Read this policy with your account documents
This policy covers privacy practices for the website and connected services. A client agreement, verification notice, payment-provider notice or jurisdiction-specific disclosure may provide additional information and will prevail where it is more specific.
01Scope and identity of the operator
This policy applies when you visit SB2Markets, create or use a client profile, request an MT4 account, submit a deposit or withdrawal request, upload verification material, contact support, subscribe to communications or otherwise interact with our digital services.
For the purposes of applicable data-protection law, the legal entity identified in your account-opening documents is normally responsible for deciding why and how your personal information is processed. Where a service provider makes independent decisions about processing, that provider may act as a separate controller under its own privacy notice.
This policy does not cover websites, applications or services operated independently by third parties, even when links to them are available from our website.
02Personal information we may collect
The information collected depends on the services you use, the account configuration and the legal obligations that apply to the operator. We aim to collect information that is relevant and proportionate to the stated purpose.
- Identity and profile information
- Name, date of birth, nationality, residence, identification-document details, photograph, signature, occupation and other account-profile information.
- Contact information
- Email address, telephone number, postal address, preferred language and communication preferences.
- Account and trading information
- Client identifiers, MT4 account number, account group, leverage, currency, balances, requests, transaction history, orders, positions and platform activity.
- Financial and payment information
- Funding method, payment reference, bank or wallet details, source-of-funds information, withdrawal destination and transaction evidence. Full payment-card data may be handled directly by a payment provider rather than stored by us.
- Verification and compliance information
- KYC results, sanctions and politically exposed person screening, beneficial ownership, source of wealth, risk classification, fraud indicators and compliance correspondence.
- Technical and usage information
- IP address, device and browser details, session identifiers, security logs, pages viewed, timestamps, language choice, cookie preferences and diagnostic records.
- Communications
- Contact forms, support messages, complaints, emails, call notes and other correspondence with the operator or its representatives.
- Marketing information
- Communication selections, campaign interaction and information used to measure whether permitted communications are relevant and effective.
03How personal information is obtained
Most information is provided directly by you through registration, account forms, uploaded documents, support interactions and funding requests. Additional information may be generated when you use the website or connected MT4 services.
- Information you submit directly through forms, messages, uploads and account actions.
- Information produced by the website, client area, security systems and connected MT4 environment.
- Information supplied by payment providers, identity-verification providers, fraud-prevention services and communication providers.
- Information from public registers, sanctions lists, politically exposed person databases and other lawful public sources.
- Information from an introducing partner, affiliate, authorised representative or corporate account contact where permitted.
04Purposes of processing and lawful grounds
We process personal information only where there is an operational purpose and an available legal basis. The exact basis depends on your location, the relationship and the activity involved.
| Purpose | Typical information | Typical legal basis |
|---|---|---|
| Create and administer profiles and MT4 accounts | Identity, contact, account and configuration information | Performance of a contract or steps requested before entering a contract |
| Process deposits, withdrawals and account requests | Account, transaction, payment and verification information | Contract performance; legal obligation; legitimate interests in secure operations |
| Identity verification and financial-crime controls | Identity documents, ownership, screening and source information | Legal obligation; public-interest requirements; legitimate interests |
| Protect the website and investigate misuse | Technical logs, device data, session activity and correspondence | Legitimate interests in security, fraud prevention and service integrity |
| Provide support and handle complaints | Contact details, account references and communications | Contract performance; legal obligation; legitimate interests |
| Improve services and diagnose failures | Usage, diagnostic and aggregated performance information | Legitimate interests; consent where required for optional analytics |
| Send marketing communications | Contact information and communication preferences | Consent or legitimate interests, subject to local law and opt-out rights |
| Establish, exercise or defend legal claims | Relevant account, transaction, communication and audit records | Legal obligation and legitimate interests |
05Identity verification, screening and fraud prevention
To protect clients and comply with applicable financial-crime obligations, we may verify identity, residence, beneficial ownership, source of funds or source of wealth. We may also screen information against sanctions, politically exposed person and adverse-information sources.
Verification may involve automated matching or risk indicators. A flagged result does not automatically establish wrongdoing. It may lead to a request for further information, manual review, a delay, a restriction or a decision not to provide a service where permitted or required by law.
You should provide current, complete and accurate information and promptly notify support when relevant identity, contact, ownership or payment details change.
06Who may receive personal information
We do not sell personal information as a standalone commercial product. Information may be shared where necessary for service delivery, compliance, security or legal claims, subject to confidentiality and access controls.
- MT4 bridge, hosting, database, cloud, cybersecurity and technical-support providers.
- Identity-verification, sanctions-screening, fraud-prevention and compliance-service providers.
- Banks, payment processors, wallet providers and other parties involved in deposits or withdrawals.
- Email, notification, customer-support, analytics and document-storage providers.
- Professional advisers, auditors, insurers and prospective corporate transaction parties under appropriate confidentiality duties.
- Regulators, courts, law-enforcement bodies, financial intelligence units or other authorities where disclosure is required or lawfully requested.
- Affiliates, introducing partners or authorised representatives where this is necessary for the relationship and permitted by law.
07Transfers across borders
The website, MT4 infrastructure and service providers may operate in more than one country. As a result, personal information may be processed outside the country in which it was collected.
Where cross-border transfers require safeguards, we may rely on an adequacy decision, approved contractual clauses, binding rules, an applicable statutory exception or another lawful transfer mechanism. We also assess operational and security controls appropriate to the nature of the transfer.
08How long information is retained
Personal information is retained for as long as reasonably necessary for the purpose for which it was collected and for any additional period required by financial-services, anti-money laundering, tax, accounting, dispute-resolution or record-keeping laws.
Retention periods may differ between identity records, account and trading records, payment evidence, support messages, security logs and marketing preferences. When information is no longer required, it is deleted, anonymised or placed beyond routine use, subject to backup and legal-hold procedures.
09Security and confidentiality measures
We use administrative, technical and organisational measures intended to protect personal information against unauthorised access, alteration, disclosure, loss or destruction. Measures are selected according to the sensitivity of the information, the service architecture and the reasonably foreseeable risk.
- Role-based access and separation of administrative responsibilities.
- Authentication controls, session protection and monitoring of suspicious access.
- Encryption in transit where supported and protection of stored information appropriate to the system.
- Logging, backup, incident management and vulnerability-management processes.
- Confidentiality obligations and due-diligence controls for relevant personnel and providers.
Internet transmission and electronic storage cannot be guaranteed to be completely secure. You should use a trusted device, protect account access and report suspected misuse promptly.
10Data-protection rights and choices
Depending on the law that applies to you, you may have some or all of the rights below. A request may be limited where an exemption applies, where retention is legally required, where disclosure would affect another person, or where the request cannot be verified.
We may request information reasonably necessary to confirm identity and authority before acting on a rights request. We aim to respond within the period required by applicable law and will explain any lawful extension or refusal.
- Access
- Ask whether personal information is processed and request a copy together with relevant processing information.
- Correction
- Ask for inaccurate information to be corrected or incomplete information to be completed.
- Deletion
- Ask for deletion where the information is no longer needed and no legal or overriding reason requires retention.
- Restriction
- Ask for processing to be limited in certain circumstances, for example while accuracy or an objection is reviewed.
- Objection
- Object to processing based on legitimate interests or to direct marketing.
- Portability
- Request certain information in a structured, commonly used and machine-readable format where the legal conditions are met.
- Withdraw consent
- Withdraw consent for future processing where consent is the legal basis, without affecting earlier lawful processing.
- Complaint
- Raise a concern with us and, where applicable, complain to a competent data-protection authority.
11Automated processing and profiling
Automated tools may support fraud detection, sanctions screening, risk scoring, account security, communication routing and service diagnostics. These tools can identify patterns or generate recommendations for human review.
Where a decision is made solely by automated means and produces a legal or similarly significant effect, we will apply the notices, lawful basis and safeguards required by applicable law. Those safeguards may include the ability to request human review, express a view and challenge the outcome.
12Cookies, analytics and communications
The website may use cookies, local storage and similar technologies for security, sessions, preferences, performance measurement and optional communications. Further details are provided in the Cookies Policy.
You can unsubscribe from promotional email using the link in the message or by contacting support. Service, security, verification and transaction communications are not marketing and may still be sent where necessary for the relationship.
13Minors, policy changes and interpretation
The trading and account services are not intended for persons who are below the minimum legal age applicable to the service. We do not knowingly open trading accounts for children. If you believe information relating to a child has been submitted improperly, contact us so it can be reviewed.
We may update this policy to reflect changes in law, technology, service providers or business operations. The revised version will be published on this page with an updated date. Material changes may also be communicated through the website, client area or direct notice where appropriate.
Contact us about this document
Include the document title and the relevant section when you contact the team. Do not send passwords or payment-card security codes.
Contact support