XMG Fintech Privacy Policy

Last Updated: Jan 15, 2025

XMG Fintech, it’s parent company, subsidiaries or associates (“XMG”, “we” or “us”) values our visitors’ privacy on all of its platforms. This privacy policy is effective September 15, 2021 and periodically updated; it summarizes what information we might collect from a registered user or other visitor (“You”), and what we will and will not do with it.

This privacy notice (“Privacy Statement”) sets out the basis on which any Personal Information we collect from you (“you”, “your”, or “customer”), or that you provide to us, will be processed by us. By “Personal Information”, we mean any information which, either alone or in combination with other data, enables you to be directly or indirectly identified, for example your name, email address, username, contact details or any unique identifier such as an IP address, device ID or other online identifier.

Capitalized terms that are not defined in this Privacy Statement shall have the meaning in our Terms of Service.

1. Information We Collect

We collect information to provide, improve, and protect our Service. The types of information we collect include:

1.1. Personal Information

• Account Information: When you created an account we collect your contact details, first name, last name, email address, username, password, country of residence, state/province, time zone, Digital Asset wallet addresses, deposit and withdrawals, deposits addresses, balance history, bank statements, bank account numbers, personal information and other data posted by user or other necessary information required to maintain a commercial relationship with you.

• Legal and Regulatory Requirements: Some personal information from you could include username, email address, full name and contact details, 2 forms of ID, picture, signature, mChatHive handle and call, bank accounts numbers, proof of residence, utility bill, tax statement, service bill, employment status, employer name and address, certificate of incorporation, business registration, article of association, ownership and control structure, directors, authorized signatories, authorized signature list, board minutes, officer and director list, name of UBO, certificate of goods standing.

When we say that we think we can process your data, it is because we considered we have a legitimate interest (for ourselves or of a third party) to do so; it is in the interest of our organization to conduct and manage our business; this includes protecting our interests and enforcing agreements with others, as well as comply with industry self-regulatory requirements. We might have legitimate interest to process Personal Information in other contexts. We ensure that we balance any potential impact on you and your rights before we process your Personal Information on that basis. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. Please also consult section 6 “Your rights” below.

It is important that the Personal Information We collect from You is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us. You can do so by contacting us. We will endeavor to effect those changes within a reasonable timeframe.

If you do not wish for your Personal Information to be used in the ways described within this Privacy Statement then you should not use the associated Platforms, Website or use the Services, Functions, or Features offered from time to time on the associated Platforms or Website (“Services”). Where we need information from you to offer our Services, failure to provide such information will mean that you will not get access to the Services.

2. Security and Confidentiality

XMG is committed to protecting your privacy. Internally, only people with a business need to know Personal Information, or whose duties reasonably require access to it, are granted access to customers’ Personal Information. Such individuals will only process your Personal Information as instructed and are subject to a duty of confidentiality. We audit our personal compliance regularly.

The associated Platforms and Websites systems and data are reviewed periodically to ensure that you are getting a quality service and that leading security features are in place. We have put in place procedures to deal with any actual or suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

XMG takes all reasonable endeavors to protect and safeguard Personal Information, but there are protective measures you should take, as well. Do not share your Personal Information with others unless you clearly understand the purpose of their request for it and you know with whom you are dealing. Do not keep sensitive Personal Information in your email inbox or on Webmail. If you are asked to assign passwords to connect you to your Personal Information, you should use a secure password and always use two-factor authentication (2FA), where available. You should change your password regularly. XMG will never ask you for your password.

3. Information Sharing and Disclosure

As it is necessary, we will share your Personal Information with:

a) Any member of our group, which means our direct or indirect subsidiaries, our parent company and any other subsidiary of that parent company, including their respective shareholders, directors, officers, affiliates, employees, contractors, agents, partners, insurers, and attorneys or representatives.

b) Our service providers, to the extent necessary to supply the Services to you, such as Mini-Program providers on mChatHive.

c) Selected trusted third parties, including analytics and search engine providers that assist us in the improvement and optimization of the associated Platforms, Website and Services.

d) Authorities and law enforcement agencies worldwide either when ordered to do so or on a voluntary basis if this appears reasonable and necessary to us (Law Enforcement Requests Policy).

