PRIVACY & DATA PROTECTION

Privacy Policy

At Today Markets, we take the privacy and security of your personal information seriously. This Privacy Policy explains how we collect, use, protect and manage personal data when you use our website, trading services, platforms and related services.

Effective Date: 21 July 2026

YOUR PRIVACY MATTERS

How we handle your personal information

This Privacy Policy applies to personal information processed in connection with the Today Markets website, trading platforms, applications, account-opening processes, customer support services, educational services and other services provided through the Today Markets brand.

The data controller responsible for your personal data is Octalas Group Limited (“Octalas”, “we”, “us” or “our”).

DATA CONTROLLER

Who is responsible for your data?

The company responsible for deciding how and why your personal information is processed is:

Octalas Group Limited Registered Office: [Insert registered office address] Company Registration Number: [Insert company number] Website: todaymarkets.com Privacy Contact: privacy@todaymarkets.com

INFORMATION WE COLLECT

What personal data may we collect?

Depending on how you interact with Today Markets, we may collect different categories of personal information, including:

Identity Information

Name, date of birth, nationality, identification documents and information required for identity verification.

Contact Information

Email address, telephone number, residential address and other contact details.

Account Information

Financial Information

Information relating to deposits, withdrawals, payment methods, account balances and transaction history.

Trading Information

Trading activity, orders, positions, instruments, platform activity and information relating to your use of our trading services.

Technical Information

IP address, device information, browser type, operating system, cookies, log data and information about how you interact with our website and platforms.

HOW WE COLLECT INFORMATION

Information you provide and information we generate

We may collect personal information directly from you when you open an account, complete verification procedures, contact our support team, submit a form, use our platforms or communicate with us.

We may also collect information automatically when you use our websites, applications and trading platforms, including technical information and usage data.

In certain circumstances, we may receive information from third-party service providers, payment providers, identity verification providers, fraud-prevention providers, public sources and other organisations where permitted by applicable law.

WHY WE USE YOUR DATA

How we use personal information

We may use personal information for the following purposes:

To create, manage and maintain your account.
To process account applications and identity verification.
To carry out customer due diligence and Know Your Customer (KYC) procedures.
To comply with applicable legal, regulatory and anti-money-laundering obligations.
To provide trading platforms, account services and related financial services.
To process deposits, withdrawals and payments.
To provide customer support, training and client assistance.
To communicate with you about your account, services, security and important operational matters.
To monitor, detect and prevent fraud, financial crime, abuse and unauthorised activity.
To improve our websites, platforms, products and services.
To provide educational information, market content and relevant communications.
To manage complaints, disputes and legal claims.

LEGAL BASIS

Why are we legally allowed to process your data?

Depending on the circumstances, we may process personal data under one or more of the following legal bases:

Contract Where processing is necessary to provide services to you or to take steps at your request before entering into a contract.

Legal Obligation Where processing is necessary to comply with applicable laws, regulations or regulatory requirements.

Legitimate Interests Where processing is necessary for legitimate business, security, fraud prevention or service-improvement purposes, while respecting your rights.

Consent Where we ask for your consent to process personal data for a specific purpose. You may withdraw consent where applicable.

DATA SHARING

Who may receive your information?

We may share personal information where necessary and permitted by law with trusted organisations that support the operation of our business and services.

Technology and hosting providers.
Trading platform and technology providers.
Payment and banking service providers.
Identity verification and KYC providers.
Fraud prevention and financial crime prevention providers.
Professional advisers, auditors and insurers.
Regulators, law enforcement authorities and public bodies where required or permitted by law.
Other service providers acting on our behalf under appropriate contractual arrangements.

We do not sell your personal information for monetary consideration.

INTERNATIONAL TRANSFERS

Transfers of personal information

Some of our service providers or business partners may be located in countries outside the country in which you live. Where personal data is transferred internationally, we take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection laws.

Depending on the circumstances, appropriate safeguards may include an adequacy decision, approved contractual safeguards or another legally recognised transfer mechanism.

DATA SECURITY

How we protect your information

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

🔒 Encryption Security measures designed to protect information in transit and where appropriate at rest.

🛡️ Access Controls Access to personal information is restricted to those who need it for legitimate business purposes.

🔍 Monitoring Systems and processes designed to identify suspicious or unauthorised activity.

🔄 Reviews We review our security practices and controls regularly.

DATA RETENTION

How long do we keep your information?

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, comply with legal and regulatory obligations, resolve disputes, enforce agreements and protect our legitimate business interests.

The specific retention period depends on the type of information, the purpose for which it is used and applicable legal or regulatory requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it where appropriate.

YOUR RIGHTS

Your data protection rights

Depending on applicable law and the circumstances of the processing, you may have rights in relation to your personal information, including the right to:

Request access to personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal information where applicable.
Request restriction of processing in certain circumstances.
Object to certain processing, including processing based on legitimate interests and direct marketing where applicable.
Request portability of certain personal information where applicable.
Withdraw consent where processing is based on consent.

To exercise your rights, please contact us using the details provided in this Privacy Policy. We may need to verify your identity before responding to a request.

COMMUNICATIONS

Marketing and communications

We may send you service-related communications that are necessary for the operation, security or administration of your account.

Where required by applicable law, we will seek your consent before sending certain marketing communications. You may unsubscribe from marketing communications at any time by following the instructions included in the communication or by contacting us.

COOKIES & TECHNOLOGIES

Cookies and similar technologies

Our website and online services may use cookies and similar technologies to operate properly, remember preferences, improve performance, understand website usage and, where permitted, support marketing and analytics activities.

Depending on your location and applicable law, you may be able to manage certain cookie preferences through your browser or available cookie-management tools.

AGE REQUIREMENTS

Children and minors

Our services are not intended for individuals who are not legally permitted to use financial or trading services in their jurisdiction.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

AUTOMATED PROCESSING

Automated decision-making and profiling

We may use automated tools and systems for purposes such as identity verification, fraud prevention, security monitoring, risk assessment and regulatory compliance.

Where applicable law provides specific rights in relation to solely automated decision-making or profiling, those rights will be respected in accordance with applicable legal requirements.

POLICY UPDATES

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data protection practices.

The latest version will be published on this page with the applicable effective date. We encourage you to review this page periodically.

QUESTIONS & COMPLAINTS

Contact us about your privacy

If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information has been handled, please contact us.

Octalas Group Limited Privacy Team privacy@todaymarkets.com https://todaymarkets.com

You may also have the right to lodge a complaint with the relevant data protection supervisory authority in your country or jurisdiction.

TODAY MARKETS

Your privacy. Our responsibility.

We are committed to handling personal information responsibly, securely and transparently.