Privacy Policy

Article 1 Purpose for processing personal information

In order to provide services of the platform to Users, KuCoin needs to collect some of your personal information for the following purposes. The personal information collected is not used for purposes other than the following. If the purpose of use is changed, necessary measures, such as separate notification or obtaining separate consent under any applicable laws, will be take.

1. Account Registration and Management

-Identification of users, customer verification (KYC), management of user information, delivery of various notices

-Account termination through non-face-to-face authentication, resetting phone numbers/emails, etc.

2. Provision of Goods or Services

- Confirmation of digital asset trading relationships

- Inheritance and transfer

- Matters related to the overall management of digital asset trading relationships, including setting, maintaining, and terminating services

- Prevention of unauthorized use

- Usage statistics and analysis, provision of new and customized services

- Improvement and upgrade the services of the platform, etc.

3. Event Information Guide

- Providing information for various events and promotions

4. Complaint handling

- Confirmation of the identity of complainants and the contents of complaints

- Contact and notification for fact-finding, notification of processing results

- Remedies for damages and incorrect transfers, etc.

5. AML/CTF and legal investigation

- AML/CTF misconduct investigations

- Law enforcement authorities’ investigation, etc.

*The User has the right to refuse to consent to the collection of personal information by the Platform. The User may not be able to use any of the services the Platform provided if the User refuse to accept the collection of personal information by the platform.

 

Article 2 Designation

For the convenience of wording in this agreement (the “Agreement”), the Platform is referred to as “we”, “us” or “our”. Users of and other visitors to the Platform are referred to as “you”, “your” or “User”. We and you are collectively referred to as “both parties” and as “a/one party” individually.

 

Article 3 Processing and Retention Period of Personal information

1. The Platform shall process and retain personal information within the period of time required by applicable laws for personal information processing and retention or within the period of processing information agreed upon when collecting personal information from users.

2. The period of time for processing and retention of each personal information is as follows:

A. In principle, the personal information will be retained for 2 years after the user deleted its accounts or the accounts have been deactivated due to abuse in order to satisfy any subsequent review of users’ accounts by financial institutions or criminal investigations by relevant authorities. If no such review or investigations occurs within the years, KuCoin will completely delete the personal data.

B. If an investigation is ongoing due to a violation of applicable laws and regulations, the personal information will be stored until the end of the relevant investigation is concluded.

C. If there is an outstanding debt or credit relationship arising out of use of the service, the personal information will be stored until the debt is settled

D. If there is an ongoing legal dispute between the user and the Company, the personal information will be stored until the dispute is officially resolved

 

① When personal information becomes unnecessary due to the passage of the retention period or the accomplishment of the processing purpose, the Company shall promptly destroy such personal information.

② In the case of personal information that must be retained under the law despite the expiration of the retention period for personal information, the Company will move such personal information to a separate database or store it in a different location.

③ The Company securely manages the personal information of a user who has been processed as a dormant user in accordance with the old Personal Information Protection Act. But the personal information of users whose mobile phone identity verification information does not exist among dormant users will be destroyed at the end of six months from the date when the users are converted to dormant users.

④ The personal information for which a reason for destruction has occurred due to the passage of the retention period or the accomplishment of the processing purpose, shall be destroyed upon approval of the personal information protection manager or through automatic deletion by the system.

⑤ The method of personal information destruction is as follows.

1. Personal information stored in electronic form is permanently deleted to prevent playback of the record.

2. Personal information recorded or stored on paper documents is shredded or incinerated.

 

Article 4 Scope of Application

This Agreement shall apply to all Users trading on the KuCoin Global website and on its APP (the “Platform"). Users shall comply with the terms and conditions of this Agreement, subject to and as permitted by any and all laws relating to the protection of personal information and data in the country or region where they are based.

 

Article 5 Invocation

Any code or statutory decree or administrative regulation referred to in this Agreement shall refer to the latest amended version thereof, regardless of whether such amendment is made before or after the signing of this Agreement.

 

Article 6 Headings

The headings used in this Agreement are for convenience only and shall not be used for the purpose of interpreting the terms and conditions of this Agreement. References herein to any statement, term, condition, annex, schedule shall refer to statements, terms, conditions, annexes and schedules hereunder.

 

Article 7 Use of the term "include"

The term “include” used herein shall, under any and all circumstances always have the meaning of “include but not limited to”, unless this Agreement specifies otherwise.

 

Article 8 User Consent and Authorization

The Users acknowledge and understand that, at the point of logging into the Platform, the User will be deemed to have expressed to us their acceptance, consent, undertaking and confirmation of the following, regardless of whether the User has completed their registration on the Platform:

（1）that the User agrees, on a voluntary basis, to disclose personal information to us;

（2）the User will abide by all the terms and conditions of this Agreement;

（3）the User agrees and authorises the Platform to collect the User’s personal information when the User registers with the Platform, logs into the Platform and/or uses the Platform services;

（4）the User agrees to all the terms and conditions of this Agreement and agrees to accept any amendment that may subsequently be made to the Privacy Policy;

（5）the User agrees that any of our branch companies, subsidiary companies, or employees or service providers with whom we have engaged for the provision of the services, will contact the User to request for information or to inform the User in connection with of any product and service that may be of interest to the User (unless the User has indicated that he or she does not wish to receive such information).

