01 Overview & Data Controller
This Privacy Agreement ("Agreement") outlines the protocols by which WinTradely Global Holdings Ltd. ("WinTradely", "we", "us", or "our") collects, processes, encrypts, and retains personal and financial information when you access our online trading terminals, mobile applications, APIs, and related web services.
By registering an account, practicing on virtual demo funds, depositing real capital, or accessing any service provided on the WinTradely infrastructure, you acknowledge and agree to the data management practices described in this Agreement.
02 Information We Collect
We collect only the minimum required information necessary to provide ultra-fast execution, comply with international Anti-Money Laundering (AML) / Know Your Customer (KYC) mandates, and prevent fraudulent intrusion:
- Account Identity Information: Registered email address, user alias, hashed authentication credentials, account identification numbers, and country of residence.
- KYC & Regulatory Verification Documents: Government-issued passport, national identity card, driving licence, proof of address utility invoices, and biometric facial liveness selfies submitted for account tier elevation.
- Financial & Transactional Records: Blockchain wallet addresses, transaction hashes, transaction histories, deposit and withdrawal timestamps, payment rails utilized, and internal balance ledgers. (Note: WinTradely never stores full credit card numbers or banking passwords on internal servers.)
- Technical & Telemetry Data: IP addresses, browser fingerprint, operating system, geolocation metrics, session activity logs, and latency telemetry used to optimize WebSocket routing speeds.
03 Lawful Basis & Purposes for Processing
We process your personal information under strict legal bases recognized by international data protection laws:
- Contract Performance: To maintain your trading account, execute contracts within milliseconds, compute payout returns, and process withdrawal requests.
- Legal & Regulatory Obligations: Compliance with international AML/CFT laws, economic sanctions screenings, tax reporting requirements, and anti-fraud surveillance.
- Legitimate Interests: Protecting platform integrity against distributed denial of service (DDoS) attacks, unauthorized account takeovers, and bot manipulations.
- Consent: Sending optional market analysis digests or promotional affiliate program updates (which you can opt out of anytime).
04 Zero Data Selling Guarantee
We do not sell, rent, monetize, or trade your personal data to any third-party advertisers, data brokers, or marketing syndicates.
Information is shared solely with strictly audited third-party service providers essential for platform operations under binding Non-Disclosure and Data Processing Agreements (DPAs):
- Institutional payment gateways and crypto custody nodes for processing deposits and payouts.
- Automated identity verification partners (e.g. SumSub, Onfido) for biometric KYC compliance.
- Cloud hosting and Content Delivery Network (CDN) security providers (e.g. Cloudflare, AWS) for low-latency edge routing.
05 Encryption & Cyber-Security Measures
WinTradely employs military-grade cryptographic protocols to safeguard user data both in transit and at rest:
- 256-bit AES Encryption: All sensitive database fields, KYC files, and financial identifiers are encrypted at rest with AES-256 keys managed via Hardware Security Modules (HSM).
- TLS 1.3 Transport Security: All client-to-server data streams are protected by state-of-the-art TLS 1.3 encryption.
- Two-Factor Authentication (2FA): Mandatory or optional time-based one-time password (TOTP) enforcement for withdrawals and account security settings.
- Automated Intrusion Detection: 24/7 AI-driven behavioral monitoring flags abnormal IP logins or withdrawal routing alterations instantly.
06 Cookies & Local Storage Policy
We use strictly necessary cookies and browser local storage to preserve your login session, memorize trading chart layouts (candlestick timeframe, technical indicators like MACD or RSI), and remember your language preference.
You can disable non-essential cookies via your browser settings; however, disabling strictly necessary session tokens will prevent you from logging into your secure trading terminal.
07 Trader Privacy Rights
Under applicable privacy laws, WinTradely traders possess comprehensive rights regarding their personal data:
- Right to Access: Request a complete machine-readable copy of all personal information WinTradely holds regarding your account.
- Right to Rectification: Request prompt correction of inaccurate or outdated profile details.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal records, subject to statutory retention periods required by financial AML regulations.
- Right to Restrict Processing: Request suspension of certain processing actions while disputes or reviews are pending.
08 Data Retention & International Transfers
Under international financial anti-money laundering regulations, records of financial transactions and verification documents must be maintained for a statutory period (typically 5 to 7 years) following account closure. Upon expiration of mandatory regulatory retention windows, all records are permanently purged or irreversibly anonymized.
09 Contacting Our Data Protection Officer (DPO)
If you wish to exercise your data privacy rights, file a data access inquiry, or discuss our security architecture, please contact our Data Protection Office directly: