Privacy Policy

Last updated: January 2026

Blackrose Finbitnex ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, share, and protect information obtained from users ("you" or "User") of our cryptocurrency trading platform (the "Platform") accessible at blackrose-finbitnex-platform.com. By using the Platform, you consent to the data practices described in this Policy.

1. Data Controller

Blackrose Finbitnex acts as the data controller for personal data collected through the Platform. We process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

2.1 Information You Provide

When you register for an account, use our services, or communicate with us, we may collect:

• Identity information: Full name, date of birth, nationality, and government-issued identification documents for verification purposes;
• Contact information: Email address, phone number, and postal address;
• Financial information: Bank account details, cryptocurrency wallet addresses, transaction history, and payment information;
• Account credentials: Username, password (stored in encrypted form), and security questions;
• Communication data: Records of correspondence with our support team, including emails, chat logs, and support tickets.

2.2 Information Collected Automatically

When you access the Platform, we automatically collect certain technical and usage data:

• Device information: IP address, browser type and version, operating system, device identifiers, and screen resolution;
• Usage data: Pages visited, features used, time spent on the Platform, clickstream data, and navigation patterns;
• Transaction data: Details of trades executed, order history, deposit and withdrawal records, and account balances;
• Cookies and tracking technologies: Data collected through cookies, web beacons, and similar technologies as described in our Cookie Policy.

2.3 Information from Third Parties

We may receive information about you from third-party service providers, including identity verification services, payment processors, fraud prevention agencies, and blockchain analytics providers, to verify your identity, prevent fraud, and comply with legal obligations.

3. How We Use Your Information

We process your personal data for the following purposes:

• Account management: To create, maintain, and secure your account, authenticate your identity, and provide customer support;
• Service provision: To execute trades, process deposits and withdrawals, provide access to trading tools and analytics, and deliver Platform functionality;
• Compliance and security: To comply with anti-money laundering (AML), know-your-customer (KYC), and other regulatory obligations; to detect, prevent, and investigate fraud, security breaches, and illegal activity;
• Communication: To send transactional notifications, account alerts, service updates, and respond to your inquiries;
• Improvement and analytics: To analyze Platform usage, improve features, develop new services, and conduct research;
• Marketing: With your consent where required, to send promotional communications about new features, products, or services. You may opt out at any time;
• Legal obligations: To respond to legal requests, enforce our Terms and Conditions, and protect our rights and property.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Contractual necessity: Processing is necessary to perform our contract with you (i.e., to provide the Platform services);
• Legal obligation: Processing is required to comply with applicable laws and regulations, including AML/KYC requirements;
• Legitimate interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights;
• Consent: Where required by law, we obtain your explicit consent, such as for marketing communications or certain cookie uses.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with the following categories of recipients:

• Service providers: Third-party vendors who perform services on our behalf, such as payment processing, identity verification, cloud hosting, customer support, and analytics, under strict confidentiality obligations;
• Regulatory and law enforcement: Government authorities, regulators, law enforcement agencies, and courts when required by law or to protect our legal rights;
• Business transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the acquiring entity;
• Professional advisors: Lawyers, auditors, and consultants who provide professional services to us;
• With your consent: We may share data with other parties when you have given explicit consent.

6. Data Security

We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest using SSL/TLS and AES-256 encryption;
• Multi-factor authentication and access controls;
• Regular security audits, vulnerability assessments, and penetration testing;
• Employee training on data protection and confidentiality;
• Incident response procedures and breach notification protocols.

While we strive to protect your data, no method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Account data and transaction records are typically retained for at least five years following account closure to comply with financial and AML regulations. Anonymized or aggregated data may be retained indefinitely for analytical purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you;
• Rectification: Request correction of inaccurate or incomplete data;
• Erasure: Request deletion of your data, subject to legal and regulatory retention requirements;
• Restriction: Request limitation of processing in certain circumstances;
• Data portability: Receive your data in a structured, machine-readable format;
• Objection: Object to processing based on legitimate interests or for direct marketing purposes;
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time;
• Complaint: Lodge a complaint with a supervisory data protection authority.

To exercise these rights, please contact us through the support channels provided on the Platform. We will respond to requests in accordance with applicable law.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including jurisdictions that may not provide the same level of data protection. When we transfer data internationally, we implement appropriate safeguards, such as standard contractual clauses approved by the European Commission, to ensure your data remains protected.

10. Children's Privacy

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform functionality. Updates will be posted on this page with a revised "Last updated" date. We encourage you to review this Policy periodically. Continued use of the Platform following changes constitutes acceptance of the updated Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the support channels available on the Platform.