Delta DA Ltd.
(AIFC Licensed Digital Asset Trading and Custody Provider)

1. Overview
This Privacy Policy explains how Delta DA Ltd. (“the Company”, “we”, “us”) collects, uses, stores, and protects personal and corporate information when you use our digital asset trading platform and related services (the “Services”).
Our Services operate under the regulatory framework of the Astana International Financial Centre (AIFC) and are supervised by the Astana Financial Services Authority (AFSA).
By accessing our website or using our Services, you agree to the data practices described in this Policy.

2. Data Controller
Company: Delta DA Ltd.
Jurisdiction: Astana International Financial Centre (AIFC), Kazakhstan
Registration No.: 210240900265
Contact Email: compliance@deltada.kz
The Company acts as the data controller for all personal data collected through the Platform.

3. Categories of Information We Collect
We collect only the information necessary to provide our Services and meet regulatory obligations.
3.1. Personal Identification Data

• Full legal name
• Date and place of birth
• Citizenship
• Government-issued identification details
• Photograph or biometric verification where required

3.2. Corporate Information (for Legal Entities)

• Company registration details
• Shareholding and beneficial ownership structure
• Details of directors and authorised representatives

3.3. Financial Information

• Bank account details
• Wallet addresses for digital assets
• Transaction and payment history

3.4. Technical and Usage Data

• IP address and device information
• Login history and activity records
• Browser and platform type

4. Legal Basis for Processing
We process your data only when it is necessary:

• to fulfil contractual obligations with you,
• to comply with AFSA AML / CFT regulations,
• to meet AIFC licensing and reporting requirements,
• or with your explicit consent (for optional communications).

5. How We Use Your Information
Your data may be used for:

• verifying identity and performing KYC / KYB checks;
• maintaining your digital asset wallet and account balances;
• processing deposits, trades, and withdrawals;
• monitoring transactions for AML, fraud prevention, and compliance;
• providing customer support;
• communicating regulatory or operational updates;
• fulfilling our legal obligations to AFSA and other authorities.

6. Data Sharing
We may share your data only where required to operate and regulate the Services.
6.1. With Regulatory Authorities
Including AFSA, financial intelligence units, and law enforcement agencies, where disclosure is legally required.
6.2. With Service Providers
Such as payment institutions, banking partners, compliance and audit providers, and blockchain monitoring services.
All third parties are bound by confidentiality and data protection requirements.

7. Data Security
We implement technical, organisational, and procedural safeguards to protect your information, including:

• encryption of sensitive data,
• secure storage prevent unauthorised access,
• access controls and authentication,
• ongoing cybersecurity monitoring,
• and compliance audits in line with AFSA regulatory standards.

8. International Transfers
Where required, personal data may be processed or stored outside the Republic of Kazakhstan or the AIFC jurisdiction.
In such cases, we ensure that the receiving party applies equivalent data protection and confidentiality standards.

9. Data Retention
We retain your information:

• for as long as necessary to provide the Services,
• and for the period required under AFSA record-keeping and AML legislation (typically 5–7 years after account closure).

10. Your Rights
You have the right to:

• access your personal data,
• request corrections,
• request deletion where permitted by law,
• withdraw consent for non-essential communications,
• and lodge a complaint with the Astana Financial Services Authority if you believe your rights are violated.

11. Cookies and Tracking Technologies
Our website may use cookies or similar tools to:

• maintain secure sessions,
• improve performance and usability,
• and analyse user activity.

You may disable cookies through your browser settings, although this may limit certain features.

12. Automated Decision-Making
Certain onboarding or risk monitoring processes may use automated checks.
You may request manual review of any such decision affecting your account or access.

13. Updates to This Policy
We may update this Policy periodically.
The most recent version will always be available on our website, and significant changes will be communicated to Users.

14. Contact
If you have questions about this Policy or your personal data, please contact:
compliance@deltada.kz