Privacy Policy

BitOasis Technologies FZE (BitOasis), a free zone company, licensed by the Dubai Virtual Assets Regulatory Authority (VARA) as a Virtual Asset Service Provider, incorporated in the United Arab Emirates with company number 1462 and with its registered office at DSO-THUB-G-D-FLEX-G001F and DSO-THUB-G-D-FLEX-G078, THUB, Dubai Silicon Oasis, Dubai, United Arab Emirates, owns and operates bitoasis.net, a website, our APIs, and mobile applications (collectively the “BitOasis Site”) where users can buy and sell digital assets. 

This Privacy Policy describes the information we collect from you via the Platform and what happens to that information. This Privacy Policy applies to all sites under the bitoasis.net domain, the BitOasis Site, and the BitOasis brand. If we make any material changes to our privacy practices, we will publish a revised Privacy Policy on this page, or we may contact you. If you have any questions, please contact us through customer support. IF YOU DO NOT ACCEPT AND AGREE WITH OUR PRIVACY POLICY, YOU MUST NOT ACCESS OR USE THE PLATFORM. THE USE OF THE PLATFORM FOLLOWING A CHANGE TO THE TERMS OF THIS PRIVACY POLICY SHALL CONSTITUTE YOUR ACCEPTANCE OF OUR PRIVACY POLICY. Capitalized terms used herein without definition shall have the meanings ascribed to them in our Terms of Service.

1. Information Collected

At the time of registration, KYC/re-KYC and on an ongoing-basis for the duration of relationship as and when required, BiOasis collects personally identifiable information, including name, phone number, email address, date of birth, national ID, passport, device, and browser information. Brief on information we collect and how we collect it:

Data Category	Description	Examples of Data
Identity & Contact Information	Personal identifiers, government-issued IDs, communication details, and employment/business info used to identify and contact you.	Name, date of birth, nationality, gender, photograph, biometrics, video/liveness checks, video calls, passport/Emirates ID, email address, phone number, postal address, proof of address, survey/contest responses, correspondence content, office location, job title, business description, company documents, shareholding details, beneficial ownership data.
Financial & Transactional Data	Banking, payments, digital assets, trading, and transactional activity data used for enabling transactions and managing financial risks.	Bank account details, salary certificates, source of funds, credit/debit card numbers, PAN/tax identifiers, wallet addresses, trading data, transaction history, credit history, recipient names, digital currency details, transaction timestamps, amounts, PEP status, sanctions list results, blacklist checks, adverse media hits.
Technical, Device & Location Data	Automatically collected technical, geolocation, platform usage, and device-level data including app permissions.	Device identifiers, IP address, device OS, mobile carrier, geolocation, camera/microphone access, storage, notifications, SMS, photos, videos, contacts, URL clickstream, page response times, session duration, viewed/searched items, browsing paths, metadata attached to uploads or content (e.g., geolocation, timestamps), download errors, length of visits to certain pages, page interaction data, methods used to browse away from the page, phone number used to call customer service, information from selected third-parties, information you provide to us.
Verification, Compliance & Risk Data	Data collected to comply with KYC, AML, sanctions, fraud detection, and regulatory reporting obligations.	KYC documents, biometrics, multi-level verification data, liveness checks, video identification, beneficial ownership declarations, sanctions/PEP screening results, fraud investigation data, dispute/chargeback evidence, regulatory reporting information, law enforcement requests, adverse media screening.