 

Article 9 Information Collected

 

The Users agree that the Platform may use cookies to track the Users’ actions in connection with their use of the Platform and may collect and record all information left by Users, including but not limited to their IP address, geographical location and other data. For example: We may use video (including audio) information as identity credentials for P2P merchants and as evidence for P2P order disputes. We may also use facial video (including audio) information for KYC identity verification on third-party platforms.

 

 

Personal data which we may collect include:

 

Category	Type	Purpose of Usage	Usage Scenario
Location information	Approximate location information	Government regulation	When users log in and enter the homepage
Personal information	Name	Identity verification	When users use documents for KYC identity verification
	Date of birth
	Gender
	Nationality
	Address
	Document type and document number
	Race and ethnicity
	Phone number	1. Account creation 2. Identity verification	1. When users sign up for the first time 2. When users logs in again 3. When verifying user identity
	Email address	1. Account creation 2. Identity verification 3. Event promotion	1. When users sign up for the first time 2. When users logs in again 3. When verifying user identity 4. When promoting platform events
	KuCoin account and password	Account creation	When users sign up for the first time
	KuCoin nickname	Account creation	When users set and modify nicknames
	KuCoin avatar	Account creation	When users set and modify avatars
Financial information	Bank account (bank card number, etc.)	1. P2P trading 2. Fast trade 3. Fiat deposit and withdrawal	When adding payment and receipt methods
	Third-party payment account (Alipay, WeChat, etc.)
Trading information	KuCoin order information	Trading function	When users view orders
	KuCoin asset information	Asset management	1. When users view assets 2. When users place orders and make trades
	KuCoin deposit and withdrawal information	Asset management	Users view deposit and withdrawal history
	User wallet address	Deposit and withdrawal function	When adding deposit and withdrawal addresses
Message information	SMS	Authentication	1. When users sign up 2. When users log in 3. When changing the password 4. When setting the trading password 5. When binding and unbinding a mobile phone 6. When binding and unbinding an email 7. When binding 2FA (two-factor authentication) 8. When canceling the account 9. During the identity verification for trading
	Voice message
	Email
	Google verification code
Multimedia information	Photo	1. P2P dispute settlement 2. Customer service 3. Withdrawal function 4. Identity verification	1. When users appeal for P2P orders 2. When users send feedback to customer service 3. When adding wallet addresses 4. When performing KYC identity verification
	Audio	1. P2P dispute settlement 2. When users send feedback to customer service	1. When users appeal for P2P orders 2. When users send feedback to customer service
	PDF file	1. P2P dispute settlementls 2. Fiat withdrawal account verification	1. When users appeal for P2P orders 2. When the user's fiat withdrawal account needs to be verified
	Video	1. P2P dispute settlement 2. When users send feedback to customer service	1. When users appeal for P2P orders 2. When users send feedback to customer service
App activities	App interaction information (page visits, button clicks, etc.)	Product experience enhancement (user activity analysis)	When users use app services
	In-app search history	Show search history	When users search for trading pairs
	List of installed apps	1.Check whether "KuCoin Wallet" is installed 2.Trading security protection 3.Risk control during KYC proces	1.When users click “Withdraw to KuCoin Wallet” on the deposit and withdrawal page 2.When performing P2P trading 3.When user performs KYC
	User-generated content	1. P2P dispute settlement 2. Customer service	1. When users appeal for P2P orders 2. When users send feedback to customer service
App information	App version	Product experience enhancement	When users use app services
	App language
	App package name
	Download channel
	Crash log
	Diagnostic log
	Performance data (CPU, memory, etc.)
Device information	Network operator	1. Trading security protection 2. Product experience enhancement (user activity analysis)	1. When users use app services
	Device brand
	System and version
	Device model
	Screen width and height
	Time zone offset
	Device manufacturer
	Number of cameras
	Device storage
	Device RAM
	System language
	Network type
	SIM card status
	Browser user agent
	CPU name
	CPU instruction set
	Motherboard model
	Display specifications
	Radio firmware version
	Gyroscope data
	IP address
	MAC address
	Fingerprint ID
	Advertising ID
	Android ID
	OAID
	IMEI
	Widevine ID
	GUID
	SSID
iCloud	iCloud Backup	Use iCloud features to back up the user's secret phrases to the cloud.	Secret phrase backup and import

 

 

Article 10 Application and Usage of Information Permission

 

We may call certain application and information permissions from users. Provided is a list of requested permissions and the reason they are required. Users should note that once they agree to the Privacy Policy, the corresponding device permissions will not be granted by default. When key or sensitive device permissions are required, KuCoin will prompt you with a pop-up window to request your consent when you make use of the corresponding function. Once a permission is granted, it may be revoked at any time through your device settings. Refusing to grant device permissions will not affect the normal operation of unrelated functions.

