Privacy Policy

Purposes of the Privacy Policy

The Privacy Policy stipulates the types of information of yours that we may collect through your log into this Website, your registration with this Website, and/or use the services we offer, as well as how we shall use and protect the information so collected.

To ensure that you have full confidence in our handling of Personal Data, you are advised to read and understand the terms of this Privacy Policy in detail. In particular, upon your log into our Website, regardless of whether you register with this Website, you shall be deemed to accept, agree, undertake and confirm that:

You, on the basis of your own free will and your requisite consent, agree to disclose your Personal Data to us;
You will comply with all the terms and limitations of this Privacy Policy;
You agree that we may collect your information through your log into this Website, your registration with this Website, and/or your using the Services offered by us; you agree to any changes and modifications that we may make to our Privacy Policy in the future;
You agree that our branches, affiliates and employees may contact you in connection with the products and services that you may be interested in (unless you have indicated that you do not want to receive such information).

Information Collected

When you use this Website, you agree to permit us to use cookies to track each of your actions and collect and keep all the information that you leave on this Website, including but not limited to your IP address, location, and other information.

If you are willing to use the services offered by this Website, you will be required to fill in and provide the following two categories of information:

Identity Information. Such information can help us verify whether you are eligible to be registered as a member of this Website. It includes but is not limited to your name, residence address, mailing address, other certificates and corresponding numbers thereof that are issued by your country or government to certify your identity information, as well as all other information that can help us to verify your identity (hereinafter referred to as 'identity information').
Service information. Such information helps us to contact you and provide you with the services, including but not limited to your phone number, fax number, valid email address, mailing address, and information concerning your debit card and/or other accounts (hereinafter collectively referred to as 'service information').
Additional information. When you use this Website or the services this Website offers, we may collect more information necessary from our exclusive mailboxes or in other manners that we consider as in compliance with relevant requirements, for the purpose of improving the functions of this Website, enhancing your experience of using this Website and its services as well as the security thereof, or as is required by any court order, any applicable law, administrative regulation or any order of any other competent government agency.

If you visit any of links to third-party websites as are listed on this Website or any link of any of our third-party partners, you shall agree to and comply with the separate and independent Privacy Policy of such third party website. We will not bear any liability for the contents and activities of such websites or the partners.

If your Personal Data is located within European Economic Area (“EEA”). For the Personal Data protected by General Data Protection Regulation (“GDPR”) you have a series of legal rights related to the Personal Data you keep in our Website, including:

Obtain information about your processing Personal Data and access the Personal Data you have left in our Website. Please note that in some cases, we have right to refuse requests for access to copies of Personal Data. (Especially information subject to legal professional privileges)
If your Personal Data is inaccurate or incomplete, you may ask us to make corrections, but if you need to provide a copy of valid identity documents to prove the authenticity of your Identity Information, please cooperate with us.
In some cases we can be asked to delete your Personal Data. Please note that under certain circumstances (e.g. for purposes of public interest, public health or scientific and historical research), we have the right to retain your Personal Data even if you ask us to delete it.
In some cases, you can loge an objection to the processing of your Personal Data and ask us to limit the processing of your Personal Data. Similarly, in some cases, we have the right to refuse your request even if you raise objections or ask us to restrict the processing of your Personal Data.
Withdraw your Personal Data license. If there are other legitimate reasons, we also have the right to continue using or processing without your permission.

According to the GDPR, in addition to providing systematic Personal Data protection measures, there will be a Data Protection Officer (DPO) to take full responsibility for your Personal Data protection.

We will assess all requests and complaints we have received and provide you with timely responses. We may ask you to provide a valid copy of the identity document so that we can fulfill our security obligations and prevent unauthorized data disclosure. We have the right to charge you a reasonable administrative fee if your request for access to data is clearly unfounded or out of our obligation, or if you request us to provide additional copies of your Personal Data.

To facilitate the Services, we provide to customers located in the EEA, we request explicit consent for the transfer of Personal Data from the EEA to outside of the area.If you are an individual located in the EEA and you decline to consent to such transfer, you will no longer be able to use Bibox and our Services. You will have the ability to withdraw your virtual assets and fiat currency; however, all other functionalities will be disabled.

How we collect Personal Data

We collect your Personal Data in the following manner:

Information you provide to us directly when contacting us;
Information we receive from third parties, such as third party service providers;
Information acquired by us during the course of our relationship and dealings with you;
Information collected through the your use of our Sites and Services;
Information gathered from publicly available sources.

Cookies

When you visit our Website, we use Google stats via cookies to record our performance and check the effect of online advertising. Cookies are a small amount of data that is sent to your browser and stored on your computer hard drive. Only when you use your computer to access our Website can the cookies be sent to your computer hard drive.

Cookies are usually used to record the habits and preferences of visitors in browsing the items on our Website. The information collected by cookies is non-registered and collective statistical data and does not involve Personal Data.

