Privacy Policy

1. Purpose of this Policy

This Privacy Policy explains how Legacy NFTY collects, uses, stores, shares and protects information in connection with the website, member accounts, transaction workflows, identity verification, support and related Platform services.

This Policy should be read with the Terms & Conditions, AML Policy and Risk Disclosure. Specific notices may also be provided when information is collected for a particular feature.

2. Information we may collect

Account and profile information

This may include your name, username, email address, phone number, country, account status, preferences and information you submit when creating or updating an account.

Identity and compliance information

Where verification is required, we may collect identification documents, document images, address information, date of birth, nationality, source-of-funds information, source-of-wealth information, beneficial ownership information and verification results.

Transaction and wallet information

We may collect deposit and withdrawal references, digital asset type, blockchain network, wallet addresses, transaction identifiers, amounts, fees, status history, account ledger records and evidence submitted to support a request.

Security and technical information

This may include IP address, browser, device information, session history, login attempts, two-factor status, security alerts, timestamps, cookies, diagnostic records and information used to prevent abuse.

Referral information

We may record referral codes, account relationships, qualifying events, reward status and related ledger entries.

Communications

We collect messages sent through contact forms, support requests, responses, notification records and other official communications.

3. How we use information

• To create, maintain and secure member accounts.
• To verify identity, eligibility and account information.
• To process and review deposits, withdrawals, ledger entries, plans and referrals.
• To prevent fraud, account takeover, abuse, money laundering and prohibited activity.
• To send account, security, transaction, policy and service communications.
• To provide support and investigate disputes or suspected errors.
• To maintain records, audit activity and meet legal or compliance obligations.
• To improve reliability, usability, security and member guidance.

4. Legal or permitted grounds

Depending on applicable law and the circumstances, information may be processed to perform a contract, comply with legal obligations, protect legitimate interests, prevent fraud, establish or defend legal claims, protect users or the public, or based on consent where consent is required.

5. How information may be shared

Information may be shared only as reasonably necessary with:

• authorised personnel who require access for operations, support, security or compliance;
• service providers supporting hosting, email, security, communications, analytics or verification;
• professional advisers, auditors or insurers subject to appropriate duties;
• courts, regulators, law-enforcement bodies or other authorities where required or legally permitted;
• parties involved in a corporate transaction, subject to appropriate safeguards;
• another person when you direct or authorise the disclosure.

Legacy NFTY does not sell passwords, private keys or identity documents. User information is not provided to advertisers for independent sale of targeted advertising lists.

6. Identity documents and sensitive records

Identity files and private account records are intended to be stored in protected locations and are not served as public website assets. Access is limited according to role and operational need.

No storage or transmission method is completely secure. Legacy NFTY uses reasonable technical and organisational measures but cannot promise absolute security.

7. Cookies and similar technologies

The Platform may use cookies or local storage for sessions, security and essential interface preferences. Some cookies are necessary for account access and protection. Blocking necessary cookies may prevent features from functioning correctly.

8. Data retention

Information is retained for as long as reasonably necessary for account operation, security, dispute handling, compliance, recordkeeping and legal obligations. Retention periods may vary by record type and may continue after account closure where required or justified.

Information may be deleted, anonymised or restricted when it is no longer required, subject to backup cycles and lawful retention duties.

9. International processing

Service providers or infrastructure may process information in different countries. Where required, reasonable contractual, technical or organisational measures may be used to protect information transferred across borders.

10. Your choices and rights

Depending on applicable law, you may be able to request access, correction, deletion, restriction, objection, portability or withdrawal of consent. These rights may be limited by identity verification, security, fraud prevention, legal claims and record-retention obligations.

You can update certain profile details through the Platform or contact support. Legacy NFTY may need to verify your identity before acting on a privacy request.

11. Communication preferences

You may be able to control non-essential communications. Essential security, account, transaction, compliance and legal notices may still be sent while an account remains active or where required.

12. Account security and privacy

You are responsible for protecting your credentials and registered email. Do not disclose passwords, OTPs, authenticator codes, authenticator credentials, private keys or seed phrases. Contact official support immediately if you believe personal information or account access has been compromised.

13. Children's privacy

The Platform is not intended for people who are below the minimum legal age required to enter a binding agreement or use the relevant services. Legacy NFTY does not knowingly seek to collect information from ineligible children.

14. Third-party links

The website may link to external services. Their privacy practices are governed by their own policies, and Legacy NFTY is not responsible for how they handle information.

15. Changes to this Policy

This Policy may be updated to reflect changes in Platform features, security, operations or legal requirements. Material changes will be published through an appropriate official channel.

16. Contact

Privacy questions or requests should be sent through the official contact form or support email published on legacynfty.com. Do not include passwords, authentication codes, private keys or seed phrases.