Privacy Policy

1. Data we collect

Account data: first name, email address, password (stored only as a secure hash by our authentication provider), referral code and confirmation that you are 18 or older.

Profile and verification data you choose to provide later: full name, username, phone number, date of birth, country, profile photo, and identity documents submitted for verification (KYC).

Financial data: deposits, withdrawals, payout destinations (bank details are stored encrypted and erased after use), balances, ledger entries and trade history.

Technical data: IP address and device/browser information (stored in hashed form for security logs), sign-in times, and app settings.

Communications: support tickets, Help Center conversations and community chat messages.

2. Why we use it

To create and secure your account, provide trading services, process payments, meet anti-money-laundering and know-your-customer obligations, prevent fraud and abuse, provide support, send service emails (verification codes, password reset, security alerts), and improve the Platform.

Legal bases include performance of our contract with you, legal obligations, and our legitimate interest in keeping the Platform secure.

3. Sharing

We share data only with service providers who help us run the Platform (hosting and authentication, payment processors, crypto payment gateways, email delivery, market data providers), with authorities where the law requires, or with a successor in a business transfer. We do not sell personal data.

4. Retention

Account, financial and trade records are kept for the duration of your account and for at least [5] years after closure to meet legal obligations. Identity documents are kept for the period required by anti-money-laundering rules and then deleted. Security logs are kept for up to [12] months. Help Center conversations are kept for up to 90 days unless linked to a ticket.

5. Security

Passwords are never stored in plain text. Sensitive data is encrypted, access is limited to authorised staff with role-based permissions, and staff accounts require two-step verification.

6. Your rights

Depending on where you live you may have the right to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. Some data must be kept for legal reasons even after a deletion request. Make requests through the Help Center. You may also complain to your local data protection authority.

7. Cookies and local storage

We use strictly necessary storage to keep you signed in and remember your preferences (theme, chart layout, language). We do not use advertising cookies. Basic, privacy-friendly analytics may be used to understand how features are used.

8. Children

The Platform is not for anyone under 18. We delete accounts we learn belong to minors.

9. Changes and contact

We will notify you of material changes. Contact us through the Help Center at https://2xoption.com/help.

Privacy questions and data requests: see https://2xoption.com/contact or email [privacy email to be added before launch].