Who is responsible
The controller of your personal data is Bitnetex Ltd., the operator of Bitnetex. For anything in this policy, write to [email protected]. Company details are in the site footer.
What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email, display name, password, 2FA setting, language | You, at sign-up and in Settings |
| Identity (KYC) | Name, date of birth, address, ID document images, live face-check capture | You, if you apply for verification |
| Financial | Balances, deposits, trades, swaps, stakes, withdrawal requests and destination addresses, txids | Your activity and public blockchains |
| Technical | IP address, approximate country, browser and device type, sign-in times, pages visited inside the account | Your browser, automatically |
| Support | Chat messages and files you send to support | You |
| Notifications | Email preferences, linked Telegram account ID | You, in Settings |
| Referral / source | Referral code or campaign tag you arrived with | The link you used |
We don't collect payment card numbers; the exchange works with crypto only.
Why we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Running your account: deposits, trades, withdrawals | Account, financial | Contract |
| Keeping accounts safe, stopping fraud and takeovers | Technical, account, financial | Legitimate interest |
| Identity checks, AML, sanctions screening, record keeping | Identity, financial, technical | Legal obligation |
| Answering support requests | Support, account | Contract |
| Sending the notifications you switched on | Notifications, account | Contract / consent |
| Crediting referrals and understanding which links bring users | Referral / source | Legitimate interest |
We don't use your data for automated decisions that have legal effect on you without a person involved. Withdrawals and verification are decided by staff.
How long we keep it
| Data | Kept for |
|---|---|
| Account and transaction records | While the account is open, then as long as anti-money-laundering record-keeping law requires (commonly 5 years) |
| Verification files | Same as above; rejected applications are kept to prevent repeat abuse |
| Support chats | While the account is open and for a reasonable period after |
| Technical logs | As long as useful for security investigations |
Your rights
Depending on where you live, you can ask us to:
- See a copy of the personal data we hold about you.
- Correct anything inaccurate. Display name and notification settings you can change yourself in Settings.
- Delete data we're not legally required to keep.
- Restrict or object to processing based on legitimate interest.
- Take your data with you in a machine-readable format.
- Complain to your local data protection authority.
Send requests from the email on your account to [email protected]. We may ask you to confirm it's you, and we answer within 30 days.
How we protect it
Access to identity files and account data is limited to staff who need it for their role, and staff actions are logged. Connections to the site are encrypted. Details of account protection are on Security.
Children
The service is not for anyone under 18. If we learn an account belongs to a minor, we close it and return any balance where the law allows.
Changes to this policy
When the policy changes, this page is updated. Material changes are announced in the account before they take effect.