Privacy Policy

Bigray Finance Group LLC Last updated: 20 May 2026 Document type: Public policy

1. Introduction

This Privacy Policy explains how Bigray Finance Group LLC ("Bigray", "we", "us", or "our"), a company incorporated under the laws of the British Virgin Islands, collects, uses, shares, and protects personal data when you visit FX24 Market, register for an account, purchase or use our products, take part in our promotions or affiliate programme, or otherwise interact with us (together, the "Services").

Bigray is the controller of the personal data described in this Policy. By using the Services, you confirm that you have read and understood this Policy. Please also read our Cookie Policy and Terms of Service, which work alongside this document.

2. Who this Policy applies to

This Policy applies to:

visitors to our website;

registered Users and Traders, including those at the evaluation and funded stages;

affiliates and marketing partners; and

people who contact us for support or other enquiries.

The Services are intended for adults. Bigray does not knowingly collect personal data from anyone under the age of 18 (or the age of majority in their jurisdiction, if higher). If you believe a minor has provided us with personal data, contact us so we can delete it.

3. The personal data we collect

3.1 Data you provide to us

Account and identity data: name, date of birth, nationality, country of residence, email address, phone number, username, and password.

Verification (KYC) data: government-issued identity documents, proof of address, selfie or video-verification images, and related information collected to satisfy our AML/KYC obligations.

Payment data: billing details and information needed to process evaluation purchases, add-ons, refunds, and payouts. Full card numbers and similar sensitive payment credentials are handled by our payment processors, not stored by Bigray.

Payout data: the details of the bank account, wallet, or other instrument to which payouts are made.

Communications: the content of messages, support requests, survey responses, and other correspondence you send us.

Affiliate data: information you provide to join and operate in our affiliate programme.

3.2 Data we collect automatically

Usage and device data: IP address, device and browser type, operating system, language settings, pages viewed, and actions taken on the Services.

Trading and platform data: account activity, trade history, performance, drawdown, compliance status, and related records generated as you use our evaluation and funded products.

Risk and security data: device fingerprints, login records, and behavioural signals used to detect fraud, abuse, and prohibited activity.

Cookies and similar technologies: as described in our Cookie Policy.

3.3 Data from third parties

We may receive data from identity-verification providers, payment processors, fraud-prevention services, analytics and advertising partners, affiliates who refer you, and publicly available or sanctions-screening sources.

4. How and why we use personal data

We use personal data for the following purposes:

To provide the Services — create and administer your account, deliver evaluation and funded products, process purchases, add-ons, refunds, and payouts, and provide support.

To verify identity and prevent financial crime — carry out KYC, sanctions screening, and the AML/CTF measures described in our AML Policy.

To protect platform integrity — detect and investigate fraud, prohibited trading, multi-account and linked-account abuse, chargeback abuse, and other breaches of our Terms.

To operate the risk and evaluation systems — assess compliance with our Rulebook, manage Pending Review, risk flags, and payout-quality checks.

To communicate with you — send service messages, transactional emails, security alerts, and responses to your enquiries.

For marketing — where permitted, send you news, offers, and promotions; you can opt out of marketing at any time.

To improve the Services — analyse usage, troubleshoot, and develop new features.

To comply with law — meet legal, regulatory, tax, accounting, and record-keeping obligations and respond to lawful requests from authorities.

To establish, exercise, or defend legal claims — including, where relevant, responding to public statements or claims made about Bigray services, as further described in our Terms of Service.

4.1 Legal bases

Where data-protection law requires a legal basis, we rely on: the performance of a contract with you; compliance with a legal obligation; our legitimate interests (such as securing the platform, preventing abuse, and growing our business) where these are not overridden by your rights; and your consent (for example, for certain cookies and marketing), which you may withdraw at any time.

5. How we share personal data

We do not sell your personal data. We share it only as needed and with appropriate safeguards, including with:

Service providers acting on our behalf — payment processors, identity-verification and KYC providers, trading-platform and broker infrastructure, cloud hosting, analytics, communications, and customer-support tools;

Affiliates and partners, in limited form, to attribute referrals and manage commissions;

Professional advisers such as lawyers, auditors, and accountants;

Authorities and regulators — law-enforcement, tax, and regulatory bodies where required by law or to protect our rights, users, or platform;

Acquirers — in connection with a merger, acquisition, financing, or sale of business assets; and

Other parties with your consent or at your direction.

6. International transfers

Bigray operates internationally, and your personal data may be processed in, and transferred to, countries other than the one in which you live, including jurisdictions whose data-protection laws differ from those of your home country. Where such transfers occur and applicable law requires it, we put in place appropriate safeguards (such as contractual protections) to protect your data.

7. Data retention

We keep personal data only for as long as necessary for the purposes set out in this Policy, including to provide the Services and to satisfy legal, regulatory, accounting, AML/KYC, tax, and dispute-resolution requirements. KYC and transaction records are retained for the period required by applicable law (generally not less than five years after the end of the relationship). When data is no longer needed, we delete or anonymise it securely.

8. Security

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, and alteration, including access controls, encryption in transit, and monitoring. No system is completely secure, and we cannot guarantee absolute security; you are responsible for keeping your account credentials confidential.

9. Your rights

Depending on your jurisdiction, you may have rights in relation to your personal data, including the right to:

access the personal data we hold about you;

request correction of inaccurate or incomplete data;

request deletion of your data in certain circumstances;

object to or request restriction of certain processing;

request a copy of certain data in a portable format;

withdraw consent where processing is based on consent; and

lodge a complaint with a competent data-protection authority.

Some rights are limited where we are required to retain data by law (for example, KYC and AML records) or where we need it to detect fraud or defend legal claims. To exercise your rights, contact us using the details in Section 12. We may need to verify your identity before responding.

10. Marketing choices

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us. We will still send you essential service and transactional messages relating to your account.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on the Site, with the "Last updated" date shown at the top. Where changes are material, we will provide additional notice through the Services. Continued use of the Services after an update constitutes acceptance of the updated Policy.

12. Contact us

For any privacy question, or to exercise your rights, contact us at support@fx24.market (you may mark your message for the attention of the Privacy / Data Protection contact).