Privacy Policy

Article 1 Purpose for processing personal information

In order to provide services of the platform to Users, KuCoin needs to collect some of your personal information for the following purposes. The personal information collected is not used for purposes other than the following. If the purpose of use is changed, necessary measures, such as separate notification or obtaining separate consent under any applicable laws, will be take.

1. Account Registration and Management

-Identification of users, customer verification (KYC), management of user information, delivery of various notices

-Account termination through non-face-to-face authentication, resetting phone numbers/emails, etc.

2. Provision of Goods or Services

- Confirmation of digital asset trading relationships

- Inheritance and transfer

- Matters related to the overall management of digital asset trading relationships, including setting, maintaining, and terminating services

- Prevention of unauthorized use

- Usage statistics and analysis, provision of new and customized services

- Improvement and upgrade the services of the platform, etc.

3. Event Information Guide

- Providing information for various events and promotions

4. Complaint handling

- Confirmation of the identity of complainants and the contents of complaints

- Contact and notification for fact-finding, notification of processing results

- Remedies for damages and incorrect transfers, etc.

5. AML/CTF and legal investigation

- AML/CTF misconduct investigations

- Law enforcement authorities’ investigation, etc.

*The User has the right to refuse to consent to the collection of personal information by the Platform. The User may not be able to use any of the services the Platform provided if the User refuse to accept the collection of personal information by the platform.

Article 2 Designation

For the convenience of wording in this agreement (the “Agreement”), the Platform is referred to as “we”, “us” or “our”. Users of and other visitors to the Platform are referred to as “you”, “your” or “User”. We and you are collectively referred to as “both parties” and as “a/one party” individually.

Article 3 Processing and Retention Period of Personal information

1. The Platform shall process and retain personal information within the period of time required by applicable laws for personal information processing and retention or within the period of processing information agreed upon when collecting personal information from users.

2. The period of time for processing and retention of each personal information is as follows:

A. In principle, the personal information will be retained for 2 years after the user deleted its accounts or the accounts have been deactivated due to abuse in order to satisfy any subsequent review of users’ accounts by financial institutions or criminal investigations by relevant authorities. If no such review or investigations occurs within the years, KuCoin will completely delete the personal data.

B. If an investigation is ongoing due to a violation of applicable laws and regulations, the personal information will be stored until the end of the relevant investigation is concluded.

C. If there is an outstanding debt or credit relationship arising out of use of the service, the personal information will be stored until the debt is settled

D. If there is an ongoing legal dispute between the user and the Company, the personal information will be stored until the dispute is officially resolved

① When personal information becomes unnecessary due to the passage of the retention period or the accomplishment of the processing purpose, the Company shall promptly destroy such personal information.

② In the case of personal information that must be retained under the law despite the expiration of the retention period for personal information, the Company will move such personal information to a separate database or store it in a different location.

③ The Company securely manages the personal information of a user who has been processed as a dormant user in accordance with the old Personal Information Protection Act. But the personal information of users whose mobile phone identity verification information does not exist among dormant users will be destroyed at the end of six months from the date when the users are converted to dormant users.

④ The personal information for which a reason for destruction has occurred due to the passage of the retention period or the accomplishment of the processing purpose, shall be destroyed upon approval of the personal information protection manager or through automatic deletion by the system.

⑤ The method of personal information destruction is as follows.

1. Personal information stored in electronic form is permanently deleted to prevent playback of the record.

2. Personal information recorded or stored on paper documents is shredded or incinerated.

Article 4 Scope of Application

This Agreement shall apply to all Users trading on the KuCoin Global website and on its APP (the “Platform"). Users shall comply with the terms and conditions of this Agreement, subject to and as permitted by any and all laws relating to the protection of personal information and data in the country or region where they are based.

Article 5 Invocation

Any code or statutory decree or administrative regulation referred to in this Agreement shall refer to the latest amended version thereof, regardless of whether such amendment is made before or after the signing of this Agreement.

Article 6 Headings

The headings used in this Agreement are for convenience only and shall not be used for the purpose of interpreting the terms and conditions of this Agreement. References herein to any statement, term, condition, annex, schedule shall refer to statements, terms, conditions, annexes and schedules hereunder.

Article 7 Use of the term "include"

The term “include” used herein shall, under any and all circumstances always have the meaning of “include but not limited to”, unless this Agreement specifies otherwise.

