Privacy Policy

Last updated: January 2026

Coinbuyz is committed to protecting the privacy, confidentiality, and security of personal data provided by users who access or use the Coinbuyz platform. This Privacy Policy explains how Coinbuyz collects, processes, stores, shares, and safeguards personal information in accordance with applicable Indian laws, including the Prevention of Money Laundering Act, 2002 (PMLA), the Digital Personal Data Protection Act, 2023 (DPDP Act), and other relevant legal and regulatory requirements.

By registering for an account or using the Coinbuyz platform, users acknowledge that they have read, understood, and consented to the collection and processing of their personal data as described in this Privacy Policy.

Information Collected

Coinbuyz collects personal and transactional information necessary to provide services, comply with legal obligations, and maintain platform security. This information may include:

Full name, date of birth, nationality, and residential address
Email address, mobile number, and communication details
Government-issued identification documents (PAN, Aadhaar, passport)
Biometric or liveness verification data where legally permitted
Bank account details for fiat transactions
Transaction history, trading activity, and wallet addresses
IP addresses, device identifiers, browser data, and usage logs

Purpose of Processing

Coinbuyz processes personal data for legitimate and lawful purposes, including:

  • Account creation, administration, and authentication
  • Identity verification and customer due diligence
  • AML, CTF, and sanctions screening
  • Transaction monitoring and fraud detection
  • Regulatory reporting to FIU-IND and other competent authorities
  • Customer support and dispute resolution
  • Platform security, system integrity, and performance improvement

Coinbuyz does not sell or rent personal data to third parties for marketing or advertising purposes.

Data Sharing and Disclosure

Coinbuyz may share personal data with trusted third-party service providers, such as:

  • Identity verification vendors
  • Payment processors
  • Cloud service providers
  • Compliance technology partners

All such parties are subject to contractual confidentiality and data protection obligations. Personal data may also be disclosed to regulatory authorities, law enforcement agencies, or courts where required by law, including mandatory reporting to FIU-IND under PMLA.

Data Security and Retention

Coinbuyz implements appropriate technical and organizational safeguards, including:

Encryption of data in transit and at rest
Role-based access controls
Secure infrastructure
Continuous monitoring

User data is retained only for as long as necessary to fulfill legal, regulatory, and operational requirements. Certain records may be retained beyond account closure where required under PMLA or other applicable laws.

User Rights

Subject to legal limitations, users may request access to, correction of, or deletion of their personal data. Requests are processed in accordance with applicable data protection laws and regulatory retention obligations.