Privacy policy

1. Introduction‍

1.1. Di Deriv group of companies dey committed to protecting your personal data and respecting your privacy. Dis Privacy Policy explain how we dey collect, use, store, disclose, and protect personal data across all Deriv entities and in connection wit our products, services, applications, and websites. Wen we tok “we”, “us”, or “our” for dis Privacy Policy, we mean di particular entity inside di Deriv group wey dey responsible for processing your personal data, normally di Deriv group entity wey you get business relationship wit or wey dey provide services to you, as e dey for di “Data controller and contact information” section below.

1.2. Dis Privacy Policy dey apply to current and prospective clients, website visitors, business partners, service providers (and dia employees), event participants, visitors to our offices, and anybody wey dey interact wit our products, services, mobile apps, platforms, or digital channels, no matter di kontri wey dem dey live. Dis Privacy Policy no dey apply to job applicants or employees of di Deriv group.

1.3. We dey process your personal data as controller, according to applicable laws, wey fit include di European Union General Data Protection Regulation (GDPR), di United Kingdom General Data Protection Regulation (UK GDPR), and oda applicable privacy laws (“Privacy Laws”).

2. Categories of personal data

2.1. Depending on your relationship wit us, we fit collect and process one or more of di following types of personal data, like:

2.1.1. Identity data: First name, surname, gender, nationality, date of birth, and/or government-issued identification documents (including passports, driving licences, national IDs, and/or resident permits).

2.1.2. Contact data: Postal address, email address, and/or telephone number.

2.1.3. Professional data: Job title, employer name, occupation, areas of responsibility, and/or remuneration.

2.1.4. Residential information, including rental/tenancy agreements, title deeds, and utility bills.

2.1.5. Communication data: Content of communications (emails, live chat, AI-assisted chat interactions, call recordings and logs, feedback, and/or market research responses).

2.1.6. Services data: Account or application information, trade or transaction history, contracts, preferences, and/or usage records.

2.1.7. Provider data: Information wey dem exchange as service provider or partner (contract details and/or meeting notes).

2.1.8. Visitor data: Office visit details (entry logs, date/time and purpose of visit, and/or special needs wey person communicate).

2.1.10. Payment data: Billing address, payment details, bank account, payment method, and/or payment history.

2.1.11. Usage data: Di transactions wey you make for your account, how you dey use our different platforms and products, or how you dey interact wit our websites, applications, marketing, and communications.

2.1.12. Digital data: For example, IP address, location information (including GPS and geolocation), device and browser data, and/or security information (such as how you dey log in or authenticate yourself to access your account).

2.1.13. Verification data: Proof of address, source of wealth, and/or source of funds.

2.1.14. Biometric data: Data wey dem process for unique identification, such as facial recognition or voiceprints. Some photographs, images, audio, or video recordings fit qualify as biometric data if dem process dem for identification purposes.

2.1.15. Event participation data: Information for event registration, attendance, and/or participation.

2.1.16. Other: Any additional information wey you supply, or wey law require us to collect, or wey relate to our professional activities.

3. Sensitive personal data

3.1. Unless we expressly request am or law require am, make you no provide or disclose any sensitive personal data to us, including through our websites, applications, or oda channels. Depending on your jurisdiction, "sensitive personal data" fit include, but e no end there, data wey relate to your racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, health, genetic or biometric data, sexual orientation, criminal background, or administrative or legal proceedings and sanctions.

3.2. If we need to collect or process sensitive personal data, we go do am only according to applicable Privacy Laws and only wia we get valid legal basis, such as your explicit consent, to comply wit legal obligation, or as e dey necessary to establish, exercise, or defend legal claims.

