PRIVACY

Privacy Policy

Last updated: August 1, 2026

1. Information We Collect

During registration and use, we collect your email, nickname, password hash, phone verification info, and member type. For KRW-deposit members, we additionally collect the account holder name, bank name, and an encrypted account number. We may also collect access IP, device info, order and trade records, deposit/withdrawal records, and support inquiries.

2. Purpose of Use

Collected information is used for account creation, login, security authentication, trade processing, wallet balance management, customer support, fraud prevention, legal compliance, and service quality improvement.

3. Retention Period

Account information is retained until account closure or service termination. Records needed for legal compliance and dispute resolution, such as trade, deposit/withdrawal, and security logs, may be retained for a set period per applicable standards.

4. Protective Measures

BITDUCK applies technical and administrative safeguards including one-way password hashing, access restriction, auth token verification, admin activity logs, and abnormal request throttling. KRW account numbers are stored encrypted with a separate encryption key.

5. Third-Party Disclosure

We do not arbitrarily disclose personal information to third parties, except where required by law, with user consent, or as necessary for payment, deposit/withdrawal, identity verification, or support processing.

6. User Rights

Users may request to view, correct, delete, or suspend processing of their personal information. However, for transaction safety and legal compliance, some records may not be deleted immediately.

7. Contact

Please submit privacy-related requests through Support.