PRIVACY POLICY

1. INTRODUCTION

This Privacy Policy describes how MoonX Ltd ("we," "us," or "our") collects, uses, stores, and protects your personal information when you access or use our website and services.

Company Details:

  • Operating Entity: MoonX Ltd
  • License Number: 2309055.01
  • Subsidiary Entity: MoonX Ltd (Saint Lucia IBC, No. 2025-00794)
  • Contact: [email protected]

By using MoonX, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our services.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

When you register, verify your identity, or use our services, we collect:

  • Account Information: Email address, username, password (encrypted)
  • Identity Verification (KYC): Full name, date of birth, nationality, residential address, government-issued ID, selfie photograph
  • Contact Information: Phone number, correspondence address
  • Financial Information: Cryptocurrency wallet addresses, transaction history, account balance, trading activity
  • Payment Information: When using credit/debit cards via MoonPay, MoonPay collects card details. We do not store complete card information.

2.2 Information Collected Automatically

When you access MoonX, we automatically collect:

  • Technical Data: IP address, browser type, device type, operating system
  • Usage Data: Pages visited, time spent, click patterns, trading activity, login timestamps
  • Location Data: Approximate geographic location based on IP address
  • Cookies and Tracking: See Section 4 and our Cookie Policy

3. HOW WE USE YOUR INFORMATION

We process your personal data for the following purposes:

3.1 Service Provision

  • Create and manage your trading account
  • Execute and record trades and transactions
  • Process deposits and withdrawals
  • Provide customer support
  • Communicate important account updates

3.2 Legal and Compliance Obligations

  • KYC: Verify identity as required by AML/CTF regulations
  • Anti-Fraud: Detect, prevent, and investigate fraudulent activities
  • Regulatory Compliance: Comply with financial regulations and lawful requests
  • Record Keeping: Maintain transaction records (typically 5-10 years)

Cookies and Tracking:

MoonX uses cookies, pixels, and similar tracking technologies. For detailed information, please refer to our separate Cookie Policy.

Cookie Categories:

  • Essential Cookies: Required for platform functionality
  • Analytics Cookies: Google Analytics to understand user interactions
  • Marketing Cookies: Facebook Pixel, Twitter Pixel for advertising

5. LEGAL BASIS FOR PROCESSING (GDPR)

Where GDPR applies, we process your personal data based on:

  • Contractual Necessity: Processing necessary to provide services
  • Legal Obligation: Compliance with KYC/AML regulations
  • Legitimate Interest: Fraud prevention, security monitoring
  • Consent: For marketing communications and non-essential cookies

6. DATA SHARING AND DISCLOSURE

We do NOT sell, rent, or trade your personal information. We may share your data in the following circumstances:

6.1 Service Providers

  • MoonPay: Payment processing
  • AWS: Cloud hosting
  • Google Analytics: Website analytics
  • Security Services: Fraud detection

6.2 Legal Authorities

We may disclose information when required by law or in response to legal processes, law enforcement requests, or investigation of fraud and illegal activities.

7. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and stored in:

  • Saint Lucia (MoonX Ltd)
  • Saint Lucia (MoonX registration)
  • United States (AWS servers)
  • Other jurisdictions where service providers operate

Important Notice for EU/EEA Users: Saint Lucia is not recognized as providing adequate data protection. We implement safeguards such as Standard Contractual Clauses, encryption, and data processing agreements.

8. DATA RETENTION

We retain your personal information for as long as necessary to provide services, comply with legal obligations, and resolve disputes.

Specific Retention Periods:

  • Active Account Data: Duration of account + 10 years
  • KYC/AML Documents: 10 years after account closure
  • Transaction Records: 10 years
  • Marketing Consent: 3 years after withdrawal
  • Analytics Data: 26 months

9. DATA SECURITY

We implement industry-standard security measures:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
  • Access Controls: Role-based access restrictions
  • Two-Factor Authentication: Available for user accounts
  • Security Monitoring: 24/7 monitoring for unauthorized access
  • Regular Audits: Periodic security assessments

Important: Despite security measures, no internet transmission is 100% secure. You are responsible for maintaining account credential confidentiality.

10. YOUR RIGHTS AND CHOICES

To exercise rights, contact us at [email protected] with subject line "Data Privacy Request". We will respond within 30 days.

11. CHILDREN'S PRIVACY

MoonX is NOT intended for individuals under 18. We do not knowingly collect data from minors. If we become aware of such collection, we will promptly delete it.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy to reflect changes in practices, legal requirements, or new features. Changes will be communicated via updated date, website notice, and email for significant changes.

13. CONTACT US

For questions regarding this Privacy Policy or your personal data:

Data Protection Contact:

Email: [email protected]

14. GOVERNING LAW

This Privacy Policy is governed by applicable law. Your rights under applicable data protection laws remain unaffected.

Last Updated: November 5, 2025

MoonX Ltd

[email protected]