1. Overview
Bitwell Crypto (“Bitwell,” “we,” “us,” “our”) collects and processes personal data to operate our Services, comply with legal obligations, prevent fraud, and improve user experience. This Privacy Policy describes what data we collect, why we collect it, and how you can exercise your rights.
2. Data We Collect
Depending on how you use the Services, we may collect the following categories of data:
2.1 Identity & verification data
- Account details: name, email, phone number, username, and authentication info.
- Verification (KYC): government ID, selfie/liveness checks, address proof, date of birth (where required).
- Compliance: sanctions screening results, source-of-funds information (where required).
2.2 Transaction & usage data
- Trading activity: orders, fills, balances, deposits, withdrawals, and related metadata.
- Blockchain data: wallet addresses and on-chain transaction identifiers (public data plus platform metadata).
- Support interactions: chat/tickets, emails, call notes, and attachments you provide.
2.3 Device & technical data
- Device identifiers: device type, OS version, browser, app version.
- Security signals: IP address, login timestamps, approximate location, risk indicators.
- Cookies: identifiers used for session, analytics, and preferences (see Cookies section).
Blockchain transactions are generally public. We may associate public blockchain data with your account to provide Services and meet compliance requirements.
3. How We Use Data
We use personal data to:
- Provide and maintain the Services (account access, trading, deposits, withdrawals).
- Verify identity, perform compliance checks, and prevent fraud and account takeover.
- Monitor, troubleshoot, and secure the platform (detect suspicious activity and abuse).
- Communicate with you (service messages, support, security alerts, policy updates).
- Improve our products (analytics, performance, feature development).
- Comply with legal obligations and enforce our Terms.
4. Legal Bases (where applicable)
Depending on your jurisdiction, we process personal data based on: (i) performance of a contract; (ii) legitimate interests (e.g., security, fraud prevention); (iii) compliance with legal obligations; and (iv) consent (e.g., certain cookies or marketing), which you can withdraw where applicable.
5. How We Share Data
We may share personal data in limited circumstances, including:
5.1 Service providers
Vendors that help us operate the platform (cloud hosting, identity verification, analytics, customer support, security monitoring) may process data under contractual obligations.
5.2 Legal and compliance
We may disclose data to comply with laws, regulations, lawful requests, court orders, or to protect the rights and safety of Bitwell, users, and the public.
5.3 Business transfers
In the event of a merger, acquisition, restructuring, or asset sale, data may be transferred as part of that transaction, subject to applicable law.
We may share limited data with service providers and partners only to operate the platform, provide support, comply with legal obligations, and improve our services.
6. Security
We use administrative, technical, and physical safeguards designed to protect personal data, including access controls, encryption in transit, monitoring, and verification checks. No system is 100% secure; you are responsible for protecting your account credentials and enabling available security features such as 2FA.
7. Data Retention
We retain personal data as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and for legitimate business purposes. Retention periods may vary depending on jurisdiction and data type.
8. Your Rights
Depending on your location, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Some requests may be limited due to legal obligations (e.g., AML retention requirements).
| Right | What it means | Typical exceptions |
|---|---|---|
| Access | Request a copy of your data | Security/legal limits |
| Correction | Fix inaccurate data | Verification required |
| Deletion | Request deletion in some cases | AML/record retention laws |
| Objection | Object to certain processing | Compelling legitimate grounds |
9. Cookies & Tracking
We may use cookies and similar technologies for session management, security, preferences, analytics, and (where enabled) marketing. You can control cookies through your browser settings and, where available, through consent tools.
9.1 Types of cookies
- Essential: required for login, security, and core functionality.
- Performance/Analytics: helps us understand usage to improve the platform.
- Preferences: remembers settings like language or region.
- Marketing: used for advertising where applicable and permitted.
10. Children
The Services are not directed to children. If you believe a minor has provided personal data, contact us so we can take appropriate action.
11. International Transfers
Your data may be processed in countries other than your own. Where required, we use safeguards designed to protect cross-border transfers, such as contractual protections and security measures.
12. Changes to this Policy
We may update this Privacy Policy from time to time. Where required, we will notify you via the platform, email, or by posting an updated version with a new effective date.
13. Contact
For questions or requests regarding privacy, contact us through official channels listed on our website.
This template is for general informational purposes and is not legal advice. Obtain legal review before publishing.