OldplutoX
OldplutoX
Get Started
Compliance & Privacy

Privacy Agreement

Last updated: July 27, 2026

At OldplutoX, we are fully committed to protecting the privacy, records, and identities of our users. This Privacy Policy describes how we collect, process, secure, and share your personal details when you interact with our exchange services, wallet interfaces, and fiat transfer portals.

By creating an account or accessing the OldplutoX application, you consent to the operations described in this agreement. If you do not agree with these operations, please terminate use of our portals immediately.

1. Information We Collect

In order to provide secure wallet and fiat transfer corridors, we are legally required to verify customer identities. We collect the following groups of records:

  • Identity Verification Data (KYC): Full legal name, date of birth, nationality, residential address, email, phone number, and government-issued identifier documents (e.g., BVN, KRA PIN, Ghana Card, Passport, National ID).
  • Financial Transaction Records: Transaction histories, wallet addresses, connected bank accounts, mobile money numbers, deposit channels, swap operations, and remittance routes.
  • Technical Operations Data: IP address, device specifications, operating system, geolocation, browser specifications, and connection log histories.

2. How We Use Your Information

We process collected information based on compliance requirements and primary service execution parameters:

Data Type Primary Purpose Legal Ground
KYC Records Customer identity verification and compliance audits. AML Compliance laws
Transaction Details Settling fiat deposits, cross-border payouts, and cryptocurrency swaps. Contract execution
Device IP logs Preventing double-spends, identity theft, and coordinate attacks. Legitimate Security Interest

3. Data Security & Storage

OldplutoX implements institutional banking security layers to protect customer records.

Your financial data is encrypted in transit using Transport Layer Security (TLS 1.3) and at rest using Advanced Encryption Standard (AES-256). Cryptocurrency holdings are guarded under multi-signature offline cold storage, isolated from external web queries. Personal KYC documents are hashed and stored in database clusters with restricted access permissions.

4. Third-Party Sharing

We do not sell, rent, or lease your personal records to marketing companies.

We only share information with third parties in the following scenarios:

  • Fintech & Banking Partners: Local bank clearing networks and Mobile Money operators (M-Pesa, MTN MoMo, Orange) to execute deposits and withdrawals.
  • Compliance Auditors: Authorized KYC verification databases to validate document integrity.
  • Law Enforcement: When legally compelled under statutory obligations, court warrants, or valid anti-terror finance investigations.

5. Your Legal Rights

Depending on your regional jurisdiction (such as Nigeria's NDPR, South Africa's POPIA, or Kenya's Data Protection Act), you hold specific rights regarding your records:

  • Right of Access: Request a copy of all personal records we store.
  • Right of Correction: Edit incorrect addresses, phone numbers, or bank verification credentials.
  • Right to Deletion: Request closure of account and removal of records, subject to regulatory retention limits (compliance requires keeping financial records for up to 5 years).
  • Right to Restrict Processing: Request suspension of data operations in cases of record disputes.