ARKBRIDGE PRIVACY AND COOKIES POLICY

Effective Date: 14/06/2026

1. INTRODUCTION

OrynthBridge Technologies Ltd (“ArkBridge”, the “Company”, “we”, “our”, or “us”) is committed to protecting the privacy, confidentiality, and security of the personal information entrusted to us.

This Privacy and Cookies Policy explains how ArkBridge collects, uses, stores, transfers, protects, and discloses personal information when individuals access or use the ArkBridge website at https://arkbridge.com, the ArkBridge trading platform, any mobile applications, customer support services, marketing communications, and any other related services provided by the Company.

This Policy should be read together with the Company’s Terms and Conditions, KYC Policy, AML Policy, Risk Disclosure Statement, and any other applicable legal or compliance documents.

By accessing or using the Company’s services, users acknowledge that their personal information may be processed in accordance with this Policy.

2. DATA CONTROLLER

The data controller responsible for processing personal information is OrynthBridge Technologies Ltd, Registration No. 137061, Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, Marshall Islands MH96960.

The Company’s website is https://arkbridge.com, and privacy-related enquiries may be submitted by email to support@arkbridge.com.

3. INFORMATION WE COLLECT

The Company may collect, process, store, and retain various categories of personal information depending on the nature of the client relationship and the services used.

Identity information may include a client’s full legal name, date of birth, nationality, government-issued identification details, passport information, driving licence information, and identity verification records.

Contact information may include a residential address, mailing address, email address, and telephone number.

Financial information may include payment details, deposit and withdrawal history, trading account information, funding source information, source of funds documentation, and source of wealth documentation.

Trading information may include orders, open and closed positions, transaction history, account balances, trading activity, and risk profile information.

Technical information may include IP addresses, browser type, device information, operating system, log data, session information, network identifiers, and other technical records generated through use of the Platform.

Compliance information may include KYC documentation, AML screening results, sanctions screening information, Politically Exposed Person screening results, risk assessment records, and other due diligence information.

Communication information may include customer support interactions, emails, Platform messages, complaint records, feedback, and survey responses.

4. HOW WE COLLECT INFORMATION

Information may be collected directly from users through account registration, KYC verification procedures, deposits and withdrawals, trading activity, website interactions, customer support communications, and other interactions with the Company.

The Company may also collect information automatically through cookies, analytics technologies, device identifiers, log files, and similar technologies used in connection with the website and Platform.

Information may also be obtained from authorised third parties, including identity verification providers, payment processors, compliance screening providers, financial institutions, public databases, service providers, and other lawful sources.

5. PURPOSES OF PROCESSING

The Company processes personal information for legitimate business, operational, security, compliance, contractual, and legal purposes.

For service delivery, personal information may be used to administer accounts, process transactions, execute trades, provide customer support, maintain account security, and deliver the services requested by users.

For compliance purposes, information may be processed to conduct identity verification, sanctions screening, anti-money laundering checks, fraud prevention, regulatory reporting, risk management, enhanced due diligence, and ongoing monitoring.

For Platform operations, information may be used for website administration, performance monitoring, service improvement, cybersecurity protection, technical troubleshooting, system testing, and operational continuity.

For communications, information may be used to send account notifications, legal notices, operational updates, support communications, security alerts, and marketing communications where permitted.

The Company may also process personal information to comply with applicable laws, resolve disputes, enforce contractual rights, establish or defend legal claims, and cooperate with competent authorities.

6. LEGAL BASIS FOR PROCESSING

Where the General Data Protection Regulation (“GDPR”) or a similar privacy framework applies, the Company may process personal information on one or more lawful bases.

Processing may be necessary for the performance of a contract or to take steps requested by a user before entering into a contract, including opening and administering an account or providing Platform services.

Processing may also be necessary to comply with legal, regulatory, AML, sanctions, taxation, recordkeeping, reporting, and financial crime prevention obligations.

The Company may process personal information where necessary for its legitimate interests, including fraud prevention, security monitoring, business operations, risk management, service improvement, protection of legal rights, and maintenance of Platform integrity, provided that such interests are not overridden by the rights and interests of the individual.

Where required, processing may also be based on the user’s consent. Users may withdraw consent at any time where consent is the relevant legal basis, although such withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn and may be subject to legal or contractual limitations.

7. SHARING OF INFORMATION

The Company may disclose personal information to carefully selected third parties where disclosure is reasonably necessary, legally required, or contractually authorised.

Service providers may include cloud hosting providers, payment processors, identity verification providers, compliance screening providers, analytics providers, cybersecurity providers, communication providers, and customer support providers.

Personal information may also be shared with professional advisers, including legal advisers, auditors, accountants, consultants, and insurers.

Where required for the provision of services, information may be disclosed to banks, payment service providers, liquidity providers, financial partners, and other financial institutions.

The Company may also disclose information to regulators, law enforcement agencies, courts, government bodies, financial intelligence units, sanctions authorities, tax authorities, and other competent bodies where required or permitted by law.

The Company seeks to limit disclosure to the information reasonably necessary for the relevant purpose.

