Log in

Privacy policy

Last updated 14 October 2026

Template for legal review. This document is a starting point and must be adapted by a qualified lawyer to the jurisdictions where Zarkoin operates before launch. Text in [brackets] needs to be completed.

What we collect

  • Account data: email address, phone number, password hash, nickname, language and preferences.
  • Identity data (when you verify): name, date of birth, nationality, address, identity document images and a selfie.
  • Transaction data: deposits, withdrawals, trades, P2P orders and chat, Earn subscriptions and internal transfers.
  • Technical data: IP address, device and browser details, login history and security events.
  • Payment details you add for P2P, which are shown only to your counterparties during an order.

Why we use it

  • To provide the Services and keep your account secure (for example detecting new-device logins).
  • To meet legal obligations such as anti-money-laundering checks, record keeping and responding to lawful requests.
  • To prevent fraud and abuse.
  • To send service messages. Marketing messages are optional and you can turn them off at any time.

Who we share it with

  • Service providers that help us operate: email and SMS delivery, hosting, and identity-verification partners where used. They process data only on our instructions.
  • Your P2P counterparty sees your nickname, completion statistics and the payment details you choose for that order.
  • Authorities, when the law requires it.

We do not sell your personal data.

How long we keep it

Identity and transaction records are kept for at least [5] years after your account is closed, as required by anti-money-laundering law. Other data is deleted or anonymised when no longer needed.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to certain processing. Email [email protected]. [Insert data protection authority and representative details where required.]

Security

Passwords are hashed, sensitive secrets are encrypted at rest, identity documents are stored with restricted access, and staff access is logged.

Cookies

We use essential cookies to keep you logged in and remember settings such as theme. We do not use third-party advertising cookies.