Privacy Policy

Last Updated: 10.08.2025

NIO Exchange (NIO, we, us, or our) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you access or use our website, applications, and services (collectively, the Services). By using NIO Exchange, you agree to the terms of this Privacy Policy.

1. Information We Collect

NIO Exchange collects information to deliver a secure, compliant, and optimized trading experience. We gather both personal and transactional data, technical details, and behavioral insights, including

Personal Identification Information

Full name, date of birth, nationality, government-issued IDs (passport, national ID, driver’s license). This ensures compliance with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations.

Contact Details

Email address, phone number, and residential address, which allow us to communicate account notifications, updates, and support responses.

Financial and Transactional Data

Bank account and payment card information, cryptocurrency wallet addresses, deposit and withdrawal history, trading activity, and account balances. This enables us to process trades, verify transactions, and maintain accurate records.

Account and Security Data

Login credentials, multi-factor authentication setup, biometric identifiers (if used), and security questions to protect your account from unauthorized access.

Platform Usage and Activity Data

IP addresses, device type, browser, operating system, session duration, and pages visited. This helps optimize the platform, improve performance, and prevent fraudulent activity.

Communications and Feedback

Messages sent to support, survey responses, and feedback, which guide service improvements and user experience optimization.

Compliance and Risk Information

Source of funds, employment details, proof of income, behavioral patterns, and transaction monitoring for anti-fraud, AML, and security purposes.

Third Party Verification Data

Information obtained from trusted external sources, including identity verification services, regulatory lists, and public databases, to validate user identity and ensure compliance.

Blockchain and On Chain Data

Transaction hashes, wallet addresses, and smart contract interactions to support crypto trading, auditing, and security.

This comprehensive collection ensures NIO Exchange maintains a safe, compliant, and seamless trading environment while offering a tailored user experience.

2. How We Collect Information

NIO Exchange collects information through multiple channels to maintain service quality, security, and compliance

Directly from Users

Data is collected when you register an account, verify your identity, submit payment information, or interact with our customer support. Any surveys, feedback submissions, or participation in promotions also provide personal information voluntarily.

Automatically through Platform Interaction

Cookies, web beacons, and analytics tools capture technical details such as IP address, browser type, device type, operating system, screen resolution, and interaction patterns. These tools help us monitor usage, improve user experience, and detect suspicious behavior.

Third Party Sources

We receive information from payment processors to confirm transactions, identity verification services to validate KYC data, and public or regulatory databases for AML compliance and sanctions screening.

Blockchain Activity Data

Deposits, withdrawals, and trades generate on-chain data. Transaction hashes, wallet addresses, and smart contract interactions are recorded to facilitate trading, track transactions, and ensure security.

Security Monitoring Systems

Automated systems continuously detect suspicious activity, account anomalies, and potential fraud. This enables rapid responses to security threats and protects user funds.

By collecting information through these methods, NIO Exchange ensures regulatory compliance, platform integrity, and a secure trading environment while offering users a high-performance crypto trading experience.

3. Purpose of Processing

NIO Exchange collects and processes personal and transactional information to ensure a secure, efficient, and compliant trading environment. Your data is used for multiple critical purposes, which include but are not limited to

Enabling Platform Functionality

Your information allows us to open and manage accounts, execute cryptocurrency trades, process deposits and withdrawals, and provide seamless access to all features of NIO Exchange. Without these details, we cannot accurately verify users, maintain balances, or facilitate smooth trading operations.

Ensuring Security and Fraud Prevention

Data is continuously analyzed to detect suspicious activity, unauthorized access attempts, and potential fraudulent transactions. This includes monitoring login patterns, trading anomalies, and unusual withdrawal requests to protect user funds and the platform’s integrity.

Regulatory Compliance and Legal Obligations

To comply with KYC, AML, and other financial regulations, we process your personal and financial information. This ensures that we can verify identity, monitor transactions for illicit activity, report to regulatory authorities when required, and maintain compliance with global financial standards.

Providing Customer Communication and Support

We use your contact information to send account notifications, transaction alerts, security updates, and respond to support inquiries. Additionally, information helps us provide personalized assistance and resolve account or technical issues promptly.

Platform Optimization and Service Improvement

Aggregated and anonymized data is analyzed to improve user experience, optimize trading performance, and identify trends. Insights from trading patterns and platform usage inform the development of new tools, features, and services tailored to user needs.

Marketing, Promotions, and Referral Programs

With your explicit consent, we use contact information to inform you about platform updates, trading promotions, referral incentives, and educational resources. These communications are intended to enhance your trading experience and provide value to NIO Exchange users.

Processing of information is limited strictly to purposes necessary for account operation, regulatory compliance, security, and platform improvement, ensuring your data is handled responsibly and ethically.

