1 Introduction & Our Commitment

At BD Broker, the protection of your personal and financial data is not merely a regulatory obligation — it is a fundamental principle of how we operate. We are fully committed to transparency, data security, and compliance with all applicable privacy legislation, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable financial privacy laws (GLBA).

This Privacy Policy explains precisely what information we collect, how we use and protect it, with whom we share it, and what rights you hold in relation to your personal data.

2 Information We Collect

Personal & Identity Information: Full legal name, date of birth, government-issued identification documents, residential address, email address, and telephone number — collected for account registration and mandatory Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.

Financial Information: Account balances, transaction histories, deposit and withdrawal records, and investment preferences — collected to manage your account and execute services.

Technical & Usage Data: IP address, device identifiers, browser type, operating system, session logs, and platform usage patterns — collected automatically via cookies and similar technologies to ensure platform functionality, security monitoring, and service improvement.

Third-Party Sources: We may receive identity verification data from regulated third-party verification providers and credit reference agencies as permitted by applicable law.

3 How We Use Your Information

• To establish, operate, and maintain your brokerage account.
• To process deposits, withdrawals, and trade transactions accurately and securely.
• To fulfil our legal and regulatory obligations, including KYC, AML, and tax reporting requirements.
• To detect, investigate, and prevent fraudulent activity, security breaches, and unauthorised account access.
• To provide personalised investment guidance and portfolio management services.
• To communicate important account notifications, security alerts, and service updates.
• To conduct internal analytics to improve platform performance and user experience.

4 Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following limited circumstances:

• With regulated service providers and technology partners who process data on our behalf under strict confidentiality agreements.
• With regulatory authorities, law enforcement agencies, or financial oversight bodies as required by applicable law or court order.
• In connection with a corporate merger, acquisition, or business restructuring, with appropriate data protection safeguards in place.
• With your express consent in any other circumstances not described above.

All third parties with whom we share data are contractually obligated to maintain the confidentiality and security of your information in accordance with applicable privacy standards.

5 Data Security

We implement industry-leading security measures to protect your personal and financial data from unauthorised access, disclosure, alteration, and destruction. Our security infrastructure includes:

• End-to-end encryption of all data transmissions using TLS/SSL protocols.
• Strict role-based access controls limiting data access to authorised personnel only.
• Regular independent security audits and penetration testing.
• Multi-factor authentication requirements for account access.
• Comprehensive intrusion detection and monitoring systems.

While no system can guarantee absolute security, we continuously invest in and improve our data protection practices to safeguard your information.

6 Your Rights

Subject to applicable law, you hold the following rights with respect to your personal data:

• Right of Access: To request a copy of the personal data we hold about you.
• Right of Rectification: To request correction of inaccurate or incomplete data.
• Right of Erasure: To request deletion of your data, subject to legal retention obligations.
• Right to Restriction: To restrict the processing of your data in certain circumstances.
• Right to Portability: To receive your data in a structured, machine-readable format.
• Right to Object: To object to the processing of your data for direct marketing purposes.

To exercise any of the above rights, please contact our Data Protection Officer at the address provided below.

7 Data Retention

We retain your personal data for as long as your account remains active and for such additional periods as are required by applicable law and regulatory obligations. Financial transaction records are typically retained for a minimum of seven years in accordance with standard regulatory requirements.

8 Cookies & Tracking Technologies

We use essential cookies to ensure the proper functionality of our platform. We may also use analytical cookies to understand how our platform is used and to make improvements. You may configure your browser to refuse non-essential cookies; however, this may affect certain platform features.

9 Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or applicable law. Material changes will be communicated to registered clients via email and platform notification. We encourage you to review this Policy regularly. Continued use of our services following notification of changes constitutes acceptance of the revised Policy.