Privacy and Personal Information Notice

Bright Mintwarrant treats the responsible handling of personal information as a core obligation. We process data openly, for defined purposes and in line with applicable requirements, including the UK GDPR. This policy sets out what we gather, the reasons for using it, retention periods and the safeguards we put in place.

1. Who controls your data

For UK GDPR purposes, the website operator and the Bright Mintwarrant platform are responsible for controlling your personal information. Our legal notice contains the applicable contact details and further information. Privacy enquiries may also be directed to our data protection officer.

2. Personal information we collect

We obtain and process the information needed to deliver the service, meet legal duties and keep the platform secure. This may cover:

Identity information: your given name, family name and date of birth, used to confirm identity and age.
Contact information: email address, telephone number if supplied, country of residence and, where relevant, postal address.
Account and payment information: payment data, deposits, withdrawals and records of transaction-related activity.
Technical and activity information: IP address, browser details, device data, login timestamps and connection records.
Verification material: identity documents, proof of address and other information needed for KYC/AML checks when required by law.

We normally do not seek special-category information, such as health data or religious beliefs, unless the law requires it or you have expressly agreed.

3. Sources of your information

We may receive your information through several secure sources:

Information you provide: for instance, when registering, editing your profile, submitting documents or contacting us.
Information collected automatically: such as cookies, server records, analytics data and technical details generated while you use the platform.
Information supplied by other organisations: including payment services handling deposits or withdrawals, KYC/AML screening providers and social sign-in services where you authorise access.

4. How we use information

Personal information is used for specific lawful purposes, which can include:

To create, administer and deliver your account and its available platform tools.
To handle and safeguard payment operations, including deposits and withdrawals.
To offer appropriate support and respond to your enquiries, requests or issues.
To meet legal and regulatory duties, including KYC, AML and taxation requirements.
To protect our systems and identify or stop fraud, misuse and attempted unauthorised entry.
To improve usability and refine the platform’s functions over time.
To provide service notices or promotional messages where you have chosen to receive them.

5. Lawful grounds for processing

Performing our contract with you or taking steps you request before entering into one (Article 6(1)(b) UK GDPR).
Meeting statutory duties (Article 6(1)(c) UK GDPR), including anti-money laundering obligations.
Furthering legitimate interests (Article 6(1)(f) UK GDPR), such as maintaining platform security, continuity and reliable operation.
Relying on your clear consent (Article 6(1)(a) UK GDPR), for example for marketing or non-essential functions.

6. When information is shared

Information is disclosed only when necessary and to selected recipients or service providers, such as:

Banks and payment firms that receive deposits or facilitate withdrawals.
Specialist providers authorised to perform KYC and AML screening.
Cloud and technology vendors operating under suitable data-processing terms.
Analytics and security suppliers using anonymised or pseudonymised information where reasonably practicable.
Professional advisers, including solicitors and tax specialists, when needed for legal or compliance work.
Courts and public authorities where disclosure is legally required or necessary to pursue, establish or defend legal proceedings.

We do not sell personal information or provide it to third parties for their independent commercial use.

7. Transfers beyond the UK

Some suppliers, including cloud-hosting and analytics providers, may operate outside the UK or European Economic Area. Where information is transferred, we use suitable protections, which may include the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, binding corporate rules or a relevant adequacy decision, to maintain an appropriate standard of protection.

8. Protecting personal information

We use a combination of technical controls and organisational practices to help keep your information safe:

Protected data transmission using up-to-date security standards, including TLS 1.3 or later.
Robust encryption for sensitive information stored on our systems, including AES-256 where suitable.
Routine security assessments, penetration tests and reviews conducted by independent experts.
Ongoing monitoring intended to identify unusual behaviour and attempted security incidents.
Controlled access permissions assigned according to each team member’s responsibilities.
Client money maintained in segregated accounts through regulated service providers.

No digital system can remove every possible security risk, but these controls are designed to reduce the relevant exposure.

9. How long we retain data

Personal information is kept only for the time needed for the purposes described here or for any period imposed by law:

While your account remains open and our contractual relationship continues.
Following closure, for the period mandated by applicable law, which may include 5–10 years for tax or regulatory documentation.
Where consent provides the lawful basis, such as marketing, until you revoke that consent.

When information is no longer required, we securely remove it or transform it into anonymous data.

10. Your data protection rights

Data protection law gives you various rights over your personal information, including the ability to:

Ask whether we process personal information about you and request confirmation.
Ask us to correct inaccurate details or complete missing information.
Ask for deletion where we are not legally required to retain the information.
Ask us to limit processing in circumstances permitted by law.
Obtain your information in a structured, commonly used and machine-readable form for portability.
Withdraw consent at any time for future processing that relies on it.
Complain to the appropriate data protection supervisory authority.

11. Cookies and related tools

Cookies and related tools help the website operate, indicate how visitors use it and support improvements to the experience. Necessary cookies are enabled by default; analytics and advertising cookies are used only with your consent. Please see our separate cookie notice for more detail.

12. Updates to this notice

We may update this notice from time to time to reflect legal, regulatory or platform changes. The current edition will be published on our website. Where an amendment is material, we will inform you by email or within the platform.

13. Privacy contact details

For privacy enquiries, questions about this notice or requests concerning your rights, contact $site_gmail or use the website contact form. Our data protection officer will consider your message and aim to reply within a reasonable timeframe.

By accessing Bright Mintwarrant, you confirm that you have reviewed this policy and accept its provisions.