Privacy Policy

Information you provide:

• Account details — name, email address, password (stored hashed), country.
• Identity verification data — government ID images, date of birth, document number, selfie and liveness video, and biometric face match results. These are captured by our verification provider Didit (didit.me) and a copy is retained by us in private, access-restricted, encrypted storage so our compliance team can review it manually.
• Payment information — processed by our payment providers; we do not store full card numbers.
• Payout details — USDC wallet addresses.
• Communications — messages you send to support.

Information collected automatically:

• Trading activity on simulated accounts (orders, positions, timestamps).
• Device and usage data — IP address, browser type, pages visited, approximate location.
• Cookies and similar technologies (see below).

• To create and manage your account and provide the Services.
• To evaluate trading performance, enforce our rules and process Payouts.
• To verify identity, prevent fraud, and comply with sanctions and anti-money-laundering obligations.
• To process payments and send transactional emails.
• To improve the Services and, with your consent where required, send marketing communications.

Where applicable law (such as the GDPR) requires a legal basis, we rely on: performance of our contract with you; compliance with legal obligations; our legitimate interests in operating and securing the Services; and your consent for optional marketing and non-essential cookies.

We do not sell your personal information. We share it only with:

• Service providers — hosting, databases, payment processors, KYC providers, email delivery, analytics.
• Professional advisers — lawyers, accountants and auditors.
• Authorities — where required by law, court order, or to protect rights and safety.
• Successors — in connection with a merger, acquisition or sale of assets.

Our providers may process data in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.

We keep personal data for as long as your account is active and afterwards as needed to comply with legal, tax, anti-fraud and record-keeping obligations. Identity verification documents and payment records are kept for up to 5 years after account closure and are then deleted.

We use industry-standard measures including encryption in transit, hashed passwords and access controls. No system is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• access, correct or delete your personal data;
• object to or restrict certain processing;
• data portability;
• withdraw consent at any time;
• lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@veloperps.com. We may need to verify your identity first.

We use essential cookies to keep you signed in and secure your session, and optional analytics cookies to understand how the site is used. You can control cookies through your browser settings.

The Services are not directed to anyone under 18. We do not knowingly collect data from minors and will delete it if we learn we have done so.

We may update this policy and will post the new version here with an updated date.

VeloPerps [LEGAL ENTITY NAME], [REGISTERED BUSINESS ADDRESS]. Email: privacy@veloperps.com.