 

App Permissions	Description	Usage Scenario and Purpose
android.permission.INTERNET	Allow app to access network	Allow app to access network
android.permission.ACCESS_NETWORK_STATE	Allow app to access network status	Allow app to access network status
android.permission.ACCESS_WIFI_STATE	Allow apps to access Wi-Fi status	Allow apps to access Wi-Fi status
android.permission.FOREGROUND_SERVICE	Allow app to start foreground service	Allow the market ticker widget to obtain real-time market data
android.permission.RECEIVE_BOOT_COMPLETED	Allow app to receive system broadcasts	Allow WorkManager to trigger background tasks
android.permission.USE_BIOMETRIC	Allow app to use biometric authentication	Allow for the collection of fingerprint data for security verification
android.permission.USE_FINGERPRINT	Allow app to use fingerprint hardware
android.permission.VIBRATE	Allow app to use vibrator	1. Receive offline push notifications and trigger a vibration alert 2. Trigger a vibration alert when performing KYC identity verification 3. Trigger a vibration alert upon clicking an in-app button
android.permission.WAKE_LOCK	Allows preventing processor from going to sleep or screen dimming	1. Ensure that the screen remains on when performing KYC identity verification 2. Prevent the processor from going to sleep when WorkManager triggers a background task
android.permission.READ_PHONE_STATE	Allow read-only access to phone status	1. Risk control environment determination function, collecting device information (IMEI), network information and location information, etc. 2. Performance and stability analysis, collecting device information (IMEI), network information and location information, etc.
android.permission.ACCESS_COARSE_LOCATION	Allow app to access approximate location	Collect GPS data when entering the KuCoin homepage (as required by government regulations)
android.permission.CAMERA	Allow app to access the camera device	1. Collect facial data when performing KYC identity verification 2. Collect QR code data when authorizing login through scanning QR code
android.permission.POST_NOTIFICATIONS	Allow app to send notifications	1. Activate the system notification bar when receiving push notifications from Aurora
android.permission.READ_EXTERNAL_STORAGE (Below Android 13)	Allows app to read data from external storage	1. Image selection, such as: KYC identity verification, wallet address extraction, etc. 2. Collect photos and video (including audio) information for P2P appeals 3. Collect video (including audio) information as identity credentials for P2P merchants 4. Collect facial video (including audio) information for KYC identity verification on third-party platforms 5. Screenshot sharing to save photo data 6. Screenshot detection Risk warning
android.permission.WRITE_EXTERNAL_STORAGE (Below Android 13)	Allow app to write to external storage
android.permission.READ_MEDIA_IMAGES (Android 13 and above)	Allows app to read image files from external storage
android.permission.READ_MEDIA_VIDEO (Android 13 and above)	Allows app to read video files from external storage
android.permission.SYSTEM_ALERT_WINDOW	Allows app to create a window and display it above all other apps	Floating window for market monitoring
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.WRITE_SETTINGS	Allows app to read or write system settings	Save device ID to system settings for fingerprint risk control
Clipboard	Allow app to access clipboard contents	1. Collect the verification code from clipboard when performing identity verification 2. Collect the address from clipboard when adding a wallet address 3. Collect the red packet code from clipboard when receiving a red packet
freemme.permission.msa	Allow obtaining device identifier	Collect device identifiers for fingerprint risk control
com.asus.msa.SupplementaryDID.ACCESS (ASUS Devices)	Allow obtaining device identifier information (OAID)	Collect OAID for fingerprint risk control
com.google.android.c2dm.permission.RECEIVE	Allow creation of IID tokens	Older versions of Google Play services require the creation of IID tokens for FCM push notifications
com.google.android.gms.permission.AD_ID	Allow access to advertising ID	1. Collect advertising ID for FCM push notifications 2. Use of appsflyer traffic attribution analysis
com.kubi.kucoin.permission.JPUSH_MESSAGE	Allow receiving push notifications	Aurora push notifications
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE	Allow obtaining installation referrer information	Firebase is used to collect statistics on app performance, such as crash information, etc.
com.kubi.kucoin.permission.liantian.RECEIVE	Allow checking whether the license is valid	When starting the app
com.kubi.kucoin.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION	Broadcast receivers registered by an application are not exported and are not visible to other applications on the device.	When using the app
android.permission.READ_APP_BADGE com.sec.android.provider.badge.permission.WRITE com.htc.launcher.permission.READ_SETTINGS com.htc.launcher.permission.UPDATE_SHORTCUT com.sonyericsson.home.permission.BROADCAST_BADGE com.sonymobile.home.permission.PROVIDER_INSERT_BADGE com.anddoes.launcher.permission.UPDATE_COUNT com.majeur.launcher.permission.UPDATE_BADGE com.huawei.android.launcher.permission.CHANGE_BADGE com.huawei.android.launcher.permission.READ_SETTINGS com.huawei.android.launcher.permission.WRITE_SETTINGS com.oppo.launcher.permission.READ_SETTINGS com.oppo.launcher.permission.WRITE_SETTINGS me.everything.badger.permission.BADGE_COUNT_READ me.everything.badger.permission.BADGE_COUNT_WRITE	Allow modifying the app's icon	The desktop icon displays a red dot count when receiving a new message
android.permission.ACCESS_ADSERVICES_AD_ID	This permission allows the app to obtain the device's advertising identifier through Google Play services.	When use google ad service
android.permission.ACCESS_ADSERVICES_ATTRIBUTION	This permission allows the app to access data about the effectiveness of advertising campaigns.	When use google ad service