4. Sources of personal data

4.1. We fit collect your personal data from di following situations and sources:

4.1.1. ​​You directly: Wen you interact wit us, register, correspond wit our teams, attend events, or visit our offices;

4.1.3. AI-powered tools: Wen you interact wit AI-assisted tools wey Deriv make available, such as Amy, our AI chat assistant, or AI-assisted voice/telephone calls. Dis include di content of your interactions (including voice recordings), any personal data wey you provide, and associated technical data (such as session identifiers and timestamps);

4.1.4. Third parties: Including business partners, service providers, public authorities, or verification databases;

4.1.5. Public sources: Such as regulatory registers or publicly available databases;

4.1.6. Deriv don generate am by itself: As we dey provide our services (e.g. meeting records, call recordings, call logs) or by creating insights or oda information about you wen we dey analyse information wey we already get; and/or

4.1.7. Ongoing requests for information: As part of our ongoing compliance and due diligence, and to make sure say our services secure and complete, we fit require you to provide more personal data or supporting documents at any time during your relationship wit us.

5. Lawful basis and purposes

5.1. We only dey use your personal data wia we get your consent or lawful reason to use am. Dis reasons fit include:

5.1.1. To process your personal data to comply wit legal obligation, including licensing requirements, anti-fraud requirements, and anti-money laundering laws;

5.1.2. To process your personal data to enter into or carry out agreement wey we get wit you;

5.1.3. To pursue our legitimate business interests; and/or

5.1.4. To establish, exercise, or defend our legal rights.

5.2. We fit use your information for di following purposes:

5.2.1. Customer management and account administration;

5.2.2. To provide services, perform trades, and manage transactions;

5.2.3. Customer service support to make communications easy and handle complaints or disputes;

5.2.4. Partner management;

5.2.5. To do client due diligence, carry out Know Your Customer (KYC) procedures, put measures wey go prevent fraud in place, do anti-money laundering (AML) activities, and screen sanctions;

5.2.6. To manage security and access control, site security, and to address fraud, unlawful activity, or misconduct wey don happen or wey we suspect;

5.2.7. For marketing and analytics purposes, wey fit include say we conduct surveys, measure customer satisfaction, and collect feedback;

5.2.8. To improve our products and services, carry out research and development activities, do user experience research, and gather business intelligence;

5.2.9. For events, webinars, training sessions, and learning programmes;

5.2.10. For finance, treasury, accounting, and payment processing;

5.2.11. To manage suppliers and third parties;

5.2.12. For risk management, crime prevention and detection, internal audits, corporate governance, and remediation activities;

5.2.14. To comply wit legal requirements, manage litigation or defend legal claims, keep records, and protect our legitimate interests or legal rights, including to take legal action, respond to legal action, or make insurance claims;

5.2.15. For merger, acquisition, sale, asset transfer, restructuring, or bankruptcy of all or part of our business, including di relevant due diligence;

5.2.16. To process your requests or help you exercise your rights;

5.2.17. To produce and distribute audio, video, or oda media content;

5.2.18. For any oda purpose wey law, regulations, codes of practice, or court order require or authorise; and/or

5.2.19. For machine learning and automated processing, including to use personal data to train, develop, and improve algorithms, models, or artificial intelligence systems, to improve our services, prevent fraud, manage risk, and run our business operations. If we use third-party AI providers to power our tools and services, those providers fit process your personal data to train or improve dia general models.

5.3. You acknowledge say we dey use AI-powered tools, including, but no be only, Amy, wey be an AI chat assistant wey dey available for our website and applications, and AI-assisted voice calls. Wen you use Amy or oda AI-assisted chat or voice features, we fit process di content of your interaction, including any voice recordings, and any personal data wey you provide. If e apply, third-party AI technology providers wey dey act as processors on our behalf fit also process dis information.

