Privacy Policy and KYC Policy

General Provisions

In accordance with the European uniоn General Data Protection Regulation (GDPR) and international Anti-Money Laundering (AML) standards, Ace Xchanger has updated its Privacy Policy. Ace Xchanger and its affiliates (hereinafter, “Ace Xchanger”, “we”, “us” or “our”) are committed to protecting and respecting your privacy. This Privacy Policy (together with our Terms and Conditions of Use) governs our collection, processing, and use of your Personal Information.

We define “Personal Information” as information which identifies you personally, e.g., your name, address, e-mail address, trades, KYC documents, etc. The purpose of this Privacy Policy is to inform you of:

1. who is responsible for the protection of your information;
2. the kinds of Personal Information which we may collect about you and how it may be used;
3. the sources and specific providers from which we gather information about you;
4. our use of information regarding IP Addresses and our use of cookies;
5. any disclosure of Personal Information to third parties;
6. your ability to correct, updаte, and dеlete your Personal Information; and
7. the security measures we have in place to prevent the loss, misuse, or alteration of Personal Information under our control.

Who is Responsible for the Protection of Your Information?

Protection of your personal information is the responsibility of our Data Protection Officer (DPO), who you can contact with questions related to your personal information. If you want to reach our DPO, please contact [email protected].

Gathering and Use of Personal Information

We collect your personal information to help you use our service conveniently and safely. We may collect your Personal Information if you use the Site, open an Account, or perform any Transactions on Ace Xchanger. To ensure accuracy and compliance, we utilize Didit.me as our third-party provider for the automated collection, processing, and verification of identity records. The types of Personal Information which we collect may inсlude:

1. your legal name and date of birth;
2. your photographic identification and biometric liveness data;
3. your physical address and utility bills;
4. your phone number and e-mail address;
5. your IP address(es), geo-location, device, and browser information;
6. your banking details including account numbers;
7. your transaction history and Source of Funds (SoF) documentation.

We will process your Personal Information only for the purpose(s) for which it has been provided to us, such as allowing you to operate an Account, complete Transactions, reply to queries, and fulfill strict regulatory AML/KYC purposes.

Sources of Information

We collect information about you from several sources including, but not limited to:

1. Your Ace Xchanger profile submissions;
2. Our authorized identity verification partner (Didit.me);
3. Cryptocurrency blockchains via our integrated AML risk analyzers (Getblock.net, Bitok.org, and Blockcluster.pro).

IP Addresses and Cookies

We may collect non-personal identification information about your computer, including your IP address, operating systеm, and browser type, for systеm administration and to analyze trends. We use a browser feature known as a “coоkie,” which assigns a unique identification to your computer and is stored on your hard drive. Information collected from cookies is used to evaluate the effectiveness of our Site, understand which parts of our Site are most visited, and resolve access difficulties. By using our Site, you agree that we may use cookies for these operational purposes. Rest assured, we do not track your personal information maliciously.

Disclosure of Personal Information

We do not sell, rent, or loan your data. We use the Personal Information for the purposes indicated at the time you provide us with such information, or as permitted by law. We may share information about you with the following parties:

1. With Didit.me, strictly for executing automated identity verification, liveness checks, and AML screening;
2. With acquiring and card-issuing banks or payment processing partners;
3. With banks or other financial institutions when disputing claims or chargebacks;
4. With law enforcement, regulatory agencies, or compliance partners (such as BestChange) when requested by law or official audit.

Any third party which receives Personal Information shall be contractually required by us to protect such information and use it only to carry out the services they are performing for you or for Ace Xchanger. Your information might be processed in different jurisdictions, but we ensure safety through secured data transfer channels and trusted partners.

Security Measures

All information collected from this site is kept strictly confidential. We have implemented enterprise-grade security measures to ensure the confidentiality of your Personal Information and to protect it from loss, misuse, alteration, or destruction. All KYC documents and personal data are transmitted using end-to-end TLS 1.3 encryption. Data stored by our verification provider (Didit.me) is secured with AES-256 encryption within SOC 2 and ISO 27001 certified infrastructure. Only authorized compliance personnel of Ace Xchanger have access to your data.

Retention of Personal Information

We will hold your Personal Information only for as long as it is necessary for us to do so. In accordance with standard international financial requirements and our record-keeping obligations, we will retain Accounts, transactional hashes, risk assessment telemetry reports, and Personal Information for a minimum mandatory duration of five (5) years after the business relationship is closed.

Correction / Updating / Deletion of Personal Information

You have the right to access your Personal Information and to require the correction, updating, and blocking of inaccurate data by sending an email to us at: [email protected]. You may also request the deletion of your Account and Personal Information, and Ace Xchanger will action your request provided it is not inconsistent with our strict legal, AML, and regulatory retention obligations.

Links and Marketing

There may be links from our Site to other sites provided by third parties. We do not control those third-party sites and are in no way responsible for their content or privacy policies. Regarding marketing, you have the right to ask us not to process your Personal Information for promotional purposes. You can exercise this right at any time by contacting us.

Changes

Our Site policies, content, and features may be revised, modified, or updated at any time at the sole discretion of Ace Xchanger. If we change this Privacy Policy, we will post the amended Privacy Policy on the Site.

KYC (Know Your Customer) Policy

The purpose of user identification and verification is to prevent Ace Xchanger from being used in criminal activity, fraud, money laundering, or terrorist financing. Our privacy policy applies to legitimate users only. Any user attempting to defraud us or utilizing illicit funds will be subject to strict regulatory reporting.

Ace Xchanger collects certain user identification information from each user who opens or maintains an account. When triggered by our risk thresholds, users will be required to provide verification documents to successfully complete an order. Through our provider (Didit.me), the user will be asked to provide a high-resolution scanned copy of a valid photo ID (passport or government ID), a live biometric selfie, and a scanned copy of a recent utility bill showing their current address of residence. The user guarantees that the name, address, phone number, and any other personal identification documents are true, correct, and belong strictly to the user.

Contact Us

If you have any questions, comments, or concerns regarding our Privacy Policy and/or practices, please contact us at [email protected].

Last Updated: July 2026