Privacy Policy

[Privacy Policy Updates] Last updated: 2023-12-05 (UTC+8)

This privacy policy explains how Oxichange and its affiliates (“Oxichange”) collect, use, share, and protect user information received through the Oxichange website (https://www.oxichange.com), our mobile applications, or other related services provided by Oxichange. The terms “we,” “us,” and “our” refer to Oxichange and its affiliates. When we ask users for certain personal information, it is because we are legally obligated to collect this information or because it is relevant to specific purposes. Any unnecessary information you provide to us is done voluntarily. You decide whether to provide this unnecessary information; if you choose not to provide it, you may not be able to access or use all of our services.

By using this site and related application programming interfaces (APIs) or mobile applications, you agree to our privacy policies and practices, so please read this document carefully.

This privacy policy explains what data we collect, how we use and store this data, and how we share this data. If you do not want your personal data (as defined below) to be used in the manner described in this privacy policy, you cannot use the site or any of the services, software, APIs, technologies, products, and/or features provided by the site (“Services”).

Definitions:

Virtual Financial Assets: As used herein, “Virtual Financial Assets,” also referred to as “Convertible Virtual Currency,” “Cryptocurrency,” or “Digital Goods,” are based on the cryptographic protocol of a computer network that may be (i) centralized or decentralized, (ii) closed or open-source, and (iii) used as a medium of exchange and/or a store of value, such as Bitcoin or Ether.

Personal Data: As used herein, “Personal Data” means any information relating to an identified or identifiable individual, such as name, identification number, location data, online identifier, or one or more specific factors related to the physical, economic, cultural, or social identity of you as a natural person.

2. What Personal Information Do We Collect?

Oxichange collects, processes, and stores your personal information through your use of our services, or where you have given consent. This personal information may include contact details, copies of identity documents you have provided or extracted from publicly accessible databases, your government identification number, as well as information regarding your device or internet service (such as IP address and MAC number).

Oxichange, which operates in jurisdictions under specific supervision worldwide, collects, stores, and processes your personal information in accordance with various regulations we are subject to, with the aim of achieving the highest standards of compliance and adhering to all privacy requirements. The provisions below in this privacy policy are a synthesis of these regulations that our entire group is subject to and serve as a single policy to oversee our data collection, storage, and processing activities. Since these regulations are amended from time to time, we are also required to ensure that our data practices remain up to date with the amendments to this document.

We collect information that you provide in the process of signing up for Oxichange, whether this process is completed, incomplete, or abandoned. We also collect your personal information when you communicate with us through customer support, subscribe to marketing messages, or contact us via phone, email, or other communication channels. We collect, use, store, and transfer your personal information, which may include the following:

Natural Persons:

• Email address
• Mobile phone number
• Full legal name (including previous names and names in the local language)
• Nationality
• Passport number or any government-issued identification number
• Date of Birth (“DOB”)
• Proof of identity (such as passport, driver’s license, or government-issued ID)
• Residential address
• Proof of legal existence
• Additional personal information or documents at the discretion of our compliance team
• IP address
• Device ID

Legal Entities:

• Legal name of the company (including the legal name in the local language)
• Registration/incorporation information
• Full legal name of all beneficial owners, directors, and legal representatives
• Address (main business location and/or other physical locations)
• Proof of legal existence
• Description of business
• Ownership percentage for natural/legal owners
• Contact information for owners, principals, and executive management (if applicable)
• Proof of identity (e.g., passport, driver’s license, or government-issued ID) for the natural beneficial owner of the legal entity customer
• Personal information for any principal beneficial owner of the legal entity customer (for details on personal information we collect for individuals, see the “Natural Persons” section above)
• Source of wealth
• Amount of fiat money deposited
• Amount of Bitcoin or other digital assets anticipated to be deposited

3. Collection and Transfer of Data Outside Your Jurisdiction

As we may collect personal information from customers located in various jurisdictions, and most of these jurisdictions require consent for the transfer of such personal information from your jurisdiction abroad, your explicit consent is required and is implicitly assumed through your use of our services. If you refuse to give consent to this transfer, you will no longer be able to use the Oxichange platform or our services. You will still have the ability to withdraw your digital assets; however, other platform functionalities will be disabled.

4. How We Use Your Personal Data

Oxichange uses personal data to communicate with you and to manage, provide, improve, and personalize services. Oxichange may generate public data from the personal data we have collected and use it for its purposes. We may also use this data to contact you regarding other products or services offered by Oxichange and/or its partners. We do not share your personal data with third parties (except partners related to their services to Oxichange) unless you have consented to do so, as detailed below.

We may share your personal data with third parties: (a) if we believe that sharing it is necessary for enforcing the terms of service; (b) for compliance with governmental regulations, including regulatory bodies, law enforcement, and/or judicial departments; (c) with third parties providing services to Oxichange (such as management or technical services); (d) in connection with the sale or transfer of our business or any part thereof.

