1. Introduction
1.1. Deriv group of companies dey committed to protect your personal data and respect your privacy. Dis Privacy Policy explain how we dey collect, use, store, disclose, and protect personal data across all Deriv entities and for connection wit our products, services, applications, and websites. Wen we tok “we”, “us”, or “our” for dis Privacy Policy, we mean di specific entity inside Deriv group wey dey responsible to process your personal data, normally na di Deriv group entity wey you get business relationship wit or wey dey provide services to you (as e dey described for di “Data controller and contact information” section below).
1.2. Dis Privacy Policy dey apply to current and prospective clients, website visitors, business partners, service providers (and dia employees), event participants, visitors to our offices, and anybody wey dey interact wit our products, services, mobile apps, platforms, or digital channels, no matter dia kontri of residence. Dis Privacy Policy no dey apply to job applicants or employees of Deriv group.
1.3. We dey process your personal data as controller, according to applicable laws, wey fit include European Union General Data Protection Regulation (GDPR), United Kingdom General Data Protection Regulation (UK GDPR), and oda applicable privacy laws (“Privacy Laws”).
2. Categories of personal data
2.1. Depending on di relationship wey you get wit us, we fit collect and process one or more of di following types of personal data, like:
2.1.1. Identity data: First name, surname, gender, nationality, date of birth, and/or identification documents wey govment issue (including passports, driving licences, national IDs, and/or resident permits).
2.1.2. Contact data: Postal address, email address, and/or telephone number.
2.1.3. Professional data: Job title, employer name, occupation, areas of responsibility, and/or remuneration.
2.1.4. Residential information, including rental/tenancy agreements, title deeds, and utility bills.
2.1.5. Communication data: Content of communications (emails, live chat, AI-assisted chat interactions, call recordings and logs, feedback, and/or market research responses).
2.1.6. Services data: Account or application information, trade or transaction history, contracts, preferences, and/or usage records.
2.1.7. Provider data: Information wey dem exchange as service provider or partner (contract details and/or meeting notes).
2.1.8. Visitor data: Details about office visit (entry logs, date/time and purpose of visit, and/or special needs wey dem communicate).
2.1.9. Consent data: Consents wey you give/withdraw, cookies, and/or marketing authorisations and preferences.
2.1.10. Payment data: Billing address, payment details, bank account, payment method, and/or payment history.
2.1.11. Usage data: Di transactions wey you make for your account, how you dey use our different platforms and products, or how you dey interact wit our websites, applications, marketing, and communications.
2.1.12. Digital data: For example, IP address, location information (including GPS and geolocation), device and browser data, and/or security information (like how you dey Log in or authenticate yourself to access your account).
2.1.13. Verification data: Proof of address, source of wealth, and/or source of funds.
2.1.14. Biometric data: Data wey dem process for unique identification, like facial recognition or voiceprints. Some photographs, images, audio, or video recordings fit qualify as biometric data if dem process am for identification purposes.
2.1.15. Event participation data: Information for event registration, attendance, and/or participation.
2.1.16. Other: Any additional information wey you supply, or wey law require us to collect, or wey relate to our professional activities.
3. Sensitive personal data
3.1. Unless we expressly request am or law require am, make you no provide or disclose any sensitive personal data to us, including through our websites, applications, or oda channels. Depending on your jurisdiction, "sensitive personal data" fit include, but e no limited to, data wey relate to your racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health, genetic or biometric data, sexual orientation, criminal background, or administrative or legal proceedings and sanctions.
3.2. If we need collect or process sensitive personal data, we go do am only according to applicable Privacy Laws and only wia we get valid legal basis, like your explicit consent, compliance wit legal obligation, or as e dey necessary to establish, exercise, or defend legal claims.