4. Legal Basis for Processing

NIO Exchange processes your personal data in strict accordance with international privacy and financial regulations. The legal bases for processing include

Contractual Necessity

Personal and transactional information is processed to deliver our trading services, manage your account, execute transactions, and fulfill contractual obligations. Without this information, we cannot provide the core functions of our crypto trading platform.

Compliance with Legal and Regulatory Requirements

Processing is necessary to comply with KYC/AML obligations, taxation rules, reporting obligations, and other applicable financial regulations. This ensures that all trades, deposits, and withdrawals are fully compliant with global and local legal frameworks.

Legitimate Interests of the Exchange

NIO Exchange processes data to protect the security and integrity of the platform. This includes detecting fraud, preventing money laundering, monitoring suspicious trading patterns, analyzing platform performance, and maintaining operational stability. Processing under this basis is performed in a way that balances platform security and user privacy.

Consent

Certain processing activities, including marketing communications, promotional offers, and participation in referral programs, are based on your explicit consent. You have the right to withdraw consent at any time, and withdrawing will not affect essential platform operations.

By clearly defining these legal bases, NIO Exchange ensures transparency, user protection, and compliance with global data protection laws, while providing a secure, regulated, and trustworthy environment for cryptocurrency trading.

5. Data Sharing & Disclosure

NIO Exchange treats your personal, financial, and transactional data with the highest level of confidentiality. We only share information in situations necessary for platform operations, compliance, or legal obligations.

Key scenarios for data sharing include

• Regulatory and Legal Compliance 
  We may share your data with regulatory authorities, law enforcement, or financial institutions when required by applicable laws, regulations, or legal processes. This includes anti-money laundering (AML) checks, sanctions screening, tax reporting, and investigations related to illegal activity.
• Service Providers and Business Partners 
  To operate the exchange efficiently, we may share certain information with trusted third-party service providers. These can include payment processors, KYC/AML verification services, cloud hosting providers, security monitoring vendors, and technical support providers. All partners are contractually obligated to handle data securely and use it solely for the purposes of providing the service.
• Transactional Verification and Blockchain Services 
  Data related to cryptocurrency trades, deposits, and withdrawals may be shared with blockchain networks, nodes, or auditors for verification purposes. This ensures accurate recording of transactions, prevents double-spending, and maintains platform integrity.
• Fraud Detection and Security 
  Information may be shared with third-party fraud detection services or internal risk monitoring teams to prevent unauthorized activity, detect suspicious transactions, and protect both users and the exchange from potential breaches.
• Aggregated and Anonymized Data 
  We may share non-personally identifiable, aggregated data for analytics, research, or marketing purposes. This data cannot be traced back to individual users and is used to improve services and platform performance.

Commitment to Privacy

All third party partners are selected with strict security and compliance standards. NIO Exchange ensures that your data is only disclosed as necessary, and all sharing is conducted in accordance with applicable privacy laws and regulations.

6. Data Retention

NIO Exchange retains your personal and transactional data for as long as necessary to provide services, meet legal obligations, and ensure platform security. Retention periods are determined based on regulatory requirements, internal business needs, and the nature of the information.

Account and Transaction Data

Records related to your account, trades, deposits, withdrawals, and wallet interactions are retained for a minimum period required by financial and tax regulations. This typically ranges from 5 to 10 years, depending on jurisdiction.

Identity and KYC Verification Documents

Government-issued IDs, proof of address, and other verification documents are stored securely for the duration required by AML, KYC, and other regulatory requirements.

Security and Compliance Records

Logs related to platform access, transaction monitoring, and security audits are retained to detect, investigate, and prevent fraudulent or illegal activity.

Marketing and Communication Preferences

Information related to subscriptions, promotions, and user preferences is retained until consent is withdrawn, ensuring that communications remain relevant and compliant with your choices.

Data Minimization and Deletion

Once data is no longer necessary for operational, legal, or regulatory purposes, it is securely deleted or anonymized. Users may also request account closure or data deletion, subject to legal and regulatory retention requirements.

Commitment to Security and Compliance

NIO Exchange applies strict technical and organizational measures to ensure that all retained data is secure, protected against unauthorized access, and handled in accordance with applicable laws.

7. Data Security

NIO Exchange prioritizes the protection of your personal, financial, and transactional data using advanced security measures. The exchange implements both technical and organizational safeguards to ensure data integrity, confidentiality, and availability.

Encryption and Secure Storage

All sensitive data, including passwords, personal identification information, and transaction details, is encrypted both in transit using TLS/SSL protocols and at rest using advanced cryptographic algorithms.

Multi-Factor Authentication (MFA)

Users are strongly encouraged to enable Multi-Factor Authentication (MFA), providing an additional layer of protection for account access and critical actions such as withdrawals or account setting modifications.