2. Why We Collect the said Information

• We may collect information including but not limited to the following about you and your use of our website, the BitOasis Site, platform, and service (together, our ”Platform“) to create a better, more personalized experience for you or internal research purposes: Your name, email address, address, date of birth, telephone number, a password selected by you, and pictures and data that may be selected or entered by you through the Platform. Furthermore, we may collect your payment and financial information, which our third-party payment processors may store.
• Whenever you voluntarily disclose personal information on publicly viewable screens or pages, that information will be publicly available and can be collected and used by others. For example, if you post your email address, you may receive unsolicited messages. We cannot control who reads your posting or what other users may do with the information you voluntarily post, so we encourage you to exercise discretion and caution with respect to posting your personal information.
• We automatically track certain information about our users, including but not limited to internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, click patterns, etc.), your mobile device’s unique ID number, your mobile device’s geographic location while the app is running, your computer’s IP address, technical information about your computer or mobile device (such as type of device, web browser or operating system), your preferences and settings (time zone, language, privacy preferences, product preferences, etc.), the URL of the last web page you visited before coming to one of our sites, the buttons, controls, and ads you clicked on (if any), how long you used the Platform and which services and features you used, the online or offline status of the Platform.
• Please be careful about posting sensitive details about yourself, including any Wallet Keys. While you may voluntarily provide this information to us when you create your profile, there is no requirement. When you upload and choose to tell us sensitive information about yourself, you are explicitly consenting to our processing your information.

3. Use of Information:

We will never sell your information; however, you agree that we may use your information in the following ways:

• We only process information provided by you for necessary and relevant purposes such as providing BitOasis Services to create a better, more personalized experience for you based on your usage habits, improve our marketing and promotional efforts, analyze site usage, user profiling and disclose aggregated statistics, improve our content and service offerings, aid in our monetization efforts, and customize our Platform’s content, layout and services. This may include migrating your information to other platforms we own. We also use the information we collect about you to review and investigate your activities or transactions on our Platform, resolve disputes, troubleshoot problems, and enforce our Terms of Service Agreement.
• We may share your information with third-party partners or third parties hired by us to provide a part or all of our services to you, subject to confidentiality obligations consistent with this Privacy Policy, and on the condition that the third parties use your information only on our behalf and pursuant to our instructions for the purpose of providing our service to you.
• We may disclose your information in response to a legal request, such as a subpoena, court order, or government demand, to investigate or report illegal activity to enforce our rights or to defend claims. We may also transfer your information to another company in connection with a partnership or a corporate restructuring, such as a sale or merger.

4. Secure transfer of information:

Subject to applicable laws, to facilitate our operations, your Personal Data may be transferred to and stored in locations outside of UAE(“Alternate Country“) by us or our Affiliates/partners located in foreign jurisdictions. We will do this only when the transfer is lawful, and only when the same is required for us to meet our contractual and statutory obligations including in order to provide Services to you. For completeness, the Personal Data which may be transferred outside is such information which may be sent to foreign jurisdictions as per the Applicable Laws. You hereby confirm that you have noted the aforementioned provisions and accordingly consent to the same.

When we transfer your Personal Data from UAE to the Alternate Country, we will comply with our legal and regulatory obligations in relation to your Personal Data, including having a lawful basis for transferring Personal Data and putting appropriate safeguards in place to ensure an adequate level of protection for the Personal Data. We will also ensure that any data processors we engage with in an Alternate Country are obliged to protect your Personal Data at a standard of protection comparable to the protection under Applicable Laws.

5. Data Protection Rights:

As a data subject, have several rights over the use of your Personal Data:

5.1. Right to receive information:

From time to time, we will inform you through our privacy policy notices about the kind of information we collect, use, store, share, and retain to provide our services. Please don’t hesitate to contact our support if you need more details about our data processing and protection policy.

5.2. Right to access:

You will have access to the personal data you provide to us for processing in a structured and machine-readable format where the processing is based on your consent or is necessary to fulfill a contractual obligation and implemented by automated means.

You have the right to obtain confirmation that your Personal Data is or is not being processed, to obtain access to that Personal Data, and to receive certain additional information such as the purpose of the processing, the categories of Personal Data in question, etc. You have the right to request a copy of the Personal Data we hold about you. You may be denied access to your Personal Data if, for example, making it available to you involves disclosing the Personal Data of a third party or if we are prohibited by law from disclosing such information. 

5.3. Right to correct:

We strive to keep your Personal Data up to date and to ensure that it is accurate and complete. You can rectify inaccurate personal data and share additional data where the data required for processing our services is incomplete by contacting us at the email address provided in section 16.

