Last updated: September 9, 2026. This Privacy Policy explains how TradeBanta collects, uses, shares and protects your personal information, and the rights you have over that information.

1. Scope and Controller

This Policy applies to personal information processed by TradeBanta in connection with the TradeBanta website, mobile applications, APIs and related services (the "Platform"). Tradebanta Inc., trading as TradeBanta, is the controller of your personal information for the purposes of the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), the Nigeria Data Protection Act (NDPA) and other similar laws that apply to you.

2. Information We Collect

Account and profile: name, email, phone, username, password, country and preferences.
Identity verification (KYC): government ID, selfie/biometric template, date of birth, address, tax identifiers, and results of sanctions, PEP and adverse-media screening.
Financial: wallet balances, deposits, withdrawals, payment method details (masked), on-chain addresses and blockchain analytics signals.
Trading activity: orders, positions, cashouts, profit and loss, market interactions and community posts.
Device and technical: IP address, device identifiers, browser, operating system, crash logs, approximate geolocation and referral URLs.
Cookies and similar technologies: as described in Section 10.
Security and activity logs: sign-in events, money movements (deposits, withdrawals, cash-outs), trading actions, the IP address and a device signature (browser, operating system, device type) recorded with each event.
Communications: messages you send to support, survey responses and correspondence with us.
Third-party enrichment: information from KYC providers, fraud-prevention networks, publicly available sources and, where you connect them, third-party accounts.

3. Purposes and Legal Bases

Provide the Platform (contract): create your account, execute trades, process wallet transactions, deliver support.
Comply with law (legal obligation): KYC/AML, sanctions and tax reporting, responding to lawful requests.
Secure the Platform and prevent fraud (legitimate interest / legal obligation): fraud detection, market-integrity monitoring, account security.
Improve and personalise (legitimate interest): product analytics, personalisation, research.
Marketing (consent, or legitimate interest where permitted): product updates, promotions and newsletters. You can opt out at any time.

4. How We Share Information

We share personal information with:

Identity verification, fraud, sanctions-screening and blockchain-analytics providers;
Payment processors, banking partners and custodians;
Cloud, hosting, communications and analytics vendors acting as processors on our behalf under written data-processing agreements;
Professional advisors (auditors, lawyers, insurers) bound by confidentiality;
Regulators, courts and law-enforcement authorities where legally required or permitted;
Successors in the event of a merger, acquisition, restructuring or insolvency.

We do not sell your personal information for money. We do not use or share sensitive personal information for purposes other than those permitted by CCPA/CPRA.

5. International Transfers

We operate globally and may transfer personal information to countries other than your own. Where we transfer personal information out of the EEA, the UK or another jurisdiction with cross-border rules, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions where they exist, or explicit consent where permitted.

6. Retention

We retain personal information only for as long as necessary for the purposes described in this Policy. Indicative retention periods:

KYC records, sanctions-screening and AML documentation: at least five (5) years after account closure, or longer where law requires;
Trading and financial records: at least seven (7) years after the relevant transaction;
Support communications: up to three (3) years after resolution;
Marketing preferences: until you withdraw consent or object;
Account-deletion requests: the account is deactivated immediately and your personal information is retained for a thirty (30) day restoration window before permanent deletion;
Security and activity logs (including IP address and device signature): ninety (90) days;
Anonymised financial, transaction and compliance records after deletion: seven (7) years.

When personal information is no longer needed, we delete or irreversibly anonymise it.

7. Account Closure and Deletion

You can ask us to delete your account at any time from Settings → Danger zone in the app, or by contacting us at support@tradebanta.com. Full details are on our Account Deletion page.

Before you can delete: your Naira and US Dollar wallets must be empty, with no open positions and no pending orders. This protects you from losing funds. An account that is currently under an active restriction or investigation cannot be deleted until that is resolved.
Immediately: the account is deactivated, you are signed out, and your profile, posts and comments stop being visible to other people.
For 30 days: the request can be cancelled — simply sign in again and everything is restored exactly as it was. Nothing is erased during this window.
After 30 days: we permanently erase your name, email, phone, username, avatar, identity-verification data, bank and crypto details, device and push records, community content, support history and preferences.
What we keep: financial, transaction and compliance records are retained in anonymised form (no longer linked to you as an identifiable person) for seven (7) years, because anti-money-laundering, tax and accounting law requires it. Security and activity logs age out after ninety (90) days.

Deleting your account does not reverse completed transactions, and it does not release funds — withdraw or cash out first.

8. Your Rights

Subject to your local law, you have the right to: access your personal information; rectify inaccurate information; erase information; restrict or object to processing; port your information to another service; withdraw consent; and lodge a complaint with your local data-protection authority. To exercise a right, contact us through the Help Center or email support@tradebanta.com. We will respond within the time limits required by law and may need to verify your identity first. We honour the Global Privacy Control (GPC) signal as an opt-out of sharing for cross-context behavioural advertising for California residents.

9. Children

The Platform is not directed to children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Cookies and Tracking

We use strictly necessary cookies to operate the Platform, and, subject to your consent where required, analytics and marketing cookies to understand and improve product usage. You can manage cookie preferences from the in-product cookie settings and via your browser controls. Blocking essential cookies may impair Platform functionality.

11. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, role-based access control, multi-factor authentication for staff, network segmentation, secure key management and continuous monitoring. We maintain an incident-response process and will notify affected users and regulators as required by law, generally within 72 hours of becoming aware of a reportable personal data breach.

12. Automated Decision-Making

We use automated tools to screen for fraud, sanctions matches and market-integrity risks. In limited cases, these tools produce decisions with legal or similarly significant effects (for example, blocking a deposit or a withdrawal). You have the right to obtain human review of such a decision, to express your point of view and to contest it. Contact us through the Help Center.

13. Region-Specific Disclosures

EEA / UK: our lawful bases and rights are as described above. You may contact our Data Protection Officer at support@tradebanta.com and lodge complaints with your national supervisory authority.
California: in the past 12 months we have collected the categories of personal information described in Section 2 for the purposes described in Section 3, and disclosed them to the categories of recipients described in Section 4. California residents may request access, deletion, correction, and to limit the use of sensitive personal information; we do not sell personal information for money and do not knowingly share the personal information of consumers under 16.
Nigeria: processing is carried out in accordance with the NDPA. You may contact our data-protection contact at support@tradebanta.com.

14. Changes and Contact

We may update this Privacy Policy from time to time. Material changes will be notified in-product or by email. Questions or requests should be sent to support@tradebanta.com or through the Help Center.