How We Use and Share Your Data — Privacy Policy

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain Our Service, including processing deposits, withdrawals, card transactions, P2P transfers, international transfers, premium membership charges, referral bonuses and cashback.
To manage Your Account: to manage Your registration as a user of the Service and give You access to the features available to You.
To verify Your identity and comply with the law: to carry out Identity Verification and customer due diligence, screen against sanctions and politically exposed persons lists, monitor transactions, and prevent, detect and report money laundering, terrorist financing, fraud and other financial crime.
To issue and manage payment cards: to issue, activate, freeze, unfreeze and manage Your cards and process PIN change requests through Our card-issuing partners.
To connect You with Third-Party Providers: to route Your cryptocurrency requests to the provider You select, and to show You only the providers available in Your jurisdiction.
To protect Your Account and Our Service: to operate two-factor authentication, monitor login activity, and detect and prevent unauthorized access and suspicious activity.
To contact You: to contact You by email, telephone, SMS or in-app notifications about Your Account, security alerts, transactions, and changes to the Service or this Privacy Policy.
To send You marketing communications, only where You have agreed to receive them or where otherwise permitted by law. You may opt out at any time.
To manage Your requests: to respond to Your support requests, enquiries and complaints.
To improve the Service: to diagnose technical problems and improve the stability, performance and security of the Service.
To meet legal obligations and protect Our rights: to keep records, meet regulatory and tax reporting obligations, respond to lawful requests from authorities, enforce Our Terms and Conditions, and establish, exercise or defend legal claims.
For business transfers: to evaluate or conduct a merger, divestiture, restructuring, reorganisation, dissolution, or other sale or transfer of some or all of Our assets, in which Personal Data held by Us is among the assets transferred.

Legal Bases for Processing

Where applicable law requires a legal basis for processing Personal Data, We rely on one or more of the following: the performance of Our contract with You; compliance with Our legal and regulatory obligations; Our legitimate interests (such as preventing fraud and keeping the Service secure), balanced against Your rights; and Your consent, which You may withdraw at any time without affecting processing carried out before withdrawal.

If You do not provide Personal Data that We need to meet a legal requirement or to perform Our contract with You, We may be unable to open or maintain Your Account or to provide some or all of the Service.

Sharing Your Personal Data

We do not sell Your Personal Data, and We do not share it for third-party advertising. We may share Your Personal Data only in the following situations:

With Service Providers: We share Personal Data with Service Providers who help Us operate the Service, such as cloud hosting, Identity Verification, sanctions screening, customer support and crash reporting providers. They may process Personal Data only on Our instructions and must keep it confidential and secure.
With card issuers and card networks: to provide payment cards, We share the necessary Personal Data, including Identity Verification data, with Our card-issuing partners and card networks such as Visa and Mastercard, who process it as independent controllers under their own privacy policies.
With Third-Party Providers: when You use a cryptocurrency feature, We share the information needed to process Your request with the provider You select.
With payout and banking partners: to complete international transfers, deposits and withdrawals.
With other users: when You send a P2P transfer, limited information such as Your name or account identifier may be shown to the recipient.
With Affiliates: We may share Your Personal Data with Our Affiliates, in which case We will require those Affiliates to honour this Privacy Policy.
For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.

Third-Party Cryptocurrency Providers

The Company does not operate a cryptocurrency exchange. The Buy, Sell and Swap features in the Application are provided by independent, licensed third-party cryptocurrency service providers. When You use these features, You transact directly with the relevant third-party provider.

The availability of these services may depend on Your country of residence and may change from time to time. For fiat purchases and sales, Your transaction may be processed through the third-party provider’s own payment partners, which the Application displays as provider options. These third-party providers and their payment partners may carry out their own identity verification and anti-money laundering checks, may collect additional Personal Data directly from You, and process such data as independent controllers in accordance with their own privacy policies. We are not responsible for the privacy practices or services of any third-party provider or its payment partners, and We encourage You to review their terms and privacy policies before using their services.

Blockchain Transactions

Cryptocurrency transactions are recorded on public, decentralised blockchain networks. Information such as wallet addresses, transaction amounts and timestamps is permanently visible to anyone, and may in some cases be linked to You by third parties.

These networks are not owned, operated or controlled by the Company, and information recorded on them cannot be changed or deleted by the Company or by anyone else. For this reason, Your rights to correction and deletion cannot be exercised in respect of data recorded on a blockchain network. Please consider this carefully before making any cryptocurrency transaction.