Data We Collect
To provide our prop trading services, we collect the following categories of personal data:
- Identity: Full name, date of birth, government-issued ID, photo, address, country.
- Contact: Email address, phone number, social handles you provide.
- Financial: Crypto wallet addresses, bank details (if used for payouts), transaction history.
- Trading: MT5 login, trade history, drawdown logs, profit / loss data, IP addresses, device fingerprints.
- Behavioral: Pages visited, clicks, session duration, referral source, anonymized analytics.
How We Use Your Data
- To verify your identity and comply with KYC, AML, and CTF regulations.
- To provision and monitor your funded trading account.
- To process payouts and refunds securely.
- To detect fraud, abuse, or trading rule violations.
- To send transactional emails (account delivery, payouts, breach alerts, KYC updates).
- To improve our platform, products, and customer support.
- To comply with legal obligations and respond to lawful requests.
Data Storage and Security
All personal data is stored on encrypted servers operated by Supabase (PostgreSQL database with row-level security) in regions compliant with GDPR.
- Passwords are hashed using industry-standard algorithms (bcrypt).
- Sensitive fields (KYC documents) are stored in private buckets with restricted access policies.
- HTTPS is enforced site-wide via TLS 1.3.
- Access to production data is limited to authorized administrators.
Third Parties
We share data with carefully vetted third-party processors only to the extent necessary to deliver our service:
- Supabase — database, authentication, file storage.
- Vercel — application hosting and edge delivery.
- Crypto Payment Processor — for crypto payment processing.
- Exness / MetaQuotes — MT5 trading infrastructure.
- Email providers — transactional email delivery (SMTP).
We do not sell your data to advertisers or marketing companies.
Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or outdated data.
- Delete your account and associated data (subject to legal retention periods).
- Export your data in a portable format.
- Object to certain processing or withdraw consent.
To exercise these rights, email privacy@darkfunded.com.
Data Retention
We retain personal data for as long as your account is active. After closure, we keep data for up to 5 years to comply with anti-money-laundering record-keeping obligations. After this period, your data is permanently deleted or fully anonymized.
Contact for Privacy Concerns
For privacy-related questions or to file a data-protection complaint, email privacy@darkfunded.com.
Questions about this policy? Email us at support@darkfunded.com or visit our contact page.