Privacy Policy

1. INTRODUCTION AND ACCEPTANCE

This Privacy Policy describes how XMT Exchange (referring to the operating entity as defined in the Terms of Service, hereinafter "XMT Exchange", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information.

By accessing and using our Services, you signify acceptance to the terms of this Privacy Policy and our Terms of Service. You explicitly acknowledge and consent that your personal data will be processed and stored by the legal entity defined in the Terms of Service.

If you do not agree with or you are not comfortable with any aspect of this Privacy Policy, you should immediately discontinue access or use of our Services.

2. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. When required by law or in the event of significant operational changes (such as a change in the operating entity), we will notify you of changes. If we make any material changes, we will notify you by email or by means of a notice on our Services prior to the change becoming effective. Continued use of the Service after such changes constitutes acceptance of the new policy.

3. WHAT INFORMATION DOES XMT EXCHANGE COLLECT?

4. INFORMATION ABOUT CRIMINAL CONVICTIONS

When you register for or otherwise use our Services, we may receive information about your criminal convictions when we perform certain verification or compliance checks (AML/CTF).

5. IF YOU FAIL TO PROVIDE PERSONAL DATA

Where we need to collect personal data by law or under contract, failure to provide that data may prevent us from performing the contract, potentially leading to account closure.

6. COLLECTION OF PERSONAL INFORMATION

We collect Personal Data to provide you with our Services:

• Information you provide to us: Personal identification information (name, address, etc.), Formal identification information (passport, tax ID, etc.), Account information, Financial information, and Residence verification information.
• Information we collect when you use our services: Device Information, Location Information, Log Information, Account Information (trading activity, deposits, withdrawals), and Residence verification information.
• Information we collect from other sources: We may collect information from third party partners, public authorities, and public websites.

7. HOW WE USE YOUR PERSONAL INFORMATION

We only use your Personal Data if we have a proper reason for doing so.

8. AUTOMATED DECISION MAKING

We may make automated decisions on certain matters, such as to fulfill our obligations imposed by law (such as to verify your identity), to detect fraudulent or prohibited activities.

9. OUR USE OF COOKIES

Please see Part 16 (Cookies Policy).

10. DISCLOSURES TO THIRD PARTIES

We may share your Personal Data with:

• Identity verification and transaction monitoring services.
• Service providers (legal, accounting, marketing, IT).
• Financial institutions and payment processors.
• Corporate Affiliates and Successors: We may share your Personal Data with companies or other entities that we plan to merge with, be acquired by, or transfer our business operations to.
• Law enforcement, government officials, or regulators.

11. CONSENT TO INTERNATIONAL TRANSFERS OF PERSONAL DATA

XMT Exchange operates internationally. By using our Services, you acknowledge and consent that your Personal Data may be transferred to, stored, and processed in the jurisdiction of our principal place of business and other jurisdictions globally.

• Global Infrastructure: Your data may be processed in data centers located worldwide.
• Global Support & Operations: Your Personal Data may be accessed by our support teams and operational staff located in various jurisdictions.
• User Consent: By accepting this Privacy Policy, you specifically and voluntarily consent to the transfer of your personal information to these jurisdictions.

12. YOUR RIGHTS

You have certain rights concerning your Personal Data (Access, Correction, Erasure, Restriction, Data Portability, Objection).

Limitation on Rights for Closed Accounts: Please note that if your account is closed, we may be unable to fulfill requests for Erasure or Restriction if retention of your data is mandated by applicable laws. In such cases, your data will be securely archived.

Contact: privacy@xmtexchange.com

13. SECURITY OF PERSONAL DATA

We use a variety of security measures (encryption, firewalls, access controls) to ensure the confidentiality of your Personal Data. However, we cannot guarantee absolute security.

14. RETENTION OF PERSONAL DATA

We retain Personal Data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to our own legal and regulatory obligations.

• Active Accounts: Retained while the account is active and for a reasonable period thereafter.
• Terminated/Closed Accounts: We retain personal data for a period required by applicable laws (typically 5 to 7 years) to comply with Anti-Money Laundering (AML), tax, and audit obligations. After this mandatory period expires, data will be securely deleted or anonymized.

15. CHILDREN'S PERSONAL INFORMATION

We do not knowingly request to collect Personal Data from any person under the age of 18.

16. COOKIES POLICY