OEX

DATA PRIVACY NOTICE

At WEB3EXCHANGE, we are committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, share, and protect your information when you use our website or services. As a regulated entity under the Dubai Virtual Assets Regulatory Authority (VARA), we adhere to strict data protection obligations under applicable UAE and international regulations.

1. Who We Are

WEB3EXCHANGE provides Virtual Asset Exchange and Broker-Dealer Services. In the course of delivering these services, we collect and process certain personal and institutional data to meet legal, regulatory, and operational requirements.

2. What Data We Collect

We collect personal data directly from individuals, institutional clients, and from third-party sources as part of our KYC, AML, and operational processes.

From Individual Clients

  • Full legal name, date and place of birth, nationality
  • ID documents (e.g., passport, Emirates ID), biometric data (e.g., live facial image)
  • Residential address, contact information (email, phone number)
  • Source of funds, income, and financial background
  • Wallet addresses, bank account details
  • Login credentials and usage data

From Institutional Clients

  • Legal entity and registration details
  • Authorized representative data
  • Contact and operational information
  • Financial and ownership structure

Other Sources

  • Website usage data (IP address, device/browser type)
  • Survey or communication data (when you contact us or subscribe to updates)
  • Public data shared in interactive features (forums, blogs)
  • Third-party platforms (e.g., social networks, app stores), as permitted by your privacy settings

Note: If you fail to provide certain data when requested, we may not be able to provide our services to you.

3. Why We Collect Your Data

We use your data to:

  • Verify your identity (KYC/AML compliance)
  • Meet legal and regulatory requirements (including VARA, UAE PDPL)
  • Operate and improve our platform and services
  • Communicate with you about your account and activities
  • Enhance platform security and prevent fraud
  • Send updates and marketing materials (only with your consent)

4. Legal Basis for Processing

We only process your personal data where legally allowed, including:

  • To comply with legal obligations
  • For the performance of a contract
  • Based on your consent (e.g., for marketing)
  • For legitimate business interests (e.g., fraud prevention)

5. Who We Share Your Data With

Your personal data may be shared with:

  • Regulators & Authorities: As required by VARA, UAE Data Office, law enforcement, or court orders.
  • Service Providers: Third parties that help us operate our platform (e.g., cloud services, compliance vendors). These providers are bound by strict confidentiality and security agreements.
  • With Your Consent: For specific services like third-party promotions or referrals.

We do not sell or rent your personal data.

6. How We Protect Your Data

WEB3EXCHANGE applies robust technical and organizational security measures, including:

  • Encryption of data in transit and at rest
  • Restricted access based on a “need-to-know” basis
  • Regular security audits and penetration testing
  • 24/7 monitoring and incident response

In case of a data breach, we will notify relevant authorities and affected individuals within 24 hours, in accordance with VARA and PDPL requirements.

7. How Long We Keep Your Data

We retain personal data only as long as necessary to:

  • Meet legal and regulatory obligations
  • Fulfill the purposes it was collected for
  • Resolve disputes and enforce agreements

After this period, data is either securely deleted or anonymized. When deletion is not technically feasible, access is strictly limited.

8. Your Rights

Under applicable data protection laws, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Object to certain types of processing
  • Withdraw your consent at any time (where applicable)
  • File a complaint with the UAE Data Office or VARA

9. Cookies & Tracking

We use cookies to enhance your browsing experience, analyze traffic, and personalize content. You can control cookie preferences in your browser settings.

Learn more in our [Cookie Policy].

10. Updates to This Privacy Notice

This notice may be updated from time to time to reflect changes in the law or our operations. We will post all updates here and, where appropriate, notify you directly.

Contact Us

If you have any questions or concerns about this Privacy Notice or your personal data, you can reach us:

WEB3EXCHANGE

Data Protection Officer

WEB3EXCHANGE is committed to handling your data lawfully, securely, and transparently. We respect your rights and comply with all regulatory requirements, including those imposed by VARA and the UAE PDPL.