4. Sources of personal data
4.1. We fit collect your personal data for di following situations from:
4.1.1. You directly: Wen you interact wit us, register, correspond wit our teams, attend events, or visit our offices;
4.1.2. Our websites/applications: Wen you use our products and services, engage wit our websites, applications or communicate wit us, for example, through forms, cookies, or usage logs;
4.1.3. AI-powered tools: Wen you interact wit AI-assisted tools wey Deriv make available, like Amy, our AI chat assistant, or AI-assisted voice/telephone calls. Dis include di content of your interactions (including voice recordings), any personal data wey you provide, and associated technical data (like session identifiers and timestamps);
4.1.4. Third parties: Including business partners, service providers, public authorities, or verification databases;
4.1.5. Public sources: Like regulatory registers or databases wey dey publicly available;
4.1.6. Self-generated by Deriv: As we dey provide our services (e.g. meeting records, call recordings, call logs) or by creating insights or oda information about you wen we dey analyse information wey we already get; and/or
4.1.7. Requests wey dey continue for information: As part of our compliance and due diligence wey dey continue, and to make sure say our services secure and complete, we fit ask you make you provide more personal data or supporting documents at any time during di period wey you dey relate wit us.
5. Lawful basis and purposes
5.1. We go only use your personal data wia you don give us your consent or wia we get lawful reason to use am. Dis reasons fit include:
5.1.1. To process your personal data so we fit comply wit legal obligation, including licensing requirements, anti-fraud requirements, and anti-money laundering laws;
5.1.2. To process your personal data to enter agreement wit you or carry out agreement wey we get wit you;
5.1.3. To pursue our legitimate business interests; and/or
5.1.4. To establish, exercise, or defend our legal rights.
5.2. We fit use your information for di following purposes:
5.2.1. Customer management and account administration;
5.2.2. To provide services, carry out trades, and manage transactions;
5.2.3. Customer service support to make communication easy and handle complaints or disputes;
5.2.4. Partner management;
5.2.5. Client due diligence, Know Your Customer (KYC) procedures, anti-fraud measures, anti-money laundering (AML) activities, and sanctions screening;
5.2.6. Security and access control, site security, and to deal wit fraud, unlawful activity, or misconduct wey don happen or wey we suspect;
5.2.7. Marketing and analytics purposes, wey fit include to conduct surveys, measure customer satisfaction, and collect feedback;
5.2.8. To improve our products and services, conduct research and development activities, carry out user experience research, and gather business intelligence;
5.2.9. Events, webinars, training sessions, and learning programmes;
5.2.10. Finance, treasury, accounting, and payment processing;
5.2.11. Supplier and third-party management;
5.2.12. Risk management, crime prevention and detection, internal audits, corporate governance, and remediation activities;
5.2.13. To operate our website, applications, and platforms, and for IT and security infrastructure and system testing or development;
5.2.14. Legal compliance, to manage litigation or defence of legal claims, recordkeeping, and to protect our legitimate interests or legal rights, including to take legal action, respond to legal action, or make insurance claims;
5.2.15. Merger, acquisition, sale, asset transfer, restructuring, or bankruptcy of all or part of our business, including di relevant due diligence;
5.2.16. To process your requests or help you exercise your rights;
5.2.17. To produce and distribute audio, video, or oda media content;
5.2.18. Any oda purpose wey law, regulations, codes of practice, or court order require or authorise; and/or
5.2.19. Machine learning and automated processing, including to use personal data train, develop, and improve algorithms, models, or artificial intelligence systems, to improve our services, prevent fraud, manage risk, and run our business operations. Wia we use third-party AI providers power our tools and services, dem fit process your personal data to train or improve dia general models.
5.3. You acknowledge say we dey operate AI-powered tools, including (but not limited to) Amy, na AI chat assistant wey dey available for our website and applications, and AI-assisted voice calls. Wen you use Amy or oda AI-assisted chat or voice features, we fit process di content of your interaction (including any voice recordings) and any personal data wey you provide, and wia e apply, third-party AI technology providers wey dey act as processors on our behalf fit also process am.
