Privacy and Data Policy

1. Data We Gather

1.1 Details You Give Us

When you open an account or use the Service, we may collect the following information:

• Identity information: given name, family name and date of birth.
• Contact information: email, telephone number and home address.
• Financial information: read-only or execution broker API keys, investment choices and risk settings. We do not retain full broker login details or card numbers.
• Account profile: username, preferred trading approach and alert settings.
• Messages: communications sent through support channels or email.

1.2 Data Collected Automatically

During your use of the Service, certain technical details are collected automatically:

• IP address, browser name and version, and operating system.
• Visited pages, active features, time on site and clickstream information.
• Device identifiers and mobile advertising identifiers where relevant.
• Cookie and tracking information (see our Cookie Policy).

1.3 Information Supplied by Others

Information may come from identity-check providers, fraud-detection services and analytics partners. We may combine those details with information already held to strengthen accuracy and security.

2. Uses of Your Information

The information collected may be used to:

• Open and administer your account and deliver the Service.
• Transmit and carry out trading signals or automated orders through connected brokers.
• Tailor your experience and show useful market information.
• Deliver service messages, including confirmations, trade alerts and security notices.
• Send promotional messages when you have agreed or applicable law permits it.
• Identify, examine and stop fraudulent or illegal conduct.
• Meet applicable legal and regulatory responsibilities.
• Build, test and improve features using aggregated, anonymised information.

3. Processing Grounds for EEA and UK Users

For users in the European Economic Area or the United Kingdom, personal data is processed on these legal grounds:

• Contract performance: to deliver the Service requested through your account.
• Legitimate interests: protecting against fraud, maintaining security and improving the product.
• Legal requirement: meeting financial compliance and tax obligations.
• Permission: marketing messages and optional cookies, which you may revoke at any time.

4. Disclosure of Information

We do not trade in personal data. Information may be shared with:

• Service partners: cloud infrastructure, email, analytics and support providers required by contract to keep information secure.
• Linked brokers and exchanges: only the API directions needed to implement the strategy you have configured.
• Public authorities: where legislation or a court order requires disclosure, or where needed to defend our rights.
• Corporate transactions: during a merger, acquisition or asset transfer, provided the acquiring party continues to follow this policy.

5. Transfers Across Borders

Tropics Gaingro operates internationally. Your personal information can be transferred to and handled in jurisdictions outside Malaysia, including the United States and countries in the European Union. When applicable, we rely on recognised contractual safeguards for international data transfers.

6. How Long We Keep Data

We keep personal information while your account remains open or for as long as needed to provide the Service. Following closure, some records may be retained for up to seven years to meet financial regulatory duties. Aggregated, anonymised analytics information may be kept without a fixed end date.

7. Your Data Choices

Subject to your location, you may be entitled to:

• Obtain a copy of the personal information we hold about you.
• Ask us to fix incomplete or incorrect information.
• Ask for your information to be erased, sometimes called the “right to be forgotten”.
• Challenge or limit particular processing activities.
• Receive your information in a structured, machine-readable form for portability.
• Revoke consent at any time, without changing processing already carried out.

To make a request under these rights, email . We aim to reply within 30 days.

8. Protecting Information

Our safeguards include TLS 1.3 encryption during transmission, AES-256 encryption for stored data, multi-factor authentication, role-based permissions and annual independent penetration tests. No system can be guaranteed completely secure. Use a strong, unique password and activate two-factor authentication.

9. Cookie Use

Cookies and similar tools help us run and enhance the Service. Further information is available in our Cookie Policy.

10. Privacy of Children

The Service is intended for people aged 18 or above. We do not knowingly gather children’s personal information. If you think a child has sent us personal data, contact us so we can remove it promptly.

11. Revisions to This Policy

We may amend this Privacy Policy from time to time. Significant changes will be communicated through our website or email. Using the Service after a revised policy takes effect indicates acceptance of the updated terms.

12. How to Contact Us

For privacy enquiries or to exercise your rights, contact our data protection contact:

• Email address:
• Postal address: Tropics Gaingro Inc., Kuala Lumpur City Centre, 50088 Kuala Lumpur, Malaysia, United States
• EU contact: Tropics Gaingro, Kuala Lumpur City Centre, 50088 Kuala Lumpur, Malaysia