Privacy Policy

Disclaimer

Please read this Policy carefully. By using the Site, you confirm your agreement to the terms of this Policy and accept the associated obligations. If you do not agree with any provision of this document, you must immediately stop using our Site.

Our Site and services are not intended for persons under 18 years of age. We do not intentionally collect or process personal information of minors. If we discover that data has been collected from a person under 18, such information will be immediately deleted. If necessary, we may block a child's access to the services or request parental consent to process the data. Please notify us immediately if you become aware of such a situation.

We reserve the right to periodically update the text of the Policy, and therefore we recommend regularly reviewing the current version. Continuing to use the Services after changes are made signifies your acceptance of them. In the event of significant amendments, we may request your re-confirmation of consent; its absence will make further use of our services impossible.

In Which Cases Does Processing Occur?

The processing of personal data occurs when Users use the Site, our APIs, interact with payment services, and also within the framework of receiving marketing mailings.

What Guarantees Do We Provide?

We ensure reliable protection of personal data. Cryptoway takes all necessary measures to prevent unauthorized access, loss, misuse, alteration, or destruction of your data.

We do not process special categories of data, such as information about racial or ethnic origin, political opinions, religious or philosophical beliefs.

We guarantee that we do not engage in the sale of your data for profit.

What Data Is Subject to Processing?

• Registration Data: Full name, email address, website URL, field of activity, occupation.
• Payment Data: Wallet address for transactions, physical address, age.
• Identification Data: Passport details, photographs, additional documents upon request.
• KYC (Verification) Data: Identity documents, biometric data (liveness check and photo matching), AML compliance check results. Mandatory verification may be introduced for certain categories of users with prior notice.
• Communication Data: Name, email address.
• Technical Data: IP address, language, country, browser type and version, installed plugins, geolocation, operating system type.
• Usage Data: Visited URLs, page load times, errors, time spent on pages, actions taken.
• Cookies.

Purposes of Data Collection and Processing

• For statistical analysis and improvement of the Site's operation, studying visitor behavior, and providing user support.
• For user authorization and identification when creating an account, sending inquiries, or subscribing to newsletters.
• For conducting transactions and providing our Services.
• For performing KYC (customer verification) procedures when entering into a contract for the provision of services, making payments, or using them.

Cookies

Cookies are used to remember users when they log in, eliminating the need to re-authenticate when navigating between pages. Such cookies are typically deleted after logging out.

The following types of cookies are used on the Site:

• Necessary: Ensure basic site functionality (navigation, access to secure sections). The correct operation of the resource is impossible without them.
• Statistical: Allow the collection of anonymous data on visitor behavior (e.g., interaction with price panels) for analysis and site improvement.
• Marketing: Used to track user activity across different resources in order to display relevant and personalized advertising.

Disclosure of Data to Third Parties

In certain cases, we may disclose your data to third parties, provided they maintain confidentiality. Such third parties include:

• companies within our group (subsidiaries);
• government and law enforcement agencies, courts, exchanges, and executive authorities;
• business partners, service providers, contractors, analysts, sponsors, and search engines.

Information is disclosed for the purposes of:

• providing and administering our Services;
• complying with legal requirements, including investigating fraud and unlawful actions, and responding to judicial requests;
• preventing illegal or unethical activities, as well as actions that threaten security.

Your Rights

We inform you that you have the following rights regarding your personal data:

• Right of Access: You can request information about what specific data we hold about you, for what purpose, and on what legal basis it is processed.
• Right to Rectification: You can request to update, block, or delete your data if it is incomplete, outdated, inaccurate, obtained unlawfully, or no longer needs processing.
• Right to Erasure (Right to be Forgotten): You have the right to request the complete deletion of all your data and the deactivation of your account. Recovery of a deleted account is impossible.

Data Retention Periods

We strive to minimize processing periods and do not store personal data longer than is objectively necessary.

Information may be retained to resolve disputes, enforce agreements, protect legal rights, and comply with technical and legal requirements. Specifically, for KYC (verification) purposes, we are obliged to store certain data and transaction information for a minimum of 1 (one) year after the termination of the business relationship.

In such cases, access to the data is restricted and carried out only within the company as necessary. In other situations, data is deleted when its storage is no longer necessary for the provision of services, compliance with the law, or the conduct of our business.

Licenses and Registrations

The Cryptoway Service currently holds the following regulatory licenses, registrations, permits, and approvals: The Kyrgyz division of the service "KOD KAPITAL" (registration number 302238-3301-LLC) has registered a Limited Liability Company with the Ministry of Justice of the Kyrgyz Republic.