 

App Permissions	Description	Usage Scenario and Purpose
Location service	Location service - approximate location	Risk control
Photo	Photo	Identity verification, deposit and withdrawal, scan QR code
Microphone	Microphone recording	Payment through Forter
Camera	Camera	Identity verification, deposit and withdrawal, scan QR code
Face ID	Face Verification	Log in
Network	Network permissions (only for national banks)	First-time network access for domestic devices
Push notification	Push notification permissions	Push notifications
IDFA	Device unique identifier	Data reporting from third-party SDKs like Firebase
Clipboard	Clipboard	1. Collect the verification code from clipboard when performing identity verification 2. Collect the address from clipboard when adding a wallet address 3. Collect the red packet code from clipboard when receiving a red packet

Users may opt to disable some or all requested permissions requested by the app through device settings. The display and configuration of permissions may differ depending on the device. If the corresponding function cannot be found, users may contact the device/system manufacturer for assistance.

 

Article 11 Supply of Information.

If Users voluntarily use the services provided by the Platform, they will be required to fill in and/or provide the following two categories of information in accordance with the requirements of KuCoin:

（1）Identity Information: this category of the User information, which may help the Platform verify whether the User is eligible to register on the Platform, includes, but is not limited to: the User's full name, registered address, postal address, official proof of identity documents and the document numbers, as well as all other information that may assist the Platform in verifying the User’s identity (hereinafter collectively referred to as "Identity Information");

（2）Service Information: this category of User information helps the Platform to contact the User and to provide a smooth service experience It includes, but is not limited to, the User’s telephone number, fax number, valid email address, postal address, and debit card information and/or other account information (hereinafter collectively referred to as "Service Information").

 

Article 12 Changes in the Method of Information Collection.

When a User uses the Platform, the Platform may collect additional necessary information by an email box that is exclusively owned by the Platform and released to the public via the Platform or by any other method that is deemed as in compliance with relevant laws and regulations, so as to improve the functionality of the Platform and enhance the Users' experience of using the Platform services and the security thereof, or as is required by any order of a court, any applicable law or regulation, or any other competent government agency.

 

Article 13 Third-party Websites.

If a User visits any link on this APP that leads to a third-party website or to a third-party partner’s website, the User agrees to and shall comply with the separate and independent privacy policies of such third-party websites. The User understands and acknowledges that the Platform is not responsible for the content or activities of such third-party websites or partners.

 

These sources may include:

 

(1) Our KuCoin Family of Companies: Our “family of companies” is the group of companies related to us by common control or ownership (“Affiliates”). In accordance with applicable law, we may obtain information about you from our Affiliates as a normal part of conducting business, if you link your various KuCoin accounts (e.g., KuCoin Wallet account or KuCoin Commerce account in order to convert cryptocurrency into fiat and make withdrawals into your bank account), so that we may offer our Affiliates’ Services to you.

 

(2) Public Databases, Credit Bureaus & ID Verification Partners: We obtain information about you from public databases and ID verification partners for purposes of verifying your identity in accordance with applicable law. ID verification partners like World-Check use a combination of government records and publicly available information about you to verify your identity. Such information may include your name, address, job role, public employment profile, credit history, status on any sanctions lists maintained by public authorities, and other relevant data. We obtain such information to comply with our legal obligations, such as anti-money laundering laws. In some cases, we may process additional data about you to assess risk and ensure our Services are not used fraudulently or for other illicit activities. In such instances, processing is necessary for us to continue to perform our contractual obligations with you and others.

 

(3) Blockchain Data: We may analyze public blockchain data to ensure parties utilizing our Services are not engaged in illegal or prohibited activity under our Terms, and to analyze transaction trends for research and development purposes.

 

(4) Joint Marketing Partners, Resellers & Third Parties: For example, unless prohibited by applicable law, joint marketing partners, resellers or third party service providers may share information about you with us so that we can better understand which of our Services may interest you.

 

(5) Advertising Networks & Analytics Providers: We work with these providers to provide us with de-identified information about how you found our Sites/APP and how you interact with the Sites/APP and Services. This information may be collected prior to account creation.

 

Article 14 Installation of Cookies.

When a User visits the Platform, the Platform will use Google Stats via Cookies to record the Platform’s performance and check the effectiveness of online advertising. Cookies are a small amount of data that is sent to the User’s browser and stored in the User’s computer hard drive. Only when the User uses his/her computer to access the Platform can the Cookies be sent to the User’s computer hard drive.

 

Article 15 Function of Cookies.

Cookies are frequently used to record the habits and preferences of visitors when they browse various items on the Platform. Cookies collect anonymous collective statistics which do not contain personal data. Cookies cannot be used to obtain data from the User’ hard drive, the User’s email address or personal data; they can enable the Platform or a service provider’s system to recognize the User’s web browser as well as capture and remember information.

 

Article 16 Disabling Cookies.

