Privacy Policy

At Digi Money Express, your privacy is fundamental to how we operate. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your information. By using our Platform, you consent to the practices described in this Policy.

1. Data Controller Information

The data controller responsible for your personal data is:

Digi Money Express (Digital Money Express)
Email: support@digitalmoneyexpress.com
Website: www.digitalmoneyexpress.com
WhatsApp: +1 (475) 472-7464

If you have questions about how we handle your personal data, please contact our support team using the details above.

2. Information We Collect

We collect the following categories of personal data:

2.1 Account & Profile Data

• Full name
• Email address
• Phone number
• Country of residence
• Username / Member ID
• Referral / Sponsor code (if used at registration)
• Account password (stored in encrypted, hashed form — never in plain text)

2.2 Financial & Transaction Data

• Investment amounts, dates, and plan details
• Daily ROI credits and wallet balance history
• Referral bonuses, team ROI earnings, and leadership salary records
• Deposit and withdrawal records including amounts, dates, and payment method references
• Bank account details (account number, IFSC/routing code, bank name) — for withdrawal processing
• Cryptocurrency wallet addresses — where applicable

2.3 Identity Verification (KYC) Data

• Government-issued photo ID (national ID card, Aadhaar, PAN card, passport, or driving licence)
• Proof of address documents (where required)
• Date of birth
• Photographs or selfies (where required for liveness verification)

2.4 Technical & Usage Data

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser information
• Login timestamps and session durations
• Pages visited and features used within the Platform
• Error logs and diagnostic data

2.5 Communications Data

• Support tickets and messages sent to our team
• Email correspondence
• WhatsApp messages where support is provided via that channel

3. How We Collect Data

We collect personal data through the following means:

• Directly from you: When you register, complete your profile, make investments, submit KYC documents, request withdrawals, or contact support.
• Automatically: Through server logs, session tracking, and technical monitoring when you use the Platform.
• From third parties: Payment processors may share transaction confirmation data with us. If you register via a Sponsor's referral, we receive your referral source information.

4. How We Use Your Data

We use your personal data for the following purposes:

We do not use your personal data for unsolicited third-party marketing without your explicit consent.

5. Legal Basis for Processing

We process your personal data on the following legal bases (as applicable under data protection laws including the DPDP Act, GDPR, and other applicable frameworks):

• Contract Performance: Processing necessary to fulfil our obligations to you as a Platform Member — including investment management, earnings credits, and withdrawals.
• Legal Obligation: Processing required to comply with KYC/AML obligations, tax reporting requirements, and other regulatory duties.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and Platform improvement, where these interests do not override your fundamental rights.
• Consent: Where you have given specific consent (e.g., for marketing communications). You may withdraw consent at any time.

6. KYC Data & Identity Verification

KYC verification is a mandatory requirement before Members may process withdrawals from the Platform. We take particular care with KYC data:

• KYC documents are stored using encrypted, access-controlled storage. Access is restricted to authorised personnel only.
• Documents are verified manually by our compliance team and/or through trusted third-party verification services.
• We do not sell, rent, or share your KYC documents with third parties except as required by law (e.g., in response to a court order or regulatory request) or with your explicit consent.
• KYC data is retained for a minimum of 5 years following account closure as required by applicable AML regulations.
• You may not request deletion of KYC data while your account is active or during any ongoing investigation or legal proceeding.

7. Sharing Your Data

We may share your personal data with the following categories of recipients:

• Payment Processors: To facilitate deposits and withdrawals. These processors are contractually bound to handle your data securely and only for the purpose of processing your transactions.
• Identity Verification Providers: Third-party KYC services used to verify submitted documents.
• Cloud Infrastructure Providers: Our Platform is hosted on secure cloud infrastructure. Provider data processing agreements are in place.
• Legal and Regulatory Authorities: When required by applicable law, court order, or regulatory authority.
• Fraud Prevention Services: To protect the Platform and our Members from fraudulent activity.
• Professional Advisers: Lawyers, auditors, and consultants, under strict confidentiality obligations.

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

8. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy, including for the duration of your membership and for the following periods after account closure:

• Account and transaction records: 5 years (for AML compliance and financial record-keeping)
• KYC/identity documents: 5 years minimum after account closure
• Communication records: 2 years
• Login and access logs: 12 months
• Aggregated, anonymised analytics data: Indefinitely (as it cannot identify you)

After the applicable retention period, data is securely deleted or anonymised.

9. Data Security

We implement technical and organisational measures appropriate to the risk to protect your personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. These measures include:

• TLS/HTTPS encryption for all data in transit.
• Encrypted storage for sensitive data including passwords (bcrypt hashed) and financial records.
• Role-based access controls limiting data access to authorised personnel only.
• Regular security audits and vulnerability assessments.
• Intrusion detection and monitoring systems.
• Two-factor authentication for administrative access.

While we use industry-standard security practices, no system can guarantee absolute security. In the event of a data breach that poses a significant risk to your rights, we will notify affected Members and relevant authorities as required by law.

10. Cookies & Tracking

Our Platform uses cookies and similar tracking technologies to enhance your experience and gather usage analytics.

10.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly (e.g., session authentication, security tokens). These cannot be disabled.
• Functional Cookies: Remember your preferences and settings (e.g., language, display options).
• Analytics Cookies: Help us understand how Members use the Platform so we can improve it. Data is aggregated and anonymised where possible.

10.2 Managing Cookies

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may impair Platform functionality. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for specific websites. Refer to your browser's help documentation for instructions.

10.3 Do Not Track

Our Platform currently does not respond to browser "Do Not Track" signals, though we continue to evaluate this as standards evolve.

11. International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence, including countries where data protection laws may differ from those in your jurisdiction. Where such transfers occur, we ensure appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by relevant regulatory authorities.
• Data processing agreements with third-party service providers.
• Transfer to countries with an adequacy decision from applicable regulators.

By using the Platform, you consent to your data being transferred internationally as described above.

12. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to our legal obligations to retain certain data.
• Right to Restriction of Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request a structured, machine-readable export of your data.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: File a complaint with your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at support@digitalmoneyexpress.com. We will respond within 30 days. Some rights may be limited where they conflict with our legal obligations (e.g., KYC data retention requirements).

13. Children's Privacy

The Platform is not intended for, and does not knowingly collect personal data from, persons under the age of 18. If we become aware that we have inadvertently collected personal data from a minor, we will promptly delete that data and close the associated account.

If you are a parent or guardian and believe your child has registered on the Platform, please contact us immediately at support@digitalmoneyexpress.com.

14. Third-Party Links

The Platform may contain links to third-party websites, payment gateways, or services. These third-party sites have their own privacy policies, which we encourage you to review. Digi Money Express is not responsible for the privacy practices or content of any third-party sites and has no control over information you submit to those sites.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address at least 14 days before the changes take effect.
• Display a prominent notice on the Platform.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact & Data Requests

For all privacy-related inquiries, data access requests, or concerns, please reach out to us:

• Email: support@digitalmoneyexpress.com
• WhatsApp: +1 (475) 472-7464
• Website: www.digitalmoneyexpress.com

Please include "Privacy Request" in the subject line and provide sufficient detail to allow us to identify your account and respond to your request accurately. We aim to respond to all privacy queries within 5 business days.