Privacy Policy

Introduction
At Gilgamesh Financial Services, GFX Securities, and/or the Company (collectively referred to as “the Company”), we are committed to protecting and respecting our customers’ personal data. This Privacy Policy outlines the procedures regarding the collection, use, storage, and protection of customers’ personal information.

1. Data Collection
The Company collects personal data that customers provide explicitly and knowingly. To open an account on our trading platform, customers must provide the following personal information:

  • Full name
  • Residential address
  • Employment details
  • Average income
  • Other personal information as necessary and upon request

2. Use of Data
The Company processes customers’ personal data for the following purposes:

  • To fulfill obligations arising from any agreements between the customer and the Company.
  • To notify customers about changes to products and/or services, or other significant alterations affecting an agreement between the customer and the Company.
  • To inform customers about Company products and/or services, provided the customer has explicitly consented to receive such communications.
  • If customers are required to provide personal data to comply with legal requirements or conclude an agreement with the Company, the purpose of collecting personal data will be made clear, and the Company will provide guidance accordingly.

3. Data Protection
The Company is committed to ensuring the security of customers’ personal data and other confidential information. The following outlines how we protect your data:

  • Retention: Personal data will be retained for a period determined by the Company and used for the purpose of updating customers on products and services. Customers may request cessation of these updates at any time.

  • Data Sharing: The Company may share personal data with the following categories of recipients:

    • Group Companies: Personal data may be shared with subsidiaries or holding companies to provide or administer products, services, and support. All employees and contractors must follow our privacy and security policies.
    • Third-Party Service Providers: Personal data may be shared with third-party service providers for purposes such as system maintenance, customer due diligence, credit checks, feedback collection, marketing, and data analytics. These providers may only use personal data for services provided to the Company.
    • Fraud Prevention and Credit Agencies: Personal data may be shared for anti-money laundering checks, fraud prevention, sanctions, and credit risk assessments.
    • Introducers and Advisers: If a third-party introduces the customer to the Company, personal data may be disclosed to them.
    • Legal and Regulatory Authorities: Personal data may be shared to comply with legal, regulatory, or law enforcement obligations, including responses to government authorities or financial regulators, which may extend beyond the customer’s country of residence.
  • Data Storage: Personal data is stored securely on the Company’s servers. When no longer required, personal data will be securely destroyed or deleted to prevent unauthorized access during and after the destruction/deletion process.

  • Customer Responsibility: Customers are responsible for maintaining the confidentiality of their user ID and login information.

4. Cookies
The Company uses cookies on its website. Cookies are small files stored on a user’s computer that contain data specific to that user and the website. These cookies may enhance the user experience by providing a more customized browsing experience on certain pages of the website.

5. Customer Consent and Rights
By accessing the Company’s website, customers consent to the collection, use, storage, and disclosure of their personal data in accordance with this Privacy Policy.

Customers have the following rights:

  • Right to Access: To request and obtain a copy of the personal data held by the Company.
  • Right to Rectification: To request the amendment or correction of any inaccurate or incomplete data. The Company is obligated to fulfill such requests and notify any relevant third parties to whom the data was shared.
  • Right to Restrict Processing: To request that the Company stop processing their personal data. Customers understand that refusal to process personal data may impact certain services provided by the Company.
  • Right to Erasure: To request the erasure of personal data from the Company’s records. The Company will comply unless there is a lawful reason not to do so.
  • Right to Lodge a Complaint: Customers have the right to lodge a complaint with the relevant supervisory authority. However, we encourage customers to first contact the Company to resolve the issue and investigate potential causes for the complaint.