5.4. We go clearly inform you if na your consent we rely on, and you fit withdraw your consent at any time.

6. How we dey disclose your personal data

6.1. We fit share your personal data wit di following categories of recipients, if e necessary and appropriate to achieve di purposes wey dis Privacy Policy outline, and based on corresponding legal basis:

6.1.1. Oda companies inside di Deriv group;

6.1.2. Agents, contractors, suppliers, or service partners, including IT, cloud, AI technology providers, web-hosting, analytics, fulfilment, content providers, customer support, communication platforms, and logistics service providers;

6.1.3. Payment processors, banks, and financial institutions, to process transactions;

6.1.4. Regulators, courts, law enforcement, tax, or oda public authorities, as law require or to protect our rights;

6.1.5. Professional advisers, including insurers, lawyers, auditors, and accountants, for business continuity, risk management, or as part of legal matters or claims;

6.1.6. Business partners;

6.1.7. Event or marketing partners, advertising networks, analytics providers, and social networks, if e relevant for marketing, advertising, product development, or event participation;

6.1.8. Wit your clear consent, oda third parties wey you instruct us to share your data wit; and/or

6.1.9. Oda parties wey law, regulations, codes of practice, or court order authorise or require Deriv to disclose information to.

6.2. We require all third parties wey process your personal data on our behalf to provide appropriate security, comply wit applicable law, and give protection wey dey at least equal to wetin we describe here.

7. International data transfers

7.1. Di Deriv group na global business wey get offices, partners, and service providers around di world, including for di European Economic Area (EEA), di United Kingdom, Asia, Africa, Latin America, and oda regions. Because of dis, we or our service providers fit process your personal data for, or transfer am go, countries outside your kontri of residence—including countries outside di EEA or UK—we y no fit provide di same level of data protection wey dey for di jurisdiction wey be your home.

7.2. If dem transfer personal data wey GDPR, UK GDPR, or oda applicable Privacy Laws cover go a kontri wey relevant authorities neva recognise as kontri wey get adequate level of data protection, we go put appropriate safeguards in place according to di relevant legal requirements. Dis safeguards fit include Standard Contractual Clauses wey European Commission or UK government approve, adequacy decisions, further transfer impact assessments, and supplementary technical and organisational measures, if e necessary, to make sure say your personal data remain protected.

8. How long we keep your personal data

8.1. We keep your personal data only for as long as e necessary to fulfil di purposes wey make us collect am, including to comply wit legal, regulatory, accounting, or reporting requirements, and according to our internal retention policies. Afta di retention period wey apply don end, we go securely delete or anonymise your data, unless law require or permit make we keep am for longer, such as to establish, exercise, or defend legal claims, or for archiving, scientific, or historical purposes.

9. Your rights

9.1. Depending on di jurisdiction wey you dey live for and di Privacy Laws wey apply to your personal data, you fit get di following rights:

9.1.1. Information and access: You fit request make you access your personal data, receive extra information about how we dey process am, and get details of public and private entities wey we don share your data wit. You fit also request copy of your personal data.

9.1.2. Rectification: You fit request make we correct or update personal data wey no correct or wey no complete.

9.1.3. Erasure: You fit get di right to request make we delete your personal data, subject to legal requirements wey dey apply.

9.1.4. Restriction of processing: You fit get di right to request make we limit di processing of your personal data under certain circumstances.

9.1.5. Objection to processing: You fit get di right to object to certain types of processing, including direct marketing and profiling.

9.1.6. Data portability: You fit get di right to request portable copy of your personal data for structured format wey pipo commonly dey use and machine fit read, subject to legal limitations and provided say dis no go negatively affect di rights of odas or compromise confidential information.

9.1.7. Automated decision-making: You fit get di right make decisions wey dey based only on automated processing (including profiling) no affect you, where such decisions fit produce legal effects or oda effects wey dey similarly significant.

9.1.8. Withdrawal of consent: Where we dey process your data based on consent, you get di right to withdraw your consent at any time. Withdrawal no go affect whether di processing wey happen before di withdrawal bin lawful.

9.1.9. Complaint to a supervisory authority: You fit get di right to submit complaint to data protection supervisory authority for di kontri wia you dey live, wia your data dey processed, wia your data controller dey established, or wia potential data breach don happen.

