GMTX.EXCHANGE
Privacy Policy

Effective Date: September 13, 2025

MANDATORY NOTICE: GMTX.EXCHANGE (“GMTX,” “we,” “our,” or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, share, and safeguard information across our platform. Use of GMTX constitutes acceptance of this Policy.

1. Scope

This Policy applies to all users, visitors, and Members of GMTX.EXCHANGE and to all services, applications, and communications provided by GMTX, including web, mobile, and API access.

2. Information We Collect

Depending on your relationship with us, we may collect:

• Identification Data: name, date of birth, nationality, government-issued identification numbers, KYC/KYB verification documents.
• Contact Data: address, email, telephone number.
• Financial Data: bank account details, wallet addresses, transaction histories, tax documents where required by law.
• Technical Data: IP addresses, device identifiers, browser type, operating system, access logs, cookies, and analytics data.
• Communications: records of support requests, security alerts, and user feedback.

3. How We Use Information

We process personal data to:

• Provide, maintain, and improve our services;
• Verify identity and satisfy KYC/KYB/AML/CTF and other legal requirements;
• Process transactions and maintain accurate records;
• Detect, prevent, and investigate fraud or unauthorized activity;
• Send important account notices, updates, and regulatory communications;
• Comply with applicable laws, regulations, and court orders.

4. Legal Bases for Processing

Processing is conducted under one or more of the following legal bases: (a) performance of a contract; (b) compliance with legal obligations (including AML/KYC laws); (c) legitimate interests (fraud prevention, platform security, service improvement); and (d) user consent where required by law.

5. Sharing and Disclosure

We may share personal data with:

• Regulatory and law-enforcement authorities, Financial Intelligence Units, or courts when required by law;
• Third-party service providers performing identity verification, secure hosting, analytics, payment processing, or compliance functions;
• Affiliates or successors for operational continuity, subject to equivalent privacy safeguards.

We do not sell personal data for marketing purposes.

6. International Transfers

Data may be transferred to jurisdictions outside your country of residence. Where required, GMTX implements lawful safeguards such as Standard Contractual Clauses, adequacy decisions, or other approved transfer mechanisms.

7. Data Retention

Personal data is retained only as long as necessary for the purposes set forth in this Policy and to meet legal obligations (for example, AML record-keeping generally requires a minimum of five (5) years).

8. Security

We employ layered technical and organizational safeguards, including encryption, access controls, continuous monitoring, and incident-response procedures. Please see the separate Data Security Policy for additional detail.

9. Cookies & Tracking

GMTX may use cookies and similar technologies to enhance user experience, provide analytics, and improve services. You may manage cookie preferences in your browser settings, but disabling cookies may limit functionality.

10. Your Rights

Depending on jurisdiction (including GDPR if applicable), you may have rights to access, correct, erase, restrict, or object to processing of personal data, and to data portability. To exercise these rights, submit a verified request through the secure support channel. Certain requests may be denied where retention is required by law (e.g., AML obligations).

11. Children’s Privacy

GMTX services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us immediately for removal subject to applicable law.

12. Updates

We may update this Privacy Policy to reflect legal, technical, or operational changes. Significant updates will be posted on the GMTX website. Continued use of the platform after updates constitutes acceptance of the revised Policy.

13. Contact

For privacy inquiries or to exercise your rights, please contact GMTX through the secure support channel provided within the user portal.

FINAL NOTICE: Privacy rights coexist with regulatory obligations. Requests for deletion or restriction may be denied where data retention is required for legal compliance, fraud prevention, or security purposes. Any misuse of personal data or confidential information will result in immediate expulsion and potential legal action.