our servers. You can delete your account and its data in the app (ACCOUNT → Delete account); we keep purchase records for accounting, without the link to your account, until 5 years after each purchase.

1. Data We Collect

What we collect depends on how you sign in. Every account, including a guest account, has the data in the first list. Game data and technical data are collected for all players.

All players (including guests).

• An account ID and a username. Our server generates both at random. You do not need to give your name to play.
• A device identifier. On iPhone, the identifier that iOS gives to apps from the same developer (the “identifier for vendor”). On Android, a value derived from your device's Android ID; Android gives each app its own version of it. It lets you return to your account on this device. It is not the advertising identifier.
• The dates your account was created and last updated.

A guest account can only be reached through this device identifier. On iPhone, iOS changes the identifier when all apps from the same developer are removed from the device, so a guest account can be lost after the app is reinstalled. On Android, the identifier stays the same after a reinstall and changes after a factory reset. Linking an email address, Sign in with Google or, on iPhone and iPad, Sign in with Apple lets you sign in again on any device.

If you use Sign in with Apple (iPhone and iPad only). We store the user identifier that Apple issues for our apps. The app does not ask Apple for your email address. If Apple shares your name the first time you sign in, the app may show your first name on screen while it is open, for example in a welcome message and on the Account screen. Your name is not saved and is not sent to our servers.

If you use Sign in with Google. Google confirms your identity to us with a sign-in token. We store only the user identifier that Google issues. The token also carries your name, your email address and a link to your Google profile picture; our server removes them right after you sign in or link your Google account and does not keep them. The app never sees your Google password.

If you add an email address. We store your email address and a secure one-way hash of your password. We never store your password itself. It is sent to our server over an encrypted connection, used only to create or check the hash, and is not written to our database or our logs. We do not verify your email address, and the game does not send you emails.

Game data. Every game in Ace & Zero runs on our servers, so we keep:

• Your chip balance and a record of every change to it: bets, winnings, refunds, the welcome chips (10,000 chips, once per account), daily bonuses, the one-time top-up, Sit & Go entry fees and prizes, chips taken to and from poker tables, chips you buy, and chips taken back when a purchase is refunded.
• A record of each roulette spin: your bets, the winning number, the result of each bet, and your balance afterwards.
• Your 50 most recent poker hands: the stakes, the cards on the board, your own cards, each seat's bets, chip stacks and winnings, the rake, and any cards shown at showdown. We do not store the hidden cards of computer opponents.
• A record of each blackjack round: your bet, the cards dealt to you and to the dealer, your choices (hit, stand, double, split), the result of each hand, and what was paid.
• A record of each Sit & Go tournament: the entry fee, the hands played, the chip stacks, your finishing place, and any prize or refund.
• Your personal records, which only you can see in the app: your Sit & Go finishes and wins, your biggest poker pot, your biggest roulette win, and your blackjack winning streaks.
• The weekly Sit & Go leaderboard: a public name that our server generates for you from fixed word lists (for example “Lucky Falcon 482”; you never type it and cannot change it), the points you earn from Sit & Go finishes each week, your number of first places that week, and whether you have chosen to hide yourself from the leaderboard. Other players see only that generated name, your points, first places and rank; never your username, email address, account ID or Apple or Google details. You can hide yourself at any time with the switch in the leaderboard. Your row is then shown to others as “Hidden player”, without your generated name; its points, first places and rank stay on the leaderboard so that everyone's ranks stay correct, and you still see your own rank. The leaderboard has no prizes.
• Your daily bonus streak, the time of your last claim, whether and when you received the welcome chips, and whether you have already received the one-time top-up.
• Short-lived records needed while you play, such as the chips you have at an open poker table, an unfinished blackjack round or a Sit & Go tournament in play.

Chips are virtual and have no monetary value, including chips you buy.

If you buy chips. Chip packs are sold through the App Store (Apple) on iPhone and through Google Play (Google) on Android, and Apple or Google handles the payment. We never receive your card or bank details or your billing address. When you start a purchase, the app gives Apple or Google your account ID, so that the purchase can only be added to your account. After you pay, the app sends our server the store's proof of the purchase, and our server checks it with Apple or Google. For each purchase we then keep:

• the store's transaction IDs (App Store) or order ID (Google Play); for Google Play we also keep a one-way hash of the purchase token, which lets us recognise the same purchase if it is reported again (the token itself is not kept);
• the chip pack, the number of chips and the quantity bought;
• the date of the purchase and the time we added the chips;
• the price and its currency, as Apple reports them (Google does not send us the price);
• the storefront country (App Store) or the country or region (Google Play) of the purchase;
• whether it was a store test (sandbox) purchase;
• your account ID, and a random ID that the app creates for the purchase request;
• if the purchase is later refunded or revoked: when, the reason code the store gives us, and how many chips were taken back.

