ARKBRIDGE Privacy and Cookies Policy

Effective Date: 14/06/2026

Introduction
Data Controller
Information We Collect
How We Collect Information
Purposes of Processing
Legal Basis for Processing
Sharing of Information
International Data Transfers
Data Retention
Data Security
User Rights
Marketing Communications
Cookies Policy
Automated Decision-Making
Children’s Privacy
Policy Updates
Contact Information

1. Introduction

OrynthBridge Technologies Ltd (“ArkBridge”, the “Company”, “we”, “our”, or “us”) operates arkbridge.com and the ArkBridge trading platform, through which client accounts may access global financial markets across multiple asset classes, including equities, foreign exchange, ETFs, commodities, indices, and digital assets. The Company is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us.

This Privacy and Cookies Policy explains how ArkBridge collects, uses, stores, transfers, protects, and discloses personal information when individuals access or use the ArkBridge website at https://arkbridge.com, the ArkBridge trading platform, any mobile applications, customer support services, marketing communications, and any other related services provided by the Company.

It also explains how cookies and automated decision-making are handled, what rights users may have over their information, and how to contact the Company about privacy and data protection matters.

This Policy should be read together with the Company’s Terms and Conditions, KYC Policy, AML Policy, risk disclosures in the Terms and Conditions, and any other applicable legal or compliance documents.

By accessing or using the Company’s services, users acknowledge that their personal information may be processed in accordance with this Policy.

2. Data Controller

The data controller responsible for processing personal information is:

OrynthBridge Technologies Ltd
Registration No. 137061
Trust Company Complex
Ajeltake Road
Ajeltake Island
Majuro
Marshall Islands MH96960

Website: https://arkbridge.com

Privacy-related enquiries may be submitted by email to support@arkbridge.com.

3. Information We Collect

The Company may collect, process, store, and retain various categories of personal information depending on the nature of the client relationship and the services used.

Identity Information

Identity information may include a client’s:

full legal name
date of birth
nationality
government-issued identification details
passport information
driving licence information
identity verification records

Contact Information

Contact information may include a:

residential address
mailing address
email address
telephone number

Financial Information

Financial information may include:

payment details
deposit and withdrawal history
trading account information
funding source information
source of funds documentation
source of wealth documentation

Trading Information

Trading information may include:

orders
open and closed positions
transaction history
account balances
trading activity
risk profile information

Technical Information

Technical information may include:

IP addresses
browser type
device information
operating system
log data
session information
network identifiers
other technical records generated through use of the Platform

Compliance Information

Compliance information may include:

KYC documentation
AML screening results
sanctions screening information
Politically Exposed Person (PEP) screening results
risk assessment records
other due diligence information

Communication Information

Communication information may include:

customer support interactions
emails
Platform messages
complaint records
feedback
survey responses

4. How We Collect Information

Information Provided Directly

Information may be collected directly from users through:

account registration
KYC verification procedures
deposits and withdrawals
trading activity
website interactions
customer support communications
other interactions with the Company

Information Collected Automatically

The Company may also collect information automatically through cookies, analytics technologies, device identifiers, log files, and similar technologies used in connection with the website and Platform.

Information From Third Parties

Information may also be obtained from authorised third parties, including:

identity verification providers
payment processors
compliance screening providers
financial institutions
public databases
service providers
other lawful sources

5. Purposes of Processing

The Company processes personal information for legitimate business, operational, security, compliance, contractual, and legal purposes.

Service Delivery

For service delivery, personal information may be used to administer accounts, process transactions, execute trades, provide customer support, maintain account security, and deliver the services requested by users.

Compliance

For compliance purposes, information may be processed to conduct identity verification, sanctions screening, anti-money laundering checks, fraud prevention, regulatory reporting, risk management, enhanced due diligence, and ongoing monitoring.

Platform Operations

For Platform operations, information may be used for website administration, performance monitoring, service improvement, cybersecurity protection, technical troubleshooting, system testing, and operational continuity.

Communications

For communications, information may be used to send account notifications, legal notices, operational updates, support communications, security alerts, and marketing communications where permitted.

Legal and Contractual Purposes

The Company may also process personal information to comply with applicable laws, resolve disputes, enforce contractual rights, establish or defend legal claims, and cooperate with competent authorities.

6. Legal Basis for Processing

Where the General Data Protection Regulation (“GDPR”) or a similar privacy framework applies, the Company may process personal information on one or more lawful bases.

Performance of a Contract

Processing may be necessary for the performance of a contract or to take steps requested by a user before entering into a contract, including opening and administering an account or providing Platform services.

Legal Obligations

Processing may also be necessary to comply with legal, regulatory, AML, sanctions, taxation, recordkeeping, reporting, and financial crime prevention obligations.

Legitimate Interests

The Company may process personal information where necessary for its legitimate interests, including fraud prevention, security monitoring, business operations, risk management, service improvement, protection of legal rights, and maintenance of Platform integrity, provided that such interests are not overridden by the rights and interests of the individual.

Consent

Where required, processing may also be based on the user’s consent. Users may withdraw consent at any time where consent is the relevant legal basis, although such withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn and may be subject to legal or contractual limitations.

7. Sharing of Information

The Company may disclose personal information to carefully selected third parties where disclosure is reasonably necessary, legally required, or contractually authorised.

Service Providers

Service providers may include:

cloud hosting providers
payment processors
identity verification providers
compliance screening providers
analytics providers
cybersecurity providers
communication providers
customer support providers

Professional Advisers

Personal information may also be shared with professional advisers, including legal advisers, auditors, accountants, consultants, and insurers.

