Privacy Policy

What we collect

• Account data: name, email, password (hashed), handle.
• KYC data (real-money tier only): government ID, address, proof of funds — stored encrypted, retained per regulation.
• Wallet & trading data: deposits, withdrawals, trade history, position state.
• Beneficiary data: bank account or crypto wallet you withdraw to.
• Usage data: IP address, browser, pages visited, session timestamps.

How we use it

To operate the Service, settle markets, process deposits/withdrawals, prevent fraud, comply with regulation, and improve the product. We do not sell personal data.

Who we share with

• Payment providers (Stripe, Paystack, Zencoinpay) to process money movement.
• KYC providers (Prembly or equivalent) for identity verification.
• Hosting infrastructure (DigitalOcean / AWS / Hetzner depending on operator deployment).
• Law enforcement when legally compelled.

Data retention

Account & trading records: retained while your account is active and for 7 years after closure (regulatory minimum). KYC documents: retained for 5 years after last activity, then purged. Marketing emails: until you unsubscribe.

Your rights

• Access: request a copy of your data anytime from settings.
• Correction: update profile fields directly, or contact us.
• Deletion: request account closure; data subject to regulatory retention will be deleted after the retention window ends.
• Portability: export your trade history and wallet ledger as CSV/JSON.

Cookies

We use session cookies (essential, no opt-out) and an optional analytics cookie. No third-party advertising cookies.

Security

Passwords are stored as bcrypt hashes. Sensitive fields (KYC documents, beneficiary account numbers) are encrypted at rest. We use TLS for all traffic.

Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors.

Contact

Privacy questions? Email our DPO →