Privacy Policy

This Privacy Policy ("Privacy Policy," "Policy," or "PP") applies to your use of orixa.ltd and cardapp.orixa.tech. This Privacy Policy, together with all other terms and conditions and/or policies applicable to you (published on orixa.ltd and cardapp.orixa.tech), constitutes a legally binding agreement between you and Orixa. This Policy describes the information we collect from you, how that information is used and shared, and your choices regarding that information. This Policy and all other terms and conditions/policies become effective without written signature. Before using, accessing, or registering an account, please read this Policy carefully. Your access to or use of orixa.ltd or cardapp.orixa.tech constitutes your irrevocable acceptance of the legal binding of this Policy. If you do not agree with any terms of this Policy, please immediately stop accessing and using the relevant services.

Scope of Application

This Policy applies to scenarios where you use our services or interact with Orixa and orixa.ltd or cardapp.orixa.tech.

Services:

• Orixa Core Services: Provided by Orixa registered at [registration location], covering financial holdings, open-end fund operations, securities and digital asset trading, fund management, etc., focusing on equity and token investment, strategic trading, asset allocation, and liquidity support in the Web3 field, providing customized fund products and on-chain asset management services for high-net-worth clients.
• Orixa Card Services: As a core product of Orixa's strategic investment, Orixa Card is connected to the global VISA payment network, supporting 200+ countries, 40+ local currencies, and USDT recharge. It can be used at nearly 3 million ATMs and POS terminals worldwide, covering cross-border consumption, study abroad remittances, Web3 payroll settlement, and other scenarios, with a daily transaction limit of up to $250,000.

Data Controller

Orixa acts as the data controller, processing your information based on your country of residence and the type of service used (such as VISA compliance requirements for Orixa Card, regulatory rules for fund investment). Relevant information can be viewed in your Orixa account dashboard or Orixa Card management backend. Contact our privacy team at: privacy@orixa.ltd.

Types of Personal Information We Use

Personal information refers to information that can directly or indirectly identify you, such as name, address, phone number, email, date of birth, payment card information, crypto asset addresses, fund investment records, etc.

(a) Information You Provide Directly

Account and Profile Information:

• Orixa Fund Services: Registering a fund account requires identity verification information (such as passport, tax identification number), proof of assets, crypto wallet address, used for KYC compliance and on-chain asset management.
• Orixa Card Services: Applying for an Orixa Card requires name, address, contact information, USDT recharge address, bank account information (for USD settlement), and beneficiary information (such as student identity information in study abroad remittance scenarios).

(b) Information Automatically Collected When Using Services

• Orixa Card Transaction Data: Transaction time, amount, geographic location (for VISA network risk control), ATM withdrawal records, USDT recharge on-chain hash values.
• Device Information: Device model, operating system (to adapt Visa PayWave contactless payment), IP address (to locate service coverage area) when accessing cardapp.orixa.tech.

Data Transfer and Storage

Storage Location:

• Orixa Card transaction data is stored in VISA-certified data centers (mainly in Singapore and the UK).
• Fund investment information is stored in cloud servers that comply with EU GDPR.

Information Sharing and Disclosure

We only share information with third parties when necessary. Key scenarios include:

• VISA and Payment Service Providers: Share Orixa Card transaction data for clearing purposes
• Cryptocurrency Exchanges: Verify the authenticity of USDT recharge addresses
• Regulatory Authorities: Respond to anti-money laundering investigations by financial regulatory authorities

Data Retention

• Orixa Card Transaction Records: Retained for 7 years after account closure
• Fund Investment Data: Retained for at least 5 years according to financial service regulations

Your Rights and Choices

• Card Management: Settings can be modified through cardapp.orixa.tech backend
• Data Portability: Request to export Orixa Card transaction history

Security and Compliance

• Orixa Card Security: Uses VISA Tokenization technology to encrypt card numbers
• Fund Compliance: Follows the Crypto Asset Regulatory Guidelines

Contact Us

• Orixa Card Support: support@orixa.tech
• Privacy Complaints: support@orixa.ltd