Privacy Policy

Last Updated: January 2026

Bitnex Crestfort ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, share, and protect information when you access or use our cryptocurrency trading platform available at bitnex-crestfort-platform.com (the "Platform"). By using the Platform, you consent to the data practices described in this Privacy Policy.

1. Information We Collect

We collect various types of information to provide and improve our services, ensure platform security, and comply with legal obligations.

1.1 Information You Provide

When you register for an account or use our services, you may provide us with personal information including:

• Account Information: Name, email address, phone number, date of birth, residential address, and nationality.
• Verification Documents: Government-issued identification documents, proof of address, photographs, and other information required for identity verification and compliance with anti-money laundering regulations.
• Financial Information: Bank account details, payment card information, transaction history, wallet addresses, and trading activity.
• Communications: Content of your messages, support requests, and other communications with us.

1.2 Automatically Collected Information

We automatically collect certain information when you access or use the Platform:

• Device and Usage Data: IP address, browser type, operating system, device identifiers, access times, pages viewed, and referring URLs.
• Trading Data: Details of orders placed, executed trades, positions held, portfolio composition, and platform interactions.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect information about your browsing behavior. Please see our Cookie Policy for more details.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including identity verification services, fraud prevention providers, payment processors, blockchain analytics firms, and publicly available databases.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To create and manage your account, process transactions, provide trading services, and deliver customer support.
• Verification and Compliance: To verify your identity, comply with know-your-customer (KYC) and anti-money laundering (AML) requirements, prevent fraud, and fulfill legal and regulatory obligations.
• Platform Improvement: To analyze usage patterns, develop new features, enhance security measures, and improve overall platform performance.
• Communications: To send you service-related notifications, account updates, security alerts, marketing communications (where you have consented), and respond to your inquiries.
• Legal Obligations: To comply with applicable laws, respond to legal requests, enforce our Terms of Service, and protect our rights and the rights of others.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual Necessity: Processing necessary to perform our contract with you and provide the services you request.
• Legal Obligations: Processing required to comply with applicable laws and regulations, including financial crime prevention requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security enhancement, and service improvement, provided such interests are not overridden by your fundamental rights.
• Consent: Where you have provided explicit consent for specific processing activities, such as marketing communications.

4. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

• Service Providers: Third-party vendors who perform services on our behalf, including payment processors, identity verification providers, cloud hosting services, data analytics providers, and customer support platforms.
• Regulatory Authorities: Government agencies, law enforcement, financial regulators, and tax authorities when required by law or to comply with legal obligations.
• Business Transfers: In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to successor entities.
• Legal Requirements: When disclosure is necessary to protect our rights, property, or safety, or that of our users or the public, or to respond to legal process.
• With Your Consent: We may share information with third parties when you have provided explicit consent.

5. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those of your jurisdiction. When we transfer personal data internationally, we implement appropriate safeguards to protect your information, including standard contractual clauses approved by relevant authorities, adequacy decisions, or other lawful transfer mechanisms.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Account information and transaction records are typically retained for a minimum of five years following account closure to comply with regulatory requirements. Anonymized or aggregated data may be retained indefinitely for analytical purposes.

7. Your Rights and Choices

Subject to applicable law, you have the following rights regarding your personal data:

• Access: You may request access to the personal information we hold about you.
• Rectification: You may request correction of inaccurate or incomplete information.
• Erasure: You may request deletion of your personal data in certain circumstances.
• Restriction: You may request that we restrict processing of your information in certain situations.
• Portability: You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.
• Objection: You may object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us through the contact information provided on the Platform. Please note that certain rights may be subject to limitations under applicable law, and we may need to verify your identity before responding to requests.

8. Security Measures

We implement technical and organizational security measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, secure access controls, regular security assessments, and employee training. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. We will notify you of material changes by posting the updated Privacy Policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform following the posting of changes constitutes your acceptance of such changes.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the contact information provided on the Platform. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.