Privacy

Last updated: June 2, 2026

1. Controller

Bitrex Digital LLC (a Colorado limited liability company, with registered office at 1500 N Grant St, Ste N, Denver, CO 80203, United States of America, LLC Certificate No. 20261668852, Colorado Secretary of State; "BitRex", "we", "us", "our") is the data controller for personal data collected through the bitrex.digital Platform. This Privacy Policy describes the categories of personal data we process, the purposes and legal bases for that processing, and the rights you may exercise as a data subject.

2. Categories of Personal Data We Collect

• Identity and contact data: username, email address, optional first and last name, optional Telegram handle;
• Authentication data: hashed passwords, optional withdrawal password, two-factor authentication secrets, session tokens;
• KYC data: government-issued identification documents, proof-of-address documents and biometric verification results, where applicable;
• Financial data: wallet addresses, transaction hashes, deposit and withdrawal history, mining-plan subscriptions, internal balance ledger;
• Technical data: IP address, device fingerprint, browser type, operating system, language preference, geolocation derived from IP;
• Behavioural data: pages visited, features used, timestamps of activity, referral-chain associations.

3. Purposes and Legal Bases

We process personal data on the following legal bases under the EU General Data Protection Regulation ("GDPR") and analogous statutes:

• Performance of a contract — to operate your account, execute deposits, settle withdrawals within our 6-hour SLA, and credit mining yield;
• Legal obligation — to comply with anti-money-laundering, counter-terrorist-financing, sanctions, tax and accounting requirements;
• Legitimate interests — to prevent fraud, abuse and unauthorised access, to secure the Platform, and to improve our Services;
• Consent — for optional marketing communications, non-essential cookies, and any processing not covered by another lawful basis.

4. Retention

We retain personal data for as long as your account is active and for an additional period required to satisfy our legal obligations (typically five (5) to ten (10) years from the date of the last transaction for AML record-keeping). After the retention period elapses, personal data is anonymised or securely deleted.

5. Recipients and International Transfers

We may share personal data with: (a) cloud infrastructure providers hosting the Platform; (b) payment processors and blockchain analytics providers used for AML screening; (c) KYC verification vendors; (d) professional advisers (lawyers, auditors); and (e) competent authorities where required by law. Where transfers occur outside the European Economic Area, they are protected by Standard Contractual Clauses or an adequacy decision of the European Commission.

6. Your Rights

Subject to applicable law you have the right to: (i) access your personal data; (ii) rectify inaccurate data; (iii) request erasure ("right to be forgotten"); (iv) restrict processing; (v) data portability; (vi) object to processing based on legitimate interests; and (vii) withdraw consent at any time. To exercise any right, contact us through the support ticket system in your dashboard. You also have the right to lodge a complaint with your local supervisory authority.

7. Security

We employ technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including TLS encryption in transit, encryption at rest for sensitive fields, role-based access controls, regular vulnerability scanning, and a documented incident-response plan.

8. Cookies

We use strictly necessary cookies to operate the Platform and optional analytics cookies to understand usage patterns. Detailed information is available in our Cookie Policy.

9. Children

The Platform is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18.

10. Updates

This Privacy Policy may be updated from time to time. We will notify you of material changes through the Platform.

Corporate Information & Notices

All notices, service of process and correspondence in respect of this policy or any matter arising out of your use of the Platform should be directed to:

Bitrex Digital LLC
1500 N Grant St, Ste N
Denver, CO 80203, United States of America
LLC Certificate No. 20261668852, Colorado Secretary of State

Service tickets may also be opened through the support panel within your account dashboard. Where this policy refers to "BitRex", "we", "us" or "our", it shall be deemed to refer to Bitrex Digital LLC.