With your account we also keep a list of your purchases, so that our server can find them, and a refund summary (how many of your purchases were refunded and how many chips were taken back), which helps us prevent refund abuse. The chips you buy, and any chips taken back after a refund, appear in your chip record like every other change to your balance.

Technical data.

• IP address. Your IP address reaches our servers when the app connects. Our game server uses it only to limit abuse, for example too many sign-in attempts or too many new accounts from one network. For this it is held only in the game server's memory, and it is removed at most 65 minutes after it was last used, or sooner if the server restarts (see Section 5). It is not saved in our database. Our game server's connection logs record only a shortened IP address, with the last part removed.
• Sign-in attempts. To limit repeated sign-in attempts, the game server also keeps each email address typed on the sign-in screen, with a count of attempts, in its memory only. The address is dropped as soon as a sign-in with it succeeds, and otherwise at most 65 minutes after the last attempt with it, or sooner if the server restarts. It is not saved in our database.
• Server logs. Our servers keep technical logs to run and secure the game. A log entry can include your account ID, for example when an error occurs, a purchase is added or refunded (with the store's transaction or order ID), or an account is deleted. In rare cases, such as a database error during sign-in or a sign-in attempt to a suspended account, an entry can also include your email address, device identifier, Apple user identifier or Google user identifier. If a database error happens while you link Sign in with Apple or Sign in with Google, the entry can also include the short-lived sign-in token that Apple or Google issued for that attempt. Google's token carries your name, email address and profile picture link, and in rare cases an entry can include that name or picture link alone. We do not write passwords to our logs.
• Ended sessions. When a session ends, for example when you sign out or switch accounts, we keep a record of it so that it cannot be used again. The record holds only a random session ID and the time after which the session could no longer be used anyway (30 days after it ended). Expired entries are removed the next time the app renews a sign-in or a session ends on your account, and the whole record is removed when your account is deleted.

If you contact support. If you email us, we receive your email address, your message and anything you attach, for example your phone model, its iOS or Android version, or a screenshot.

What we do not collect. The app does not access your location, contacts or photos, and we do not collect your advertising identifier or payment details (card or bank details, billing address). The app contains no advertising, analytics, attribution or crash-reporting tools. It does not use Game Center, Google Play Games or push notifications, and it has no chat or friends list.

2. Data Stored on Your Device

Ace & Zero keeps the following on your phone:

• Your sign-in tokens, account ID and sign-in type. On iPhone they are in the iOS Keychain, set to stay on this device. On Android they are in the app's private storage, encrypted with a key that is kept in the Android Keystore and never leaves your phone (on a phone whose Keystore does not work, they stay in the app's private storage without that extra encryption); the app is excluded from Android backups and device-to-device transfer. On both, they do not move to a new phone, even through a backup.
• Your sound and music settings and, on iPhone, your vibration setting.
• The last five winning roulette numbers, shown at the roulette table. From version 1.0.2, the app keeps them for each account that played on this phone, under a code made from the account, not the account ID; older versions keep one list for the whole phone, not linked to any account, which version 1.0.2 removes the first time it opens the roulette table.
• While a blackjack round is unfinished (from version 1.0.2; older versions have no blackjack), a random ID of that round, so that the app can take you back to it after a restart. It is kept under a code made from your account, not the account ID, and it is removed when the round ends.

Your password is never stored on the device. Your game records, such as poker hand history, are kept on our servers, not on the device. Deleting the app removes the settings, the recent numbers and any blackjack round ID. On iPhone, iOS may keep Keychain items after an app is deleted; on Android, uninstalling removes the sign-in tokens too. Signing out or deleting your account in the app removes that account's sign-in tokens from the device. The app then signs in to this phone's guest account (see Section 6) and stores the sign-in tokens for that account instead. From version 1.0.2, deleting your account in the app also removes from this phone that account's recent roulette numbers and the ID of any blackjack round that was still unfinished; in older versions, deleting an account does not remove the recent numbers.

If a purchase has not been confirmed by our server yet, for example because the app closed during the purchase, the App Store or Google Play keeps it on your device until the app reports it again.

