VectaMarkets Privacy Policy

The entity responsible for the processing of your personal data is:

Vecta Global Ltd. Trading as VectaMarkets

Email: Support@vectamarkets.com General Support: Support@vectamarkets.com

Where VectaMarkets engages a third-party service provider to process personal data on our behalf, that provider may process information only for authorized purposes and subject to appropriate contractual and security requirements.

This Privacy Policy applies to personal data collected when you:

• create or use a VectaMarkets Account;
• visit or browse our website;
• use our web or mobile applications;
• participate in Markets;
• submit Orders;
• deposit or withdraw funds;
• contact customer support;
• complete identity or compliance verification;
• communicate with us;
• interact with our marketing communications; or
• otherwise interact with VectaMarkets.

This Policy does not apply to websites, applications or services operated independently by third parties.

“Personal data” means information relating to an identified or identifiable individual.

Depending on how you use VectaMarkets, this may include information that directly identifies you as well as information that can reasonably be associated with your Account, device or activity.

We may collect different categories of information depending on the services you use.

4.1 Account Information

When you create an Account, we may collect:

• full name;
• email address;
• telephone number;
• date of birth or age information;
• residential or correspondence address;
• username;
• password or authentication information;
• country of residence;
• preferred currency;
• Account preferences; and
• other information necessary to create and maintain your Account.

4.2 Identity and Verification Information

Where required for legal, compliance, security or risk-management purposes, we may collect information used to verify your identity.

This may include:

• government-issued identification information;
• identification document details;
• date of birth;
• nationality or country of residence where legally required;
• photographs or other verification information;
• information obtained through identity-verification providers; and
• information necessary to satisfy applicable compliance requirements.

We will request only information reasonably necessary for the relevant verification purpose.

4.3 Transaction Information

When you use VectaMarkets, we may collect records relating to:

• deposits;
• withdrawals;
• Orders;
• Contracts;
• Market participation;
• transaction amounts;
• transaction timestamps;
• applicable fees;
• Account balances;
• settlement records;
• payment status;
• payment references;
• refunds or reversals; and
• related transaction metadata.

These records may be retained to operate the Platform, provide transaction history, prevent fraud, resolve disputes and satisfy legal or regulatory obligations.

4.4 Payment Information

Depending on the payment method used, we may receive information relating to your payment transaction.

Payment information may include:

• bank-account details;
• account name;
• payment references;
• transaction identifiers;
• payment-provider identifiers;
• card-related information supplied by a payment processor; and
• information relating to the status or outcome of a payment.

Where a third-party payment processor handles payment-card information directly, VectaMarkets may not receive or store the complete card number or security code.

Payment providers may process payment information under their own privacy policies and applicable contractual obligations.

4.5 Device and Technical Information

When you access the Platform, we may automatically collect certain technical information, including:

• IP address;
• browser type;
• operating system;
• device type;
• device identifiers;
• application version;
• language settings;
• time zone;
• referring website;
• pages or features accessed;
• timestamps;
• session information;
• crash reports;
• performance information; and
• other technical information reasonably necessary to operate and secure the Platform.

4.6 Usage Information

We may collect information about how you interact with the Platform, including:

• Markets viewed;
• features used;
• pages visited;
• searches;
• interactions with Platform interfaces;
• transaction activity;
• session duration;
• error events; and
• other usage information.

We use this information to improve functionality, security, reliability and user experience.

4.7 Communications

If you contact us, we may retain information contained in your communication.

This may include:

• emails;
• support requests;
• complaints;
• feedback;
• attachments;
• correspondence history; and
• information necessary to investigate or resolve your request.

4.8 Cookies and Similar Technologies

We may use cookies, local storage, pixels, SDKs and similar technologies to:

• keep you signed in;
• maintain sessions;
• remember preferences;
• understand Platform usage;
• improve performance;
• detect fraud and abuse;
• maintain security;
• analyze traffic; and
• measure marketing effectiveness where permitted.

You may be able to control certain cookies through your browser or device settings.

Disabling certain cookies may affect Platform functionality.

We may receive personal data from third parties where reasonably necessary to provide, secure or operate the Platform.

These parties may include:

• payment processors;
• banks and financial institutions;
• identity-verification providers;
• fraud-prevention providers;
• cybersecurity providers;
• analytics providers;
• technology service providers;
• communications providers;
• publicly available sources; and
• competent governmental or regulatory authorities where legally permitted or required.

We may combine information received from third parties with information collected directly from you.

We may process personal data for the following purposes:

Account Management

To:

• create and maintain Accounts;
• authenticate Users;
• provide Platform services;
• maintain transaction records; and
• provide customer support.

Transaction Processing

To:

• process deposits and withdrawals;
• execute and record transactions;
• calculate balances and fees;
• process settlements;
• investigate payment issues; and
• maintain accurate financial records.