5.4. Right to erasure:

Upon your request, we will deactivate your account and remove your personal information from publicly available sections of the Platform. To make this request, contact us by sending a service request ticket to the email address in section 16. Upon receiving your request, we will deactivate your account and remove your personal information as soon as reasonably possible from publicly available sections of the Platform per our deactivation policy and applicable law. Nonetheless, we will retain the information you may have requested us to remove from our files to meet other legal and regulatory obligations. 

5.5. Right to Object/Restrict Processing:

In certain cases (e.g. If you believe your personal data is not accurate and would like to restrict processing until this is rectified, or you have concerns that processing of your data is carried out in violation of applicable laws and you would like to restrict processing until we clarify your concerns, or place processing restrictions during a period of ongoing judicial procedures), you also have the right to restrict the processing of your Personal Data. Kindly be mindful that you will not be able to avail unless the restriction is lifted by you. 

5.6 Right to Stop Processing:

In some cases(e.g. If the processing is intended for the purposes of direct marketing, statistical surveys, or in violation of applicable laws), you also have the right to stop processing of your Personal Data.

5.7 Right to Withdrawal:

You have the right to withdraw your previous consent to the processing of your Personal Data. You may withdraw your consent at any time by raising a service request to the email address provided in section 16 of this Policy or through our customer support channel.

5.8 Right to processing and automated processing:

You have the right to request that decisions which significantly affect you and are made solely through automated processing without human involvement be reviewed by a human. BitOasis may use automated tools as part of its onboarding and verification processes to assess whether you meet the eligibility criteria to become a customer, in line with our legal and regulatory obligations. If the outcome of this automated assessment indicates that you do not meet our acceptance criteria, your application may be declined. In such cases, you may contact us to request a review of the decision involving meaningful human intervention.

5.9. Other rights:

You may complain to the Data Office if you have reason to believe that a violation of the provisions of the UAE personal data protection law has been committed in relation to your personal data.

• Please note that there are exceptions to these rights if, for example, we are legally required to continue processing your Personal Data.
• Please note that you will be notified of any rectification, erasure, or restriction of processing of your Personal Data unless such notification proves impossible or requires a disproportionate effort.
• If you wish to submit a request to exercise one or more of the rights listed above, you should raise a service request ticket to the email address stated in section (16). This request must clearly state which right you wish to exercise and, where applicable, the reasons for exercising the right.
• We will promptly notify you when your request is received. If the request is valid, we will comply with it as soon as reasonably possible and, in any event, within 3 weeks of receiving the request. Otherwise, we will inform you of the reasons for refusal within 3 weeks of receiving the request.
• When we ask you to provide Personal Data, we will make every effort to clearly state whether such data is required to provide you with the products and services in question or whether it is optional.

6. Data Retention and Storage:

Notwithstanding anything contained herein or in the Terms, we retain any Personal Data for as long as your User Account is active, and for an additional time period of 8 years (in line with our policy) for resolution of disputes, for the purpose of investigations or ongoing prosecutions or in case of any suspicious/illegal transactions, for enforcement of any agreements, and/or as necessitated or authorised under Applicable Laws, and/or in order to protect your vital interests or the vital interests of another natural person. The retention period may be extended in accordance with the Applicable Law and shall only be for such a period as is authorised by Applicable Law, or as is absolutely necessary for us to comply with Applicable Law, and/or for provision of our Services to you.

We make no warranties and shall not be liable regarding non-availability or non-retention of any information and/or data provided by you beyond the deletion of your User Account.

While we will endeavour to permanently erase (in line with our policy) your Personal Data once it reaches the end of its retention period, some of your Personal Data may still exist within our systems, for example if it is waiting to be overwritten. For our purposes, this data has been put beyond use, meaning that, while it still exists in the electronic ether, our employees will not have any access to it or use it again. This is subject to retention for purposes set out in paragraph 1 above.

