Privacy Policy

This Privacy Policy explains how ORBITEX collects, uses, stores, shares, and otherwise processes personal data when you visit our website, create an account, complete verification, use our exchange services, contact support, receive marketing communications, or otherwise interact with us.

ORBITEX is responsible for the processing of your personal data in connection with the Services. For privacy questions or requests, please use the official ORBITEX support and contact channels made available through the Services.

This Policy applies to personal data we process in connection with our website, mobile or web-based applications, onboarding and verification processes, customer support, compliance checks, trading services, wallet and transfer features, communications, security controls, and related business operations.

This Policy should be read together with our User Agreement, Cookie Policy, and any product-specific disclosures we publish from time to time.

We may collect and process the following categories of personal data:

• Identity and account data: full name, date of birth, username, email address, telephone number, residential address, country of residence, nationality, account credentials, and account preferences.
• Verification and KYC data: government-issued identification details, copies of identity documents, photographs, video or selfie verification data, proof of address, source-of-funds information, source-of-wealth information where required, and related verification records.
• Financial and transaction data: wallet addresses, deposit and withdrawal records, trading activity, order history, balances, payment-related information, counterparty and beneficiary details, and transfer-related information required by law or policy.
• Technical and usage data: IP addresses, login history, browser type, device identifiers, operating system, network data, session data, cookie-related information, and interactions with our website and services.
• Communications data: support tickets, emails, chat messages, complaint files, feedback, survey responses, and records of communications with us.
• Risk and compliance data: sanctions screening results, fraud indicators, blockchain analytics results, transaction-monitoring alerts, device and behaviour-based risk signals, and internal review notes.
• Marketing and preference data: email subscription choices, communication preferences, campaign engagement data, and records of opt-in or opt-out decisions.

We collect personal data directly from you, automatically from your use of our services, and from third parties.

• Directly from you when you create an account, fill in forms, upload documents, complete verification steps, make a transaction, contact us, or subscribe to updates.
• Automatically when you access or use our website or services, including through cookies, server logs, security tools, and other technical means.
• From service providers and public or private sources used for compliance, sanctions screening, fraud prevention, identity verification, transaction monitoring, and legal obligations.

We use personal data only where we have a valid reason to do so. The main purposes include:

• creating and administering your account;
• verifying your identity and eligibility to use our services;
• providing trading, wallet, deposit, withdrawal, and account functionality;
• performing anti-money laundering, sanctions, anti-fraud, and risk-control checks;
• monitoring transactions, access patterns, and activity for security and market-integrity purposes;
• responding to support requests, complaints, and operational issues;
• sending service notices, security alerts, and other necessary communications;
• sending marketing emails where permitted, and processing your opt-out requests;
• improving our platform, user experience, support processes, and internal controls;
• meeting legal, regulatory, audit, reporting, and recordkeeping requirements;
• establishing, exercising, or defending legal claims.

Where applicable data protection law requires a lawful basis, we generally rely on one or more of the following:

• Contract: where processing is necessary to provide our services to you or take steps at your request before entering into a contract.
• Legal obligation: where processing is necessary to comply with applicable laws, regulations, requests from authorities, or industry obligations.
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. This includes service administration, security, fraud prevention, platform improvement, and internal governance.
• Consent: where we rely on your consent, for example for certain cookies or certain direct marketing activities where required.
• Legal claims: where processing is necessary to establish, exercise, or defend legal claims.

ORBITEX may send you marketing emails about our products, services, updates, advertisements, promotions, and related offers where permitted by law. You can opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us through the official ORBITEX support channels.

We will continue to send non-marketing communications where necessary for account administration, legal notices, service updates, transaction information, or security purposes.

We may share personal data only where reasonably necessary and subject to appropriate controls, including with:

• identity verification and KYC service providers;
• sanctions screening and compliance service providers;
• cloud hosting, technical infrastructure, analytics, advertising, and customer support providers;
• professional advisers such as lawyers, auditors, consultants, or insurers;
• courts, law enforcement, regulators, tax authorities, or other competent authorities;
• group companies, affiliates, business partners, or service providers involved in operating the platform, where lawful and necessary.

Personal data may be processed or stored in countries other than the country in which you live where this is necessary to operate the ORBITEX Services or work with our service providers. Where applicable law requires safeguards for international transfers, ORBITEX will take appropriate steps to implement recognised safeguards and other required protections.

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, comply with legal or regulatory obligations, resolve disputes, prevent fraud, enforce agreements, and maintain appropriate business records.

In practice, retention periods may vary depending on the type of data and the reason we hold it. For example:

• account, identity, and verification records may be retained for as long as your account remains active and thereafter for any period required by law, regulation, or legitimate business need;
• transaction, compliance, and security records may be retained for as long as necessary to satisfy legal, audit, anti-fraud, and risk-management requirements;
• communications and support records may be retained for as long as reasonably necessary to manage your relationship with us, resolve complaints, or improve support;
• marketing preference data may be retained until you opt out, withdraw consent where relevant, or the data is no longer needed.

Subject to applicable law, you may have the right to:

• be informed about how your personal data is used;
• request access to personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request erasure of personal data in certain circumstances;
• request restriction of processing in certain circumstances;
• object to certain processing, including certain direct marketing;
• request portability of personal data where applicable;
• withdraw consent where we rely on consent, without affecting prior lawful processing;
• complain to the relevant data protection authority if you believe your rights have been infringed.

To exercise your rights, please contact us through the official ORBITEX support and contact channels. We may ask for information to verify your identity before responding.

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include access controls, authentication measures, monitoring, encryption or pseudonymisation where appropriate, secure storage, logging, vendor due diligence, and internal governance controls.

No internet-based service is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your own credentials and devices.

ORBITEX is not intended for children or minors. We do not knowingly offer our services to anyone under the legal age required to use them, and we do not knowingly collect personal data from minors for account use.

We may update this Privacy Policy from time to time to reflect changes to our services, practices, legal requirements, or operational needs. We will publish the updated version on our website and update the 'Last updated' date above. Where required, we will provide additional notice.

If you have questions about this Privacy Policy or how ORBITEX processes personal data, please contact us through the official ORBITEX support and contact channels made available through the Services.

Website: orbitex.space