5.4. We go clearly inform you if we rely on your consent, and you fit withdraw your consent at any time.
6. Disclosure of personal data
6.1. We fit share your personal data wit di following categories of recipients, wia e necessary and appropriate to achieve di purposes wey dis Privacy Policy outline, and based on corresponding legal basis:
6.1.1. Oda companies inside di Deriv group;
6.1.2. Agents, contractors, suppliers or service partners, including IT, cloud, AI technology providers, web-hosting, analytics, fulfilment, content providers, customer support, communication platforms and logistics service providers;
6.1.3. Payment processors, banks, and financial institutions to process transactions;
6.1.4. Regulators, courts, law enforcement, tax, or oda public authorities as law require or to protect our rights;
6.1.5. Professional advisers, including insurers, lawyers, auditors, and accountants, for business continuity, risk management, or during legal matters or claims;
6.1.6. Business partners;
6.1.7. Event or marketing partners, advertising networks, analytics providers, and social networks, as e relevant for marketing, advertising, product development, or event participation;
6.1.8. Wit your clear consent, to oda third parties wey you direct us make we share your data wit; and/or
6.1.9. Oda parties wey law, regulations, codes of practice or court order authorise or require Deriv make e disclose information to.
6.2. We require all third parties wey process your personal data on our behalf make dem provide appropriate security, comply wit applicable law, and give protection wey at least equal to wetin we describe here.
7. International data transfers
7.1. Di Deriv group na global business wey get offices, partners, and service providers for different places around di world, including for di European Economic Area (EEA), di United Kingdom, Asia, Africa, Latin America, and oda regions. Because of dis, dem fit process your personal data for, or transfer am to, countries outside your country of residence—including countries outside di EEA or UK—wey fit no provide di same level of data protection wey dey your home jurisdiction.
7.2. Wia personal data wey dey under GDPR, UK GDPR, or oda applicable Privacy Laws don transfer go kontri wey dem neva find say e dey offer adequate level of data protection, we go put appropriate safeguards for place according to di relevant legal requirements. Dis safeguards fit include Standard Contractual Clauses wey European Commission or UK government approve, adequacy decisions, further transfer impact assessments, and supplementary technical and organisational measures, as dem need am, to make sure say your personal data remain protected.
8. Data retention
8.1. We dey keep your personal data only for as long as e necessary to fulfil di purposes wey make us collect am, including to comply wit legal, regulatory, accounting, or reporting requirements, and according to our internal retention policies. Afta di applicable retention period don end, we go securely delete or anonymise your data, unless law require or allow longer retention period, like for di establishment, exercise, or defence of legal claims, or for archiving, scientific, or historical purposes.
9. Your rights
9.1. Depending on di jurisdiction wia you dey live and di Privacy Laws wey apply to your personal data, you fit get di following rights:
9.1.1. Information and access: You fit request to access your personal data, receive additional information about how we dey process am, and get details of public and private entities wey we don share your data wit. You fit also request copy of your personal data.
9.1.2. Rectification: You fit request make we correct or update personal data wey no correct or complete.
9.1.3. Erasure: You fit get di right to request make we delete your personal data, subject to applicable legal requirements.
9.1.4. Restriction of processing: You fit get di right to request make we restrict di processing of your personal data under certain circumstances.
9.1.5. Objection to processing: You fit get di right to object to certain types of processing, including direct marketing and profiling.
9.1.6. Data portability: You fit get di right to request portable copy of your personal data for structured format wey pipo commonly use and machine fit read, subject to legal limitations and as long as dis no go negatively affect di rights of odas or compromise confidential information.
9.1.7. Automated decision-making: You fit get di right make decisions wey dey based only on automated processing (including profiling) no affect you, wia such decisions produce legal or similarly significant effects.
9.1.8. Withdrawal of consent: Wia we dey process your data based on consent, you get di right to withdraw your consent at any time. Withdrawal no go affect di lawfulness of processing wey happen before you withdraw am.
9.1.9. Complaint to a supervisory authority: You fit get di right to submit complaint to data protection supervisory authority for di kontri wia you dey live, wia dem dey process your data, wia your data controller dey established, or wia potential data breach don happen.
9.2. Make you note say we fit request additional information from you to verify your identity before we process your request. For some cases, if request clearly get no basis, dey repeat, or too much, we fit charge reasonable fee or decline to act on di request, as applicable law allow.
