Opening page

Privacy Policy

OKSPOT never requests KYC. This policy explains the account and transaction information we do use, why we need it and the choices you have.

Published

Effective 8 November 2026.

OKS TECHNOLOGY LTD., located in Seychelles, owns and operates OKSPOT and is responsible for the personal information described here. Contact [email protected] with privacy questions or requests. This policy covers the OKSPOT website and web app, not independent wallets or websites you choose to visit.

1. No KYC or identity documents

OKSPOT never requests KYC (Know Your Customer) verification. We do not ask for passports, government ID, driving licences, identity-check selfies, proof of address or source-of-wealth documents. This applies when you sign up, deposit, trade, withdraw or contact support.

There is no "shotgun KYC": we will not introduce surprise identity checks after you deposit or demand identity documents to release your funds. Account-security checks and lawful restrictions on funds are separate from KYC.

We still need information to run your account, process transactions, protect funds and answer support requests. No-KYC access does not mean no records or guaranteed anonymity. Email verification and account-security checks do not require identity documents, including when you make a privacy request.

2. Information used by the service

  • Account information: your email address, account identifiers, email-verification status, preferences and referral information where used.
  • Authentication information: a password hash, session records, passkey public credentials and related device information, and protected authenticator or recovery data when you enable those features. Passkey private keys and device biometrics stay with your device or passkey service; the passkey flow does not send them to OKSPOT.
  • Financial records: balances, orders, trades, fees, deposits, withdrawals, blockchain addresses, transaction identifiers and any required memo or tag.
  • Security and technical records: connection and device information, IP-related security records, access times, authentication events, account changes and errors needed to operate and secure the service.
  • Support information: messages you send, contact details and the account or transaction references needed to investigate an issue. Avoid sending unnecessary sensitive information.
  • Transaction-review information: transaction references, wallet addresses, networks, amounts, dates and explanations you provide to resolve a transfer or investigate suspected abuse. These requests concern the transaction; they do not ask you to complete KYC or submit identity or source-of-wealth documents.

3. Why we use information

We use information to create and secure accounts, deliver verification and recovery emails, execute instructions, maintain financial records, answer questions, investigate suspected abuse and meet applicable legal obligations. Account and security notices are service messages, not consent to marketing.

Where a law such as the GDPR applies, the relevant basis can be performing our agreement with you, meeting a legal obligation, or legitimate interests in operating and protecting the service, balanced against your rights. Where consent is required for an optional use, we must obtain it and let you withdraw it. We do not treat opening an account as blanket consent to unrelated uses.

4. Who may receive information

OKSPOT uses external services for hosting, data storage, email delivery, trading execution and custody. Some information is therefore processed outside our own systems. The information needed depends on the service:

  • Hosting and storage: the account, support, security and financial records held by the app.
  • Email delivery: your email address and the messages we send, including verification, recovery and account-security messages. A deposit-address email you request includes that address and its relevant details.
  • Execution and custody: technical account references, order instructions, balances and deposit or withdrawal details needed to process transactions.
  • External resources: when your browser loads an externally hosted asset or follows an external link, that service can receive connection information such as an IP address. Its own privacy terms apply to its website.
  • Legal and professional recipients: authorities, courts, advisers or other parties where disclosure is required or otherwise lawful and necessary to handle a claim, security incident or legal obligation.

We limit disclosures to their purpose. A request for information does not, by itself, authorize disclosure. We do not sell personal information or share it for cross-context behavioural advertising. A lawful business transfer may involve relevant records, subject to the privacy protections and notices required by law.

5. Blockchain records

Blockchain transactions may be public, permanent and visible worldwide. Depending on the network, an address, amount, transaction reference or other details may reveal activity or be linked to a person. Privacy features differ between assets and do not guarantee anonymity.

OKSPOT cannot erase or change records on an independent blockchain. Removing information from an account does not remove those public records.

6. Cookies and browser storage

The app uses an essential sign-in cookie, okspot.sid, with a 24-hour expiry. Signing in again or session renewal can change the expiry. The cookie is protected from normal JavaScript access and is sent over secure connections.

Browser storage also remembers preferences, such as your theme or watchlist, and can cache app resources for the installed web app. These items can remain until you change the setting, clear site data or remove the app. They are not consent to marketing or advertising tracking.

If you choose to remember a referral, the optional __Host-okspot-referral cookie stores an invitation reference for up to seven days. A saved referral-storage preference lasts 180 days. You can remove these records by clearing the site's cookies and browser storage; removing a cookie does not undo a referral already attached to a registered account.

You can clear cookies and site data in your browser. Doing so can sign you out and reset preferences. Blocking essential cookies can prevent sign-in and other account functions. Any optional tracking that requires consent must not be enabled without that consent.

7. Where information is processed

Information may be processed in Seychelles and in countries where the services used to operate OKSPOT are located. Those countries may have different privacy laws from your own. Any transfer must meet the requirements of the law that applies, including safeguards where required. Contact us for information about locations and safeguards relevant to your data.

8. How long information is kept

We keep information for the purpose for which it is needed, not simply because storage is available. Account information is needed while an account is open. Financial, security and complaint records may need to remain after closure to reconcile transactions, meet legal retention duties, resolve disputes or prevent abuse.

Retention depends on the record and applicable requirements; account closure does not promise immediate deletion of all records or backups. Where no further lawful need exists, information should be deleted or de-identified. Contact us about the retention period for a particular record. Public blockchain records are outside our deletion control.

9. Your choices and rights

Depending on the law that applies, you may have rights to access or receive a copy of your information, correct it, request deletion, restrict or object to processing, obtain portable data, or withdraw consent for an optional use. You can also contact the relevant data-protection authority with a complaint.

Send requests to [email protected], preferably from the email registered to your account. Before releasing or changing information, we may need to confirm account control through the required email, passkey or authenticator checks. We do not ask for KYC documents to handle a privacy request. We will explain any lawful reason we cannot fulfil a request, including a required financial-record or legal hold.

Security checks can reject or delay an action. If you believe a restriction is wrong, ask support for a review. A review does not guarantee that a lawful restriction can be lifted.

10. Security and sensitive documents

Security measures include access controls, protected authentication data and encrypted connections. No online service can guarantee that an incident will never happen. Protect your own email and devices, and contact support promptly about suspected unauthorized access.

Never send passwords, wallet seed phrases, private keys, authenticator codes or recovery codes to support. OKSPOT does not request identity documents through support, email or a withdrawal review. Treat a KYC request claiming to come from OKSPOT as suspicious. Do not upload documents or follow its links; contact [email protected] or open Support directly.

11. Children and changes to this policy

OKSPOT is for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can investigate and handle it appropriately.

We will update the effective date when this policy changes and give an appropriate notice of material changes. A policy update cannot, by itself, supply consent where the law requires new consent.

Contact and related policies

For questions about this policy, contact [email protected]. Read the Terms of Service, Privacy Policy and AML/KYC Policy.

This page provides general policy information, not legal, tax or investment advice. Get independent advice about your own circumstances.