Most browsers are preset to accept Cookies and Users can choose to set their web browsers to reject Cookies or to notify Users upon the installation of Cookies. Users should be aware that they may be unable to start or use certain features of the Platform if they opt to disable Cookies.

 

Article 17 Information Disclosure to Third Parties.

The Platform does not sell, trade, or otherwise transfer information or allow any other party to collect or use any information from our Platform. However, this does not involve the following parties and does not include the following information: the Platform's affiliates, trusted third parties who help the Platform operate the Platform's websites, manage the Platform's business or provide services to Users, provided that these parties agree to keep such information confidential. If the Platform discloses information to the above-mentioned parties, such information disclosure shall in accordance with any applicable laws, regulations, rules or by any order of any court or other competent authorities, or necessary for executing the strategy of the Platform and ensuring the proper functioning of the Platform, or as may be necessary for the related parties to provide services, or for the protection of the rights, property or safety of us or other persons. Any such information disclosure will not be used by any of the above-mentioned parties for marketing, advertising or any other purpose that has not been agreed on by all the parties concerned.

 

For example, we may use AppsFlyer to measure the advertising performance, detect and prevent fraudulent activity on your account in real time. Information shared with AppsFlyer is treated by AppsFlyer in accordance with its Privacy Policy, available at https://www.appsflyer.com/legal/services-privacy-policy/ .

 

(1) SDK Name :Aurora Push SDK

Purpose of Usage: Used to push notifications to user devices

Usage Scenario: Push notifications

Type: Device identifier (IMEI, IDFA, Android ID, GAID, MAC, OAID, IMSI, MEID, UAID, etc.)、Device hardware information (device model, device screen resolution, device hardware manufacturer, device product name, etc.)、Operating system information (operating system version, system name, system language, etc.)、Network information (network type, operator name, base station information, IP address, Wi-Fi information, SSID, BSSID)、Push information log (used for you to query push service records and understand the delivery status of push information)、Location information (used to provide push notifications targeted at specific regional groups)、Software list information (software list and software running list information)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.jiguang.cn/en

Privacy policy： https://www.jiguang.cn/en/license/privacy

 

(2) SDK Name : Sensors Data analysis SDK

Purpose of Usage: User behavior analysis

Usage Scenario: When using the service

Type: Device information (IMEI, Android ID, OAID, IDFA, IDFV, UUID, IMSI, MAC address, browser type, telecom operator, device brand)、Log information (service usage, IP address, language used, time of access)、Location information (location information resolved by IP address, GPS location information)、Unique application number (app unique identifier, app name, and app version number)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.sensorsdata.com/en/

Privacy policy: https://manual.sensorsdata.cn/sa/latest/zh_cn/tech_sdk_client_privacy_policy_english-112754777.html

 

(3) SDK Name: Face recognition SDK

Purpose of Usage: User behavior analysis

Usage Scenario: When using the service

Type: Personal information (name, ID number, ID photo)、Device information (IMEI, IDFA, IDFV, operator information, Wi-Fi status, Wi-Fi parameters, Wi-Fi list, system settings, system properties, device model, operating system, device application installation list, running program list) 、Location information (IP address analysis to obtain approximate location information) 、Log information (device information and IP address) 、Biometric data (facial video (including audio) information, facial images)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://intl.cloud.baidu.com/
Privacy policy: https://ai.baidu.com/ai-doc/REFERENCE/Vkdygjliz

 

(4) SDK Name: Bugly

Purpose of Usage: Performance and stability analysis

Usage Scenario: When using the service

Type: Device information (device model, operating system and version, Wi-Fi status, CPU attributes, remaining memory space, disk space/remaining disk space, phone status during runtime, IDFV, jailbreak status, region code)、App information (app version, crash log, diagnostic log, performance log)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://bugly.qq.com/v2/index
Privacy policy: https://privacy.qq.com/document/preview/fc748b3d96224fdb825ea79e132c1a56

 

(5) SDK Name: Firebase

Purpose of Usage: Performance, stability and user behavior analysis

Usage Scenario: When using the service

Type: Device information (device model, operating system and version, mobile advertising ID, IDFV/Android ID, Firebase installation ID, Analyze application instance ID, IP address)、App information (app version, crash log, diagnostic log, performance log)、App activity (app interaction information, user-generated content)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 14 months after deleting the Firebase installation ID

Official website: https://firebase.google.com/
Privacy policy: https://firebase.google.com/support/privacy

 

(6) SDK Name: AppsFlyer

Purpose of Usage: Attribution and marketing analytics services

Usage Scenario: When using the service

Type: Device information (operating system, model, language information, network operator, network type, IP address, Android ID, ADID, IDFA, IMEI)、Location information、Advertising Source Details、Facebook (Meta) AID

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 2 years

Official website: https://appsflyer.com/
Privacy policy: https://appsflyer.com/legal/services-privacy-policy/

 

(7) SDK Name: Jumio

Purpose of Usage: Identity verification and fraud prevention

Usage Scenario: When performing KYC identity verification

Type: Personal information (name, address, email, ID card, driver's license number, passport number)、Device information (IP address, location information, operating system, browser type, browser settings, website activity information, camera name, Android ID)、Financial information (credit card, debit card number, CVV, expiration date, transaction information)、Images or recordings (photos, videos, audio recordings)、Biometric data (Face ID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 3 years

