- INTRODUCTION
- Moonex LLC (“Moonex”, “we”, “us”, or “our”) is committed to protecting the privacy, confidentiality, and security of personal data processed in connection with its virtual digital asset exchange platform and related services (the “Platform”). This Privacy Policy explains how Moonex collects, uses, stores, discloses, and safeguards personal data of users, visitors, and other stakeholders.
- This Privacy Policy is intended to be transparent and compliant with applicable data protection and privacy laws across jurisdictions where Moonex operates or offers services, including, where applicable, India’s Digital Personal Data Protection Act, 2023 (DPDP Act), the EU General Data Protection Regulation (GDPR), and other relevant international privacy frameworks.
- By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
- WHO WE ARE
- Entity Name: Moonex LLC
- Legal Form: Limited Liability Company (Georgia)
- Identification Number: 400449127
- Nature of Business: Virtual Digital Asset Exchange Operator / Virtual Asset Service Provider (VASP)
- Official Website: https://moonex.in
- Other Domains: https://moonex.ltd
- Moonex acts as the data controller in respect of personal data processed through the Platform, unless stated otherwise.
- SCOPE OF THIS POLICY
- This Privacy Policy applies to:
- Users who register on or access the Platform;
- Individuals undergoing KYC / CDD verification;
- Visitors to the website and applications;
- Communications with Moonex, including customer support and compliance interactions.
- This Policy does not apply to third-party websites or services linked from the Platform, which are governed by their own privacy policies.
- CATEGORIES OF PERSONAL DATA COLLECTED
- Depending on the nature of interaction, Moonex may collect the following categories of personal data:
- Identity Data: name, date of birth, nationality, government-issued identification documents;
- Contact Data: email address, phone number, residential address;
- KYC and Verification Data: photographs, video verification data, liveness checks, and related metadata;
- Account Data: login credentials, account identifiers, security information;
- Transaction Data: wallet addresses, transaction history, trade records, deposits and withdrawals;
- Technical Data: IP address, device identifiers, browser type, operating system, log files;
- Communication Data: correspondence with Moonex, support tickets, and compliance communications.
- Moonex does not intentionally collect special category personal data unless required to comply with legal or regulatory obligations.
- PURPOSES OF PROCESSING
- Moonex processes personal data for the following purposes:
- To onboard users and create and manage accounts;
- To perform KYC, CDD, AML/CFT checks and comply with legal obligations;
- To facilitate trading, wallet, and related Platform services;
- To monitor transactions and ensure Platform security and integrity;
- To communicate with users regarding services, compliance, and support;
- To detect, prevent, and investigate fraud, security incidents, and unlawful activity;
- To comply with lawful requests from regulators and authorities.
- LEGAL BASIS FOR PROCESSING
- Moonex processes personal data on one or more of the following legal bases, as applicable:
- Compliance with legal and regulatory obligations;
- Performance of a contract with the user;
- Legitimate interests pursued by Moonex, including security and fraud prevention;
- Consent, where required under applicable law.
- DISCLOSURE AND SHARING OF DATA
- Moonex may share personal data with:
- Regulatory authorities, law enforcement agencies, and Financial Intelligence Units where required by law;
- Third-party service providers engaged for KYC, screening, technology, hosting, analytics, or compliance functions, subject to contractual confidentiality and data protection obligations;
- Professional advisers such as auditors, legal counsel, and consultants.
- Moonex does not sell personal data.
- CROSS-BORDER DATA TRANSFERS
- Moonex operates globally and may process or transfer personal data across borders. Where cross-border transfers occur, Moonex implements appropriate safeguards in accordance with applicable data protection laws, such as contractual protections and technical security measures.
- DATA RETENTION
- Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory requirements.
- KYC and transaction records are generally retained for a minimum period of five (5) years from the date of transaction or termination of the business relationship, unless a longer retention period is required by law.
- DATA SECURITY
- Moonex implements reasonable technical and organisational measures to protect personal data, including:
- Encryption of data in transit and at rest;
- Access controls and authentication mechanisms;
- Monitoring and logging of system access;
- Periodic security assessments.
- USER RIGHTS
- Subject to applicable law, users may have the following rights in relation to their personal data:
- Right to access and obtain a copy of personal data;
- Right to correction of inaccurate or incomplete data;
- Right to erasure or restriction of processing, where legally permissible;
- Right to withdraw consent, where processing is based on consent;
- Right to lodge a complaint with a competent data protection authority.
- Requests may be subject to identity verification and legal limitations.
- COOKIES AND TRACKING TECHNOLOGIES
- Moonex uses cookies and similar technologies to operate and improve the Platform. Detailed information regarding the use of cookies is provided in the Cookie Policy, which forms part of this Privacy Policy.
- CONFIDENTIALITY AND COMPLIANCE
- Access to personal data is restricted to authorised personnel who require such access for legitimate business or compliance purposes. Employees and contractors are bound by confidentiality obligations.
- CHANGES TO THIS PRIVACY POLICY
- Moonex may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or technology. Material changes will be notified through the Platform or other appropriate means.
- DISPUTE RESOLUTION, ARBITRATION AND GOVERNING LAW
- Any dispute, claim, or controversy arising out of or in connection with this Privacy Policy, including any alleged breach of data protection or privacy obligations, shall, to the extent permitted under applicable law, be resolved by binding arbitration.
- The seat and venue of arbitration shall be Georgia, and the arbitration proceedings shall be conducted in the English language, in accordance with the arbitration rules agreed upon by Moonex LLC or, in the absence of such agreement, in accordance with internationally recognised arbitration rules.
- This clause shall not prevent Moonex LLC from complying with mandatory legal obligations, regulatory directions, or lawful orders issued by competent authorities in any jurisdiction, including data protection authorities or courts where such compliance is required by law.
- Nothing in this clause shall be construed as restricting the rights of any data subject under mandatory data protection laws applicable in their jurisdiction of residence, to the extent such rights cannot be contractually waived.
- This Privacy Policy shall be governed by and construed in accordance with the laws applicable to Moonex LLC in its place of incorporation, to the extent not inconsistent with mandatory data protection laws.
- EFFECTIVE DATE
- This Privacy Policy is effective from the date of publication on the Platform.