What Ace Up never asks for
- Your seed phrase or private key. There is no situation in which Ace Up needs either. Anyone asking is not Ace Up.
- Any funds sent to “verify”, “unlock” or “release” a balance.
- Your bot token, except inside the venue setup flow in @Aceupgamebot — where it is read, encrypted and the message is deleted.
Your money
Your deposit addresses belong to your account alone, one per chain. They never change, and they are never shared with another player. The keys that control them are held encrypted at rest, with authenticated encryption, under a key used for nothing else. Ace Up keeps most of the platform float in cold storage and only a working balance online. Every entry in Ace Up’s ledger carries a unique reference, which is what makes a deposit seen three times get credited exactly once — and a withdrawal interrupted mid-send get reconciled rather than sent twice.Your session
Withdrawals are confirmed in the bot DM, not in the app. A stolen session token therefore cannot cash out your balance, because whoever holds it cannot also answer your Telegram messages. Sessions are per venue and they expire. A session minted at one venue does not work at another.What other players can see
Tapping your name at a table shows:- Your display name and Telegram photo
- Your rounds, wagered, net, win rate and biggest win at that venue
What venue owners can see
Aggregate numbers for their own venue — handle, house net, hands, how many unique players. Never an individual player’s balance, and never their deposits or withdrawals.What Ace Up stores
There is no voice chat, so no audio exists to store.
Reporting a security issue
Through/support. A round that does not verify, or anything
that looks like it touches other people’s money, is the thing we most want to
hear about and it is treated that way.
Ace Up is a real-money game. Only play with money you can afford to lose.
Playing responsibly covers the tools, all of which are real and
all of which are yours.