Privacy Policy
2026-07-16
This Privacy Policy explains what personal data ONYX collects, why it is collected, how it is used and protected, and what rights you have. It applies to the ONYX platform, website, applications and related services.
1. Data We Collect
Account data: username, e-mail address, phone number, password hashes and security settings. Verification data: identity documents, photographs and related information you submit during KYC.
Usage and technical data: IP address, device and browser characteristics, session information and security events. Financial data: balances, deposits, withdrawals, trades and other transaction records created by your use of the platform.
2. Why We Process Your Data
To provide and operate the Services: account management, order execution, deposits, withdrawals, notifications and support. To meet legal obligations: identity verification, anti-money-laundering and sanctions compliance, accounting and reporting.
To protect the platform and its users: fraud prevention, multi-account detection, security monitoring and incident response. To improve the Services: aggregate analytics and service quality measurement.
3. Legal Bases
We process personal data where it is necessary for the performance of our agreement with you, for compliance with legal obligations, for our legitimate interests (such as platform security), or with your consent where required. Where processing is based on consent, you may withdraw it at any time.
6. Data Retention
We retain personal data for as long as your account is active and thereafter for the periods required by applicable law (including financial-record and AML retention obligations). Data that is no longer required is deleted or irreversibly anonymized.
7. Security
We apply technical and organizational measures appropriate to the risk: encryption of sensitive secrets at rest, hashed credentials, access controls, security monitoring and audit logging. No system is absolutely secure; protect your credentials and enable two-factor authentication.
8. Your Rights
Subject to applicable law, you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent. You can exercise most controls directly in the platform settings or by contacting support.
You also have the right to lodge a complaint with your local data-protection authority.
9. International Transfers
Where data is transferred across borders, we ensure appropriate safeguards are in place, such as contractual protections with our providers, so that your data remains protected to the standard described in this Policy.
10. Children
The Services are not directed at persons under 18. We do not knowingly collect data from minors; any such data discovered is deleted.
11. Changes to This Policy
We may update this Policy from time to time. The current version, with its effective date, is always available on this page. Material changes are announced through the platform's notification channels.
Questions about this Policy can be addressed to the support team through the in-platform Support section.
