Privacy Policy

WHAT WE COLLECT

We may collect the following personal data:

• Authentication data via Privy: your email address, Google account information, or connected wallet address.
• Transaction data: deposits, withdrawals, trade history, and EVM wallet addresses used for payments.
• Communications: support messages and platform chat activity.
• Technical data: IP address, browser type, pages visited, and session duration, collected via analytics tools.

LEGAL BASIS FOR PROCESSING

Where applicable law requires it, we rely on the following legal bases to process your personal data:

• Performance of a contract — to operate your account and process trades, deposits, and withdrawals.
• Legal obligation — to meet anti-money-laundering, and record-keeping requirements.
• Legitimate interests — to detect and prevent fraud and abuse, and to maintain and improve the security and performance of the Platform.
• Consent — where we rely on your consent (for example, certain analytics cookies), you may withdraw it at any time.

YOUR DATA IS USED TO:

• Process trades, deposits, and withdrawals.
• Detect fraud, abuse, and ensure platform security.
• Communicate with you about your account and platform updates.
• Monitor platform performance and improve user experience.

We will not use your personal data for any purpose beyond what is described above without your consent.

DEPOSIT AND WITHDRAWAL TRANSACTIONS

Deposits and withdrawals are processed via available EVM chains as payment methods. On-chain transaction records are public and permanent. Your wallet address may be visible on public block explorers.

WHO WE SHARE IT WITH

We do not sell, rent, or trade your personal data. We may disclose personal data to:

• Service providers: hosting, analytics, and authentication vendors who process data solely on our instructions.
• Regulators and authorities: where required by law, for example in connection with anti-money-laundering or tax obligations.

Where our service providers are located outside your country of residence, we take steps to ensure your data continues to receive an appropriate level of protection.

We will not disclose your personal data to any other party without your consent, except as described above.

YOUR RIGHTS

Depending on your location, you may have the right to request access to, correction of, deletion of, or a copy of your personal data, or to object to or restrict certain processing. To exercise any of these rights, contact us at the details below. We may need to verify your identity before actioning a request, and may need to retain certain data to meet legal or regulatory obligations (see "How Long We Keep It" below).

HOW LONG WE KEEP IT

We retain account and transaction data for as long as your account is active and for up to seven (7) years thereafter, in order to meet anti-money-laundering, gambling, and other applicable record-keeping obligations. Technical data is retained in line with our analytics vendors' standard settings. Data no longer needed for these purposes will be securely deleted or anonymised.

COMPLAINTS

If you have a concern about how we have handled your personal data, please contact us in the first instance at the details below.

CHANGES

We may update this Privacy Policy from time to time. The date at the top of this Policy reflects the most recent revision. Continued use of the Platform following any update constitutes your acknowledgment of the revised Policy.

CONTACT

Email: support@b3spoke.io