Privacy Policy

Bit Bank AG · Zurich, Switzerland · Last updated: April 2026 · FADP Compliant

Summary: We collect the minimum data necessary. All data is stored exclusively in Switzerland. We never sell your data. Decentralised trading requires no personal data. Custody services require KYC data under Swiss law. You have full rights to access, correct, and delete your data.

1. Data Controller

Bit Bank AG, Zurich, Switzerland is the data controller. Contact: privacy@bit-bank.io

2. Data We Collect

Decentralised Services (no account required):

Wallet address (public blockchain data)
IP address (for geo-restriction enforcement only, not stored)
Browser type and language (for optimal experience delivery)
Trading activity (on-chain, publicly visible by design)

Custody Services (KYC required):

Full name, date of birth, nationality
Email address, phone number
Residential address
Identity documents (passport, ID card)
Source of funds documentation
Transaction history

3. How We Use Your Data

To provide and improve our services
To comply with Swiss AMLA/FINMA requirements
To prevent fraud and money laundering
To communicate service updates (custody clients only)
To enforce geo-restrictions on sanctioned jurisdictions

We do not use your data for advertising, profiling, or sale to third parties.

4. Data Storage & Security

All personal data is stored exclusively in Switzerland, in data centres compliant with ISO 27001. Custody client data is encrypted at rest using AES-256 and in transit using TLS 1.3. KYC documents are stored in the Mount10 secure facility.

5. Data Sharing

We share data only when required by Swiss law, specifically:

Swiss tax authorities (upon valid legal request)
FINMA (regulatory obligations)
Swiss courts (upon valid court order)

We do not share data with foreign authorities unless required under Swiss mutual legal assistance treaties.

6. Cookies

We use only essential cookies for language preferences and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. See our Cookie Policy for details.

7. Your Rights (FADP)

Under the Swiss Federal Act on Data Protection (FADP), you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data (subject to legal retention requirements)
Object to data processing
Data portability
Lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC)

8. Data Retention

KYC data: retained for 10 years after termination of the business relationship (AMLA requirement). Transaction records: retained for 10 years. Marketing consent: until withdrawn. Cookie preferences: 12 months.

9. Contact

Data Protection Officer: privacy@bit-bank.io
Bit Bank AG, Zurich, Switzerland