In addition, we have implemented international standards to prevent money laundering, financing of terrorism, and circumventing trade and economic sanctions, and we will implement relevant laws and regulations regarding virtual financial assets that may necessitate conducting necessary due diligence on our customers. This may include using data and third-party service providers that will be matched with your personal information.

To implement the [sharing] capability, we use the [ShareSDK] product from MobTech. You can find the privacy policy terms for this product at this address: http://www.mob.com/about/policy

5. How We Store Your Personal Data

We aim to prevent unauthorized access, alteration, disclosure, or destruction of personal data that we collect and store. We implement various measures to ensure the security of the information. We securely store your data in fault-tolerant storage that is encrypted to industry standards, and we have taken various security measures to prevent user data from being lost, misused, or altered, including but not limited to:

5.1 Physical Measures: Materials containing your personal information are stored in a locked location. Your personal information is stored physically only in specific instances.

5.2 Electronic Measures: Computer data containing your personal information is stored in computer systems and storage media subject to strict access restrictions.

5.3 Administrative Measures: Only authorized employees are allowed to access your personal information, and these employees must comply with internal data confidentiality policies. We have also implemented stringent physical access controls to buildings and files. In addition, we continuously train employees on relevant laws, regulations, and privacy security guidelines and enhance security awareness, regularly conducting emergency response training and drills for relevant internal staff to learn their job responsibilities and emergency response strategies.

5.5 Other Measures: Our web server is protected by various firewalls.

Please note that ensuring 100% security of information is impossible. Therefore, we ask you to acknowledge your responsibility for independent safety precautions to protect your personal information.

Here are some safety measures you should be aware of:

5.6 Use strong usernames, passwords, and PINs to access your accounts that others do not know or cannot easily guess (“User Credentials”). User Credentials should comply with our requirements when created. You should keep your User Credentials secure and confidential and not share them with anyone.

5.7 It is recommended to install antivirus, anti-spyware, and firewall software on personal computers and mobile devices.

5.8 Keep your operating system and antivirus and firewall software up to date and patched to the latest security fixes or available versions.

5.9 Disable file and printer sharing on computers, especially when connected to the Internet.

5.10 Regularly back up your critical data.

5.11 Consider using encryption technology to protect very sensitive or confidential information.

5.12 Always log out completely after every online session using the platform and clear your browser cache.

5.13 Do not install or run any software or programs from unknown sources.

5.14 Delete spam or chain emails.

5.15 Do not open email attachments from strangers.

5.16 Do not provide personal, financial, or credit card information to obscure or suspicious websites.

5.17 Do not use unreliable computers or equipment.

5.18 Do not use public computers or internet cafés to access online services or conduct financial transactions.

If you suspect that your personal information, especially your account information and/or password, has been compromised, please immediately lock your account and contact our customer support team. Unless otherwise specified by law or the terms of use, you agree that we have the right but are not obligated to retain personal data as long as necessary to fulfill the purposes of this privacy policy.

6. Retention of Your Personal Data

We will only retain your personal data for as long as is necessary for the purposes set out in this privacy policy. We will retain your personal data to comply with our legal obligations, resolve disputes, and enforce our agreements.

We will retain your personal data for a period of time determined based on the following criteria:

• For the duration of your registration as a user of our Services, unless you specifically ask us to delete it earlier.
• As required by applicable laws and regulations.

7. Your Rights Regarding Your Personal Data

Depending on where you reside, you may have the following rights with respect to your personal data. You may request that we:

1. Inform you of your personal data that we have collected and process.
2. Update your personal data.
3. Delete your personal data.
4. Restrict the processing of your personal data.
5. Object to the processing of your personal data.
6. Transfer your personal data to another organization or to you.
7. Withdraw your consent to the processing of your personal data (where we rely on your consent).

If you wish to exercise any of these rights, please contact our customer support team. We will respond to your request in accordance with applicable laws. Please note that we may not be able to fulfill your request in all cases.

8. Cookies and Similar Technologies

Cookies are small text files that are stored on your device when you visit a website. Cookies are widely used to make websites work more efficiently or to provide information to the owners of the site. We use cookies to enhance your user experience, and you can choose to accept or reject cookies. Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer.

We may use the following types of cookies:

• Session Cookies: These cookies are temporary and expire once you close your browser.
• Persistent Cookies: These cookies remain on your device for a set period or until you delete them. They are activated each time you visit our site.

We also use third-party cookies, such as those from analytics providers, to help us analyze how our site is used. These cookies may also be used for targeted advertising. You can find more information about how to manage cookies through your browser settings.

9. Links to Third-Party Websites

Our site may contain links to third-party websites. This privacy policy applies only to our site. We are not responsible for the privacy policies or practices of third-party websites. We recommend that you read the privacy policy of any third-party site you visit.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our site with a new “Last updated” date. We encourage you to review this privacy policy periodically for any changes.

11. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Oxichange Support Team
Email: [email protected]