3. How We Use Data

We use the data described above only to:

• Run the game: create your account and sign you in, keep your chip balance, run roulette spins, blackjack rounds, poker hands and Sit & Go tournaments, give you the welcome chips, the daily bonus and the one-time top-up, show your hand history and your personal records, and show the weekly Sit & Go leaderboard.
• Keep the game fair and secure: record every chip movement so that errors can be found and corrected, prevent cheating and abuse, and limit repeated sign-in attempts and mass account creation.
• Handle your purchases: check each purchase with Apple or Google, add its chips to your account, take them back if the purchase is refunded, and prevent purchase fraud and refund abuse.
• Keep the accounting and tax records of purchases that the law requires.
• Answer you when you contact support.
• Delete your account when you ask, including removing the game's Sign in with Apple access.

We do not sell your personal data. We do not show ads, and we do not use your data for advertising, profiling, or tracking across other companies' apps or websites. At poker tables you play against computer opponents only, so other players do not see your username or your game data. The only thing other players can see about you is your entry on the weekly Sit & Go leaderboard (your generated name, points, first places and rank). If you hide yourself, your entry is shown without your generated name. The computer opponents adapt to how you play while you sit at their table: they keep short notes in memory about the actions at that table only (for example how often you go all in), and forget them when you leave the table. These notes are not stored and are not used for anything else.

4. Service Providers

Apple (Sign in with Apple, on iPhone and iPad). If you choose Sign in with Apple, Apple shows the sign-in screen and confirms your identity to us. When you delete an account that uses Sign in with Apple, our server asks Apple to revoke the game's access, using a one-time code from Apple that you approve during deletion. Apple handles this under the Apple Privacy Policy.

Apple (App Store purchases, on iPhone and iPad). If you buy chips on an iPhone or iPad, Apple handles the payment under its own terms and the Apple Privacy Policy, and receives your account ID with the purchase (Section 1). Our server checks each purchase with Apple, and Apple tells our server when a purchase is refunded or revoked.

Google (Sign in with Google). If you choose Sign in with Google, Google shows the sign-in screen and confirms your identity to us. Google handles this under the Google Privacy Policy. You can remove the game's access at any time in your Google Account settings.

Google (Google Play purchases, on Android). If you buy chips on Android, Google handles the payment under its own terms and the Google Privacy Policy, and receives your account ID with the purchase (Section 1). Our server checks each purchase with Google and asks Google once a day which purchases were refunded.

Hosting provider (servers). Our game server and database run on servers operated for us by a hosting provider, and your account and game data are stored there. These servers may be located outside your country. Connections between the app and our servers are encrypted (HTTPS).

Backup storage. Encrypted backups of the game database may also be kept with a separate storage provider. Each backup is encrypted before it leaves our server, and the storage provider does not have the key to open it.

Email. Our support mailbox is on a mail server operated for us by a hosting provider. If you email us, your email address and your message are stored there.

Our hosting, backup storage and email providers handle your data only to provide their services to us, under agreements that require them to protect it at least as well as this notice describes. No other third party receives your personal data. Ace & Zero has no advertising, analytics or crash-reporting partners.

5. Data Retention

• Account and game data is kept while your account exists. The exception is poker hand history: only your 50 most recent hands are kept. We do not currently delete inactive accounts automatically.
• When you delete your account, your account and game data are removed from our live database straight away (see Section 6).
• Records of chips at an open poker table are removed automatically after the table closes, normally within about 10 minutes after you leave the table or close the app. Such a record holds your account ID only until you leave the table and your chips there are returned to your balance. After that, the entry for your seat keeps only a random seat identifier, the seat number, the time you sat down and chip amounts, not your account ID or username. You must leave every table before you can delete your account, so the record normally no longer holds your account ID when you delete it. In rare cases, for example when the return of your chips from a table goes to manual review (see below), it can still hold your account ID after the deletion, normally for no more than about 10 minutes.
• Purchase records are kept while your account exists and, after it is deleted, until 5 years after the date of the purchase. Then they are deleted. When you delete your account, we remove your account ID and the purchase request ID from every purchase record, so that the records no longer show which account made the purchase; for an account deleted in another way, for example by our support at your request, this happens at our next daily cleanup. What remains (the store's transaction or order ID, the chip pack and chips, the price and currency, the storefront country or region, the dates and any refund) is what we need for our accounting and tax records and to handle refunds and payment disputes. A purchase record without an account can never be added to another account. Your list of purchases and your refund summary are deleted with your account.
• Review records. In rare cases our server cannot confirm a chip movement at a poker table automatically. It then keeps a record of the case (your account ID, the table session and the chip amount) for manual review. These records are stored with your account and are deleted together with it.
• IP addresses, sign-in email addresses and account IDs used to limit abuse are held only in the game server's memory and are never saved to our database. Your account ID can be held this way to limit attempts to link an email address to your account, how often new poker tables are opened for you and how often your purchases are checked. Each one is removed automatically at most 65 minutes after it was last used, and all of them are cleared whenever the server restarts, for example when we install a new version of the server. An email address is also cleared as soon as a sign-in with it succeeds.
• Server logs are overwritten automatically when they reach a size limit. The game server's own log is also cleared whenever we install a new version of the server. The limit is based on size, not time, so how long an entry is kept depends on how busy the server is.
• Backups. We make an encrypted backup of the game database every night so that we can restore the game after a failure. Backups kept on our server are deleted automatically 14 days after they are made, and copies kept with our backup storage provider 30 days after they are made. An extra backup that we make by hand, for example before an update, can be kept up to one day longer. Data from a deleted account can remain in encrypted backups until those backups are deleted.
• Support emails. If you write to us, your emails and our replies are kept in our support mailbox, separate from the game servers. They are not deleted automatically or when you delete your game account. You can ask us to delete them.
• Deletions by email request. If we delete an account at your request, our admin tool keeps an internal record of that action with the account ID. There is currently no set time limit for keeping it.

