Who is responsible for protecting users’ personal data?
The Company is responsible for handling personal data under applicable privacy laws, while users must protect their login credentials and account access. This shared responsibility model recognises that effective data protection requires commitment from both sides. The Company implements robust technical and organisational safeguards, while users take proactive steps to secure their own accounts and personal information from potential threats.
On the Company's side, responsibility for data protection is comprehensive and governed by strict regulatory frameworks. The platform is obligated to collect only the data necessary for legitimate purposes such as account registration, identity verification, and regulatory compliance. All collected data must be stored securely using encryption and access controls, processed in accordance with applicable privacy laws such as GDPR in Europe, and retained only for as long as required by regulatory or operational necessity. The Company is also responsible for notifying users and relevant authorities in the event of a data breach, maintaining transparent privacy policies that clearly explain how data is collected and used, and ensuring that any third-party service providers with access to user data adhere to equivalent security standards.
On the user's side, responsibility centres around protecting the access points to their account and personal information. This includes creating strong, unique passwords that are not reused across multiple services, enabling two-factor authentication for an additional layer of login security, keeping login credentials confidential and never sharing them with anyone, being vigilant against phishing attempts that impersonate the platform to steal personal information, and ensuring that devices used to access the trading account are secured with up-to-date software and reliable antivirus protection. Users should also log out of their accounts when using shared or public devices and report any suspicious activity to the platform's support team immediately. By fulfilling their respective roles in this shared responsibility model, both the platform and its users contribute to creating a secure environment where personal data is effectively protected against unauthorised access and misuse.