Privacy Policy

Last updated: 22 July 2026 · Version 1.2

This Privacy Policy explains how we collect, use, store, share, and protect personal data, and the rights you have. It forms part of our Terms of Service.

The data controller is M.K.B.I. Services & Assets Ltd, company no. 515891240, 6 HaTzionut St, Ashdod, Israel (“Uriel”, “we”, “us”). For any privacy request, contact privacy@uriel-group.com.

1. Who this applies to

This policy applies to visitors of our website, applicants who join the waitlist, and clients who onboard to the Service. Our Service is intended only for qualified or professional investors, not for the general public or minors.

2. Data we collect

2.1. Identity & KYC data — name, date of birth, nationality, government-ID documents, proof of address, selfie, and beneficial-ownership and source-of-funds information collected during onboarding.

2.2. Contact data — email, phone, country, and the details you submit through the waitlist or contact forms.

2.3. Eligibility data — evidence of qualified / professional / accredited investor status.

2.4. Financial & trading data — your exchange account identifiers, trade-only API credentials, positions, trades, fees, deposits, and the receiving (deposit) addresses derived for you.

2.5. Billing data — billing address and the information required to issue invoices and tax documents.

2.6. Usage & technical data — device, browser, IP address, pages viewed, and similar data collected via cookies (see our Cookie Policy).

2.7. Communications — records of your emails, calls, and messages with us.

3. How we use your data, and our legal bases

3.1. To provide and operate the Service (performance of a contract).

3.2. To verify identity, eligibility and source of funds, and to meet KYC/AML, tax, and other legal obligations (legal obligation).

3.3. To secure our systems, prevent fraud and abuse, and improve the Service (legitimate interests).

3.4. To communicate with you, including service notifications and, where permitted, updates (contract / legitimate interests / consent where required).

3.5. To keep records and defend legal claims (legal obligation / legitimate interests).

4. Who we share it with (processors)

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and where required by law. These currently include, or may include:

• Authentication (account sign-in); • Database & storage hosting; • The cryptocurrency exchange where you hold your account; • Email delivery; • Blockchain data providers used to detect your inbound deposits; • Accounting / tax-invoicing providers; • Regulators, auditors, or law-enforcement where legally required.

5. International transfers

Your data may be processed outside your country, including outside the EEA and Israel. Where it is, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses).

6. How long we keep it

We keep personal data for as long as needed to provide the Service and to meet legal, tax, accounting, and anti-money-laundering retention obligations (which, for KYC and transaction records, may be several years after the relationship ends), after which it is deleted or anonymised.

7. How we protect it

Personal data is stored in encrypted form. Exchange API credentials are encrypted at rest with restricted access and never carry withdrawal permission. Access is limited on a need-to-know basis, and activity is logged. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

8. Your rights

Subject to applicable law (EU GDPR and, in Israel, the Protection of Privacy Law, 5741-1981), you may request access to, correction of, deletion of, or portability of your data, object to or restrict certain processing, and withdraw consent. We may need to retain certain data to meet legal obligations. To exercise a right, email privacy@uriel-group.com. You also have the right to complain to your data-protection authority.

9. Cookies

We use a small number of essential cookies for sign-in, security, and preferences. See our Cookie Policy.

10. Children

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

11. Changes

We may update this policy from time to time. Material changes will be communicated through the platform or by email, and the “Last updated” date above will change.

12. Contact

For any question or request about your personal data, contact privacy@uriel-group.com.