Access Controls

Internal access to data is strictly limited to authorized personnel who require it for operational, compliance, or security purposes. Role-based access controls ensure minimal exposure of sensitive information.

Regular Security Audits

NIO Exchange undergoes periodic security assessments, penetration tests, and system audits to identify vulnerabilities and continuously strengthen platform security.

Incident Response

In the event of a data breach or security incident, NIO Exchange maintains a robust response plan, including timely notifications to affected users and regulatory authorities as required by law.

Cold Storage and Hot Wallet Segregation

Cryptocurrency assets are securely managed using a combination of cold storage for long-term holdings and hot wallets for transactional liquidity, minimizing exposure to cyber threats.

8. International Data Transfers

NIO Exchange operates globally, and your data may be stored, processed, or transmitted across international borders.

Global Operations

Servers and service providers may be located in multiple countries to ensure platform availability, performance, and compliance with regional regulations.

Data Protection Measures

All international transfers comply with applicable data protection laws, including GDPR when relevant. Transfers are executed with contractual safeguards, standard data protection clauses, and security measures to protect your information.

User Transparency

NIO Exchange ensures users are aware of the possibility of international data processing and that such processing maintains the same level of security and regulatory compliance as in your home jurisdiction.

9. Your Rights

As a user of NIO Exchange, you have specific rights regarding the collection and processing of your personal data

• Access and Portability
  You can request access to your personal data and obtain a copy in a structured, machine-readable format for your records or transfer to another service provider.
• Correction and Update 
  You can request correction or updating of inaccurate, incomplete, or outdated personal information.
• Withdrawal of Consent 
  Where data processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Objection and Restriction 
  You can object to certain types of data processing, including direct marketing or profiling, and request restriction of processing under applicable laws.
• Deletion 
  You may request deletion of your personal data, subject to regulatory or legal obligations that may require retention of certain records (e.g., KYC or transaction history).
• Filing Complaints 
  You have the right to file complaints with relevant data protection authorities if you believe your privacy rights are not respected.

NIO Exchange is committed to responding to all requests promptly and transparently.

10. Cookies & Tracking Technologies

• NIO Exchange uses cookies and other tracking technologies to enhance platform performance, security, and user experience:
• Essential Cookies 
  Necessary for the basic operation of the platform, including login sessions, security verification, and transaction processing.
• Performance and Analytics 
  Collect information on platform usage, page performance, and user interactions to optimize features and improve the trading experience.
• Marketing and Personalization 
  With your consent, cookies may be used to deliver targeted promotions, updates, and educational content relevant to your trading activities.
• User Control 
  You can manage cookie preferences through your browser settings, including blocking, deleting, or limiting cookies. Essential cookies required for platform operation cannot be disabled.
• Third-Party Cookies 
  NIO Exchange may utilize third-party services for analytics, security, or marketing. These providers adhere to strict privacy standards and do not access personal information beyond what is necessary for their services.

11. Children’s Privacy

NIO Exchange is strictly intended for users who meet the legal minimum age for financial transactions in their jurisdiction, typically 18 years or older.

No Collection from Minors

We do not knowingly collect personal information from individuals under the legal age. Anyone found to have provided such information will have their account and data immediately removed from our systems.

Reporting Violations

If you believe that a minor has submitted personal data, please contact NIO Exchange immediately so we can take prompt action to remove the information.

NIO Exchange prioritizes the safety and privacy of minors and maintains strict policies to prevent underage access.

12. Updates to This Policy

NIO Exchange may update this Privacy Policy periodically to reflect changes in operations, regulatory requirements, or technology improvements.

Notification of Changes

Users will be notified of material changes via email or announcements on the platform.

Effective Date

Updates take effect immediately upon publication unless otherwise stated. Users are encouraged to review the Privacy Policy regularly to stay informed about data handling practices.

Continuous Compliance

Any modifications will ensure continued compliance with applicable privacy and financial regulations, maintaining transparency and user trust.

By continuing to use the platform after updates, users acknowledge and accept the revised policy.

13. Disclaimer

While NIO Exchange implements advanced technical and security measures to protect your information, no system connected to the Internet can be guaranteed to be completely secure. As such, NIO Exchange does not make any warranties or assurances regarding the absolute security of the personal information you provide.

The platform shall not be held liable for any loss, damage, or consequences resulting from unauthorized access, cyberattacks, security breaches, or any incident beyond NIO Exchange’s reasonable control. Users are responsible for maintaining the confidentiality of their account credentials and adopting recommended security practices.

14. Contact Us

For any questions, concerns, or requests related to your personal data, privacy, or this policy, you can contact NIO Exchange at:

Email: [e-mail]