Privacy Policy

1. Introduction & Overview

Idle4ex Ltd. ("Idle4ex", "we", "us", or "our") respects your privacy and is dedicated to protecting your personal data.

This Privacy Policy outlines how we collect, process, disclose, and safeguard your personal data when you visit our website, register for an account, or interact with our educational evaluation services in compliance with the General Data Protection Regulation (GDPR) and other applicable data privacy laws.

2. Categories of Personal Data We Collect

We collect and process only the personal information strictly necessary to provide, manage, and secure our educational evaluation platform.

• Identity Data: Full legal name, date of birth, nationality, government-issued photo identification, and facial biometrics collected during KYC verification.
• Contact Data: Email address, phone number, residential address, and country of residence.
• Financial & Payment Data: Payment method details, cardholder name, masked credit card digits, transaction IDs, crypto wallet public addresses, and payout banking information.
• Trading Activity Data: Simulated trade orders, timestamps, entry/exit prices, trading volumes, drawdown metrics, and performance statistics.
• Technical & Usage Data: IP address, geolocation estimates, browser type, device specifications, operating system, log files, session duration, and cookie identifiers.

3. Legal Bases & Purposes for Data Processing

We process your personal information under the following recognized legal bases:

1. Performance of Contract: To provision your simulated accounts, deliver login credentials, track trading metrics, and process eligible performance payouts.

2. Legal & Regulatory Compliance: To prevent fraud, verify trader identity under Anti-Money Laundering (AML) standards, comply with tax reporting obligations, and enforce sanctions restrictions.

3. Legitimate Interests: To detect malicious trading exploits, secure our cloud infrastructure, improve user experience, and conduct operational analytics.

4. Explicit Consent: For sending promotional newsletters, platform updates, and non-essential analytical cookies (which you may withdraw at any time).

4. Data Sharing & Third-Party Processors

We never sell, rent, or trade your personal data to advertisers or third-party marketers. We share data solely with trusted service providers necessary for operating our platform:

• Payment Processors: Stripe, Paddle, NOWPayments, and CodaPay for secure transaction processing.
• Identity Verification Partners: Didit and licensed compliance providers for automated identity verification.
• Trading Platform Infrastructure: MetaQuotes (MT4/MT5), Spotware (cTrader), and dedicated demo server providers.
• Communication & Support: Email delivery infrastructure and customer support chat software.
• Legal & Regulatory Authorities: When strictly mandated by court orders, lawful subpoenas, or regulatory enforcement.

5. International Data Transfers

Because our infrastructure and service providers operate internationally, your data may be transferred to and maintained on secure servers outside your country of residence.

Whenever data is transferred across international borders, we ensure adequate protections are in place through Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent regulatory frameworks.

6. Data Security & Storage Safeguards

We implement robust administrative, technical, and physical security measures to safeguard your personal data against unauthorized access, loss, alteration, or disclosure.

These protections include end-to-end TLS encryption in transit, AES-256 encryption at rest, multi-factor administrative access, and regular vulnerability scanning.

7. Data Retention Schedule

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, maintain your trading profile, or comply with statutory accounting and legal retention mandates (typically 5 to 7 years for financial records).

When personal data is no longer required, it is securely destroyed or irreversibly anonymized.

8. Your Legal Rights Under GDPR & International Privacy Laws

Depending on your jurisdiction, you possess specific rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten'): You may request deletion of your personal data where statutory retention grounds no longer apply.
• Right to Restrict or Object: You may restrict or object to certain forms of data processing.
• Right to Data Portability: You may request the export of your data in a structured, machine-readable format.
• Right to Withdraw Consent: You may revoke consent for marketing communications or optional cookies at any time.

9. Cookies & Tracking Technologies

We use cookies to maintain active sessions, remember user preferences, and analyze platform traffic. Essential cookies cannot be disabled as they are required for site security and functionality. Analytical cookies can be managed directly in your browser settings.

10. Contact Information & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled, please contact our Data Protection team at support@idle4ex.com.