Privacy Policy

We collect information you provide directly to us, such as when you create an account, make a transaction, or contact us for support. This includes: • Personal identification information (name, email address, phone number) • Financial information (payment methods, transaction history) • Identity verification documents (government-issued ID, proof of address) • Trading preferences and investment goals • Communication records with our support team We also automatically collect certain information when you use our platform, including: • Device information (IP address, browser type, operating system) • Usage data (pages visited, time spent, features used) • Location information (if you enable location services) • Cookies and similar tracking technologies

We use the information we collect to: • Provide, maintain, and improve our trading platform • Process transactions and manage your account • Verify your identity and comply with regulatory requirements • Send you important account and service notifications • Provide customer support and respond to your inquiries • Detect and prevent fraud, abuse, and security incidents • Analyze usage patterns to enhance user experience • Send marketing communications (with your consent) • Comply with legal obligations and regulatory requirements We do not sell, rent, or share your personal information with third parties for their marketing purposes without your explicit consent.

We may share your information in the following circumstances: • With service providers who help us operate our platform (payment processors, identity verification services, cloud storage providers) • With regulatory authorities and law enforcement when required by law • In connection with a merger, acquisition, or sale of assets • To protect our rights, property, or safety, or that of our users • With your consent or at your direction All third-party service providers are contractually obligated to protect your information and use it only for the purposes we specify.

We implement comprehensive security measures to protect your information: • Industry-standard encryption for data transmission and storage • Multi-factor authentication for account access • Regular security audits and penetration testing • Secure data centers with physical and digital access controls • Employee training on data protection and privacy practices • Incident response procedures for potential security breaches While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our security measures.

We retain your information for as long as necessary to: • Provide our services and maintain your account • Comply with legal and regulatory requirements • Resolve disputes and enforce our agreements • Prevent fraud and abuse Specific retention periods: • Account information: Retained while your account is active and for 7 years after closure • Transaction records: Retained for 7 years as required by financial regulations • Communication records: Retained for 3 years • Marketing data: Retained until you opt out or for 2 years of inactivity You may request deletion of your personal information, subject to legal and regulatory requirements.

You have the following rights regarding your personal information: • Access: Request a copy of the personal information we hold about you • Correction: Request correction of inaccurate or incomplete information • Deletion: Request deletion of your personal information (subject to legal requirements) • Portability: Request transfer of your information to another service provider • Restriction: Request limitation of how we process your information • Objection: Object to certain types of processing • Withdraw consent: Withdraw consent for marketing communications To exercise these rights, contact us at privacy@x-dang.com. We will respond to your request within 30 days.

We use cookies and similar technologies to: • Remember your preferences and settings • Authenticate your identity and maintain security • Analyze platform usage and performance • Provide personalized content and recommendations • Deliver targeted advertising (with your consent) Types of cookies we use: • Essential cookies: Required for platform functionality • Performance cookies: Help us understand how you use our platform • Functional cookies: Remember your preferences and settings • Marketing cookies: Used to deliver relevant advertisements You can control cookie settings through your browser, but disabling certain cookies may affect platform functionality.

X-DANG operates globally, and your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place: • Standard contractual clauses approved by regulatory authorities • Adequacy decisions recognizing equivalent protection levels • Certification schemes and codes of conduct • Binding corporate rules for intra-group transfers We only transfer your information to countries and organizations that provide adequate protection for your personal information.

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will: • Delete the information immediately • Terminate the account if applicable • Notify the parent or guardian if required by law Parents or guardians who believe their child has provided personal information to us should contact us immediately at privacy@x-dang.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes: • We will post the updated policy on our website • We will update the "Last Updated" date at the top of the policy • For material changes, we will provide additional notice (email notification, platform notification, or other means) • Continued use of our platform after changes constitutes acceptance of the updated policy We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.