Financial Institutions

Where required for the provision of services, information may be disclosed to banks, payment service providers, liquidity providers, financial partners, and other financial institutions.

Authorities, Regulators and Courts

The Company may also disclose information to regulators, law enforcement agencies, courts, government bodies, financial intelligence units, sanctions authorities, tax authorities, and other competent bodies where required or permitted by law.

The Company seeks to limit disclosure to the information reasonably necessary for the relevant purpose.

8. International Data Transfers

ArkBridge operates internationally, and personal information may be transferred to, processed in, or stored in jurisdictions outside the user’s country of residence.

The laws of those jurisdictions may differ from the data protection laws applicable in the user’s home jurisdiction.

Where international transfers occur, the Company implements reasonable safeguards designed to protect personal information in a manner consistent with applicable data protection requirements.

Such safeguards may include:

contractual protections
technical security measures
organisational controls
access restrictions
vendor due diligence
data minimisation
other appropriate transfer mechanisms

9. Data Retention

Personal information will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy applicable legal, regulatory, AML, recordkeeping, dispute resolution, fraud prevention, and legitimate business requirements.

Retention periods may continue after an account has been closed where continued retention is required by law or reasonably necessary for compliance, risk management, investigation, audit, or legal purposes.

The Company reserves the right to retain information necessary to establish, exercise, or defend legal claims, investigate suspected misconduct, prevent fraud, or satisfy statutory recordkeeping obligations.

10. Data Security

The Company implements reasonable technical, administrative, and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, disclosure, alteration, destruction, or other unlawful processing.

Security measures may include:

encryption technologies
access controls
authentication procedures
network security monitoring
incident response procedures
internal security policies
personnel access restrictions
system testing
vendor security assessments

Although the Company seeks to maintain appropriate security standards, no internet-based transmission, electronic communication, or storage system can be guaranteed to be completely secure.

Users acknowledge the inherent risks associated with electronic communications and online services and remain responsible for protecting their account credentials, devices, and access information.

Guidance on protecting account access is available on the Account Security page.

11. User Rights

Subject to applicable law, users may have the right to:

access personal information held about them
request correction of inaccurate or incomplete information
request deletion of information
request restriction of processing
object to certain processing activities
request portability of information
withdraw consent where consent is the relevant legal basis

Privacy requests may be submitted to support@arkbridge.com.

The Company may request additional information or identity verification before responding to a request in order to protect personal information and prevent unauthorised disclosure.

Certain rights may be limited or unavailable where the Company is required to continue processing or retaining information for legal, regulatory, contractual, security, AML, fraud prevention, or dispute resolution purposes.

12. Marketing Communications

Users may receive marketing communications where permitted by applicable law and in accordance with their communication preferences.

Marketing communications may include product updates, promotional campaigns, educational content, market-related information, service announcements, and Platform updates.

Users may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting the Company.

Unsubscribing from marketing communications will not prevent the Company from sending operational, transactional, legal, compliance, security, or account-related communications where necessary.

13. Cookies Policy

Cookies are small text files placed on a user’s device when visiting a website. They support website functionality and provide information about how users interact with the website and Platform.

Essential Cookies

The Company may use essential cookies that are necessary for website functionality, authentication, security, fraud prevention, session management, and access to core services. These cookies generally cannot be disabled without affecting the operation of the website.

Performance and Analytics Cookies

Performance and analytics cookies may be used to measure website performance, understand visitor behaviour, analyse usage trends, identify technical issues, and improve the Company’s services.

Functional Cookies

Functional cookies may be used to remember user preferences, improve usability, retain settings, and personalise aspects of the user experience.

Security Cookies

Security cookies may be used to detect suspicious activity, prevent misuse, identify unauthorised access attempts, and protect user accounts and the Platform.

Marketing Cookies

Where applicable, marketing cookies may be used to measure campaign performance, provide more relevant content, evaluate advertising effectiveness, and understand user engagement with promotional communications.

Managing Cookie Preferences

Users may manage cookie preferences through:

their browser settings
cookie preference tools
any consent mechanism made available on the website

Disabling certain cookies may affect website functionality, authentication, user preferences, or access to certain services.

14. Automated Decision-Making

The Company may use automated systems and tools for:

fraud detection
transaction monitoring
sanctions screening
client risk assessment
cybersecurity monitoring
identity verification
other compliance or operational purposes

Such systems may assist the Company in identifying risk indicators, prioritising compliance reviews, restricting suspicious activity, or supporting account and transaction-related decisions.

Where required by applicable law, users may request further information regarding significant automated processing and may have the right to request human review of certain decisions.

15. Children’s Privacy

ArkBridge services are not intended for individuals under the age of eighteen (18).

The Company does not knowingly collect or process personal information relating to minors.

Where the Company becomes aware that personal information has been collected from a minor, it will take reasonable steps to restrict, delete, or otherwise address that information in accordance with applicable law.

16. Policy Updates

The Company reserves the right to amend this Privacy and Cookies Policy at any time to reflect changes in applicable law, regulatory requirements, business operations, technology, Platform functionality, or data processing practices.

Changes may be published through the Company’s website, the Platform, email notifications, legal notices, or other reasonable communication methods.

Any updated version will become effective upon publication unless a different effective date is specified. Continued use of the services following publication constitutes acknowledgement of the revised Policy, subject to any rights that cannot lawfully be excluded.

17. Contact Information

Questions, concerns, or requests relating to this Privacy and Cookies Policy may be directed to: