Effective Date: 13/05/2025 

This Privacy Policy explains how Wibanx Sp z.o.o (trading as Cryptobanx) ("we", "us", or "our") collects, uses, discloses, and protects personal data of its clients in connection with the provision of virtual asset services. We are committed to protecting the privacy and confidentiality of personal data in compliance with applicable laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act. 

The data controller responsible for the processing of your personal data is: 

Wibanx sp.z.o.o, Cryptobanx™ is a EUIPO registered trademark of Wibanx sp.z.o.o 

116/52 UL PIOTRKOWSKA, ŁÓDŹ, 90-006, POLAND 

Company Registration number: 0001098852, 

Certified VASP number: RDWW-1277. 

We may collect and process the following categories of personal data: 

● Identification data: Name, surname, date of birth, nationality, government-issued ID (e.g., passport, national ID card) 

● Contact data: Email address, phone number, postal address 

● Financial data: Bank account details, source of funds, source of wealth 

● Transaction data: Virtual asset wallet addresses, transaction history, counterparties 

● KYC/AML data: Information obtained from identity verification, sanctions screening, and risk assessment 

● Technical data: IP address, browser type, operating system, device information 

We process your personal data based on one or more of the following legal grounds: 

● Performance of a contract (Article 6(1)(b) GDPR): To provide our services to you 

● Compliance with legal obligations (Article 6(1)(c) GDPR): Including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations 

● Legitimate interests (Article 6(1)(f) GDPR): For fraud prevention, security, and business continuity 

● Consent (Article 6(1)(a) GDPR): Where required, such as for marketing communications 

We process personal data for the following purposes: 

● To establish and manage your business relationship with us 

● To comply with AML/CTF and Know-Your-Customer (KYC) regulations 

● To process transactions and maintain records 

● To detect and prevent fraud, abuse, or illegal activity 

● To respond to inquiries and provide customer support 

● To send you information about updates to our services (where permitted) 

We retain personal data for as long as necessary to fulfill the purposes outlined above and to comply with legal obligations, including AML/CTF laws, which may require us to retain data for at least 5 years after the end of the business relationship. 

We may share your data with: 

● Regulatory and supervisory authorities, such as the Polish Financial Supervision Authority (KNF) 

● Law enforcement and government agencies, where required by law 

● Identity verification service providers and blockchain analytics providers 

● Payment processors, banks, and correspondent institutions 

● Our legal, compliance, and technical advisors 

We ensure that all third-party processors are bound by appropriate data protection obligations. 

Where we transfer personal data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as: 

● Standard Contractual Clauses (SCCs) 

● Transfers to countries with an adequacy decision from the European Commission 

Under the GDPR, you have the right to: 

● Access your personal data 

● Rectify inaccurate or incomplete data 

● Erase your data ("right to be forgotten") 

● Restrict or object to the processing of your data 

● Data portability 

● Withdraw consent at any time (where applicable) 

● Lodge a complaint with the President of the Personal Data Protection Office (UODO) 

To exercise your rights, please contact us at privacy@cryptobanx.com 

We implement technical and organisational measures to safeguard your data, including: 

● Encryption of data at rest and in transit 

● Access controls and authentication mechanisms 

● Monitoring and incident response procedures 

We may use automated decision-making tools for fraud detection and risk scoring as part of our regulatory obligations. You have the right to request human intervention, express your point of view, and contest the decision. 

Our website may use cookies and similar technologies. For more information, please refer to our [Cookie Policy].