What we know about you, and why

What data do we collect?

• Identity data — name, date of birth, nationality, identity document details and a copy of the document.
• Contact data — postal address, email, telephone number.
• Financial data — source of funds, bank and payment details, transaction history, account balances.
• Knowledge and experience data — answers to the appropriateness questionnaire required by regulation.
• Technical data — IP address, device identifiers, browser type, log-in timestamps, platform usage.
• Communications — chat transcripts, emails and recorded telephone calls with the desk.

Why do we collect it?

We process personal data to:

• verify identity and comply with anti-money-laundering and counter-terrorist-financing law;
• assess whether leveraged products are appropriate for you;
• open, operate and close your account and execute your orders;
• process deposits and withdrawals;
• detect fraud, market abuse and unauthorised access;
• respond to your requests and complaints;
• meet record-keeping and reporting obligations to the regulator;
• improve the platform and, with consent, send marketing communications.

What is the legal basis?

Processing rests on one or more of: performance of the Customer Agreement; compliance with a legal obligation; our legitimate interests in operating a secure and reliable service; and, for marketing and optional cookies, your consent, which can be withdrawn at any time.

Who do we share it with?

• Identity-verification and sanctions-screening providers.
• Banks, payment processors and stablecoin custodians used to move client money.
• Liquidity providers, to the extent required to execute and settle orders (pseudonymised where possible).
• Cloud hosting, communications and analytics vendors bound by data-processing agreements.
• Auditors, legal advisers and insurers.
• Regulators, law-enforcement and courts when legally required.

We do not sell personal data.

Is data transferred internationally?

Yes. Some service providers operate outside the United Arab Emirates and the European Economic Area. Transfers are protected by contractual safeguards recognised under ADGM Data Protection Regulations and, where applicable, EU standard contractual clauses.

How long do we keep it?

Client records are retained for at least six years after the relationship ends, as required by financial-services regulation. Technical logs are kept for twelve months. Marketing preferences are kept until withdrawn. Data no longer required is deleted or irreversibly anonymised.

How is data secured?

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access is role-based and logged. Platforms require two-factor authentication. Security controls are tested by an independent penetration-testing firm annually and the results are reviewed by the board.

What are your rights?

Subject to legal limits you may request access to, correction of, deletion of or restriction on the processing of your personal data; object to processing based on legitimate interests; receive a portable copy; and withdraw consent. Requests are answered within one month. You may also complain to the ADGM Office of Data Protection or your local supervisory authority.

Cookies

The website uses strictly necessary cookies for session management and, with consent, analytics cookies to measure page performance. No advertising cookies are set. Preferences can be changed via the cookie banner at any time.

Changes to this policy

Material changes are announced by email and on this page at least fourteen days before they take effect. The date of the current version is shown below.