7. Children’s Privacy

BitOasis does not allow persons under 18 to register for any service, and we do not knowingly collect any personally identifiable information from persons under the age of 18. If you are aware that someone under the age of 18 is using our Platform, please contact us immediately by sending a service request ticket to the email address provided in section 16.

8. Security

We have in place commercially reasonable technical, physical  and logical security measures to prevent unlawful access to or accidental loss of Personal Data collected including those prescribed under applicable laws. We do this by having in place a range of appropriate technical and organisational measures, including firewalls, logging, monitoring and encryption measures. We ask you not to share your password with anyone, and to follow general internet etiquette in operating your User Account with us. In public areas, you should exercise caution and not leave your computer/device unattended especially whilst logged into your User Account. The use of established malware and virus protection software and apps for your device is recommended. Please keep yourself updated with the latest security threats like phishing and call fraud, and do not share any information with scammers posing as BitOasis employees or links that mimic BitOasis products.

We use appropriate measures to protect data processed by third-party like performing regular risk assessments, and including security in contractual agreements.

We have procedures in place to prevent unauthorized access to and the misuse of personal data. 

We use appropriate business systems and procedures to protect and safeguard your personal data. We also use security procedures and technical and physical restrictions to access and use personal data on our servers. Only authorized personnel are permitted to access personal data in the course of their work.

We also may subject ourselves to regular checks by third party security evaluation specialists and restrict access to your Personal Data by our personnel on a need-to-know basis only. Once we have received your Personal Data, we will use strict procedures and security features to try to prevent, as far as is reasonably possible, unauthorized access to your Personal Data.

9. Third-Party Websites

The Platform may contain links to other websites that may be of interest or use to you. We provide these links solely for your convenience. Other users of the Platform may also post links. When accessing a third-party website through our Platform, you acknowledge that you are aware that these third-party websites are not screened for privacy or security issues by us. Please note that our Privacy Policy and information collection, use, and sharing procedures do not apply to other websites. We take no responsibility for and incur no liability for other websites’ collection, use, or information sharing. Please review the privacy policies provided by each website linked to the Platform to familiarize yourself with the procedures of such websites. Please be aware that this Privacy Policy and any other policies in place and any amendments do not create rights enforceable by third parties.

10. Law Enforcement

You agree that we may disclose your information to relevant authorities if compelled by a court order or an order from a relevant authority. Additionally, you agree that we may disclose your information if we reasonably believe that you have violated any UAE laws and/or regulations, international laws, our Terms of Service, or Privacy Policy, or if we believe that a third party is at risk of harm. In the event that we receive a subpoena from a relevant authority affecting your privacy, we may, if legally permitted to do so, notify you to give you an opportunity to file a motion to quash the subpoena, but we are not obligated to do so. We may also proactively report you and share your information without receiving any request from relevant authorities where we have reasonable reason to believe that your actions or activities violate any law and/or regulations applicable in the UAE or any other country having jurisdiction over us or our Terms of Service. You release us from any liability and legal consequences that may arise from or relate to sharing your information with relevant authorities. 

11. Marketing Communications

You agree that we may send you marketing communications and emails subject to receiving your consent. However, you may unsubscribe from marketing communications by notifying BitOasis that you no longer wish to receive such communications. Once notified, we will remove you from our marketing list immediately. If you wish to opt out of certain communications, please contact us by raising a service request ticket to the email address provided in section 16. 

12. Third-Party Access to Your Information

Through our Privacy Policy, you agree to disclose your information to us. We use certain third-party entities, including contractors, web hosts, payment service providers, etc., to provide our services through the Platform. For example, we use Service Providers to assist in securing your personal information.

Throughout the course of providing our services to you through our Platform, we may delegate our authority to collect, access, use, and disseminate your information to a third-party entity. Where we do so, it will be necessary that you grant the third parties the necessary consent that you afford us under this Privacy Policy. For this reason, you hereby agree that for every authorization that you grant to us in this Privacy Policy, you also grant to any third party that we may hire, contract, or otherwise retain the services for the purpose of providing service to you or for operating, maintaining, repairing, or otherwise improving or preserving our Platform or its underlying files or systems. As we do not control these third parties, you agree not to hold us liable for the actions of any of these third parties, even if we would normally be held vicariously liable for their actions, and that you must take legal action against them directly should they commit any tort or other actionable wrong against you.

