TBBIT User Privacy Agreement (Announcement)

Dear User:

To protect your personal information and assets and improve the quality of our platform services, TBBIT Digital Asset Trading Platform (hereinafter referred to as the "Platform") has formulated this Privacy Policy in accordance with relevant data protection laws and regulations and platform security standards.

Please read this agreement carefully before using our platform services. By registering, logging in, or using any TBBIT service, you acknowledge that you have read, understood, and agreed to all the contents of this agreement.

I. Scope of Information Collection

To provide secure, compliant, and efficient trading services, TBBIT will collect the following information within the necessary scope:

1. Registration and Identity Authentication Information

• Mobile phone number, email address

• Real-name authentication information (name, ID number, ID photo, photo of the person holding the ID, etc.)

• Facial recognition information, identity verification video (if applicable)

2. Transaction and Account Information

• Deposit, withdrawal, and trading records

• Wallet address, asset balance, order details

• Proof of funds source and risk assessment information

• Risk control records, abnormal account markers

3. Device and Behavior Information

• IP address, device model, operating system version

• Browser type, language, time zone

• Login records, operation logs

• VPN/proxy usage status, abnormal region login information

4. Customer Service Interaction and Communication Information

• Chat content between you and customer service, ticket records

• Complaints, feedback, and related processing results

II. Purpose of Information Use

TBBIT Commitment We will only use your information legally, necessary, and securely, primarily for the following purposes:

1. Providing and maintaining transaction services

• Account registration and login management

• Know-It-Case (KYC) and Anti-Money Laundering (AML) verification

• Core functions such as transaction matching and asset management

2. Ensuring account and asset security

• Risk identification and abnormal behavior monitoring

• Preventing fraud, account theft, money laundering, and other illegal activities

• Risk control notifications and security verification

3. Optimizing platform products and services

• System performance improvement

• Function optimization and user experience enhancement

• Service quality assessment and data statistical analysis

4. Fulfilling legal and regulatory obligations

• Compliance review and regulatory requirements

• Anti-Money Laundering (AML) verification and Counter-Terrorist Financing (CTF)

• Assisting law enforcement investigations (if required by law)

TBBIT promises: We will not sell, exchange, or illegally provide your personal data.

III. Information Sharing and Disclosure

TBBIT will not disclose or leak your personal information; however, the platform may share or disclose necessary information in the following circumstances:

1. With your explicit authorization

2. As required by laws and regulations or formal letters from regulatory agencies

3. To complete transactions, necessary information must be shared with partner institutions (such as payment institutions)

4. To protect the property security of the platform or other users, there is a reasonable need to disclose information (such as fraud investigations)

All information sharing adheres to the principles of minimization, legality, and necessity.

IV. Information Storage and Protection

TBBIT provides multiple layers of protection for your information security from both technical and management perspectives:

1. Encrypted data storage using high-strength encryption algorithms.

2. Tiered access control for important data.

3. Encryption protocols (HTTPS/SSL) used during transmission.

4. Deployment of security facilities such as firewalls and intrusion detection systems.

5. Restriction of data access personnel and strict auditing.

6. In the event of a data security incident, users and regulatory authorities will be notified in accordance with the law.

V. Information Retention Period

1. User basic information, transaction records, and risk control data will be retained for 3–5 years as required by regulations or for a longer period as stipulated by law.
2. Information exceeding the retention period will be anonymized or securely deleted.

3. Even if a user applies to cancel their account, some data must still be archived within the compliant period as required by law.

VI. User Rights

TBBIT respects users' data rights. You may exercise the following rights:

1. Right to Inquiry: View your account information, assets, transaction records, etc.

2. Right to Correction: Modify inaccurate, expired, or incomplete information.

3. Right to Deletion: Request the deletion of some personal information within the scope permitted by law.

4. Right to Cancel Account: Apply to cancel your account (this does not affect data that is legally required to be retained).

5. Right to Restrict Processing: Restrict the processing of data under specific circumstances.

To exercise the above rights, you can submit an application through customer service or a support ticket.

VII. Protection of Minors

TBBIT prohibits minors under the age of 18 from using its transaction services.

If a minor user is discovered, the platform will immediately take the following measures:

• Account Restriction

• Function Freeze

• Compliance Measures

VIII. Agreement Updates and Notifications

TBBIT reserves the right to update this Privacy Policy at any time based on business development, changes in laws and regulations, etc.

The updated agreement will be announced to users through platform announcements.

If you continue to use the platform services, you are deemed to have agreed to the updated Privacy Policy.

TBBIT reminds you: Your information security is just as important to us as your asset security. We will continue to strengthen our platform technology and compliance capabilities to provide you with a safe and reliable trading environment.