Privacy Policy

Effective from: 15 April 2026

Data We Collect

mBitcoin collects the information needed to operate a regulated cryptocurrency exchange: full name, email address, government-issued ID for KYC, and transaction history.

We also collect technical data including IP addresses, device identifiers, and session logs. This data is used to detect fraud, comply with AML obligations, and secure your account.

How We Use Your Information

Your data is used to verify your identity, process trades and withdrawals, prevent unauthorized access, and meet legal reporting requirements in applicable jurisdictions. We do not sell your personal data.

Cookies

mBitcoin uses strictly necessary cookies to keep you logged in and maintain session security. Analytics cookies are only placed with your explicit consent.

You can manage cookie preferences through your browser settings or the consent panel on the platform. Disabling analytics cookies does not affect trading functionality.

Data Sharing

We share data with identity verification providers, payment processors, and regulatory authorities when legally required. All third-party processors are bound by data processing agreements meeting GDPR standards.

Data Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Access to user data is restricted to authorized personnel on a need-to-know basis.

mBitcoin undergoes third-party security audits twice per year. Audit summaries are published in our transparency reports, available at mbitcoin.

Your Rights

You have the right to access, correct, export, or delete your personal data at any time. Submit requests to info@mbitcoin.finance. info@mbitcoin.finance We respond within 72 hours.

Third-Party Links

The platform may contain links to external sites. mBitcoin is not responsible for the privacy practices of any third-party website. Review their policies independently.

Data Retention

Transaction records and identity verification data are retained for 7 years to comply with AML regulations. Account data is deleted within 30 days of a verified account closure request.

Policy Updates

This Privacy Policy may be updated to reflect regulatory changes or new platform features. We will notify registered users by email at least 14 days before any material changes take effect.