Privacy Policy

The data controller is Kodiac Capital Limited (trading as Kodiac Capital), licence status Pending publication, company registration Dubai filing in progress.

Registered office: Kodiac Capital Limited — particulars published on Legal Identity when verified. Dubai, United Arab Emirates.. Contact: privacy@kodiaccapital.com / support@kodiaccapital.com / compliance@kodiaccapital.com.

When you create an account on Kodiac Capital, we collect the following categories of personal information:

• Identity data — full name, date of birth, government-issued ID (for KYC verification)
• Contact data — email address, phone number, country of residence
• Financial data — wallet addresses, deposit amounts, withdrawal history, and transaction records
• Technical data — IP address, browser type, device identifier, session timestamps, and access logs
• Usage data — pages visited, features accessed, referral codes used, and in-platform activity patterns

Kodiac Capital uses collected data exclusively for the following purposes:

• Verifying your identity and maintaining your investor account
• Processing deposits, withdrawals, profit distributions, and internal transfers
• Detecting, investigating, and preventing fraudulent activity, money laundering, and account abuse
• Sending operational communications — transaction confirmations, security alerts, and account notices
• Complying with applicable legal obligations and regulatory requests (including applicable regulators)
• Improving Platform performance through aggregated analytics

We do not use your data for unsolicited marketing without your explicit consent. You may opt out of marketing emails at any time through account settings.

We retain personal data for as long as your account is active and for a minimum of 5 years following account closure, as required for financial recordkeeping and regulatory inquiries. Transaction records are retained for a minimum of 7 years.

We apply industry-standard security measures including TLS encryption, password hashing, session authentication, role-based access controls, and regular security audits. In the event of a material personal-data breach, we will notify affected users within 72 hours of becoming aware of the incident where legally required.

We do not sell, rent, lease, or trade your personal information for commercial purposes. We may share data with selected processors (KYC, fraud, hosting) solely to run the Platform, and with regulators or courts where legally required.

You may request access, correction, deletion (subject to retention law), portability, or objection to marketing. Contact privacy@kodiaccapital.com. We will respond within 30 days.