Article 8 User Consent and Authorization

The Users acknowledge and understand that, at the point of logging into the Platform, the User will be deemed to have expressed to us their acceptance, consent, undertaking and confirmation of the following, regardless of whether the User has completed their registration on the Platform:

（1）that the User agrees, on a voluntary basis, to disclose personal information to us;

（2）the User will abide by all the terms and conditions of this Agreement;

（3）the User agrees and authorises the Platform to collect the User’s personal information when the User registers with the Platform, logs into the Platform and/or uses the Platform services;

（4）the User agrees to all the terms and conditions of this Agreement and agrees to accept any amendment that may subsequently be made to the Privacy Policy;

（5）the User agrees that any of our branch companies, subsidiary companies, or employees or service providers with whom we have engaged for the provision of the services, will contact the User to request for information or to inform the User in connection with of any product and service that may be of interest to the User (unless the User has indicated that he or she does not wish to receive such information).

Article 9 Information Collected

The Users agree that the Platform may use cookies to track the Users’ actions in connection with their use of the Platform and may collect and record all information left by Users, including but not limited to their IP address, geographical location and other data. For example: We may use video (including audio) information as identity credentials for P2P merchants and as evidence for P2P order disputes. We may also use facial video (including audio) information for KYC identity verification on third-party platforms.

Personal data which we may collect include:

Article 10 Application and Usage of Information Permission

We may call certain application and information permissions from users. Provided is a list of requested permissions and the reason they are required. Users should note that once they agree to the Privacy Policy, the corresponding device permissions will not be granted by default. When key or sensitive device permissions are required, KuCoin will prompt you with a pop-up window to request your consent when you make use of the corresponding function. Once a permission is granted, it may be revoked at any time through your device settings. Refusing to grant device permissions will not affect the normal operation of unrelated functions.

Users may opt to disable some or all requested permissions requested by the app through device settings. The display and configuration of permissions may differ depending on the device. If the corresponding function cannot be found, users may contact the device/system manufacturer for assistance.

Article 11 Supply of Information.

If Users voluntarily use the services provided by the Platform, they will be required to fill in and/or provide the following two categories of information in accordance with the requirements of KuCoin:

（1）Identity Information: this category of the User information, which may help the Platform verify whether the User is eligible to register on the Platform, includes, but is not limited to: the User's full name, registered address, postal address, official proof of identity documents and the document numbers, as well as all other information that may assist the Platform in verifying the User’s identity (hereinafter collectively referred to as "Identity Information");

（2）Service Information: this category of User information helps the Platform to contact the User and to provide a smooth service experience It includes, but is not limited to, the User’s telephone number, fax number, valid email address, postal address, and debit card information and/or other account information (hereinafter collectively referred to as "Service Information").

Article 12 Changes in the Method of Information Collection.

When a User uses the Platform, the Platform may collect additional necessary information by an email box that is exclusively owned by the Platform and released to the public via the Platform or by any other method that is deemed as in compliance with relevant laws and regulations, so as to improve the functionality of the Platform and enhance the Users' experience of using the Platform services and the security thereof, or as is required by any order of a court, any applicable law or regulation, or any other competent government agency.

Article 13 Third-party Websites.

If a User visits any link on this APP that leads to a third-party website or to a third-party partner’s website, the User agrees to and shall comply with the separate and independent privacy policies of such third-party websites. The User understands and acknowledges that the Platform is not responsible for the content or activities of such third-party websites or partners.

These sources may include:

(1) Our KuCoin Family of Companies: Our “family of companies” is the group of companies related to us by common control or ownership (“Affiliates”). In accordance with applicable law, we may obtain information about you from our Affiliates as a normal part of conducting business, if you link your various KuCoin accounts (e.g., KuCoin Wallet account or KuCoin Commerce account in order to convert cryptocurrency into fiat and make withdrawals into your bank account), so that we may offer our Affiliates’ Services to you.

(2) Public Databases, Credit Bureaus & ID Verification Partners: We obtain information about you from public databases and ID verification partners for purposes of verifying your identity in accordance with applicable law. ID verification partners like World-Check use a combination of government records and publicly available information about you to verify your identity. Such information may include your name, address, job role, public employment profile, credit history, status on any sanctions lists maintained by public authorities, and other relevant data. We obtain such information to comply with our legal obligations, such as anti-money laundering laws. In some cases, we may process additional data about you to assess risk and ensure our Services are not used fraudulently or for other illicit activities. In such instances, processing is necessary for us to continue to perform our contractual obligations with you and others.

