Privacy Policy
How BitCore collects, uses and protects your personal data.
Last updated: 2026-09-11
01Information We Collect
Account data (email, phone number, password hash), identity verification data (name, date of birth, country, ID document details and images), device and access data (IP address, browser, operating system, login times), and transaction data (orders, positions, balances, deposits and withdrawals).
02How We Use It
To operate your account and execute trades; to verify identity and prevent fraud, abuse and unauthorized access; to comply with legal and regulatory obligations; to send security alerts and service notices; and to improve the Service through aggregated analytics.
03Legal Basis
We process data to perform our contract with you, to comply with legal obligations (including anti-money-laundering rules), for our legitimate interests in securing the platform, and where required, with your consent.
04Sharing With Third Parties
We share data only with service providers acting on our behalf (identity verification, SMS and email delivery, payment processing, cloud hosting), with authorities when legally required, and in connection with a merger or acquisition. We do not sell personal data.
05Cookies and Session Data
We use strictly necessary cookies for login sessions, security and language/currency preferences. We do not use third-party advertising cookies.
06Retention
Account and transaction records are retained for as long as your account is active and thereafter for the period required by applicable law (typically five years for financial records). Identity documents are kept only as long as necessary for verification and compliance.
07Security
Data is protected with TLS encryption in transit, hashed passwords, two-factor authentication, withdrawal whitelists, re-authentication for sensitive actions, access logging and restricted administrative access.
08Your Rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, object to certain processing, and withdraw consent. Some data must be retained to meet legal obligations even after a deletion request.
09International Transfers
Our servers may be located outside your country. Where data is transferred internationally, we apply appropriate safeguards required by applicable law.
10Contact and Changes
Questions about this policy can be sent through the Contact Us page. We may update this policy; material changes will be announced in the Announcements section with a new effective date.