6. Account Deletion

You can delete your account in the app, including a guest account:

• In the lobby, tap ACCOUNT.
• Tap Delete account, then confirm with DELETE FOREVER.
• If your account uses Sign in with Apple, confirm with Apple when asked.

If you have chips at a poker table, leave the table first. An unfinished blackjack round does not stop the deletion: the round ends without a refund, and its bet is deleted with your other chips. For an account that uses Sign in with Apple, our server also asks Apple to revoke the game's Sign in with Apple access. If that step fails, the account is not deleted, and you can try again. That confirmation needs Sign in with Apple, which runs on iPhone and iPad only: an account with an Apple ID linked cannot be deleted from the Android app. Delete it in the game on an iPhone or iPad, or send us a request as described on the Ace & Zero Account Deletion page.

Deletion removes your account ID, username, the device identifiers linked to your account, Apple user identifier, Google user identifier, email address, password hash, chip balance, chip history, roulette records, blackjack rounds, Sit & Go tournaments, poker hand history, personal records, review records, leaderboard name and points, daily bonus data, your list of purchases and your refund summary. It also ends your sign-in sessions. Deletion is permanent: your chips, including chips you bought, and your history cannot be restored. Deleting your account does not refund any purchase; refunds are handled by Apple or Google. The limited exceptions (purchase records, which we keep without your account ID, a poker table's chip record, server memory, server logs, backups, support emails and, for deletions by email request, our admin tool's record) are described in Section 5.

After deletion, the app signs in to this phone's own guest account, or creates a new, empty guest account if this phone has none. That guest account is stored under this phone's device identifier, so the identifier is saved on our servers again. The guest account is separate from the deleted account and holds none of its data, but it may hold its own chips, for example if you played as a guest on this phone before you signed in. Other phones on which you played may each have their own guest account in the same way. Guest accounts are not deleted with your account; you can delete each one in the app on that phone.

If you can no longer open the app, email support@corevix.io. We can find an account from an email request only if that email address is linked to it. Step-by-step instructions, including what to do for other accounts, are on the Ace & Zero Account Deletion page.

7. Age Requirement

Ace & Zero is intended only for adults aged 18 and over. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe that someone under 18 is using Ace & Zero, contact us at support@corevix.io. Where we can identify the account, we will delete it. The quickest way is to delete the account in the app on that phone (ACCOUNT → Delete account). Refunds of purchases are made by Apple or Google; how to ask for one is on the Ace & Zero Support page.

8. Your Rights and Requests

Depending on where you live, you may have the right to access, correct or delete your personal data, to receive a copy of it, and to object to or restrict how we use it. You can:

• Delete your account yourself in the app (Section 6).
• Change your email address or password in the app (ACCOUNT → CHANGE EMAIL).
• Ask for a copy of your data, or make any other privacy request, by emailing support@corevix.io.

We answer every request within 30 days. We can find an account from an email request only if that email address is linked to it. The app does not show an account ID, so we may be unable to identify a guest account or a Sign in with Apple account from an email alone. You can still delete such an account yourself in the app.

To protect your account, we may ask for information that shows the account is yours before we act on a request. You may also have the right to complain to a data protection authority.

9. Changes to This Notice

We may update this notice, for example when we add features to Ace & Zero. We will post the updated notice on this page and change the date at the top.

10. Contact

For any questions about this notice or your data, contact us at support@corevix.io. Help with the game is on the Ace & Zero Support page.

Corevix IT Consultancy L.L.C-FZ
Meydan Free Zone, Dubai, United Arab Emirates