Privacy Policy

1. INTRODUCTION

At World Golden Gate Virtual Assets Broker & Dealer Services L.L.C ("WGG"), we understand the critical importance of data privacy and the trust our users place in us. As a VARA-regulated broker-dealer operating in the United Arab Emirates, we recognize our legal and ethical responsibilities to protect personal information. 

This Privacy Policy serves as a transparent disclosure of our data practices, explaining how we collect, use, store, disclose, and protect your personal information when you interact with our website or trading services.

By accessing our platform or engaging with our services, you consent to the data practices described herein and acknowledge our commitment to protecting your privacy in accordance with local and international data protection laws.

2. WHO WE ARE

WGG is a crypto broker-dealer registered in Dubai and licensed by the Dubai Virtual Assets Regulatory Authority (VARA). We are a regulated entity operating solely in the virtual assets market, offering Spot and Over-the-Counter (OTC) trading services. We do not provide portfolio management, advisory, or custodial services.

• Our headquarters are located at: Hilal Salim Bin Tarraf Building, Office 214, Al Wasl, Dubai, UAE

• Website: www.worldgoldengate.com

• Trade License Number: 1417358 – issued by the Dubai Department of Economy and Tourism

3. LEGAL FRAMEWORK AND COMPLIANCE STANDARDS

Our data protection practices adhere strictly to the following frameworks:

• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)

• Dubai VARA Technology and Information Rulebook

• Applicable provisions under the European and UK General Data Protection Regulation (GDPR)

WGG ensures that all personal data processing activities are governed by a structured internal compliance framework that includes written policies, data flow mapping, risk assessments, third-party due diligence, and regulatory reporting mechanisms.

4. CATEGORIES OF PERSONAL DATA COLLECTED

We collect and process different types of data depending on the nature of your interaction with us:

4.1 Personal Identification Data

Includes: full name, contact number, email address, government-issued ID, nationality, bank statements and residency details.

4.2 Technical and Device Data

Includes: IP address, device ID, browser type and version, time zone, operating system, and user session information.

4.3 Employment and Biometric Data

Includes: professional background (for job applicants) and biometric data (for KYC verification).

4.4 Behavioral and Communication Data

Includes: user interaction logs, communication preferences, and marketing consent history.

4.5 Financial and Trading Data

Includes: transaction records, order history, trading patterns, and linked virtual asset addresses.

5. HOW WE USE YOUR INFORMATION

We use personal data exclusively for legitimate purposes, including but not limited to:

• Account registration, verification, and profile management

• Regulatory compliance, including AML/CFT, KYC, and transaction monitoring

• Risk assessment, fraud detection, and incident prevention

• Analytics and service optimization to improve user experience

• Direct marketing (only with explicit consent) and customer support

WGG ensures that every processing activity is grounded in a lawful basis such as contract fulfillment, legal obligations, legitimate interest, or user consent.

6. COOKIES AND TRACKING TECHNOLOGIES

WGG utilizes cookies and similar technologies to enhance platform functionality and user experience. These technologies allow us to:

• Maintain secure login sessions

• Analyze usage patterns and improve navigation

• Deliver personalized content and advertisements

You can control or disable cookies through your browser settings. For more information, please refer to our dedicated Cookie Policy.

7. DATA SHARING AND DISCLOSURES

We do not sell or rent personal data. We may share data with trusted third parties only for the following purposes:

• Regulatory disclosures to VARA or other UAE authorities

• IT infrastructure providers and data centers under strict confidentiality agreements

• Professional advisors, such as legal and compliance consultants

• Insurance providers, auditors, and fraud prevention agencies

• In the context of mergers, acquisitions, or corporate restructuring

All third-party engagements are subject to rigorous due diligence and data protection agreements.

8. CROSS-BORDER DATA TRANSFERS

We do not sell or rent personal data. We may share data with trusted third parties only for the following purposes:When data is transferred outside the UAE, WGG ensures:

• The receiving jurisdiction has adequate data protection laws

• Data transfer is governed by Standard Contractual Clauses (SCCs) or equivalent safeguards

• Processing remains subject to strict access controls and audit rights

We are transparent about the locations of data storage and transfer, as required by VARA.

9. HOW WE PROTECT YOUR DATA

WGG employs industry-standard physical, technical, and administrative controls including:

• End-to-end encryption of data in transit and at rest

• Role-based access controls and multi-factor authentication

• Real-time monitoring, threat detection, and penetration testing

• Secure infrastructure and vendor risk management

• Regular cybersecurity training for employees

All incidents are handled through a documented Incident Response Plan, including regulatory notification protocols.

10. RIGHTS OF DATA SUBJECTS

Under applicable laws, you have the right to:

• Access your personal data

• Correct or update inaccurate data

• Request data deletion (subject to legal retention requirements)

• Object to or restrict certain processing activities

• Withdraw marketing consent at any time

• Receive a copy of your data in a portable format

• Lodge complaints with data protection regulators

To exercise these rights, contact us at: support@worldgoldengate.com

11. DATA RETENTION AND ACCOUNT CLOSURE

We retain personal data only as long as necessary for:

• Fulfilling service and compliance obligations

• Legal, regulatory, or audit requirements

Upon account closure, key records are retained for a minimum of eight (8) years in compliance with UAE and VARA regulations.

12. PROTECTION OF MINORS

WGG does not permit use of its services by individuals under 21 years of age. If such data is discovered, it is promptly deleted and access is terminated.

13. SECURITY RESPONSIBILITIES OF USERS

While WGG enforces robust security controls, users must:

• Maintain strong, confidential passwords

• Log out after each session, especially on shared devices

• Report suspected security breaches without delay

14. INTERNATIONAL DATA STORAGE

Your data may be stored in or accessed from servers located outside the UAE. All such storage locations are vetted and contractually obligated to meet equivalent data protection standards.

15. WRITTEN PRIVACY COMPLIANCE PROGRAM

WGG maintains a written and continuously updated Privacy Compliance Program, including:

• Data inventory and mapping

• Third-party risk assessments

• Staff training programs

• Regular internal audits and Board-level reviews

16. POLICY CHANGES

WGG may update this Privacy Policy to reflect changes in legal, technical, or business developments. Users will be notified of material updates via email or platform announcements.

17. CONTACT INFORMATION

Data Protection Officer (DPO)

Email: dpo@worldgoldengate.com

Landline: + 380937721825

17. FINAL NOTES

This Privacy Policy is a public statement of WGG’s data protection practices. It is published in alignment with VARA and UAE regulatory expectations and is subject to ongoing improvement and oversight. You will be notified of any modifications when occurring.