Privacy Policy

1. Information We Collect

XCMarkets Ltd. ("XCMarkets," "we," "us," or "our") collects information necessary to provide you with secure and compliant financial services. This includes:

• Personal identification data: full name, date of birth, nationality, government-issued ID numbers, and photographs of identity documents.
• Contact information: email address, phone number, and residential address.
• Financial information: source of funds, employment status, annual income, net worth, and trading experience.
• Transaction data: deposits, withdrawals, trade history, account balances, and payment method details.
• Technical data: IP address, browser type, device information, operating system, and usage patterns collected through our platforms.

2. How We Use Your Information

We use your personal data for the following purposes:

• Opening, maintaining, and administering your trading account.
• Processing deposits, withdrawals, and financial transactions.
• Verifying your identity in compliance with KYC and AML regulations.
• Monitoring and detecting fraudulent, unauthorized, or suspicious activity.
• Communicating account updates, service changes, and promotional offers (where you have opted in).
• Improving our platforms, services, and customer experience through analytics.
• Fulfilling our legal and regulatory obligations.

3. Data Sharing

XCMarkets does not sell your personal data to third parties. We may share your information with:

• Payment processors and banking partners to facilitate deposits and withdrawals.
• Regulatory authorities and law enforcement when required by applicable law or in response to valid legal process.
• Identity verification providers to fulfill our KYC obligations.
• Technology and infrastructure partners who assist in operating our platforms, subject to strict data processing agreements.
• Professional advisors including legal counsel, auditors, and compliance consultants.

All third-party recipients are contractually bound to protect your data and may only process it for the specific purposes for which it was shared.

4. Data Security

We implement industry-standard security measures to protect your personal data, including AES-256 encryption for data at rest, TLS 1.3 for data in transit, multi-factor authentication, and regular security audits conducted by independent third parties.

Access to personal data is restricted to authorized personnel on a need-to-know basis. All employees undergo background checks and are bound by confidentiality obligations.

While we take all reasonable precautions, no system can guarantee absolute security. In the event of a data breach, we will notify affected individuals and relevant authorities as required by applicable law.

5. Cookies

Our website and platforms use cookies and similar tracking technologies to enhance your experience. We use the following types of cookies:

• Essential cookies: required for platform functionality, authentication, and security.
• Analytics cookies: help us understand usage patterns and improve our services.
• Marketing cookies: used to deliver relevant advertising (only with your consent).

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling essential cookies may impair platform functionality.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data, subject to legal retention obligations.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdrawal of consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at privacy@xcmarkets.io. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active and for a minimum of five (5) years following account closure, as required by financial regulations and AML legislation. Transaction records may be retained for up to seven (7) years.

Data that is no longer required for any legal or business purpose will be securely deleted or anonymized.

8. International Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including countries that may not provide the same level of data protection. When transferring data internationally, we implement appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and equivalent mechanisms recognized by applicable data protection authorities.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such data promptly.

10. Changes to This Policy

XCMarkets may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. We will notify you of material changes via email or a prominent notice on our platform. The "Last updated" date at the top of this page indicates when this policy was most recently revised.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: privacy@xcmarkets.io
• Support: support@xcmarkets.io
• Address: XCMarkets Ltd., 71-75 Shelton Street, London, WC2H 9JQ, United Kingdom