9.3. You fit request to update your personal data for your account settings. Na your responsibility to make sure say your personal data remain correct and up to date, as we dey rely on dis data to provide our services. Make you note say if you provide information wey no correct or you no update your details wen dem change, e fit affect di quality or availability of our products and services to you.
9.4. If you wish to exercise any of dis rights or get questions about your rights under dis Privacy Policy, make you contact our Data Protection Officer for dpo@deriv.com.
9.5. Dis Privacy Policy no create, extend, or modify any rights or obligations except as applicable law grant dem (such as di relevant Privacy Laws).
10. Marketing
10.1. You get di right to opt out of receiving marketing materials from us. You fit do dis by withdrawing your consent at any point during di period wey you get account wit us.
10.2. You fit opt out of receiving marketing communications for your account settings or unsubscribe from marketing emails by clicking di “Unsubscribe” link wey dey inside all our marketing communications.
10.2.1. If you choose to opt out or unsubscribe from our marketing communications, make you note say you fit still receive transactional or service-related emails. We go make every effort to reduce how often we send dis messages and make sure say dem necessary for di proper functioning of our products and services.
10.2.2. Make you note say because of processing times, you fit receive some marketing communications for short time, even afta you don request to opt out or unsubscribe. Also, if marketing communication don dey transit or dem dey send am, you fit still receive am. If you still dey receive marketing communications from us afta reasonable time don pass, contact us through live chat.
11. Security of your personal data
11.1. We dey take di security of your personal data and financial transactions seriously, and we dey use risk-based approach for safeguards, including:
11.1.1. Your password dey uniquely assigned to your account and dem securely store am using strong cryptographic hashing. Neither us nor our staff fit access your password. Make you contact us if you get any issue wit your password.
11.1.2. Dem dey process all credit card data securely and directly wit our payment partners, using current SSL/TLS encryption and according to di Payment Card Industry Data Security Standard (PCI DSS) or equivalent standards.
11.1.3. Access to your personal data na only for authorised personnel wey strictly need am to fulfil their responsibilities. Dem dey manage all access according to role-based access controls, and dem dey review and audit am regularly.
11.1.4. We dey put industry-standard technical and organisational measures for place, including data encryption while data dey move and while e dey stored, network security protections (such as firewalls and intrusion detection), regular security testing, and business continuity planning, to protect your information.
11.1.5. Our systems dey monitor suspicious activity and possible fraud. We dey verify identity where e appropriate and, for cases of suspected fraud, we fit involve law enforcement and relevant agencies.
11.1.6. Na your responsibility to keep your login details, associated email account, and devices secure. We strongly recommend make you choose strong, unique passwords, update dem regularly, no disclose dem, and no use public or shared devices or networks take access your account.
11.2. While we dey try protect your data, make you note say no online platform fit get guarantee say e completely secure. If data breach happen, even though e no likely, we go follow applicable notification requirements according to di relevant Privacy Laws.
12. Automated decision-making and profiling
12.1. We reserve di right to use di data wey we collect and assess to profile you in relation to our products. We dey do dis manually wit di help of automated processing. Dis go make us fit provide di products and services wey suit you pass.
12.2. We fit also use automated systems to help us make risk assessment decisions, such as wen we dey conduct fraud and money laundering checks. Although we fit use technology to help us identify risk levels, all decisions wey fit affect you negatively go always include manual intervention to make sure say decision-making no dey based only on automated processing.
13. Cookies and website analytics
13.1. Cookies na small text files wey dem put for your device to store data wey web server fit recall. Pipo dey use dem well well to make websites work, improve user experience, and deliver relevant content and advertisements.
13.2. We dey use cookies and similar technologies (such as web beacons and pixels) to:
13.2.1. Make website functionality and secure areas work;
13.2.2. Remember your preferences and settings;
13.2.3. Understand how you dey use our services and improve dem;
13.2.4. Deliver content and advertising wey dem tailor for you; and
13.2.5. Help secure your account by recording access and login attempts.
13.3. We fit use di following types of cookies:
13.3.1. Strictly necessary cookies: Dem essential for you to browse di website and use im features, such as logging in;
13.3.2. Functionality cookies: Dem dey remember your preferences and choices to improve your experience;
13.3.3. Performance/Analytics cookies: Dem help us understand how visitors dey interact wit our website by collecting and reporting information anonymously; and/or
13.3.4. Targeting/Advertising cookies: We and our third-party partners dey use dem to deliver relevant advertising and measure how effective e be.