Identity and Compliance

To:

• verify identity and eligibility;
• prevent fraud;
• conduct sanctions and risk screening;
• detect suspicious activity;
• comply with applicable legal requirements;
• protect the integrity of the Platform; and
• respond to lawful requests from authorities.

Security

To:

• detect unauthorized access;
• identify malicious activity;
• investigate security incidents;
• prevent account takeover;
• protect infrastructure;
• monitor unusual activity; and
• maintain Platform integrity.

Product Development

To:

• improve Platform functionality;
• understand usage patterns;
• troubleshoot technical issues;
• develop new features;
• test and improve performance; and
• personalize certain aspects of the Platform.

Communications

To:

• send transactional notifications;
• provide security alerts;
• respond to support requests;
• provide service announcements;
• communicate important policy changes; and
• send marketing communications where permitted.

Legal and Dispute Management

To:

• enforce our Terms;
• establish or defend legal claims;
• resolve complaints;
• investigate suspected violations;
• comply with legal obligations; and
• protect our rights and property.

Where applicable, VectaMarkets will process personal data on an appropriate lawful basis.

Depending on the circumstances, this may include:

• your consent;
• performance of a contract with you;
• compliance with a legal obligation;
• protection of vital interests;
• performance of a task carried out in the public interest where applicable; and
• legitimate interests, where legally permissible and where those interests are not overridden by your rights and freedoms.

Where we rely on consent, you may withdraw consent where legally permitted. Withdrawal of consent does not affect processing that occurred before withdrawal.

We may send marketing communications where permitted by applicable law.

These may include:

• product announcements;
• new Market categories;
• promotional communications;
• educational content;
• Platform updates; and
• other information relating to VectaMarkets.

You may unsubscribe from non-essential marketing communications by using the unsubscribe mechanism included in the communication or contacting us.

Even if you opt out of marketing communications, we may continue to send essential communications relating to your Account, security, transactions, legal obligations or Platform operation.

We may disclose personal data to third parties where reasonably necessary for the purposes described in this Policy.

These may include:

Payment Providers Payment processors, banks, financial institutions and other payment service providers may process information necessary to facilitate deposits, withdrawals and payment-related services.

Identity and Compliance Providers We may use third-party providers to perform identity verification, fraud detection, sanctions screening and related compliance services.

Technology Providers We may use hosting providers, cloud infrastructure providers, database providers, cybersecurity companies, analytics services, communication platforms and other technology providers.

Professional Advisers We may disclose information to lawyers, auditors, accountants, consultants and other professional advisers where reasonably necessary.

Government and Regulatory Authorities We may disclose personal data where:

• required by law;
• required by a valid legal process;
• necessary to comply with a lawful request;
• necessary to prevent or investigate unlawful activity; or
• otherwise permitted by applicable law.

Corporate Transactions If Vecta Global undergoes a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, personal data may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

VectaMarkets does not sell your personal data as a commercial product.

We may, however, share information with service providers and other parties where necessary to operate the Platform, process transactions, maintain security, comply with legal obligations or perform other legitimate business functions described in this Policy.

Some of our service providers may process personal data outside Nigeria.

Where personal data is transferred internationally, we will take reasonable steps to ensure that the transfer is conducted in accordance with applicable data-protection requirements.

Depending on the circumstances, safeguards may include:

• contractual protections;
• appropriate transfer mechanisms;
• adequacy arrangements where available;
• security measures; and
• other safeguards required by applicable law.

We implement reasonable technical and organizational measures designed to protect personal data against:

• unauthorized access;
• unauthorized disclosure;
• accidental loss;
• destruction;
• alteration;
• misuse; and
• other unlawful processing.

Security measures may include:

• access controls;
• authentication mechanisms;
• encryption where appropriate;
• monitoring;
• logging;
• network and infrastructure security;
• personnel controls; and
• incident-response procedures.

However, no electronic system or transmission method can be guaranteed to be completely secure.

You are responsible for maintaining the security of your Account credentials and should immediately notify us if you suspect unauthorized access.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

Retention periods may depend on:

• the nature of the information;
• the purpose for which it was collected;
• whether you maintain an active Account;
• transaction and accounting requirements;
• legal obligations;
• fraud and security requirements;
• dispute resolution;
• regulatory requirements; and
• limitation periods applicable to potential claims.

Certain transaction, identity, compliance and financial records may need to be retained after Account closure.

When personal data is no longer required, we will take reasonable steps to delete, anonymize or securely dispose of it, subject to applicable legal requirements.

Subject to applicable law and relevant exceptions, you may have rights relating to your personal data.

