Overview Data we collect How we use data Cookies Your rights Security Sharing & transfers Regional support Retention Children Policy changes Contact DPO
Privacy-first crypto trading

Privacy Policy

This Privacy Policy explains how Bitxmax.com collects, uses, protects, and shares information when you use our products and services. It is written to be clear, actionable, and transparent so you understand your choices and our responsibilities.

Regional support: Bitxmax.com welcomes users in Iran, Afghanistan, Iraq, and Turkey. Users from these countries can trade with confidence and without restrictions from our side on account creation or trading access, subject to applicable local laws and user verification requirements.

Data we collect

We only collect data necessary to operate our services, comply with legal obligations, improve performance, and keep your account secure.

Account and profile

When you register, you provide basic information such as your email, password, country/region, and optional profile details. As you verify your identity, we collect additional documents as required by compliance rules.

  • Email and credentials: For sign-in, notifications, and account recovery.
  • Verification data: Identity documents, selfies, and proof-of-address as required.
  • Contact preferences: Opt-ins for product updates and service alerts.

Trading and financial

We record your orders, trades, deposits, withdrawals, and balances to execute transactions and provide accurate statements.

  • Orders and trades: Instrument, side, size, price, and timestamps.
  • Funding and withdrawals: Network, addresses, tags/memos, and confirmations.
  • Compliance checks: Risk scoring and fraud monitoring signals.

Device and usage

We collect technical data to secure your account and help diagnose issues.

  • Device details: OS, browser, screen, language, and time zone.
  • Network metadata: IP address, ISP, and derived approximate location.
  • App telemetry: Performance metrics, crash logs, and feature usage.

Cookies and similar tech

We use cookies and web storage to remember preferences, maintain sessions, and analyze traffic in a privacy-respecting manner. You can manage these in the Cookies section below.

Minimal data promise: We do not sell your personal data. We never disclose private keys. We focus on data minimization and purpose limitation across all systems.

How we use data

We process data to operate our platform, comply with laws, protect users, and improve the trading experience.

Operate and deliver

Provide core features like order matching, account access, balance management, statements, notifications, and customer support.

Security and integrity

Detect fraud, prevent unauthorized access, enforce rate limits, protect funds, and ensure system reliability.

Legal compliance

Meet global regulatory obligations including KYC, AML, sanctions screening, tax reporting, and audit requirements.

Improve and personalize

We use aggregated and pseudonymized analytics to understand product performance and improve usability. Personalization is kept transparent and optional where possible.

Communications

We send essential service emails (security alerts, confirmations) and optional marketing with your consent. You can unsubscribe at any time.

Cookies

Cookies help us keep your session active, remember your theme preference, and improve security.

Category Examples Purpose Retention
Strictly necessary Session ID, CSRF token Sign-in, session continuity, request integrity Session duration
Preferences Theme=0/1, language UI appearance and locale Up to 12 months
Security Device fingerprint hash Fraud detection, risk control Up to 24 months
Analytics Aggregated performance metrics Improve reliability and UX Up to 24 months
Theme preference: We store theme=1 for dark mode and theme=0 for light mode in a cookie. You can toggle anytime.

Your rights

Depending on your location and applicable law, you may have rights over your personal data, and we provide tools to exercise them.

Access and portability

You can request a copy of your personal data and trading history. We provide machine-readable exports when feasible.

Request export
Rectification

If your information is inaccurate or incomplete, you can request corrections. Some details can be updated in your profile directly.

Erasure and restriction

You can request deletion or restriction of processing where legally permissible. Some records may be retained as required by law and compliance obligations.

Objection and consent withdrawal

You can object to certain processing or withdraw consent where consent is the basis. Essential service communications may still be sent.

Security

We apply multiple layers of security designed to protect accounts, data, and funds.

Account protection

  • 2FA & passkeys: Strengthen sign-in security.
  • Security alerts: New device and withdrawal notifications.
  • Withdrawal controls: Address whitelisting and cool-downs.

System safeguards

  • Encryption: In transit (TLS) and at rest.
  • Network isolation: Segmentation and strict access control.
  • Monitoring: 24/7 anomaly detection and incident response.

Operational controls

  • Least privilege: Role-based access with audits.
  • Vendor review: Assessments and DPAs for third parties.
  • Business continuity: Redundancy and tested recovery plans.
Security tip: Enable 2FA, set withdrawal whitelists, and keep your device updated.
View guides

Sharing and international transfers

We share data only with necessary parties under strict safeguards.

Category Example Purpose Safeguards
Service providers Cloud hosting, analytics, messaging Operate platform and support users Data processing agreements, access control
Compliance KYC, AML, sanctions screening Legal obligations and fraud prevention Minimum necessary data, secure transfer
Legal requests Regulatory or court orders Respond to valid and scoped requests Review process and transparency

Regional support

Bitxmax.com is committed to equitable access and a reliable trading experience globally.

Supported regions

We confirm that users from Iran, Afghanistan, Iraq, and Turkey face no restrictions from our side in creating accounts and trading on Bitxmax.com, subject to applicable local laws and completion of required user verification. You can trade with peace of mind and full access to our platform’s features.

Data retention

We keep data only as long as necessary for the purposes described and to meet legal requirements.

Operational retention

Account, trading, and security records are retained for periods aligned with financial, tax, and compliance requirements.

Deletion

When data is no longer needed, we securely delete or anonymize it. You can request deletion where permitted by law.

Children

Our services are not intended for individuals under the age that requires parental consent in their jurisdiction. We do not knowingly collect data from children.

Report a concern

If you believe a child has provided us information, please contact our DPO. We will take appropriate steps to remove such data.

Changes to this Privacy Policy

We update this policy as we expand features, strengthen security, or reflect regulatory changes. We will notify you of material updates.

How we notify

We may notify via email, platform banners, or in-app messages. Reviewing updates ensures you stay informed.

Version history

We maintain a changelog of significant updates and make previous versions available upon request.

Contact our Data Protection Officer

If you have questions about this policy or your data, reach out to our DPO. We respond promptly and transparently.

Message the DPO

Use our support ticket system to contact the DPO directly and securely.

Request center

Submit requests for access, correction, deletion, or objection. Our team will verify and respond within statutory timeframes.

All regions welcome: Bitxmax.com supports users in Iran, Afghanistan, Iraq, and Turkey with full platform access, subject to local laws and standard verification.
Learn more