Privacy Policy

Last Updated: January 1, 2023

XTTB Exchange ("we," "us," or "our") is committed to protecting the privacy and security of our users’ personal information. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you use our platform, mobile applications, or services (collectively, the "Services"). By using our Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect information to provide and improve our Services, ensure security, and comply with legal obligations. The types of information we collect include:

• Personal Information: When you register for an account, we may collect your name, email address, phone number, date of birth, and government-issued identification for identity verification (e.g., KYC processes).
• Financial Information: Details related to your transactions, such as wallet addresses, deposit and withdrawal records, and payment information (e.g., bank account or credit card details).
• Usage Data: Information about how you interact with our Services, including IP addresses, device information, browser type, operating system, and activity logs (e.g., trading history, login times).
• Communication Data: Information you provide when contacting our support team, including emails, chat messages, or other correspondence.
• Verification Data: Documents or information provided for Know Your Customer (KYC) or Anti-Money Laundering (AML) compliance, such as passports, driver’s licenses, or proof of address.

2. How We Use Your Information

We use your information to operate, maintain, and enhance our Services, including:

• Account Management: To create and manage your account, verify your identity, and provide access to our Services.
• Transaction Processing: To facilitate deposits, withdrawals, and trading activities on our platform.
• Security and Fraud Prevention: To monitor and protect against fraudulent activities, unauthorized access, and compliance with regulatory requirements.
• Personalized Services: To tailor your experience, such as providing market insights, notifications, or customized trading tools.
• Customer Support: To respond to your inquiries, resolve issues, and provide assistance.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes, including KYC and AML requirements.
• Analytics and Improvements: To analyze usage patterns, improve our Services, and develop new features.

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party providers who assist us in operating our Services, such as payment processors, cloud storage providers, and KYC/AML verification services, subject to strict confidentiality agreements.
• Legal Obligations: When required by law, regulation, or legal process (e.g., subpoenas, court orders) to disclose information to regulatory authorities or law enforcement.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With Your Consent: When you explicitly consent to sharing your information, such as for promotional campaigns or partnerships.

4. Data Security

We implement industry-leading security measures to protect your information, including:

• Encryption: Using advanced encryption protocols (e.g., SSL/TLS) to secure data transmission and storage.
• Multi-Factor Authentication: Offering two-factor authentication (2FA) to enhance account security.
• Cold Storage: Storing the majority of user funds in offline, multi-signature wallets to protect against cyber threats.
• Regular Audits: Conducting third-party security audits and penetration testing to identify and address vulnerabilities.
• Monitoring: Using AI and machine learning to detect and prevent suspicious activities in real time.

While we strive to protect your information, no system is completely immune to risks. You are responsible for maintaining the confidentiality of your account credentials and enabling security features like 2FA.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you.
• Correction: Request corrections to inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal and regulatory requirements.
• Restriction: Request restriction of processing your personal information in certain circumstances.
• Data Portability: Request a copy of your personal information in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications or certain data processing activities, where applicable.

To exercise these rights, please contact us via our support team. We will respond to your request in accordance with applicable data protection laws.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage, and deliver personalized content. These include:

• Essential Cookies: Necessary for the operation of our Services, such as session management and authentication.
• Analytics Cookies: Used to understand how users interact with our platform, enabling us to improve functionality.
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance.

You can manage your cookie preferences through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of our Services.

7. International Data Transfers

As a global platform, your information may be transferred to and processed in countries other than your own, including jurisdictions with different data protection laws. We ensure that such transfers comply with applicable regulations, using mechanisms like Standard Contractual Clauses (SCCs) to safeguard your data.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. For example:

• Account data is retained for the duration of your account and for a period afterward to comply with legal obligations.
• Transaction records are kept for a minimum of seven years to meet regulatory requirements.
• Usage data may be retained for analytics purposes, anonymized where possible.

Once no longer needed, your information is securely deleted or anonymized.

9. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email, in-platform notifications, or by updating the "Last Updated" date at the top of this policy. Your continued use of our Services after such changes constitutes acceptance of the updated policy.