These may include the right to:

• request access to personal data we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal data in appropriate circumstances;
• request restriction of processing in appropriate circumstances;
• object to certain processing;
• withdraw consent where processing is based on consent;
• request portability of personal data where applicable;
• object to direct marketing;
• request information about how your personal data is processed; and
• lodge a complaint with the relevant data-protection authority.

These rights are not absolute and may be subject to legal or regulatory exceptions.

For example, we may be required to retain certain information to comply with legal obligations, prevent fraud, maintain transaction records or establish or defend legal claims.

To exercise a data-protection right, contact:

Privacy Team Email: Support@vectamarkets.com

Your request should provide sufficient information for us to understand and process it.

We may need to verify your identity before responding to certain requests in order to protect your personal data from unauthorized disclosure.

We aim to respond to valid requests within the period required by applicable law.

The Platform is not intended for persons who are not legally eligible to use the services.

We do not knowingly collect personal data from children in violation of applicable law.

If you believe that a child has provided personal data to us improperly, please contact us so that we can investigate and take appropriate action.

We may use automated systems or algorithmic tools for purposes such as:

• fraud detection;
• cybersecurity;
• account security;
• transaction monitoring;
• risk assessment;
• abuse prevention; and
• Platform analytics.

Where applicable law grants you rights regarding solely automated decisions that produce legal or similarly significant effects, we will provide applicable safeguards and mechanisms for exercising those rights.

We do not use automated systems to make decisions beyond the purposes for which they are reasonably necessary without appropriate safeguards.

The Platform may contain links to third-party websites or integrate third-party services.

Those third parties may collect and process information under their own privacy policies.

We encourage you to review the privacy policies of third-party services before providing information to them.

VectaMarkets is not responsible for the privacy practices of independent third parties.

When you use a payment method supported by VectaMarkets, the relevant payment provider may independently process personal data.

Such providers may collect information necessary to:

• process payments;
• verify transactions;
• prevent fraud;
• comply with financial-crime requirements;
• resolve payment disputes; and
• provide their services.

Payment providers may have separate privacy policies that apply to their processing activities.

We may use analytics technologies to understand how Users interact with the Platform.

Analytics may help us understand:

• which features are used;
• how Users navigate the Platform;
• technical errors;
• performance;
• traffic sources; and
• general usage patterns.

Where required, we will obtain appropriate consent or provide applicable controls for non-essential analytics technologies.

Cookies and similar technologies may be used for essential Platform functions and, where permitted, analytics, personalization and marketing.

You can configure your browser to reject certain cookies.

However, rejecting essential cookies may prevent certain Platform features from functioning properly.

If VectaMarkets becomes aware of a personal-data breach, we will assess the incident and take reasonable steps to contain, investigate and remediate it.

Where notification is required by applicable law, we will notify the relevant authority and/or affected individuals within the applicable timeframe and in accordance with legal requirements.

You are responsible for ensuring that information you provide to VectaMarkets is accurate and current.

If your personal information changes, you should update your Account where the Platform permits or contact us.

We may take reasonable steps to maintain accurate records.

You may request closure of your VectaMarkets Account.

Closing your Account does not necessarily result in immediate deletion of all personal data.

We may retain information where necessary to:

• comply with legal obligations;
• maintain transaction records;
• prevent fraud;
• resolve disputes;
• enforce our Terms;
• establish or defend legal claims;
• maintain security; or
• satisfy regulatory requirements.

We may update this Privacy Policy from time to time.

When we make material changes, we may provide notice through:

• the Platform;
• email;
• an Account notification; or
• another appropriate communication method.

The “Last Updated” date at the top of this Policy will indicate when it was most recently revised.

Your continued use of the Platform following the effective date of an updated Policy will constitute acknowledgment of the updated Policy to the extent permitted by applicable law.

This Privacy Policy shall be interpreted in accordance with applicable Nigerian law, including applicable provisions of the Nigeria Data Protection Act 2023, together with any other applicable data-protection laws.

Where mandatory data-protection laws of another jurisdiction apply to our processing of your personal data, those mandatory rights and obligations will apply to the extent required by law.

Where applicable, VectaMarkets will cooperate with the relevant Nigerian data-protection regulatory authority and comply with applicable requirements concerning personal-data processing.

Users may have the right to lodge complaints with the competent data-protection authority where they believe their rights have been infringed.

For privacy-related questions, requests or complaints, contact:

Vecta Global Ltd. Trading as: VectaMarkets

Privacy Email: Support@vectamarkets.com General Support: Support@vectamarkets.com

When contacting us about a privacy request, please avoid sending unnecessary sensitive information by email.

By using VectaMarkets, you acknowledge that you have read and understood this Privacy Policy.

Where applicable law requires consent for a particular processing activity, we will seek that consent through an appropriate mechanism.

Nothing in this Privacy Policy limits any rights you may have under applicable data-protection law.