13. Use of Cookies 

What are cookies?

Cookies are small text files that are placed into the user’s device when you visit a website, downloaded to your computer or mobile device when you visit a site and allow a site to recognize your device. 

Why are cookies generally used for?

Cookies can be a useful mechanism for letting users navigate between pages efficiently, ensuring performance and helping user experience. Some cookies may also help remembering user preferences and help to ensure any advertisements are relevant to your preferences. 

What Cookies are currently used on our platform?

You can block the third party cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies.

First party Cookies – Cookies managed directly by the organization are called “first party cookies”. There are currently no such first party cookies collected and used by BitOasis directly.

Third party cookies – Cookies used  by third parties are called “third party cookies”. 

Third parties (including, for example, advertising networks and providers of external services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies. For example, Google Analytics is a web analysis service provided by Google Inc. (“Google“), in accordance with its policies: http://www.google.com/policies/privacy/partners/. You can prevent Google’s collection and processing of data by using the Google Ads Settings page or by downloading and installing its browser plug-in. (https://tools.google.com/dlpage/gaoptout).

14. Amendments

We may amend this Privacy Policy from time to time. When we amend this Privacy Policy, we will modify the date listed on this Agreement and notify you of the amendments via email communication. You must agree to the amendments as a condition of continued use of our Platform. If you disagree, you must immediately cease using our Platform and request that we deactivate your account by contacting us by raising a service request ticket to the email address provided in section 16.

15. Accessing, Editing, and Removing Your Information

After creating an account, you can access and edit your information through the login dashboard. Please be aware that although you can access and edit your information, you cannot opt out of our data collection requirements mentioned in the sections above, provided that you continue to use the Platform and its services. If you wish to opt out of our data collection practices or would like us to remove any of your information, please contact us by raising a service request ticket to the email address provided in section 16. 

16. Exercise of the Rights

If you have any questions about this Privacy Policy or wish to: (I) receive, access, transfer, stop, correct, or request the deletion of or restrict access to your Personal Data; (ii) make any other request, or (iii) raise a concern or grievances in relation to your Personal Data, please contact us at [email protected] or through our customer support page. 

Complaints and Data Subject Requests will be dealt with by the Data Protection Officer and responded to within 30 days at the latest. If you are not satisfied with the way your complaint was handled, you may be able to refer it to your local data protection regulator.

BitOasis can reach out to customers through email, whatsapp chat or call for rectifying any queries. Although BitOasis hopes to be able to answer any questions that clients may ask, if your issues are not resolved, you also have the right to complain to the data protection authorities/ data office.

17. Our Legal Basis for Data Processing

Our processing of your Personal Data will be based on one of the following reasons, depending on the purpose of our processing activity:

• It is necessary for the legitimate interests of our Company, without unduly affecting your interests or fundamental rights and freedoms, to provide you with communications related to our Services, promotions, offers and events. You have a right to opt-out of receiving marketing messages by clicking on the unsubscribe link in the bottom of our marketing emails;
• It is necessary for taking steps to enter into or executing an agreement with you for the Services you request, or for carrying out our obligations under such an agreement;
• It is essential for us to meet our legal or regulatory responsibilities.
• It is processed with your explicit and free consent which we obtain from you from time to time.

We ensure that your Personal Data is processed lawfully, fairly and in a transparent manner and is collected for specified, explicit and legitimate purposes shared with you. Any information you provide to us is voluntary. You are free to choose whether to provide us with the types of Personal Data requested, but we may not be able to serve you as effectively or offer you all or any of our Services when you do choose not to share certain information with us.

18. Data Breach Notification

Upon becoming aware of a data breach the organization will notify affected individuals and Virtual Asset Regulatory Authority (VARA) as per internal policies.  

Last Updated: 23 October 2025.