4.1 Account data

• email address, username, password hash, account preferences and settings
• account status information (e.g., holds, limits, verification status)

4.2 Transaction and wallet data (crypto-only)

• wallet addresses you use to deposit or withdraw
• blockchain network details (asset/network, timestamps, amounts)
• TXIDs and transaction status metadata
• internal ledger entries reflecting deposits, purchases, Exchanges (sell-back), Withdrawable Balance, and withdrawals

Public blockchains: Cryptocurrency transactions are recorded on public blockchains. Depending on the network, certain transaction details may be publicly visible. We may use on-chain information to verify deposits/withdrawals, prevent fraud, and comply with legal obligations.

4.3 Verification and compliance data (AML/KYC) (when required)

• identity information (name, date of birth)
• address information
• identity documents and verification results (including selfie/liveness checks where used)
• information required for compliance checks (including, where legally necessary, source-of-funds/source-of-wealth information)

4.4 Shipping and fulfillment data (when you request shipping)

• recipient name, delivery address, phone number (if required by carriers)
• delivery instructions and shipment tracking references

4.5 Usage, device, and log data

• IP address and approximate location derived from IP
• device identifiers, browser type, operating system
• usage events (pages viewed, clicks, time stamps)
• security logs, audit logs, diagnostics and crash logs

4.6 Communications and support data

• messages you send to support (email, tickets, chat)
• attachments you provide (screenshots, documents)
• call recordings only if explicitly used and permitted (if not used, none)

4.7 Cookie and similar technology data

• cookie identifiers, consent preferences
• analytics events where enabled (subject to consent where required)