(3) Blockchain Data: We may analyze public blockchain data to ensure parties utilizing our Services are not engaged in illegal or prohibited activity under our Terms, and to analyze transaction trends for research and development purposes.

(4) Joint Marketing Partners, Resellers & Third Parties: For example, unless prohibited by applicable law, joint marketing partners, resellers or third party service providers may share information about you with us so that we can better understand which of our Services may interest you.

(5) Advertising Networks & Analytics Providers: We work with these providers to provide us with de-identified information about how you found our Sites/APP and how you interact with the Sites/APP and Services. This information may be collected prior to account creation.

Article 14 Installation of Cookies.

When a User visits the Platform, the Platform will use Google Stats via Cookies to record the Platform’s performance and check the effectiveness of online advertising. Cookies are a small amount of data that is sent to the User’s browser and stored in the User’s computer hard drive. Only when the User uses his/her computer to access the Platform can the Cookies be sent to the User’s computer hard drive.

Article 15 Function of Cookies.

Cookies are frequently used to record the habits and preferences of visitors when they browse various items on the Platform. Cookies collect anonymous collective statistics which do not contain personal data. Cookies cannot be used to obtain data from the User’ hard drive, the User’s email address or personal data; they can enable the Platform or a service provider’s system to recognize the User’s web browser as well as capture and remember information.

Article 16 Disabling Cookies.

Most browsers are preset to accept Cookies and Users can choose to set their web browsers to reject Cookies or to notify Users upon the installation of Cookies. Users should be aware that they may be unable to start or use certain features of the Platform if they opt to disable Cookies.

Article 17 Information Disclosure to Third Parties.

The Platform does not sell, trade, or otherwise transfer information or allow any other party to collect or use any information from our Platform. However, this does not involve the following parties and does not include the following information: the Platform's affiliates, trusted third parties who help the Platform operate the Platform's websites, manage the Platform's business or provide services to Users, provided that these parties agree to keep such information confidential. If the Platform discloses information to the above-mentioned parties, such information disclosure shall in accordance with any applicable laws, regulations, rules or by any order of any court or other competent authorities, or necessary for executing the strategy of the Platform and ensuring the proper functioning of the Platform, or as may be necessary for the related parties to provide services, or for the protection of the rights, property or safety of us or other persons. Any such information disclosure will not be used by any of the above-mentioned parties for marketing, advertising or any other purpose that has not been agreed on by all the parties concerned.

For example, we may use AppsFlyer to measure the advertising performance, detect and prevent fraudulent activity on your account in real time. Information shared with AppsFlyer is treated by AppsFlyer in accordance with its Privacy Policy, available at https://www.appsflyer.com/legal/services-privacy-policy/ .

(1) SDK Name :Aurora Push SDK

Purpose of Usage: Used to push notifications to user devices

Usage Scenario: Push notifications

Type: Device identifier (IMEI, IDFA, Android ID, GAID, MAC, OAID, IMSI, MEID, UAID, etc.)、Device hardware information (device model, device screen resolution, device hardware manufacturer, device product name, etc.)、Operating system information (operating system version, system name, system language, etc.)、Network information (network type, operator name, base station information, IP address, Wi-Fi information, SSID, BSSID)、Push information log (used for you to query push service records and understand the delivery status of push information)、Location information (used to provide push notifications targeted at specific regional groups)、Software list information (software list and software running list information)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.jiguang.cn/en

Privacy policy： https://www.jiguang.cn/en/license/privacy

(2) SDK Name : Sensors Data analysis SDK

Purpose of Usage: User behavior analysis

Usage Scenario: When using the service

Type: Device information (IMEI, Android ID, OAID, IDFA, IDFV, UUID, IMSI, MAC address, browser type, telecom operator, device brand)、Log information (service usage, IP address, language used, time of access)、Location information (location information resolved by IP address, GPS location information)、Unique application number (app unique identifier, app name, and app version number)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.sensorsdata.com/en/

Privacy policy: https://manual.sensorsdata.cn/sa/latest/zh_cn/tech_sdk_client_privacy_policy_english-112754777.html