9.2. Make you note say we fit request extra information from you to verify your identity before we process your request. For some cases, if request clearly get no basis, dey repeated, or too much, we fit charge reasonable fee or no act on di request, as applicable law allow.

9.3. You fit request to update your personal data for your account settings. Na your responsibility to make sure say your personal data remain correct and up to date, as we dey rely on dis data to provide our services. Make you note say if you provide information wey no correct or you no update your details when dem change, e fit affect di quality or availability of our products and services to you.

9.4. If you wish to exercise any of these rights or you get questions about your rights under this Privacy Policy, make you contact our Data Protection Officer at [email protected].

9.5. This Privacy Policy no create, extend, or modify any rights or obligations except as applicable law grant am (such as di relevant Privacy Laws).

10. Marketing

10.1. You get di right to opt out from receiving marketing materials from us. You fit do dis by revoking your consent at any point during di period wey you get account wit us.

10.2. You fit opt out from receiving marketing communications for your account settings or unsubscribe from marketing emails by clicking di “Unsubscribe” link wey dey inside all our marketing communications.

10.2.1. If you choose to opt out or unsubscribe from our marketing communications, make you note say you fit still receive transactional or service-related emails. We go make every effort to reduce how often we send these messages and make sure say dem necessary for di proper functioning of our products and services.

10.2.2. Make you note say because of processing times, you fit receive some marketing communications for short time, even after you don request to opt out or unsubscribe. Also, if marketing communication don dey on di way or dem dey send am already, you fit still receive am. If you still dey receive marketing communications from us after reasonable time don pass, contact us through live chat.

11. Security of your personal data

11.1. We dey take di security of your personal data and financial transactions seriously, and we dey use risk-based approach for safeguards, including:

11.1.1. Your password na only for your account and we dey store am securely using strong cryptographic hashing. Neither us nor our staff fit access your password. Make you contact us if you get any issue wit your password.

11.1.2. All credit card data dey processed securely and directly wit our payment partners, using current SSL/TLS encryption and in compliance wit di Payment Card Industry Data Security Standard (PCI DSS) or equivalent standards.

11.1.3. Access to your personal data na only authorised personnel wey strictly need am to fulfil dia responsibilities get am. We dey manage all access according to role-based access controls, and e dey subject to regular review and audit.

11.1.4. We dey implement industry-standard technical and organisational measures, including data encryption while e dey transferred and while e dey stored, network security protections (such as firewalls and intrusion detection), regular security testing, and business continuity planning, to protect your information.

11.1.5. Our systems dey monitor suspicious activity and potential fraud. We dey verify identity where appropriate and, for cases of suspected fraud, we fit involve law enforcement and relevant agencies.

11.1.6. Na your responsibility to keep your login details, associated email account, and devices secure. We strongly recommend make you choose strong, unique passwords, update dem regularly, neva disclose dem, and no use public or shared devices or networks to access your account.

11.2. While we dey try protect your data, make you note say no online platform fit dey guaranteed to be completely secure. If data breach happen, we go follow applicable notification requirements according to di relevant Privacy Laws.

12. Automated decision-making and profiling

12.1. We get di right to use di data wey we collect and assess to profile you in relation to our products. We dey do dis manually wit help from automated processing. Dis one go help us provide di products and services wey suit you pass.

12.2. We fit also use automated systems to help us make risk assessment decisions, like when we dey carry out fraud and money laundering checks. Even though we fit use technology to help us identify di level of risk, any decision wey fit affect you negatively go always involve manual intervention, so dat decision-making no go base only on automated processing.

13.1. Cookies na small text files wey dem put for your device to store data wey web server fit retrieve again. Pipo dey use dem well-well to make websites work, improve user experience, and provide relevant content and advertisements.

