Privacy Policy

Account data

• email address, password (stored only as a protected hash, never in readable form), one-time sign-in and confirmation codes;
• name or nickname, country, phone number and other profile details you choose to enter;
• account settings, for example language and wallet display preferences.

Wallet and operations

• USDT, XFS and HiB balances and the history of deposits, withdrawals, exchanges, bonuses and game results;
• your withdrawal addresses, deposit addresses issued to you and blockchain transaction identifiers (hashes);
• referral data: who invited you and the users you invited.

Communication

• messages you post in the community chat, with your display name;
• support requests, replies and images you attach in the Support Center;
• messages sent through the contact form (name, email, phone and text);
• notifications we send you on the platform.

Technical data

• IP address, browser and device type, pages requested, time of requests;
• security and error logs, for example failed sign-in attempts;
• the cookies and browser storage described in the Cookie Policy.

Identity verification. At this stage XFasil does not collect identity verification data. The KYC Policy describes the current status; this policy will be updated before any such data is collected.

We do not use advertising trackers and we do not sell personal data.

• to create and run your account, sign you in and protect it with email codes;
• to keep your balances, process deposits and withdrawals, run games, bonuses and the referral programme;
• to run the community chat and its moderation;
• to answer support requests and messages from the contact form;
• to send notifications on the platform about your requests and account;
• to detect and prevent fraud, abuse, spam and security incidents;
• to fix errors, measure load and improve the platform;
• to meet legal obligations and to establish or defend legal claims.

Where the law requires a legal ground, we process your data because it is necessary to provide the service you asked for under the Terms & Conditions, because of our legitimate interest in keeping the platform secure and working, because the law requires it, or, where needed, with your consent. You may withdraw consent at any time; this does not affect processing carried out before.

We share personal data only as far as necessary, with:

• hosting and infrastructure providers that run our servers and databases;
• an email delivery provider that sends sign-in and confirmation codes;
• a bot protection service (Google reCAPTCHA) on sign-in and registration forms, where it is enabled;
• blockchain services used to check deposits on the TRON network;
• an error monitoring service, where it is enabled, to investigate failures;
• authorities, courts or other parties where the law requires it or to protect the rights and safety of XFasil and its users.

Other users see only your display name and the messages you post in the community chat.

Market data. To show live prices, your browser connects directly to the public servers of our market data provider. The provider receives technical connection data (such as your IP address) under its own privacy policy; XFasil does not send it your account data. Some coin logos are downloaded by our server from a third-party image provider; your browser receives them from XFasil.

Deposits and withdrawals are transfers on a public blockchain. Addresses, amounts and transaction hashes are recorded on the blockchain permanently and are visible to anyone. XFasil cannot change or delete data recorded on a blockchain.

Our providers may process data in countries other than yours. Where this happens, we take the measures required by applicable law to protect the data.

We keep personal data as long as your account is active and afterwards for as long as needed to keep records of operations, security logs and correspondence, to resolve disputes and to meet legal obligations. Chat messages deleted by moderators are no longer shown to users. When data is no longer needed, we delete or anonymise it.

Depending on the law that applies to you, you may have the right to:

• get access to your personal data and a copy of it;
• correct inaccurate data;
• ask for deletion of your data or closure of your account;
• restrict or object to certain processing;
• receive your data in a portable format;
• complain to a data protection authority.

Some data cannot be deleted immediately, for example records of operations we must keep or data recorded on a blockchain. To use your rights, contact us through the Support Center. We may ask you to confirm that the request comes from the account owner.

XFasil is intended only for adults (see the Terms & Conditions). We do not knowingly collect data of minors. If you believe a minor has created an account, please contact support.

We protect data with encrypted connections (HTTPS), protected password hashes, sign-in codes, access control for staff and regular security work. No system is completely secure, so please use a unique password, keep your email account protected and never share codes from XFasil emails.

The platform may contain links to other websites (for example, blockchain explorers or data providers). Their own privacy policies apply to them.

We may update this Privacy Policy. The date of the current version is shown at the top of this page. If the changes are significant, we will inform you on the platform.

For privacy questions and requests, use the Support Center.