(3) SDK Name: Face recognition SDK

Purpose of Usage: User behavior analysis

Usage Scenario: When using the service

Type: Personal information (name, ID number, ID photo)、Device information (IMEI, IDFA, IDFV, operator information, Wi-Fi status, Wi-Fi parameters, Wi-Fi list, system settings, system properties, device model, operating system, device application installation list, running program list) 、Location information (IP address analysis to obtain approximate location information) 、Log information (device information and IP address) 、Biometric data (facial video (including audio) information, facial images)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://intl.cloud.baidu.com/
Privacy policy: https://ai.baidu.com/ai-doc/REFERENCE/Vkdygjliz

(4) SDK Name: Bugly

Purpose of Usage: Performance and stability analysis

Usage Scenario: When using the service

Type: Device information (device model, operating system and version, Wi-Fi status, CPU attributes, remaining memory space, disk space/remaining disk space, phone status during runtime, IDFV, jailbreak status, region code)、App information (app version, crash log, diagnostic log, performance log)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://bugly.qq.com/v2/index
Privacy policy: https://privacy.qq.com/document/preview/fc748b3d96224fdb825ea79e132c1a56

(5) SDK Name: Firebase

Purpose of Usage: Performance, stability and user behavior analysis

Usage Scenario: When using the service

Type: Device information (device model, operating system and version, mobile advertising ID, IDFV/Android ID, Firebase installation ID, Analyze application instance ID, IP address)、App information (app version, crash log, diagnostic log, performance log)、App activity (app interaction information, user-generated content)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 14 months after deleting the Firebase installation ID

Official website: https://firebase.google.com/
Privacy policy: https://firebase.google.com/support/privacy

(6) SDK Name: AppsFlyer

Purpose of Usage: Attribution and marketing analytics services

Usage Scenario: When using the service

Type: Device information (operating system, model, language information, network operator, network type, IP address, Android ID, ADID, IDFA, IMEI)、Location information、Advertising Source Details、Facebook (Meta) AID

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 2 years

Official website: https://appsflyer.com/
Privacy policy: https://appsflyer.com/legal/services-privacy-policy/

(7) SDK Name: Jumio

Purpose of Usage: Identity verification and fraud prevention

Usage Scenario: When performing KYC identity verification

Type: Personal information (name, address, email, ID card, driver's license number, passport number)、Device information (IP address, location information, operating system, browser type, browser settings, website activity information)、Financial information (credit card, debit card number, CVV, expiration date, transaction information)、Images or recordings (photos, videos, audio recordings)、Biometric data (Face ID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 3 years

Official website: https://www.jumio.com/
Privacy policy: https://www.jumio.com/privacy-center/privacy-notices/online-services-notice/

(8) SDK Name: ADVANCE.AI

Purpose of Usage: Identity verification and fraud prevention

Usage Scenario: When performing KYC identity verification

Type: Personal information (name, document number, date of birth, nationality, document type, issuing country, expiration date, document image, video-related image metadata)、Device information (IP address, device identifier, operating system, browser type, browser settings, website activity information)、Application activity information (software version, upload time)、Biometric data (Face ID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.advance.ai/
Privacy policy: https://info.advance.ai/privacy-notice

(9) SDK Name: Ada

Purpose of Usage: Customer feedback

Usage Scenario: When users contact customer service

Type: Personal information (name, email address, phone number provided in chat)、Message information (voice collected by chat, photos, videos or recordings of video chat)、Device information (IP address, browser type, browser language, operating system, state or country, device ID)、App interaction information (number of clicks, pages viewed, browsing time)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://ada.cx/
Privacy policy: https://www.ada.cx/legal-resources/privacy-policy

(10) SDK Name: hCaptcha

Purpose of Usage: Preventing bot

Usage Scenario:

(a) When users log in and verify that they are not a robot

(b) When users sign up and verify that they are not a robot

(c) When users click forgot password and verify that they are not a robot

(d) When sending verification codes

Type: Device information (hardware serial number, IP address, browser type, network provider, platform type, device type, operating system, date and time stamp access)、App interaction information (mouse movement, scroll position, key events, touch events)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.hcaptcha.com
Privacy policy: https://www.hcaptcha.com/privacy

(11) SDK Name: Telegram Login Widget

Purpose of Usage: Authorize sign-up and login through Telegram third-party accounts

Usage Scenario:

(a) Link KuCoin account with Telegram account to authorize sign-up

(b) Link KuCoin account with Telegram account to authorize login

Type: Personal information (Telegram account identifier, username, first name, last name, profile picture)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://telegram.org
Privacy policy: https://telegram.org/privacy

(12) SDK Name: Chargebacks911

Purpose of Usage: Prevent disputes over fiat orders

Usage Scenario: When users complete fiat trading

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://chargebacks911.com/
Privacy policy: https://chargebacks911.com/privacy-shield-policy/

(13) SDK Name: TMXProfiling

Purpose of Usage: Buy cryptocurrency

Usage Scenario: Prevent disputes over fiat orders

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 24 hours

Official website: https://www.cybersource.com/
Privacy policy: https://usa.visa.com/legal/privacy-policy.html

(14) SDK Name: Forter

Purpose of Usage: Prevent disputes over fiat orders

Usage Scenario: When users buy cryptocurrency with a bank card

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.forter.com/
Privacy policy: https://www.forter.com/privacy-policy/

(15) SDK Name: Plaid BV

Purpose of Usage: Fiat deposit

Usage Scenario: When users make deposits with fiat

Type: Transaction information (transaction amount, currency, bank)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://plaid.com/
Privacy policy: https://plaid.com/legal/#end-user-privacy-policy

(16) SDK Name: Revolut

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When users perform fast trade

Type: Device data(OS, browser type, browser settings, website activity formation)、Account and personal information(name, email, phone, UID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.revolut.com/
Privacy policy: https://www.revolut.com/privacy-policy/

(17) SDK Name: Banxa

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (wallet address, memo, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://banxa.com/
Privacy policy: https://banxa.com/wp-content/uploads/2023/11/Privacy-and-Cookies-Policy-21-November-2023-Banxa.pdf

(18) SDK Name: Simplex

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (first name, last name, gender, ID type, ID number, date of birth, country, state, city, country of residence, address, zip code, front photo of ID, back photo of ID, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.simplex.com/
Privacy policy: https://www.simplex.com/privacy-policy

(19) SDK Name: BTC Direct

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (wallet address, user ID) - - KYC identity verification may be required separately on the third-party side. Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://btcdirect.eu/
Privacy policy: https://btcdirect.eu/en-gb/privacy-policy

(20) SDK Name: Legend Trading

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (email, wallet address, memo, user ID) - - KYC identity verification may be required separately on the third-party side. Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency, cryptocurrency price, cryptocurrency quantity)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://legendtrading.com
Privacy policy: https://legendtrading.com/policy

(21) SDK Name: CoinTR

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (email, mobile phone number, country, ID type, ID number, date of birth, first name, last name, front photo of ID, back photo of ID, photo of holding ID, face verification photo, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat currency, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency quantity, KuCoin trading fee)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://cointr.com
Privacy policy: https://support.cointr.com/hc/tr/articles/5538328908943

(22) SDK Name: Treasura

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (first name, last name, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency, cryptocurrency price, cryptocurrency quantity)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.trytreasura.com
Privacy policy: https://trytreasura.com/privacy-policy

(23) SDK Name: Easy Euro

Purpose of Usage: Fiat deposit

Usage Scenario: When users make deposits with fiat

Type: Personal Info（name, english name, nationality, email, phone, date of birth, identity type, identity number, identity expiration date, country, city, address）

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://easyeuro.eu
Privacy policy: https://easyeuro.eu/company/legal

(24) SDK Name: Onramp Money

Purpose of Usage: Buy crypto（thirdparty）

Usage Scenario: When users buy crypto with thirdparty

Type: Wallet address

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://onramp.money/
Privacy policy: https://onramp.money/assets/privacyPolicy.pdf

Article 18 Protection of Personal Data.

The Platform adopts appropriate physical, electronic, management and technical measures to protect and safeguard the security of the Users' personal data. The Platform will, to the greatest extent possible, ensure that any personal data collected through the Platform shall be free from being subject to nuisance by any third party unrelated to us. The security measures that the Platform may take include but are not limited to:

（1）Physical measures: records of Users' personal information will be stored in an appropriately secure location.

（2）Electronic measures: computer data containing Users' personal information will be stored in computer systems and storage medias that are subject to strict login restrictions.

