In effect from
This policy applies to everyone who registers with OGOFX or writes to us. It describes the personal data the client portal holds and the reason for each part of it.
1. Who we are and what this policy covers
1.1 This Privacy Policy explains how OGOFX (“OGOFX”, “we”, “us”) collects, uses, keeps and protects personal data about you when you visit ogofx.com, register and use the client portal at portal.ogofx.com, trade on the OGOFX web terminal, or write to us.
1.2 OGOFX decides why and how your personal data is processed and is responsible for it. OGOFX operates under local licence no. 8256953 and is licensed on the OGO platform.
1.3 Read this policy with the Client Agreement and the Cookie Policy. When you register, you confirm that you have read it.
2. The personal data we hold
2.1 Registration details. When you open a client portal account we collect:
- your name;
- your email address;
- your mobile number with country code;
- your country of residence;
- your password, which we store only in a protected (hashed) form and cannot read back;
- your confirmation, given when you register, that you accept the Client Agreement, the Terms of Business and the Regulations for Non-Trading Operations, and that you have read the Risk Disclosure, the Privacy Policy and the Cookie Policy.
2.2 Email confirmation. We send a confirmation message to the email address you give, and record that you confirmed it.
2.3 Verification (KYC) documents. Before any money moves we verify who you are and where you live. You upload, from the client portal:
- a photo ID: passport, national ID card or driving licence;
- a proof of address.
We accept JPEG, PNG, WebP or PDF files, up to 10 MB each. A member of our team reviews them. We keep the documents, the decision, the reason given to you if a document is rejected, and which member of the team reviewed it and when.
2.4 Trading records. For each trading account we hold its account type, its leverage, its balance and equity, and every order and position: instrument, direction, volume, prices, stop loss and take profit, commission, swap and the time of each event.
2.5 Transaction records. Deposits and withdrawals are made in USDT on BNB Smart Chain (BEP20). We hold the deposit address assigned to each trading account, the withdrawal addresses you give us, the amounts, fees, the status of each request, the transaction identifiers on the blockchain, and the decision our team makes on each withdrawal, with the reason if it is rejected.
2.6 Sign-in and security records. We record the time and IP address of your most recent sign-in. While you are signed in, your session is held on our servers with the IP address and browser details it was opened from. If you turn on two-factor authentication we hold the secret that links your authenticator app to your account in encrypted form, and your recovery codes in a protected form.
2.7 Communications. We keep the emails you send to and receive from us, including messages to support@ogofx.com, verification@ogofx.com and withdrawals@ogofx.com, and the service emails the portal sends you (such as the email confirmation message and notices about your verification and withdrawals).
2.8 Website visits. When you visit ogofx.com or the client portal, the servers that deliver them process technical data such as your IP address, browser type and the pages requested, as any website does. The cookies involved are described in the Cookie Policy.
3. Where the data comes from
3.1 Most of the data we hold comes from you: what you enter when you register, the documents you upload, the instructions you give in the web terminal and the client portal, and the messages you send us.
3.2 Some data is created by our systems as you use the service, such as trading records, sign-in records and the status of your requests.
3.3 Deposits are detected on BNB Smart Chain. Blockchain transactions are public by design, so the sending address, amount and transaction identifier of a deposit are visible on the network and are recorded by us when the transfer reaches your deposit address.
4. Why we use your data
4.1 We use your personal data only for the purposes below.
| Purpose | Data used | Reason |
|---|---|---|
| Opening and running your client portal and trading accounts | Registration details, trading records | To perform our agreement with you |
| Verifying your identity and address before money moves, and confirming your country of residence | Registration details, KYC documents | To meet our legal and licence obligations, and to perform our agreement |
| Executing your orders and keeping your account and position records | Trading records | To perform our agreement, and to keep the records we are required to keep |
| Crediting deposits and reviewing and sending withdrawals | Transaction records, KYC status | To perform our agreement, and to prevent fraud and money laundering |
| Keeping your account secure, detecting unusual sign-ins and preventing misuse | Security and sign-in records | Our legitimate interest in protecting you and the service |
| Answering your questions and sending service messages | Contact details, communications | To perform our agreement |
| Handling complaints and disputes, and responding to lawful requests from authorities | Any relevant record | To meet legal obligations and to establish or defend legal claims |
4.2 We do not sell your personal data. We do not use it for advertising profiles, and we do not send you marketing messages that you have not asked for.
4.3 We do not make decisions about you by automated means alone that have legal or similarly significant effects. Verification documents are reviewed by a person, and withdrawals are reviewed and sent by our team.
