Privacy Policy

This Privacy Policy applies to:

• The XGALA official website (for product and feature display purposes only)
• The XGALA mobile application (stock trading services)

Important Notice:

The XGALA official website does not provide account registration, login, or trading functions. All account-related activities and trading services are conducted exclusively within the XGALA mobile application.

When you visit the XGALA official website, we do not actively collect any personally identifiable information.

We may collect limited non-personal information through standard technical methods for website optimization and security purposes, including:

• Device type and browser type
• Access time and page view records
• Anonymized IP addresses (for security and statistical analysis)

Such information is used solely for website performance analysis and security maintenance.

When you download and use the XGALA mobile application, we may collect certain information in accordance with applicable laws, regulations, and business requirements, including:

• Identity information (such as name and identification documents) for compliance and identity verification purposes
• Contact information (such as email address and phone number)
• Account and transaction-related information
• Device information (including device model, operating system, and unique device identifiers)
• Log information (used for system security monitoring and troubleshooting)

All information is collected in accordance with the principle of data minimization and only to the extent necessary.

We collect and use your information solely for legitimate purposes, including:

• Providing stock trading and related services
• Completing identity verification and regulatory compliance requirements (KYC / AML)
• Ensuring account and fund security
• Improving product functionality and system performance
• Fulfilling legal, regulatory, and audit obligations

We do not use personal information for purposes unrelated to those described above.

XGALA is a stock trading platform and does not provide any form of cryptocurrency trading services.

• Cryptocurrencies (such as USDT and USDC) are accepted solely as a funding method
• The Platform does not support cryptocurrency trading, exchange, or investment activities
• Any related information is used only for fund processing and regulatory compliance purposes

We do not sell users’ personal information to any third party.

Your information may be disclosed only under the following circumstances:

• Where required by applicable laws, regulations, or regulatory authorities
• Where necessary to provide services, to compliant service providers (such as payment processors, custodians, or technical support providers)
• Where necessary to protect the legitimate rights and interests of the Platform, users, or the public

All third parties are required to comply with strict confidentiality and data protection obligations.

We implement industry-standard technical and organizational measures to protect your information, including but not limited to:

• Data encryption
• Access control mechanisms
• Security audits
• System monitoring and risk prevention measures

While we strive to protect your information, no internet-based system can be guaranteed to be completely secure. We will continue to enhance our security measures on an ongoing basis.

You have the right to:

• Access, correct, or update your personal information
• Request deletion of information that is no longer necessary (unless otherwise required by law or regulation)
• Withdraw previously granted consent (which may affect certain service functionalities)

Related requests may be submitted through the mobile application or via technical support channels.

We may update this Privacy Policy from time to time in response to legal, regulatory, or business changes.

Any updates will be published on the official website or within the mobile application. Continued use of our services after such updates constitutes your acceptance of the revised Privacy Policy.