Privacy Policy

Effective date: 1 January 2026

Data We Collect

CitiCash collects name, email address, government-issued ID documents, and financial information required for KYC compliance. This data is collected during registration and identity verification.

We also collect technical data — IP addresses, device type, browser version, and session logs — to detect fraud, prevent unauthorized access, and maintain platform security.

How We Use Your Data

Your data is used to verify your identity, process transactions, detect suspicious activity, and comply with legal obligations. We do not sell personal data to third parties for marketing purposes.

Cookies

citicash.io uses essential cookies to maintain your session and platform preferences. Analytics cookies (anonymized) help us understand how users navigate the platform so we can improve it.

You can disable non-essential cookies via your browser settings at any time. Disabling essential cookies will prevent you from logging into your account or placing trades.

Data Sharing

CitiCash shares data only with: identity verification providers, regulated payment processors, and legal authorities when required by court order or applicable law. All processors are contractually bound to GDPR-equivalent standards.

Data Security

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Access to personal data is restricted to authorized personnel on a strict need-to-know basis.

CitiCash conducts annual independent security audits. Any confirmed data breach that poses material risk to users will be disclosed within 72 hours as required by applicable regulation.

Your Rights

You have the right to access, correct, or delete your personal data. Submit requests to privacy@citicash.io. We respond within 30 days. Identity verification is required before process info@citicash.io ing deletion requests.

Third-Party Links

The platform may contain links to external websites. CitiCash is not responsible for the privacy practices or content of any third-party site. Review their policies independently.

Data Retention

Account data is retained for a minimum of 5 years after account closure to meet AML regulatory requirements. Anonymized analytics data may be retained indefinitely.

Policy Updates

This policy may be updated to reflect legal or operational changes. Updates are posted at citicash.io/privacy with an updated effective date. Significant changes will be communicated by email.