13.2.1. Make website functions and secure areas work;

13.2.2. Remember your preferences and settings;

13.2.3. Understand how you dey use our services and improve dem;

13.2.4. Provide content and advertising wey dem tailor for you; and

13.2.5. Help secure your account by recording access attempts and login attempts.

13.4. Dem go set strictly necessary cookies automatically. Dem fit set other cookies, like functionality, analytics, and advertising cookies, only if you give your consent according to applicable law.

13.5. You get plenty options for how to manage cookies for your computer. For most web browsers, you fit control or disable cookies through your browser settings. Make you note say if you disable some cookies, e fit affect how our products and services dey work.

13.6. Dem go store cookies only for as long as dem need dem to fulfil dia intended purpose. Di retention period dey depend on di type of cookie. Dem dey delete session cookies when you close your browser, while persistent cookies fit remain for longer time unless you delete dem earlier.

13.7. We dey use third-party services, like Google Analytics, Meta Pixel, LinkedIn Insight Tag, and Snap Pixel, wey fit set dia own cookies for your device. You fit send us email at [email protected] to get information about these cookies and how to manage your preferences.

14. Links to other websites

14.1. Our website get links to other websites and e fit get banner or icon advertisements wey relate to third-party websites. Di websites and dia advertisements fit submit cookies to your web browser, and dis one no dey under our control. We no dey responsible for di privacy practices or di content of such websites. We encourage you to read di privacy policies of these websites because dia practices fit dey different from our own.

15. Data controller and contact information

15.1. For di purpose of applicable data protection laws, di data controller wey dey responsible for your personal data dey depend on di kontri wey you dey reside and di Deriv services wey you dey use.

15.2. If you dey for di European Economic Area(EEA), your data controller go be Deriv Investments (Europe) Limited, incorporated in Malta (Company No. C 70156), wit its registered address at Level 3, W Business Centre, Triq Dun Karm, Birkirkara BKR9033, Malta. Di Malta Financial Services Authority dey regulate Deriv Investments (Europe) Limited under di Investment Services Act.

15.3. If you want more information about your data controller, get questions or comments about dis Privacy Policy or our data protection practices, or you want submit complaint about how we dey comply wit applicable Privacy Laws, make you contact our Data Protection Officer at [email protected].

16. Updates

16.1. We fit update dis Privacy Policy from time to time to reflect changes to our practices, legal requirements, or technology.

Dis website fit use automated translations for your convenience. However, di English version na di definitive version and e go prevail if any difference dey. Deriv (FX) Ltd get licence and di Labuan Financial Services Authority dey regulate am. Deriv (BVI) Ltd get licence and di British Virgin Islands Financial Services Commission dey regulate am. Deriv Investments (Cayman) Limited, registered office at Campbells Corporate Services Limited, Floor 4, Willow House, Cricket Square, Grand Cayman, Cayman Islands, dey under di regulation of di Cayman Islands Monetary Authority. Di Financial Services Commission, Mauritius dey regulate Deriv (Mauritius) Ltd. Deriv (V) Ltd get licence and di Vanuatu Financial Services Commission dey regulate am. Deriv.com Limited, na company wey register for Guernsey, and na di holding company for these entities. Deriv Capital International Ltd get registered office at Unit 25, 2nd Floor, Nia Mall, Saleufi Street, Apia, Samoa. Deriv (SVG) LLC get registered office at First Floor, SVG Teachers Credit Union Uptown Building, Corner of James and Middle Street, Kingstown P.O., St Vincent and the Grenadines. ‍ Make sure say you read our Terms and Conditions and Risk Disclosure well to fully understand di risks wey dey involved before you use our services. Make you also note say di information for dis website no be investment advice.

Di products wey we dey offer for our website na complex derivative products wey carry significant risk of potential loss. CFDs na complex instruments wey get high risk say you fit lose money quickly because of Leverage. You suppose consider whether you understand how di products dey work and whether you fit afford to take di high risk of losing your money.