Privacy Policy

سياسة الخصوصية باللغة العربية ستجدها اسفل الصفحة

---

**Article (1): Introduction**  

1.1. The company that owns and operates the platform respects the privacy of its users and is committed to protecting their personal data.  

1.2. This Privacy Policy ("Policy") aims to clarify how the company collects, uses, stores, protects, and shares users' personal data.  

1.3. This Policy applies to all personal data collected by the company from users when they use the platform, whether through the website or mobile applications.  

1.4. By using the platform, the user agrees to the collection and processing of their personal data in accordance with this Policy.

**Article (2): Definitions**  

In the application of the provisions of this Policy, the following words and phrases shall have the meanings set forth opposite each:

- **Personal Data**: Any information relating to the user by which they can be identified, directly or indirectly.  

- **Processing**: Any operation or set of operations performed on personal data, including collection, recording, organization, storage, modification, retrieval, use, disclosure, transmission, restriction, erasure, or destruction.  

- **Controller**: The company that determines the purposes and means of processing personal data.  

- **Processor**: A natural or legal person who processes personal data on behalf of the controller.

**Article (3): Personal Data Collected**  

3.1. The company collects the following personal data from users:

- **Identification Data**: Full name, date of birth, gender, nationality, and national ID or passport number.  

- **Contact Data**: Email address, phone number, and postal address.  

- **Financial Data**: Income and wealth information, assets and liabilities, account balances, trading statements, tax and financial data, and payment method details (credit cards, e-wallets, bank accounts).  

- **Professional Data**: Occupation, workplace, and job title.  

- **Trading Data**: User's trading experience, risk tolerance, investment profile, and trading history.  

- **Technical Data**: IP address, device type, operating system, browser, and approximate geolocation data.  

- **Transaction Data**: Trading order history, product and service preferences, and historical activity data.  

- **Verification Data**: Copies of identity documents, utility bills, and other documents required for identity verification (KYC) and anti-money laundering purposes.  

- **Cookies**: The platform uses cookies to store and collect information about the user's use of the platform.

3.2. Personal data is collected from users through the following methods:

- Directly from the user upon registration or when using services.  

- Automatically through the use of the platform.  

- From trusted third parties (e.g., identity verification service providers, payment service providers).

**Article (4): Purposes of Data Collection and Use**  

4.1. The company collects and processes personal data for the following purposes:

- **Service Provision**: To open and manage user accounts, execute trading orders, and provide platform services.  

- **Legal Compliance**: To comply with anti-money laundering and counter-terrorism financing requirements, verify identity, and adhere to applicable laws and regulations in the user's country of residence.  

- **Service Improvement**: To analyze platform usage, enhance user experience, and develop new services.  

- **Communication**: To send notifications, updates, and responses to user inquiries.  

- **Security and Protection**: To protect the platform and users from fraud and illegal activities.  

- **Marketing**: To send promotional offers and marketing materials (with the user's consent).

4.2. The company shall not use personal data for purposes inconsistent with those mentioned above without obtaining the user's consent.

**Article (5): Legal Basis for Processing**  

The company relies on the following legal bases for processing personal data:

5.1. **Contract Performance**: When processing is necessary for the performance of a contract with the user or to take steps at the user's request prior to entering into a contract.  

5.2. **Legal Compliance**: When processing is necessary for compliance with a legal obligation to which the controller is subject.  

5.3. **Legitimate Interest**: When processing is necessary for the purposes of the legitimate interests pursued by the company, provided that such interests do not override the user's interests or fundamental rights and freedoms.  

5.4. **Consent**: When the user provides explicit consent to the processing of their data for a specific purpose.

**Article (6): Data Sharing and Disclosure**  

6.1. The company shall not share users' personal data with third parties except in the following cases:

- **Service Providers**: The company may share data with external service providers (e.g., payment service providers, identity verification services, cloud storage services, analytics services) for the purpose of providing services.  

- **Legal Obligations**: Data may be disclosed if required by law, court order, or a competent regulatory authority.  

- **Protection of Interests**: Data may be disclosed to protect the rights, property, or safety of the company, users, or the public.  

- **Consent**: Data may be disclosed with the explicit consent of the user.

6.2. The company takes necessary measures to ensure that third parties with whom data is shared adhere to appropriate data protection standards.

**Article (7): Cross-Border Data Transfer**  

7.1. Personal data may be transferred to countries outside the user's country, including to the Republic of the Marshall Islands where the company is located.  

7.2. The company ensures that any cross-border data transfer is carried out in accordance with applicable laws and regulations, and that the data is protected by an adequate level of protection.

**Article (8): Data Storage and Retention**  

8.1. The company retains personal data for as long as necessary to fulfill the purposes for which it was collected, or for the period required by law (typically no less than 5 years for anti-money laundering purposes).  

8.2. After the purpose for retaining the data has ended, the company shall securely destroy or anonymize the data.

**Article (9): Data Security**  

9.1. The company takes appropriate technical and organizational security measures to protect personal data from unauthorized access, modification, disclosure, or destruction.  

9.2. These measures include, but are not limited to: encryption, firewalls, access controls, continuous system monitoring, and regular employee training.  

9.3. Notwithstanding these measures, absolute security of data transmitted over the internet cannot be guaranteed, and the company shall not be liable for any security breach that occurs beyond its reasonable control.

**Article (10): User Rights**  

10.1. The user has the following rights with respect to their personal data:

- **Right of Access**: The right to request access to the personal data held by the company about them.  

- **Right to Rectification**: The right to request correction of any inaccurate or incomplete personal data.  

- **Right to Erasure ("Right to be Forgotten")**: The right to request the deletion of personal data under certain circumstances.  

- **Right to Restriction of Processing**: The right to request restriction of processing of personal data under certain circumstances.  

- **Right to Object**: The right to object to the processing of personal data on grounds relating to their particular situation.  

- **Right to Data Portability**: The right to obtain the personal data they have provided to the controller in a structured, commonly used, and machine-readable format.  

- **Right to Withdraw Consent**: The right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

10.2. To exercise these rights, the user may contact the company using the information provided in Article (14) of this Policy.  

10.3. The company undertakes to respond to user requests within the legally specified timeframe (typically within 30 days).

**Article (11): Cookies**  

11.1. The platform uses cookies to improve user experience and analyze platform usage.  

11.2. The user can control the use of cookies through their browser settings.  

11.3. Disabling cookies may prevent the user from using certain features of the platform.

**Article (12): Privacy of Minors**  

12.1. The platform does not knowingly collect personal data from any person under the age of (18) years.  

12.2. If the company discovers that it has collected personal data from a minor without parental consent, it will take steps to delete such data.

**Article (13): Amendments**  

13.1. The company reserves the right to amend this Policy at any time.  

13.2. Users will be notified of any material amendments by posting a notice on the platform or via email at least (30) days before the amendments take effect.  

13.3. The user's continued use of the platform after the amendments take effect shall constitute acceptance of such amendments.

**Article (14): Contact**  

For any inquiries or requests regarding this Privacy Policy, the user may contact the company via email:  

**[support@tpwow.com]**

**Article (15): Governing Law and Jurisdiction**  

15.1. This Policy shall be governed by and construed in accordance with the laws of the Republic of the Marshall Islands.  

15.2. Any dispute arising out of this Policy shall be subject to the exclusive jurisdiction of the competent courts of the Republic of the Marshall Islands.