Official website: https://www.jumio.com/
Privacy policy: https://www.jumio.com/privacy-center/privacy-notices/online-services-notice/

 

(8) SDK Name: ADVANCE.AI

Purpose of Usage: Identity verification and fraud prevention

Usage Scenario: When performing KYC identity verification

Type: Personal information (name, document number, date of birth, nationality, document type, issuing country, expiration date, document image, video-related image metadata)、Device information (IP address, device identifier, operating system, browser type, browser settings, website activity information)、Application activity information (software version, upload time)、Biometric data (Face ID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.advance.ai/
Privacy policy: https://info.advance.ai/privacy-notice

 

(9) SDK Name: Ada

Purpose of Usage: Customer feedback

Usage Scenario: When users contact customer service

Type: Personal information (name, email address, phone number provided in chat)、Message information (voice collected by chat, photos, videos or recordings of video chat)、Device information (IP address, browser type, browser language, operating system, state or country, device ID)、App interaction information (number of clicks, pages viewed, browsing time)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://ada.cx/
Privacy policy: https://www.ada.cx/legal-resources/privacy-policy

 

(10) SDK Name: hCaptcha

Purpose of Usage: Preventing bot

Usage Scenario:

(a) When users log in and verify that they are not a robot

(b) When users sign up and verify that they are not a robot

(c) When users click forgot password and verify that they are not a robot

(d) When sending verification codes

Type: Device information (hardware serial number, IP address, browser type, network provider, platform type, device type, operating system, date and time stamp access)、App interaction information (mouse movement, scroll position, key events, touch events)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.hcaptcha.com
Privacy policy: https://www.hcaptcha.com/privacy

 

(11) SDK Name: Telegram Login Widget

Purpose of Usage: Authorize sign-up and login through Telegram third-party accounts

Usage Scenario:

(a) Link KuCoin account with Telegram account to authorize sign-up

(b) Link KuCoin account with Telegram account to authorize login

Type: Personal information (Telegram account identifier, username, first name, last name, profile picture)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://telegram.org
Privacy policy: https://telegram.org/privacy

 

(12) SDK Name: Chargebacks911

Purpose of Usage: Prevent disputes over fiat orders

Usage Scenario: When users complete fiat trading

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://chargebacks911.com/
Privacy policy: https://chargebacks911.com/privacy-shield-policy/

 

(13) SDK Name: TMXProfiling

Purpose of Usage: Buy cryptocurrency

Usage Scenario: Prevent disputes over fiat orders

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 24 hours

Official website: https://www.cybersource.com/
Privacy policy: https://usa.visa.com/legal/privacy-policy.html

 

(14) SDK Name: Forter

Purpose of Usage: Prevent disputes over fiat orders

Usage Scenario: When users buy cryptocurrency with a bank card

Type: Personal information (name, country, city, phone number, email)、Transaction information (bank account number, order ID, order date, transaction status, total order amount, fiat type, cryptocurrency type, cryptocurrency price, cryptocurrency quantity)、Device information (device identifier, IP address),Application activity information (hardware and software attributes (camera), installation list, running services list), network information (Wi-Fi information, carrier information)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.forter.com/
Privacy policy: https://www.forter.com/privacy-policy/

 

(15) SDK Name: Plaid BV

Purpose of Usage: Fiat deposit

Usage Scenario: When users make deposits with fiat

Type: Transaction information (transaction amount, currency, bank)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://plaid.com/
Privacy policy: https://plaid.com/legal/#end-user-privacy-policy

 

(16) SDK Name: Revolut

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When users perform fast trade

Type: Device data(OS, browser type, browser settings, website activity formation)、Account and personal information(name, email, phone, UID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.revolut.com/
Privacy policy: https://www.revolut.com/privacy-policy/

 

(17) SDK Name: Banxa

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (wallet address, memo, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://banxa.com/
Privacy policy: https://banxa.com/wp-content/uploads/2023/11/Privacy-and-Cookies-Policy-21-November-2023-Banxa.pdf

 

(18) SDK Name: Simplex

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (first name, last name, gender, ID type, ID number, date of birth, country, state, city, country of residence, address, zip code, front photo of ID, back photo of ID, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.simplex.com/
Privacy policy: https://www.simplex.com/privacy-policy

 

(19) SDK Name: BTC Direct

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (wallet address, user ID) - - KYC identity verification may be required separately on the third-party side. Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency, payment method)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://btcdirect.eu/
Privacy policy: https://btcdirect.eu/en-gb/privacy-policy

 

(20) SDK Name: Legend Trading

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (email, wallet address, memo, user ID) - - KYC identity verification may be required separately on the third-party side. Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency, cryptocurrency price, cryptocurrency quantity)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://legendtrading.com
Privacy policy: https://legendtrading.com/policy

 