（3）Management measures: only staff members duly authorized by the Platform may access the Users' personal data and such staff members shall comply with the Platform’s internal code concerning personal data confidentiality.

（4）Technical measures: encryption techniques such as Secure Socket Layer Encryption may be used to transmit Users' personal data.

（5）Other measures: the Platform’s network servers are protected by a proper "firewall".

Article 19 Deletion of personal information.

1. When personal information becomes unnecessary due to the passage of the retention period or the accomplishment of the processing purpose, the Platform shall promptly destroy such personal information.

2. The procedure of personal information destruction is as follows:

A. Once the User has deleted their accounts and not to use any of the services provided by the Platform, the Platform will process the accounts as dormant User and securely manages the personal information of such User in a separate database.

B. Personal information of dormant users will enter the data retention period as set out in Article 3 of the Privacy Policy.

C. The personal information will be destroyed through automatic deletion by the system after the retention period.

3. The method of personal information destruction is as follows:

A. Personal information stored in electronic form is permanently deleted to prevent playback of the record.

B. Personal information recorded or stored on paper documents is shredded or incinerated.

Article 20 Your Rights.

You have the rights to:

(1) Request information in relation to the collection and use of your Personal Information: This enables you to be informed at all times about the purposes for processing your Personal Information.

(2) Request access to your Personal Information: This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.

(3) Request correction of the Personal Information that we hold about you: This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

(4) Request erasure of your Personal Information: This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it, if we have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

(5) Object to processing of your Personal Information: Where we are relying on a legitimate interest (or those of a third party) and you want to object to processing. In some cases, we may demonstrate that we have legitimate grounds to process your information which can override your objection.

(6) Request to stop direct marketing: Where we are processing your personal data for direct marketing purposes, you have the right to notify us in writing requesting that we cease or do not begin processing your Personal Information for direct marketing purposes.

(7) Request the transfer of your Personal Information to you or to a third party: We will provide to you, or a third party you have chosen (where technically feasible), your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

(8) Withdraw consent at any time where we are relying on consent to process your Personal Information: You may withdraw your consent for our processing of your Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with continued access to the Services.

Article 21 Reporting of Flaws

If any User becomes aware of any security flaw in the Platform, the User should contact the Platform through the service email promptly so that the Platform can take appropriate measures to address any such flaw as soon as possible.

Article 22 Chief Privacy Officer

1. The Platform values the protection of customers’ personal information highly and does its best to ensure that their personal information is not damaged, compromised or leaked. However, the Platform shall not be responsible for the information damaged by unexpected accidents that arise from basic dangers inherent at networks and all kinds of disputes that arise from postings made by visitors to the website, even though the Platform has taken technological security measures.

2. The Platform’s customer support center offers swift and sincere replies to customers’ inquiries about the protection of their personal information. In addition, customers who wish to contact the chief privacy officer at the Company may contact him/her by below e-mail. We will answer your inquiries on the protection of personal information swiftly and sincerely.

Chief Privacy Officer

Name: Alexis Niu

email: DataProtection@kucoin.com

Article 23 Exemption.

Despite the above-mentioned technical and security measures, the Platform cannot guarantee that the information transmitted via the Internet is absolutely safe, so the Platform does not provide any guarantees with respect to the security of the personal information that the Users provide to the Platform; and the Platform may not be held liable for any loss or damage arising from or caused by any event that may occur in connection with unauthorized access to the Users’ personal information.

Article 24 Amendment of this Agreement.

The Platform reserves the right to modify this Agreement at any time. The Platform will inform the Users of the amendments made to the Privacy Policy by releasing updates thereof, publishing the effective date of new versions thereof and highlighting the amendments thereto. Sometimes, but not always, the Platform may issue a notice to Users to inform them of any amendments made to the Privacy Policy. Users shall regularly review the Privacy Policy and focus on amendments thereto, if any; and if the Users do not agree to any such amendments, the Users shall promptly stop accessing this Website. Whenever an updated version of this Privacy Policy is released, the User’s continued access to and use of this Website shall demonstrate the User’s agreement to the updated version of the Privacy Policy.

Article 25 Publication of Announcements.

The Platform publishes announcements and information exclusively via the use of valid and up-to-date contact information provided to this Website or by posting announcements on the Platform. Therefore, the Platform shall not be held liable for any loss arising from any User’s trust in any information that is obtained in any manner other than the above-mentioned means.