Privacy Policy
Last updated: September 2026
1. General Provisions
1.1. This Privacy Policy (personal data processing policy; hereinafter the "Policy") sets forth the procedures for the collection, storage, use, transfer and protection of personal data of individuals (hereinafter the "User") who use the monetago.exchange website, its subdomains, the Telegram bot and the Mini App of the MonetaGO.exchange service (hereinafter the "Service").
1.2. This Policy is an integral part of the Terms of Service (public offer) and the AML / KYC / KYT Policy published on the Service's website.
1.3. By creating an Order, registering a personal account, contacting support or otherwise using the Service, the User confirms that they have read this Policy and consent to the processing of their personal data under the terms set forth herein.
1.4. If the User does not agree with the terms of this Policy, they must stop using the Service.
2. Personal Data Controller
2.1. The personal data controller is the MonetaGO.exchange service (hereinafter the "Controller").
2.2. Contact for questions regarding the processing of personal data: support@monetago.exchange.
3. Definitions
Personal Data — any information relating directly or indirectly to an identified or identifiable natural person.
Processing — any operation performed on personal data: collection, recording, organisation, storage, updating, use, transfer, anonymisation, blocking, deletion or destruction.
Order — a request submitted by the User through the Service to perform an exchange transaction.
KYC verification — the procedure for confirming the User's identity, as provided for in the AML / KYC / KYT Policy.
4. What Data We Process
4.1. When creating an Order and/or a personal account:
email address;
Telegram username and/or phone number (if the User provides them for communication purposes);
payment details provided by the User: bank card or account number, phone number for transfers via the Faster Payments System (SBP), cryptocurrency wallet addresses, memo/tag and other identifiers;
Order details: exchange direction, amounts, exchange rate, status, date and time, transaction hashes.
4.2. When undergoing KYC verification (only in the cases provided for by the AML / KYC / KYT Policy):
last name, first name, patronymic, date of birth;
details of the identity document and an image of it;
a photo of the User's face, a video selfie and a video recording with the document;
a handwritten statement on the source and ownership of the funds;
other documents requested to confirm the origin of the funds.
4.3. Automatically when using the website:
IP address, device, browser and operating system information;
date and time of visits, pages visited, referral source (including tracking tags from affiliate links of exchange monitoring services);
cookies and analytics system identifiers.
4.4. When contacting support — the content of correspondence via Telegram, email or online chat, including attachments.
4.5. The Service does not request or store CVV/CVC codes, PIN codes, passwords for banking apps, private keys or wallet seed phrases. Any request for such data on behalf of the Service is fraudulent.
4.6. The Service does not process special categories of personal data (health, political views, religion, etc.), with the exception of biometric data (facial images), which is processed exclusively as part of KYC verification. By submitting photo and video materials, the User consents to their processing.
5. Purposes and Legal Bases for Processing
5.1. The Service processes personal data for the following purposes:
Creating, fulfilling and managing the Order; communicating with the User regarding the Order.
Data: as specified in clauses 4.1 and 4.4.
Legal basis: performance of a contract (public offer).
Compliance with AML / KYC / KYT requirements, fraud prevention, verification of the source of funds.
Data: as specified in clauses 4.1, 4.2 and 4.3.
Legal basis: the User's consent; the Service's legitimate interests; requirements of payment and analytics partners.
Handling claims, resolving disputes, protecting the Service's rights.
Data: as specified in clauses 4.1, 4.2 and 4.4.
Legal basis: performance of the contract; the Service's legitimate interests.
Operation of the referral program, calculation of rewards.
Data: as specified in clauses 4.1 and 4.3.
Legal basis: performance of the contract.
Ensuring the website's operation, security, statistics and traffic analytics.
Data: as specified in clause 4.3.
Legal basis: the Service's legitimate interests; the User's consent to the use of cookies.
5.2. The Service does not make decisions that have legal consequences for the User based solely on automated processing. The results of automated AML/KYT assessments and automated KYC verification are reviewed by a Service operator.
6. Cookies and Analytics
6.1. The Service uses cookies to operate the personal account, save the interface language and settings, and collect anonymised statistics.
6.2. The following services are used for traffic analytics: Yandex.Metrica and Google Analytics. Data is transmitted to these services in anonymised form in accordance with their privacy policies.
6.3. The User may disable cookies in their browser settings. In this case, some features of the Service (personal account, Order tracking) may become unavailable.