5. What happens if you do not give us data
5.1 The registration details and verification documents described in section 2 are needed to open and fund an account. If you do not give them, or if we cannot verify them, we cannot accept deposits from you or send withdrawals to you, and we may be unable to open or keep open your account.
5.2 Our services are not offered to residents of the United States, or of any jurisdiction where such distribution or use would be contrary to local law or regulation. We use the country you give, and the documents you upload, to confirm this.
6. Who we share your data with
6.1 Inside OGOFX, your data is seen only by the staff who need it for their work, such as the people who review verification documents, process withdrawals or answer support requests.
6.2 We share data outside OGOFX only as follows:
- Liquidity provider. Your orders are filled by market execution through our liquidity provider. The order and position details needed to execute and record your trades pass to that provider.
- Service providers. Companies that host our servers, protect our websites against attack, store files and deliver our emails process data on our behalf, under our instructions, and only for those services.
- Blockchain network. A withdrawal is sent to the address you give on BNB Smart Chain. The amount, the sending and receiving addresses and the time become publicly visible on that network, as they do for every blockchain transfer. Your name and other details are not written to the blockchain.
- Authorities. Where the law or our licence requires it, we disclose data to courts, regulators, law-enforcement and tax authorities.
- Professional advisers. Lawyers, auditors and accountants, where needed, under a duty of confidentiality.
6.3 Our service providers and the liquidity provider may process data in countries other than your own. Where they do, we take steps to make sure your data stays protected to the standard described in this policy.
7. How long we keep your data
7.1 We keep your personal data for as long as your client portal account is open, and after it closes for as long as we need it to meet our legal and licence obligations on record-keeping and the prevention of money laundering, to answer complaints, and to establish or defend legal claims.
7.2 Some records, such as verification documents, trading records and transaction records, may have to be kept by law. If you ask us to delete a record that the law requires us to keep, we tell you so (section 9.3).
7.3 When data is no longer needed, we delete it or make it anonymous. Transactions already recorded on BNB Smart Chain cannot be removed from the blockchain by us or by anyone else.
8. How we protect your data
8.1 We protect your data with technical and organisational measures, including:
- encrypted connections (HTTPS) to the website, the client portal and the web terminal;
- passwords stored only in hashed form, and a minimum password of 10 characters with letters and numbers;
- optional two-factor authentication with an authenticator app (TOTP) and recovery codes;
- security cookies that protect forms in the client portal against forged requests;
- access to verification documents and transaction records limited to the staff who need it;
- a person reviewing each verification and each withdrawal.
8.2 You help protect your account by keeping your password private, turning on two-factor authentication, and checking every withdrawal address before you submit it. We will never ask you for your password or your authenticator codes by email.
8.3 If a breach of security affects your personal data and puts you at risk, we will tell you and any authority we are required to tell, as the law requires.
9. Your rights
9.1 Subject to the law that applies to you and to the records we are required to keep, you have the right to:
- access — ask for a copy of the personal data we hold about you;
- correction — ask us to correct data that is wrong or incomplete;
- deletion — ask us to delete data we no longer need or have no lawful reason to keep;
- restriction — ask us to limit how we use your data while a question about it is settled;
- objection — object to our use of your data where we rely on our legitimate interests;
- portability — receive the data you gave us in a structured, commonly used format;
- complaint — complain to the data protection authority where you live, if you believe we have mishandled your data.
9.2 To make a request, write to support@ogofx.com from the email address registered to your account. We may ask you to confirm your identity before we act on a request, so that we do not disclose your data to someone else.
9.3 If we cannot meet a request in full, for example because the law requires us to keep the record, we will tell you why.
9.4 To make a complaint, email support@ogofx.com with the word “Complaint” in the subject line, and give your registered email address, the account number concerned, what happened and the outcome you want. OGOFX answers in writing by email. This is the one complaints procedure for every OGOFX document, as set out in the Client Agreement.
10. Eligibility
10.1 Our services are for individuals who can lawfully enter into the Client Agreement in their country of residence. We do not knowingly accept registrations from anyone who cannot. If we learn that we hold data about such a person, we close the registration and delete the data, except where the law requires us to keep it.
11. Changes to this policy
11.1 We may update this policy when our services, our providers or the law change. The new version is published on this page with its new effective date at the top. Changes are notified in the same way as changes to the Client Agreement and the Terms of Business.
12. Contact
12.1 For questions about this policy or your personal data, and to exercise your rights, email support@ogofx.com. Support is available 24 hours a day, Monday to Friday.
12.2 Questions about a verification can also be sent to verification@ogofx.com, and questions about a withdrawal to withdrawals@ogofx.com.