Easyfortunetrades ("we", "us", "our") operates a crypto trading platform. This Privacy Policy explains what personal information we collect when you use our website, mobile app, and services, why we collect it, how we use it, and what rights you have over it.
We wrote this policy to be readable. If anything is unclear, you can contact us any time and we will explain it in plain terms. By using the platform, you agree to the practices described here.
In short
We collect what we need to run the platform safely, we protect it with bank-grade security, we never sell your data, and we only share it when legally required or when it is essential to deliver the service.
We use the information we collect for specific, clearly defined purposes:
- To operate your account: process registrations, log you in, execute trades, process deposits and withdrawals, and maintain your portfolio history.
- To verify your identity: comply with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) regulations, and prevent impersonation and fraud.
- To keep the platform secure: detect suspicious activity, block unauthorized access attempts, and respond to security incidents.
- To provide support: respond to your inquiries, diagnose technical issues, and communicate about your account.
- To improve the platform: analyze aggregated usage patterns to understand which features matter and where friction exists.
- To meet legal obligations: retain records as required by financial regulations, respond to lawful requests from authorities, and enforce our Terms of Service.
We do not use your personal information for automated decision-making that has a legal or significant effect on you without human review.
If you are located in a jurisdiction with data protection laws (such as the GDPR in the EU/UK), we process your data on the following legal bases:
| Purpose |
Legal Basis |
| Account operation and trade execution |
Performance of a contract |
| Identity verification and AML compliance |
Legal obligation |
| Fraud prevention and security |
Legitimate interest |
| Marketing emails and product updates |
Consent (you can withdraw any time) |
| Platform analytics and improvement |
Legitimate interest |
We do not sell your personal information. We only share it in the limited circumstances below:
- Service providers: companies that help us operate the platform, such as cloud hosting, KYC verification, email delivery, and customer support tools. They are contractually bound to use your data only for the specific purpose we hire them for.
- Payment and blockchain processors: when you deposit or withdraw, we share the minimum information required to complete the transaction. Blockchain transactions are public by nature.
- Legal and regulatory authorities: when required by law, subpoena, court order, or to comply with AML/CTF obligations. We will tell you if we are permitted to do so.
- Business transfers: if the platform is acquired or merged with another company, your information may be transferred as part of the transaction. You will be notified of any change in ownership or privacy policy.
- With your consent: for any other purpose, we will ask for your explicit permission first.
We use a small number of cookies and similar technologies for essential platform functions. We do not use third-party advertising trackers.
- Session cookies: keep you logged in while you navigate the platform. Deleted when you close your browser.
- Security cookies: protect against cross-site request forgery (CSRF) and detect suspicious session activity.
- Preference cookies: remember settings like your selected currency or last-used trading pair.
- Analytics: we may use privacy-respecting analytics to understand aggregate traffic patterns. This data is not tied to your account identity.
You can block cookies in your browser settings, but some platform features (like staying logged in) will not work without them.
We protect your information with the same security controls used to protect your funds. These include:
- Encryption in transit: all communication uses TLS 1.2+ with 256-bit encryption.
- Encryption at rest: sensitive data such as passwords and KYC documents are encrypted with strong algorithms.
- Multi-factor authentication: available for all accounts and required for withdrawals.
- Access controls: only authorized personnel can access customer data, and only when necessary for support or compliance tasks.
- Monitoring and auditing: we log all administrative access to customer data and review it regularly.
Report a vulnerability
If you believe you have found a security issue, please report it to us immediately using the contact form. We investigate every report and will not take legal action against good-faith researchers.
We keep your information for as long as your account is active and for a reasonable period afterward to comply with legal obligations. Specific retention periods:
- Account information: kept while your account is active and for 5 years after closure, as required by financial record-keeping laws.
- KYC documents: retained for 5 years after the end of the customer relationship.
- Transaction records: retained for 7 years to comply with AML/CTF regulations.
- Security logs: kept for 12 months.
- Support tickets: kept for 3 years for quality and dispute resolution.
When a retention period ends, we either delete or anonymize the data so it can no longer be linked to you.
Depending on your jurisdiction, you may have the following rights over your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to fix inaccurate or incomplete information.
- Deletion: request that we delete your information, subject to legal retention obligations.
- Portability: receive your data in a structured, machine-readable format.
- Objection: object to certain processing, including direct marketing.
- Restriction: ask us to temporarily stop processing your data while a dispute is resolved.
- Withdraw consent: withdraw any consent you previously gave us, at any time.
To exercise any of these rights, contact us using the form below or email us at the support address. We respond to all requests within 30 days.
Compliance obligations
Some data cannot be deleted immediately because AML/CTF laws require us to retain transaction and identity records for a set period, even after account closure.
Our platform is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a minor has created an account, we will close it and delete the associated data.
If you believe a minor has used our platform, contact us immediately.
Our servers and service providers may be located in different countries. When your data is transferred outside your home country, we ensure it is protected by appropriate safeguards, including:
- Standard Contractual Clauses approved by the European Commission.
- Contractual commitments from service providers to apply equivalent data protection standards.
- Technical measures such as encryption and access controls.
If you would like more detail on where your data is processed, contact us.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the platform itself. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify registered users by email at least 14 days before the changes take effect.
- Ask for your consent if the change requires it under applicable law.
Continuing to use the platform after the effective date means you accept the updated policy. If you do not agree, you can close your account and request deletion of your data.