13.4. Strictly necessary cookies go set automatically. Dem fit only set oda cookies (such as functionality, analytics, and advertising cookies) if you give your consent according to applicable law.
13.5. You get many choices for how to manage cookies for your computer. Most web browsers allow you control or disable cookies through your browser settings. Make you note say if you disable certain cookies, e fit affect how our products and services dey work.
13.6. Cookies dey stored only for as long as dem need am to fulfil dia intended purpose. Di retention period depend on di type of cookie. Session cookies dey delete wen you close your browser, while persistent cookies fit remain longer unless you delete dem earlier.
13.7. We dey use third-party services, such as Google Analytics, Meta Pixel, LinkedIn Insight Tag, and Snap Pixel, wey fit set dia own cookies for your device. You fit email us for dpo@deriv.com for information about these cookies and how to manage your preferences.
14. Links to other websites
14.1. Our website get links to other websites and e fit get banner or icon advertisements wey relate to third-party websites. These websites and dia advertisements fit submit cookies to your web browser, and dis dey beyond our control. We no dey responsible for di privacy practices or di content of such websites. We encourage you to read di privacy policies of these websites because dia practices fit different from our own.
15. Data controller and contact information
15.1. For di purpose of applicable data protection laws, di data controller wey dey responsible for your personal data depend on your country of residence and di Deriv services wey you use. For information about di Deriv companies wey offer services, including registered addresses and regulatory information, make you visit: https://deriv.com/regulatory.
15.2. If you dey for di European Economic Area(EEA), your data controller go be Deriv Investments (Europe) Limited, wey dem incorporate for Malta (Company No. C 70156), wit im registered address for Level 3, W Business Centre, Triq Dun Karm, Birkirkara BKR9033, Malta. Deriv Investments (Europe) Limited dey regulated by di Malta Financial Services Authority under di Investment Services Act.
15.3. If you want more information about your data controller, get questions or comments about dis Privacy Policy or our data protection practices, or want make complaint about how we dey comply wit applicable Privacy Laws, make you contact our Data Protection Officer for dpo@deriv.com.
16. Updates
16.1. We fit update dis Privacy Policy from time to time to reflect changes for our practices, legal requirements, or technology.
Dis website fit use automated translations make e easy for you. However, di English version na di official version and e go take priority if any difference dey. Deriv (FX) Ltd get licence and di Labuan Financial Services Authority dey regulate am. Deriv (BVI) Ltd get licence and di British Virgin Islands Financial Services Commission dey regulate am. Deriv Investments (Cayman) Limited, wey get registered office for Campbells Corporate Services Limited, Floor 4, Willow House, Cricket Square, Grand Cayman, Cayman Islands, dey under regulation of di Cayman Islands Monetary Authority. Di Financial Services Commission, Mauritius dey regulate Deriv (Mauritius) Ltd. Deriv (V) Ltd get licence and di Vanuatu Financial Services Commission dey regulate am. Deriv.com Limited, wey be company wey register for Guernsey, na di holding company for all dis entities. Deriv Capital International Ltd get registered office for Unit 25, 2nd Floor, Nia Mall, Saleufi Street, Apia, Samoa. Deriv (SVG) LLC get registered office for First Floor, SVG Teachers Credit Union Uptown Building, Corner of James and Middle Street, Kingstown P.O., St Vincent and the Grenadines. Make sure say you read our Terms and Conditions and Risk Disclosure well well make you fit fully understand di risks wey dey involved before you use our services. Make you also note say di information for dis website no be investment advice.
Di products wey we dey offer for our website na complex derivative products wey carry big risk say you fit lose money. CFDs na complex instruments wey get high risk say you fit lose money quickly because of Leverage. You suppose consider weda you understand how dis products dey work and weda you fit afford to take di high risk of losing your money.
