Privacy Policy

This Privacy Policy (the “Policy”) explains how ON SPOT GROUP LLC (“we,” “us,” or “our”), the operator of the trading platform available at the market-qx.info domain, collects, uses, stores, shares, and protects personal data of individuals who visit our website, register an account, or use our trading and financial services (collectively, “you” or the “Client”).

This Policy applies to all personal information processed through the website, mobile applications, trading terminals, application programming interfaces (APIs), customer support channels, and any other services we provide (together, the “Platform”).

By accessing the Platform, creating an account, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:

Any questions regarding this Policy or your personal data may be directed to our Data Protection contact at the address above or via the contact channels listed in Section 14.

We collect information that you provide directly, information collected automatically, and information obtained from third parties. The categories of personal data we may process include:

• Identity Data: full name, date of birth, gender, nationality, country of residence, government-issued identification numbers (passport, national ID), and copies of identification documents.
• Contact Data: email address, phone number, postal address, and preferred language.
• Financial Data: bank account details, payment card information, e-wallet identifiers, cryptocurrency wallet addresses, transaction history, deposit and withdrawal records, and trading balances.
• Trading Data: trading activity, order history, positions, realized and unrealized results, device and connection data used for trading.
• Technical Data: IP address, browser type and version, operating system, device identifiers, time zone, screen resolution, and similar technical metadata.
• Usage Data: pages visited, features used, clicks, navigation paths, session duration, and referral sources.
• Communication Data: records of correspondence with our support team, chat transcripts, emails, call recordings (where permitted by law), and survey responses.
• Compliance Data: Know-Your-Customer (KYC) verification results, source-of-funds information, risk assessments, and anti-money laundering (AML) screening outcomes.

Where required for our services or by law, we may also collect special categories of data strictly limited to what is necessary for compliance screening, such as information relevant to sanctions or politically exposed person (PEP) checks. We do not intentionally collect data revealing racial or ethnic origin, political opinions, religious beliefs, or health status beyond what is required by applicable regulations.

We use the personal data we collect for the following purposes:

• Account Management: creating and maintaining your account, verifying your identity, and authenticating logins.
• Service Provision: executing trades, managing deposits and withdrawals, applying platform settings, and delivering the services you request.
• Compliance & Security: meeting KYC/AML obligations, preventing fraud, money laundering, terrorist financing, and other illegal or abusive activity, and protecting the integrity of the Platform.
• Platform Improvement: analyzing usage patterns, debugging, improving functionality, and developing new features.
• Communication: sending service notifications, transaction confirmations, security alerts, and (with your consent where required) marketing communications.
• Legal & Regulatory: complying with court orders, regulatory requests, and applicable laws; establishing, exercising, or defending legal claims.

We will not use your personal data for purposes incompatible with those described in this Policy. If we intend to process your data for a new, materially different purpose, we will update this Policy and, where required by law, obtain your consent.

We rely on the following lawful bases for processing personal data, as applicable:

• Performance of a Contract: processing necessary to provide our services, execute trades, and manage your account under the Service Agreement.
• Legal Obligation: processing required to comply with anti-money laundering, counter-terrorist financing, tax, and other legal and regulatory obligations.
• Legitimate Interests: processing for fraud prevention, network and information security, platform improvement, and direct marketing (subject to your rights to object), where our interests are not overridden by your rights.
• Consent: processing of marketing communications, cookies, and any other data for which we specifically request and obtain your consent. You may withdraw consent at any time.

We do not sell your personal data. We may share personal data with the following categories of recipients, always subject to appropriate safeguards:

• Service Providers: payment processors, banking partners, identity verification providers, cloud hosting providers, analytics services, and customer support tools that help us operate the Platform.
• Regulators & Authorities: financial regulators, law enforcement agencies, courts, and government bodies where disclosure is required by law, regulation, or legal process.
• Business Transfers: in connection with a merger, acquisition, reorganization, sale of assets, or similar corporate transaction, your data may be transferred as part of the transaction.
• Professional Advisers: legal counsel, auditors, and insurers where necessary to protect our rights or manage risk.

Where we share data with third parties, we require them to protect it with appropriate technical and organizational measures and to process it only for the purposes we specify.

We use cookies and similar technologies (pixels, web beacons, local storage, and device fingerprints) to operate the Platform, remember your preferences, analyze traffic, and improve your experience.

• Strictly Necessary Cookies: required for core functionality such as authentication, security, and session management. These cannot be disabled.
• Preference Cookies: remember your language, theme, and display settings.
• Analytics Cookies: help us understand how visitors use the Platform so we can improve it.
• Marketing Cookies: used, where you have consented, to deliver relevant advertising and measure campaign effectiveness.

You can control cookies through your browser settings and through the cookie consent controls on our website. Disabling certain cookies may affect the availability or functionality of the Platform. Where required by law, we obtain your consent before placing non-essential cookies.

We implement a comprehensive set of technical and organizational security measures to protect your personal data, including:

• Encryption: data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption algorithms.
• Access Controls: role-based access restrictions ensure only authorized personnel can access personal data.
• Monitoring & Auditing: continuous monitoring of systems for suspicious activity, regular security audits, and vulnerability assessments.
• Incident Response: documented procedures for detecting, containing, and reporting security incidents, including breach notification to affected individuals and regulators where required by law.
• Data Minimization: we collect and retain only the personal data necessary for the purposes described in this Policy.

While no method of transmission or storage is 100% secure, we continuously work to maintain appropriate safeguards. You are responsible for keeping your login credentials confidential and for using strong, unique passwords.

We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements.

In particular, we may retain transaction, KYC, and AML records for the periods required by applicable anti-money laundering and financial services regulations (typically five to ten years after the end of the business relationship). Where personal data is no longer needed, it is securely deleted or anonymized.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of Access: obtain confirmation of whether we process your data and request a copy.
• Right to Rectification: request correction of inaccurate or incomplete data.
• Right to Erasure: request deletion of your data where certain legal conditions are met.
• Right to Restriction: request that we limit how we process your data in certain circumstances.
• Right to Portability: request your data in a structured, machine-readable format and transmit it to another controller.
• Right to Object: object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Right to Complain: lodge a complaint with a competent data protection supervisory authority in your jurisdiction.

To exercise any of these rights, contact us using the details in Section 14. We may need to verify your identity before processing your request and may take up to one month to respond, as permitted by law.

Our services are not directed to individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately so that we can take appropriate action, including deletion of such data.

As a global service provider, we may transfer personal data to, and process it in, countries other than your country of residence. Where such transfers occur, we ensure they are protected by appropriate safeguards, such as standard contractual clauses, adequacy decisions, or other legally recognized transfer mechanisms.

By using the Platform, you acknowledge that your personal data may be transferred and processed outside your country of residence, subject to the safeguards described above.

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes, we will notify you by posting a notice on the Platform, sending an email to your registered address, or both, prior to the change becoming effective.

The “Effective” date at the top of this Policy indicates when it was last revised. Your continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

If you have any questions, concerns, or requests regarding this Policy or your personal data, please contact us:

We aim to respond to all legitimate requests within one month. If you are dissatisfied with our response, you may have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.