1. Overview
Wmax Broker Ltd (hereinafter 'Wmax', 'we', 'us') values your personal data privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use the wmax.com website and the MT5 trading platform. This policy complies with AOFA regulatory requirements, FATF international anti-money laundering standards, and references major data protection regulations such as GDPR and PDPO (Hong Kong).
2. Data Collection
The types of personal data we collect include:Identity Information(name, date of birth, nationality, passport/national ID number);Contact Information(email, phone number, address);Financial Information(source of funds declaration, bank account number, cryptocurrency wallet address);Transaction Records(account balance, order history, login records);Technical Information(IP address, browser type, device ID, cookie data);Communication Records(customer service correspondence, complaint content).
3. Data Use
We use your personal data for: (1) account opening and KYC identity verification; (2) trade execution, settlement, and deposit/withdrawal processing; (3) AML/CFT compliance checks and suspicious activity reporting; (4) customer support and dispute resolution; (5) platform improvement and new feature development; (6) sending marketing information such as market analysis and product updates, subject to your explicit consent; (7) fulfilling AOFA regulatory reporting obligations.
4. Data Sharing
We do not sell your personal data. We only share your personal data in the following circumstances: (1) with your explicit consent; (2) as necessary to provide services (e.g., payment processors, KYC verification providers, cloud infrastructure providers); (3) as required by law or regulatory authorities; (4) to prevent fraud, money laundering, or protect the legitimate rights of other clients; (5) in the event of a company merger or restructuring, where personal data is transferred as an asset, and the transferee assumes the obligations of this policy.
5. Data Retention
We retain your personal data according to the following principles:Account Data— for the duration of the account's validity plus 7 years after account closure (in compliance with AML record-keeping requirements);Transaction Records— for 7 years from the trade date;Customer Service Communication Records— for 3 years after the communication ends;Technical Logs— for 6 months. Data exceeding the retention period will be permanently deleted or anonymized.
6. Cookies and Tracking Technologies
This website uses cookies and similar technologies for the following main purposes: (1) Essential Cookies— to maintain login status and security verification; (2) Functional Cookies— to remember language preferences and display settings; (3) Analytics Cookies— to understand website usage and improve services (e.g., Google Analytics); (4) Marketing Cookies— to display personalized content with your consent. You can refuse or delete cookies at any time through your browser settings, but this may affect the normal functioning of certain features.
7. Cross-Border Transfers
Wmax servers and data processing facilities are located in the Union of Comoros, Hong Kong, and global nodes of certain cloud providers. When your personal data is transferred across borders, we ensure that the recipient maintains a level of protection no less than that provided under this policy, including: (1) signing Data Processing Agreements (DPA) with all third-party service providers; (2) encrypted transmission (TLS 1.3); (3) encrypted storage (AES-256); (4) strict access controls and audits.
8. Your Rights and DPO Contact
Under applicable law, you have the following rights: (1) Right of Access— Obtain a copy of your personal data held by us; (2) Right to Rectification— Request correction of inaccurate personal data; (3) Right to Erasure— Request deletion where permitted by law (subject to AML record-keeping obligations); (4) Right to Restrict Processing— Restrict processing for specific purposes; (5) Right to Object— Object to processing for marketing purposes.
To exercise any of the above rights or if you have any questions about this policy, please contact the Data Protection Officer (DPO):
Email:compliance@wmax.com
We will respond to your request within 30 days.