Privacy Policy

1. Scope of application and responsible parties

This policy applies to the GD Markets Global website, account opening link, customer portal, mobile or web services, marketing activities and customer support communications. The relevant operating entities that provide you with account opening or trading services are usually the controllers of the corresponding personal information. The specific name and contact information are subject to the account opening documents, customer agreements and regulatory information pages.

Third-party websites, payment channels, platform providers or social media may have their own privacy policies applicable. Before you leave this website or actively use third-party services, you should read their policies separately.

2. Information we collect

We may process the following categories of information based on the services you use, your region and compliance requirements:

• Identity and contact information, including name, date of birth, nationality, address, email address, phone number, signature and government-issued identification information.
• Financial and suitability information, including occupation, income, assets, sources of funds, tax residency, trading experience, risk tolerance and bank or payment account details.
• Account and transaction information, including application records, account numbers, deposits and withdrawals, positions, orders, transaction history, platform settings and account-related operation logs.
• Device and network information, including IP address, browser, device identifier, operating system, access times, cookies, page interactions, and security event records.
• Communication and support information, including emails, chats, phone recordings, complaints, questionnaire feedback and documents you submit to us.
• Sensitive information that needs to be processed by law, such as biometric results for identity verification, health or politically exposed person screening information; processed only to the extent legal and necessary.

3. Source of information

Information is typically provided directly by you, may also come from your authorized agent, introducing broker or partner, as well as the following lawful sources:

• Identity verification, anti-money laundering, sanctions, credit or fraud prevention service providers.
• Banks, payment institutions, trading platforms, liquidity or technical service providers.
• Regulators, government departments, courts, public registers and other publicly available sources.
• Technical, log and analytical data automatically generated when you use the Site and Platform.

4. Purpose and legal basis of processing

We only process personal information where we have a lawful basis to do so. Depending on the jurisdiction, processing may be based on the performance of a contract, compliance with a legal obligation, the protection of legitimate interests, obtaining consent or the settlement of legal claims. The main purposes include:

• Review account opening applications, verify identity, evaluate product suitability, and establish and manage accounts.
• Execute transactions, process funds, send reports, provide platform and customer support.
• Fulfill know-your-customer, anti-money laundering, sanctions, tax filing, auditing, regulatory retention and investigation obligations.
• Prevent fraud, cyberattacks, account takeovers, market abuse, and other illegal activities.
• Improve the website, products and services, and carry out statistics, quality control, system testing and business continuity management.
• Send service updates, market information or marketing information as permitted by law or with your consent; you can unsubscribe from non-essential marketing at any time.

5. Cookies and similar technologies

The website may use necessary cookies, preference cookies, performance analysis technologies and, with applicable consent, marketing technologies. Necessary cookies are used for login, security, load balancing and saving basic settings and generally cannot be turned off via on-site options.

You can manage non-essential cookies through the settings provided by your browser or website. Restricting cookies may prevent some features, language preferences, or login status from working properly.

6. Information sharing and service providers

We do not sell personal information. In order to provide services or perform obligations, information may be disclosed to the following recipients to the extent necessary:

• GD Markets Global related operations, compliance, technology and support teams.
• Service providers such as identity verification, cloud hosting, cybersecurity, payments, banking, trading platforms, communications, analytics, auditing, and professional advisors.
• Introducing a broker or partner, but only to the extent necessary to manage the referral relationship, commissions and client service, subject to applicable confidentiality requirements.
• Regulators, law enforcement agencies, courts, tax authorities or other bodies legally entitled to request information.
• Potential parties involved in mergers, reorganizations, financings or business transfers, subject to appropriate confidentiality and data protection measures.

7. Cross-border transmission

Because services, platforms, and providers may be located in different countries or regions, personal information may be transferred outside of your region. The data protection rules at the receiving location may differ.

Where required by law, we use measures such as contractual protections, regulatory approved transfer mechanisms, supplier due diligence, access restrictions and data minimization and transfer only the information necessary to fulfill the purpose.

8. Shelf life

We only retain information for as long as necessary to fulfill the purposes for which it was collected, to perform the contract, to meet regulatory and tax retention obligations, to deal with complaints or legal claims, and to maintain security. After an account is closed, some identity, transaction and communication records may still be retained in accordance with the law.

After the expiration of the period, the information will be securely deleted, anonymized, or placed in restricted archiving status. The specific periods for different information categories depend on the account opening entity, product, region and applicable laws.

9. Information Security

We use organizational and technical measures to protect information based on risk, but Internet transmission and electronic storage cannot be guaranteed to be absolutely secure. Measures may include:

• Identity and permission management, multi-factor authentication, least privilege and employee confidentiality requirements.
• Transport or storage encryption, network isolation, vulnerability management, log monitoring, and incident response.
• Supplier security assessment, contractual constraints, backups, disaster recovery and periodic testing.
• Account security reminder and abnormal behavior monitoring. You should properly protect your passwords, verification codes and devices, and promptly report suspicious activity.

10. Your rights and choices

Subject to applicable law, you may have the right to make the following requests. Some rights are subject to identity verification, statutory exceptions, regulatory preservation obligations or the rights of others:

• Find out whether we process your information and request access or a copy.
• Correct inaccurate or incomplete information.
• Application for erasure, restriction of processing, objection to processing or access to portability of data where statutory conditions are met.
• Withdraw consent-based processing or unsubscribe from marketing; withdrawal does not affect the lawfulness of previous processing.
• Dispute a purely automated decision, request a human review, or file a complaint with the competent data protection authority.

11. Information about minors and others

The service is not intended for persons who have not reached the local legal age of majority or do not have the ability to contract. We do not knowingly open trading accounts for minors.

If you are submitting information on behalf of a company, joint account holder, beneficial owner or other person, you should ensure that you are legally authorized to do so and provide this policy to the relevant person.

12. Policy update

We may update this policy due to legal, regulatory, technical or business changes. Major changes will be notified through the website, customer portal, email or other appropriate means, and the new effective date will be marked on the page.

You should check the latest version regularly; continued use of the service will not affect your data protection rights granted by law.