At BitBag, your trust is our top priority. This Privacy Policy describes how we collect, use, store, and share your personal and financial information when you interact with our cryptocurrency trading platform. Whether you're accessing our services via website, API, or mobile application, we are committed to protecting your data and maintaining transparency.

1. Information We Collect

• Identity Verification: To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations, we collect information such as your full name, government-issued ID, date of birth, and address.
• Account Information: Your email address, username, password (encrypted), and phone number are required to open and secure your account.
• Blockchain & Transaction Data: We track wallet addresses, deposit/withdrawal history, and blockchain confirmations to ensure secure and accurate processing.
• Device & Technical Data: We collect your IP address, browser type, operating system, and log-in timestamps to help secure your account from unauthorized access.
• Cookies & Analytics: We use cookies and tracking scripts to enhance your experience and improve site performance. Learn more in our Cookie Policy.

2. How We Use Your Information

• To verify your identity and comply with legal obligations (KYC/AML).
• To process crypto trades, manage your portfolio, and secure transactions.
• To notify you about account activity, system updates, and promotional content.
• To prevent fraud, enhance platform security, and monitor for suspicious activity.
• To analyze user behavior and improve our platform and user experience.

3. How We Share Your Information

• With Regulatory Authorities: If required by law, court order, or regulation, we may share your data with law enforcement or financial regulators.
• With Service Providers: We partner with vendors for KYC processing, cloud hosting, analytics, and fraud prevention. They are contractually obligated to protect your data.
• Business Transactions: In case of a merger, acquisition, or restructuring, your data may be transferred as part of business assets.
• On the Blockchain: Public blockchain networks are inherently transparent; transactions you perform may be publicly viewable and permanent.

4. Your Rights

• Access: You may request a copy of your personal data at any time.
• Rectification: You can correct inaccurate or outdated information.
• Erasure: Request deletion of your data unless we are legally required to retain it (e.g. AML obligations).
• Data Portability: Obtain your data in a machine-readable format.
• Withdraw Consent: You may withdraw your consent where processing is based on consent.

5. Security Practices

BitBag employs advanced security practices including multi-factor authentication (MFA), end-to-end encryption, cold wallet storage for crypto assets, DDoS protection, and continuous monitoring of platform activity. Our infrastructure is hosted with leading cloud providers and audited for compliance.

6. Data Retention

We retain your data only as long as necessary to comply with legal requirements and serve legitimate business purposes. For example, KYC data may be retained for 5–7 years to comply with AML laws even after account closure.

7. International Transfers

BitBag operates globally and may transfer your data to servers located outside your jurisdiction. When doing so, we ensure an adequate level of data protection consistent with applicable privacy laws such as the GDPR.

8. Children's Privacy

BitBag does not knowingly provide services to individuals under the age of 18. If we discover that a minor has submitted personal information, we will promptly delete it.

9. Changes to This Policy

BitBag reserves the right to update this Privacy Policy periodically. Changes will be posted on this page with a revised “Last Updated” date. We encourage you to review it regularly to stay informed of how we protect your data.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or your personal data, please contact our Data Protection Officer at: [email protected]