Privacy Policy

XCMarkets is the data controller for your personal information. The specific legal entity responsible depends on your country of residence and is identified in your account documents.

Our data protection officer can be reached at privacy@xcmarkets.io for any privacy-related question or request.

Identity data: your full legal name, date of birth, nationality, government-issued ID numbers and photo IDs you upload to verify your identity.

Contact data: your email, phone number, residential address and any additional contact channels you provide.

Financial data: your source of funds, tax residency, employment details, trading history, deposit and withdrawal records.

Technical data: device identifiers, IP addresses, browser type, operating system, login times and pages visited within our platforms.

To open and operate your trading account, including identity verification (KYC) and ongoing customer due diligence.

To execute, settle and report on your trading activity.

To comply with our legal and regulatory obligations, including anti-money-laundering and counter-terrorism financing laws.

To provide customer support, communicate updates, send marketing material you have consented to receive, and improve our services.

We process your personal data only where we have a lawful basis: to perform our contract with you, to comply with legal obligations, to pursue legitimate business interests such as fraud prevention, or where you have given consent.

Where consent is the basis (e.g. for marketing), you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

We share data only with parties that need it — our liquidity providers, payment processors, KYC verification vendors, regulators, auditors and law-enforcement bodies where required by law.

We do not sell your personal data. We never share it with third parties for their own marketing purposes.

Where data is transferred outside your jurisdiction, we use Standard Contractual Clauses or equivalent safeguards to protect it.

We retain your personal data for the duration of your relationship with us and for the period required by applicable law afterwards — typically seven years from the date your account is closed.

Some categories of data may be retained longer where required by financial-services regulation in your jurisdiction.

Depending on your country of residence you have rights to access the personal data we hold about you, request correction or deletion, restrict or object to certain processing, and obtain a portable copy of your data.

You also have the right to lodge a complaint with the data protection authority in your country if you believe we have not handled your data appropriately.

To exercise any of these rights, email privacy@xcmarkets.io with the request and proof of your identity. We respond within 30 days.

We use first-party cookies and a small number of trusted third-party services to operate the website, remember your preferences and measure performance.

You can review and adjust your cookie preferences at any time via the cookie banner at the bottom of the page or in your browser settings. Essential cookies cannot be disabled because the site relies on them to function.

We protect your data with industry-standard controls including encryption in transit and at rest, role-based access controls, multi-factor authentication for staff, intrusion detection and regular security testing.

No system is perfectly secure. In the unlikely event of a personal data breach we will notify affected clients and the relevant authorities in line with applicable laws.

Our services are not directed at and not available to anyone under the age of 18. We do not knowingly collect personal data from minors.

We may update this policy from time to time. Material changes will be communicated via your client area and by email at least 14 days before they take effect.