8. INTERNATIONAL DATA TRANSFERS

ArkBridge operates internationally, and personal information may be transferred to, processed in, or stored in jurisdictions outside the user’s country of residence.

The laws of those jurisdictions may differ from the data protection laws applicable in the user’s home jurisdiction.

Where international transfers occur, the Company implements reasonable safeguards designed to protect personal information in a manner consistent with applicable data protection requirements.

Such safeguards may include contractual protections, technical security measures, organisational controls, access restrictions, vendor due diligence, data minimisation, and other appropriate transfer mechanisms.

9. DATA RETENTION

Personal information will be retained only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy applicable legal, regulatory, AML, recordkeeping, dispute resolution, fraud prevention, and legitimate business requirements.

Retention periods may continue after an account has been closed where continued retention is required by law or reasonably necessary for compliance, risk management, investigation, audit, or legal purposes.

The Company reserves the right to retain information necessary to establish, exercise, or defend legal claims, investigate suspected misconduct, prevent fraud, or satisfy statutory recordkeeping obligations.

10. DATA SECURITY

The Company implements reasonable technical, administrative, and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, disclosure, alteration, destruction, or other unlawful processing.

Security measures may include encryption technologies, access controls, authentication procedures, network security monitoring, incident response procedures, internal security policies, personnel access restrictions, system testing, and vendor security assessments.

Although the Company seeks to maintain appropriate security standards, no internet-based transmission, electronic communication, or storage system can be guaranteed to be completely secure.

Users acknowledge the inherent risks associated with electronic communications and online services and remain responsible for protecting their account credentials, devices, and access information.

11. USER RIGHTS

Subject to applicable law, users may have the right to access personal information held about them, request correction of inaccurate or incomplete information, request deletion of information, request restriction of processing, object to certain processing activities, request portability of information, and withdraw consent where consent is the relevant legal basis.

Privacy requests may be submitted to support@arkbridge.com.

The Company may request additional information or identity verification before responding to a request in order to protect personal information and prevent unauthorised disclosure.

Certain rights may be limited or unavailable where the Company is required to continue processing or retaining information for legal, regulatory, contractual, security, AML, fraud prevention, or dispute resolution purposes.

12. MARKETING COMMUNICATIONS

Users may receive marketing communications where permitted by applicable law and in accordance with their communication preferences.

Marketing communications may include product updates, promotional campaigns, educational content, market-related information, service announcements, and Platform updates.

Users may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting the Company.

Unsubscribing from marketing communications will not prevent the Company from sending operational, transactional, legal, compliance, security, or account-related communications where necessary.

13. COOKIES POLICY

Cookies are small text files placed on a user’s device when visiting a website. They support website functionality and provide information about how users interact with the website and Platform.

The Company may use essential cookies that are necessary for website functionality, authentication, security, fraud prevention, session management, and access to core services. These cookies generally cannot be disabled without affecting the operation of the website.

Performance and analytics cookies may be used to measure website performance, understand visitor behaviour, analyse usage trends, identify technical issues, and improve the Company’s services.

Functional cookies may be used to remember user preferences, improve usability, retain settings, and personalise aspects of the user experience.

Security cookies may be used to detect suspicious activity, prevent misuse, identify unauthorised access attempts, and protect user accounts and the Platform.

Where applicable, marketing cookies may be used to measure campaign performance, provide more relevant content, evaluate advertising effectiveness, and understand user engagement with promotional communications.

Users may manage cookie preferences through their browser settings, cookie preference tools, or any consent mechanism made available on the website. Disabling certain cookies may affect website functionality, authentication, user preferences, or access to certain services.

14. AUTOMATED DECISION-MAKING

The Company may use automated systems and tools for fraud detection, transaction monitoring, sanctions screening, client risk assessment, cybersecurity monitoring, identity verification, and other compliance or operational purposes.

Such systems may assist the Company in identifying risk indicators, prioritising compliance reviews, restricting suspicious activity, or supporting account and transaction-related decisions.

Where required by applicable law, users may request further information regarding significant automated processing and may have the right to request human review of certain decisions.

15. CHILDREN’S PRIVACY

ArkBridge services are not intended for individuals under the age of eighteen (18).

The Company does not knowingly collect or process personal information relating to minors.

Where the Company becomes aware that personal information has been collected from a minor, it will take reasonable steps to restrict, delete, or otherwise address that information in accordance with applicable law.

16. POLICY UPDATES

The Company reserves the right to amend this Privacy and Cookies Policy at any time to reflect changes in applicable law, regulatory requirements, business operations, technology, Platform functionality, or data processing practices.

Changes may be published through the Company’s website, the Platform, email notifications, legal notices, or other reasonable communication methods.

Any updated version will become effective upon publication unless a different effective date is specified. Continued use of the services following publication constitutes acknowledgement of the revised Policy, subject to any rights that cannot lawfully be excluded.

17. CONTACT INFORMATION

Questions, concerns, or requests relating to this Privacy and Cookies Policy may be directed to OrynthBridge Technologies Ltd, Registration No. 137061, Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, Marshall Islands MH96960.

The Company’s website is https://arkbridge.com, and enquiries may be submitted by email to support@arkbridge.com.