We also disclose your Personal Information to third parties:

a) If XMG or substantially all of its assets are acquired by a third party, in which case Personal Information held by it about its customers will be one of the transferred assets.

b) If we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, or in order to enforce or apply our Terms of Service and other agreements; or to protect the rights, property, or safety of us, our clients, or others, including to defend ourselves from legal claims.

XMG reserves the right to share current and historical bids, asks, and market prices; opening and closing range prices; high–low prices; trade prices; estimated and actual trade volumes; settlement prices; and other aggregate data and information related to the digital tokens traded on the associated Platforms or Website.

4. Cross-Border Data Transfers

Given the global nature of our operations, your personal information may be transferred to and processed in countries other than the country in which you reside. These countries may have different data protection laws than those in your home country. However, we take appropriate measures to ensure that your personal information is treated securely and in accordance with this Privacy Policy, regardless of where it is processed.

Personal Information and other data may therefore be exported outside of the jurisdiction in which you reside. Your Personal Information may be processed and stored in a foreign country or countries. Under those circumstances, the governments, courts, law enforcement, or regulatory agencies of that country or those countries may be able to obtain access to your Personal Information through foreign laws. You need to be aware that the privacy standards of those countries may be lower than those of the jurisdiction in which you reside.

We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Statement. All data you provide to us has blockchain enabled encryption and stored on our secure servers. Where we transfer our data outside of the EEA, we ensure that adequate safeguards are in place. That includes, where necessary, taking steps to evaluate the risks raised by the transfers in countries that do not offer an adequate level of protection. Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of the EEA.

5 Data Retention

We retain your personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. The retention period may vary based on your location and the applicable laws.

6. Your Rights and Choices

You may access and verify your Personal Information held by XMG by either submitting a support ticket or contacting us at legal at xmgportal.com.

You have a number of rights in relation to how we process your Personal Information. You may exercise these rights by contacting us (see details below). These include the right to:

a) access the Personal Information that we may hold about you;

b) rectify any inaccurate Personal Information that we may hold about you;

c) have your Personal Information erased in certain circumstances, for example, where it is no longer necessary for us to process your Personal Information to fulfill our processing purposes; or where you have exercised your right to object to the processing;

d) restrict the processing of your Personal Information where, for example, the information is inaccurate or it is no longer necessary for us to process such information or where you have exercised your right to object to our processing;

e) object to the processing of your Personal Information which may be exercised in certain circumstances, for example, where we are processing your Personal Information for direct marketing purposes, or where your own legitimate interests outweigh ours;

f) have your Personal Information ported to a new service provider if you no longer wish to use the Services. You may exercise these rights by contacting us;

g) when we rely on your consent to process Personal Information (cookies and important communication), you have the right to withdraw your consent at any time. For cookies, this is done by setting up the cookie’s preferences on your browser. For important communication, which is done specifically via mChatHive, you can opt-out directly via your mChatHive account by unfollowing XMG.

You will not have to pay a fee to access your Personal Information or to exercise any of your other rights. We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

We try to respond to all legitimate requests within 30 days. Occasionally it may take us longer than that time frame if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you informed and updated.

7. Changes to this Privacy Policy

We may update this privacy policy notice from time to time to reflect changes in our practices or applicable laws. We will notify you of any significant changes by posting the updated notice on our website and updating the effective date as well as social media posting on mChatHive. We encourage you to review this notice periodically for the latest information on our data protection practices.

8. Compliance with International Data Protection Laws

We comply with applicable data protection laws and regulations, including but not limited to:

• General Data Protection Regulation (GDPR): For users in the European Union (EU) and European Economic Area (EEA), we adhere to GDPR requirements, including providing you with rights such as access, rectification, deletion, and portability of your personal information.

• California Consumer Privacy Act (CCPA): For users in California, USA, we comply with CCPA, including your rights to access, delete, and opt-out of the sale of your personal information.

• Other Applicable Laws: We also comply with other relevant data protection laws and regulations applicable to users in different jurisdictions.

9. Children’s Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

• Email: privacy at xmgportal.com

By using our Service, you acknowledge that you have read and understood this notice and agree to its terms. Thank you for trusting XMG Fintech with your personal information.