7. To Whom Data Is Disclosed
7.1. The Service does not sell personal data and does not transfer it to third parties for advertising purposes.
7.2. Data may be transferred to the extent necessary to achieve the purposes of processing:
KYC verification providers — for automated verification of the document and face (Didit);
blockchain analytics and AML screening providers — wallet addresses and transaction hashes (BitOK);
payment and liquidity partners — payment details necessary to execute the Order;
the software platform and hosting providers — as part of the technical maintenance of the Service (iEXExchanger, Contabo);
analytics services — anonymised visit data (clause 6.2);
exchange monitoring services (BestChange, ExchangeSumo and others) — anonymised information on Order status as part of affiliate programs, excluding payment details;
law enforcement, regulatory and judicial authorities — where there is a legal basis and a substantiated request.
7.3. Data may be transferred outside the User's country of residence to the extent necessary to execute the Order and comply with AML/KYC requirements, as the Service and its partners operate in different jurisdictions.
8. Retention Periods
8.1. Personal data is retained for the following periods:
Order details and the payment details specified in it — 5 years from the date the Order is fulfilled or cancelled;
KYC verification materials — 5 years from the date the verification is completed;
personal account data — until the account is deleted at the User's request, but no less than the retention period of the associated Orders;
correspondence with support — 3 years from the date of the last message;
analytics data and cookies — in accordance with the settings of the analytics services, but no longer than 2 years.
8.2. If the User selected the "Do not save my data" option when creating an Order, payment details are not saved in the personal account for subsequent Orders. Information about the Order itself is retained for the period specified in clause 8.1, as it is necessary to fulfil obligations and comply with AML requirements.
8.3. Upon expiry of the retention periods, data is deleted or anonymised unless its continued retention is required by law or to protect the Service's rights in a dispute.
9. Data Protection
9.1. The Service implements organisational and technical measures to protect personal data: connection encryption (HTTPS), restricting staff access to data on a need-to-know basis, storing backups in encrypted form, and monitoring and logging access.
9.2. KYC verification materials are stored separately from the general Order database with restricted access.
9.3. The User is solely responsible for securing access to their email, Telegram account and personal account.
10. User Rights
10.1. The User has the right to:
receive information about which of their data is being processed;
request that their data be updated, corrected or supplemented;
request the deletion of their data or of their personal account;
withdraw consent to the processing of their data;
opt out of informational mailings;
lodge a complaint with the competent supervisory authority or in court.
10.2. Requests must be sent to support@monetago.exchange from the email address provided when creating an Order or registering. The Service reserves the right to request confirmation of the requester's identity before fulfilling the request.
10.3. The response time for a request is up to 15 business days.
11. Withdrawal of Consent and Restrictions
11.1. Withdrawal of consent does not affect the lawfulness of processing carried out prior to such withdrawal.
11.2. The Service reserves the right to continue processing data after consent is withdrawn or a deletion request is received where this is necessary to:
fulfil an Order that has not yet been completed;
comply with AML / KYC / KYT requirements, including the retention of verification materials for the prescribed periods;
protect the Service's rights in claims and legal disputes;
comply with legal requirements and requests from competent authorities.
11.3. Withdrawal of consent to the processing of data necessary to execute an Order makes it impossible to provide the service.
12. Age of Users
12.1. The Service is intended for individuals over the age of 18. The Service does not collect data from minors. If such data is identified, it is deleted and the Orders are rejected.
13. Changes to the Policy
13.1. The Service reserves the right to amend this Policy. The new version takes effect upon publication on the website, unless otherwise specified in the version itself. The date of the last update is indicated at the beginning of the document.
13.2. Continued use of the Service after the publication of changes constitutes acceptance of those changes.
14. Contact Information
For questions regarding the processing of personal data: support@monetago.exchange
Appendix
CONSENT TO THE PROCESSING OF PERSONAL DATA
I, acting of my own free will and in my own interest, hereby consent to the processing of my personal data by the MonetaGO.exchange service (the Controller): email address, Telegram contacts, payment details, Order information and, when undergoing verification, identity document data, photo and video materials — under the terms and for the purposes set forth in the Privacy Policy, including transfer to verification and AML screening partners.
This consent is valid from the moment it is given until the expiry of the retention periods established by the Policy and may be withdrawn by sending a request to support@monetago.exchange, subject to the restrictions set forth in Section 11 of the Policy.
I confirm that I am at least 18 years old and that the data provided belongs to me.