Cookies, which enable the Website or service provider system to recognize your browser and capture and recall information, cannot be used to obtain data on your hard drive, your email address, or your Personal Data. Most browsers are designed to accept cookies. You can opt to set your browser to reject cookies, or to notify you as soon as possible if you are loaded on cookies. However, if you set your browser to disable cookies, it is possible that you may not be able to launch or use some functions of our Website.

Purposes of Information

We will use your information that we collect for the following purposes or in the following ways:

to provide you with our Services through our Website;
to identify and confirm your identity when you use our Website;
to improve and upgrade the services of the Website (your information and feedback received by us can help us improve the service of the Website, so that we can more effectively respond to your service requests and support needs);
to keep statistics relating to the use of our Website and to be used for data analysis carried out in cooperation with government agencies, public affairs institutions;
to personalize your experience (your information will help us to better respond to your personalized needs);
to facilitate transactions (your information, whether public or private, will not be sold, exchanged, transferred, or otherwise provided to any other company on any grounds without your consent, except for where doing so is expressly for the purpose of completing the transaction you require);
to send email regularly (the email address that you provide for the purpose of processing orders may be used to receive information on and updates to your orders, in addition to newsletters, updates, related products or services information, etc., that we may send to you from time to time);
to contact you on matters related to your account, including, to request any additional information or documentation;
to set up security measures to secure your account, including without limitation, to carry out two-factor authentication;
to assess your risk score according to parameters determined by us;
to detect and reduce risks of fraud;
to enforce/defend our rights;
to comply with applicable laws, regulations and/or orders required by competent authorities;
to meet other purposes as specified in the Agreement of this Website and all legal means adopted for satisfying such purposes.

We do not sell, trade, or otherwise transfer information or allow others to collect, use information; however, we may disclose and transfer your Personal Data in the following circumstances:

To our affiliates, trusted third parties who help us operate our websites, manage our business, or provide services to you, provided that such parties agree to keep such information confidential.
When we believe that information disclosure is appropriate, or it is required by any of the applicable laws, regulations, rules or by any order of courts or other competent authorities, and is necessary for executing the strategy of our Website and ensuring the proper functioning of the Website, or as may be necessary for the related parties to provide services, or for the protection of the rights, property or safety of us or other persons.

However, your information will not be provided to other parties for marketing, advertising or other purposes. We have implemented international standards to prevent money laundering, terrorist financing and circumventing trade and economic sanctions, which requires us to undertake due diligence on our customers. This may include the use of third-party data and services providers which we will cross-reference with your Personal Data.

You agree that we has the right to share your Personal Data with:

Member of our group, which includes our subsidiaries, holding companies and companies under common control including their respective contractors, affiliates, employees or representatives;
Our service providers and other third parties who assist us in providing service to you;
Entities in connection with any financing, acquisition or dissolution proceedings which involve disclosing certain portion or all of our business or assets;
Law enforcement agencies and authorities, officers, regulators or other third parties to comply with any law, court order, subpoenas or government requests.

Protection of Personal Data

We adopt appropriate physical, electronic, management and technical measures so as to protect and safeguard the security of your Personal Data. We will, to the greatest extent possible, ensure that any Personal Data collected through our Website shall be free from being subject to nuisance by any third party unrelated to us. The security measures that we may take include but are not limited to:

Physical measures: Records of your Personal Data will be stored securely in fault-tolerant secure storage.
Electronic measures: The computer data that contain your Personal Data will be stored in computer systems and storage medias that are subject to strict login restrictions.
Management measures: Only staff members duly authorized by us can access your Personal Data, and these staff members shall comply with our internal code concerning Personal Data confidentiality.
Technical measures: A safe and adaptive encryption techniques as Secure Socket Layer Encryption may be used to convey your Personal Data.
Other measures: Our network servers are protected by proper firewalls and other appropriate security mechanisms.

If you are aware of any security flaws in our Website, please contact us immediately so that we can take appropriate action as soon as possible.

Despite of the above-mentioned technical and security measures, we cannot guarantee that the information transmitted via the Internet is absolutely safe, so we cannot absolutely guarantee that the Personal Data that you provide to us through our Website will be safe at any time. We will not be held liable for any loss or damage arising from or caused by any event that may occur in connection with unauthorized access to your Personal Data, and we shall not be held liable for compensation for such loss or damage.

Data retention

We strive to maintain the relevance, reliability, accuracy, completeness and currency of the Personal Data we hold and to protect its privacy and security.

We keep Personal Data only for as long as is reasonably necessary for the purpose for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements. We will not retain your Personal Data in a form which permits the identification of the data subject for longer than needed for the legitimate purpose or purposes for which we originally collected it, including for the purpose of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we will anonymize your personal information so that it can no longer be associated with you, in which case we will use such information without further notice to you.

At the end of the retention period, we will securely delete or destroy data retained, and require our sub-processors or third-party suppliers to do likewise.