(21) SDK Name: CoinTR

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (email, mobile phone number, country, ID type, ID number, date of birth, first name, last name, front photo of ID, back photo of ID, photo of holding ID, face verification photo, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat currency, fiat amount, cryptocurrency type, cryptocurrency price, cryptocurrency quantity, KuCoin trading fee)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://cointr.com
Privacy policy: https://support.cointr.com/hc/tr/articles/5538328908943

 

(22) SDK Name: Treasura

Purpose of Usage: Buy cryptocurrency

Usage Scenario: When user buy cryptocurrency from a third party

Type: Personal information (first name, last name, wallet address, user ID)、Transaction information (order ID, order date, transaction status, fiat type, fiat amount, cryptocurrency, cryptocurrency price, cryptocurrency quantity)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.trytreasura.com
Privacy policy: https://trytreasura.com/privacy-policy

 

(23) SDK Name: Easy Euro

Purpose of Usage: Fiat deposit

Usage Scenario: When users make deposits with fiat

Type: Personal Info（name, english name, nationality, email, phone, date of birth, identity type, identity number, identity expiration date, country, city, address）

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://easyeuro.eu
Privacy policy: https://easyeuro.eu/company/legal

 

(24) SDK Name: Onramp Money

Purpose of Usage: Buy crypto（thirdparty）

Usage Scenario: When users buy crypto with thirdparty

Type: Wallet address

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://onramp.money/
Privacy policy: https://onramp.money/assets/privacyPolicy.pdf

 

(25) SDK Name: Sumsub SDK

Purpose of Usage: Remote Identity verification and fraud prevention

Usage Scenario: When performing KYC identity verification, KYB and KYT

Type: Personal information (full name, gender, personal identification code or number, date of birth, legal capacity, nationality, and citizenship), ID document data (document type, issuing country, ID number, expiry date, MRZ, information embedded into document barcodes (may vary depending on the document), security features),

Device information (IP address, device identifier, operating system, browser type, browser settings, website activity information), Application activity information (software and hardware attributes (camera and device name); Applicant ID),

Geolocation data (IP address and domain name; general geographic location (e.g., city, country) from Data Subject’s device), Biometric data (Face ID)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: 5 yerars

Official website: https://sumsub.com/
Privacy policy: https://sumsub.com/privacy-notice-website/

 

(26) SDK Name: Nuvei

Purpose of Usage: eur deposit

Usage Scenario: When users make eur deposit

Type: IBAN,name,ip,email,country

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.nuvei.com/
Privacy policy: https://www.nuvei.com/service-pages/accounts-privacy-policy

 

(27) SDK Name: Shumei SDK

Purpose of Usage: Data statistics and Anti-cheating

Usage Scenario: When sending business network requests

Type: 1) Basic equipment information, including equipment brand, equipment manufacturer, equipment model number, equipment name, equipment system type and version, equipment basic configuration, equipment basic settings, equipment environment

(2) Device identification information,Android ID, IDFV (Identifier For Vendor), IDFA (Identity for Advertisers), OAID (Open Anonymous Device Identifier)

(3) Device network information, including network access form, wireless router identification (BSSID, SSID) and IP address, WIFI list, network operator information, network base station information, network connection status, MAC address

(4) Device application information, including SDK host application package name and version number

(5) Read external storage, as well as some sandbox file information and retrieve the list of running services to identify device risk control

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://help.ishumei.com/
Privacy policy: https://help.ishumei.com/docs/tw/sdk/guide/developDoc

 

(28) SDK Name: ZEN

Purpose of Usage: Fast trade

Usage Scenario: When users buy crypto with blik

Type: ip,email

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.zen.com/
Privacy policy: https://www.zen.com/terms/mobile/zen_privacy_policy.html

 

(29) SDK Name: Google Drive

Purpose of Usage: To back up wallet secret phrases to Google Drive

Usage Scenario: When user backup wallet secret phrases

Type: wallet secret phrases

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://www.google.com/drive
Privacy policy: https://policies.google.com/privacy

 

(30) SDK Name: Google Authentication

Purpose of Usage: To authorize user’s Google account for backing up wallet secret phrases

Usage Scenario: When user backup wallet secret phrases

Type: Personal information(Passwords、Email addresses、Phone numbers、User agents), Device information(IP addresses)

Transfer Method: Data is transmitted over the network

Retention and Usage Period: Firebase Authentication keeps logged IP addresses for a few weeks. It retains other authentication information until the Firebase customer initiates deletion of the associated user, after which data is removed from live and backup systems within 180 days.

Official website: https://developers.google.com/identity
Privacy policy: https://policies.google.com/privacy

 

(31) SDK Name: iCloud

Purpose of Usage: Use iCloud features to back up the user's secret phrases to the cloud.

Usage Scenario: When user backup or import wallet secret phrases

Type: Personal information(Passwords、Email addresses、Phone numbers、User agents), Device information(IP addresses),Secret phrase

Transfer Method: Data is transmitted over the network

Retention and Usage Period: End users’ personal information is retained only for the minimum period necessary to achieve the purpose

Official website: https://developer-mdn.apple.com/cn/icloud/
Privacy policy: https://www.apple.com/legal/privacy/en-ww/

 

Article 18 Protection of Personal Data.

The Platform adopts appropriate physical, electronic, management and technical measures to protect and safeguard the security of the Users' personal data. The Platform will, to the greatest extent possible, ensure that any personal data collected through the Platform shall be free from being subject to nuisance by any third party unrelated to us. The security measures that the Platform may take include but are not limited to:

（1）Physical measures: records of Users' personal information will be stored in an appropriately secure location.

（2）Electronic measures: computer data containing Users' personal information will be stored in computer systems and storage medias that are subject to strict login restrictions.

（3）Management measures: only staff members duly authorized by the Platform may access the Users' personal data and such staff members shall comply with the Platform’s internal code concerning personal data confidentiality.

（4）Technical measures: encryption techniques such as Secure Socket Layer Encryption may be used to transmit Users' personal data.

（5）Other measures: the Platform’s network servers are protected by a proper "firewall".

 

Article 19 Deletion of personal information.

1. When personal information becomes unnecessary due to the passage of the retention period or the accomplishment of the processing purpose, the Platform shall promptly destroy such personal information.

2. The procedure of personal information destruction is as follows:

A. Once the User has deleted their accounts and not to use any of the services provided by the Platform, the Platform will process the accounts as dormant User and securely manages the personal information of such User in a separate database.

B. Personal information of dormant users will enter the data retention period as set out in Article 3 of the Privacy Policy.

C. The personal information will be destroyed through automatic deletion by the system after the retention period.

3. The method of personal information destruction is as follows:

A. Personal information stored in electronic form is permanently deleted to prevent playback of the record.

B. Personal information recorded or stored on paper documents is shredded or incinerated.

 

Article 20 Your Rights.

You have the rights to:

(1) Request information in relation to the collection and use of your Personal Information: This enables you to be informed at all times about the purposes for processing your Personal Information.

(2) Request access to your Personal Information: This enables you to receive a copy of the Personal Information we hold about you and to check that we are lawfully processing it.

(3) Request correction of the Personal Information that we hold about you: This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

(4) Request erasure of your Personal Information: This enables you to ask us to delete or remove Personal Information where there is no good reason for us continuing to process it, if we have processed your information unlawfully, or where we are required to erase your personal data to comply with local law. We may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

(5) Object to processing of your Personal Information: Where we are relying on a legitimate interest (or those of a third party) and you want to object to processing. In some cases, we may demonstrate that we have legitimate grounds to process your information which can override your objection.

(6) Request to stop direct marketing: Where we are processing your personal data for direct marketing purposes, you have the right to notify us in writing requesting that we cease or do not begin processing your Personal Information for direct marketing purposes.

(7) Request the transfer of your Personal Information to you or to a third party: We will provide to you, or a third party you have chosen (where technically feasible), your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

(8) Withdraw consent at any time where we are relying on consent to process your Personal Information: You may withdraw your consent for our processing of your Personal Information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide you with continued access to the Services.

 

Article 21 Reporting of Flaws

If any User becomes aware of any security flaw in the Platform, the User should contact the Platform through the service email promptly so that the Platform can take appropriate measures to address any such flaw as soon as possible.

 

Article 22 Chief Privacy Officer

1. The Platform values the protection of customers’ personal information highly and does its best to ensure that their personal information is not damaged, compromised or leaked. However, the Platform shall not be responsible for the information damaged by unexpected accidents that arise from basic dangers inherent at networks and all kinds of disputes that arise from postings made by visitors to the website, even though the Platform has taken technological security measures.

2. The Platform’s customer support center offers swift and sincere replies to customers’ inquiries about the protection of their personal information. In addition, customers who wish to contact the chief privacy officer at the Company may contact him/her by below e-mail. We will answer your inquiries on the protection of personal information swiftly and sincerely.

 

Chief Privacy Officer

Name: Alexis Niu

email: DataProtection@kucoin.com

 

Article 23 Exemption.

Despite the above-mentioned technical and security measures, the Platform cannot guarantee that the information transmitted via the Internet is absolutely safe, so the Platform does not provide any guarantees with respect to the security of the personal information that the Users provide to the Platform; and the Platform may not be held liable for any loss or damage arising from or caused by any event that may occur in connection with unauthorized access to the Users’ personal information.

 

Article 24 Amendment of this Agreement.

The Platform reserves the right to modify this Agreement at any time. The Platform will inform the Users of the amendments made to the Privacy Policy by releasing updates thereof, publishing the effective date of new versions thereof and highlighting the amendments thereto. Sometimes, but not always, the Platform may issue a notice to Users to inform them of any amendments made to the Privacy Policy. Users shall regularly review the Privacy Policy and focus on amendments thereto, if any; and if the Users do not agree to any such amendments, the Users shall promptly stop accessing this Website. Whenever an updated version of this Privacy Policy is released, the User’s continued access to and use of this Website shall demonstrate the User’s agreement to the updated version of the Privacy Policy.

 

Article 25 Publication of Announcements.

The Platform publishes announcements and information exclusively via the use of valid and up-to-date contact information provided to this Website or by posting announcements on the Platform. Therefore, the Platform shall not be held liable for any loss arising from any User’s trust in any information that is obtained in any manner other than the above-mentioned means.