DOXA Privacy Policy
Last updated: 07th of May, 2026
1. Who We Are and What This Policy Covers
DOXA ("DOXA", "we", "us", or "our") provides the platform and services accessible at https://doxa.win/ (the "Site"), together with all related web and mobile applications, tools, and features linked to or available through the Site (collectively, the "Services").
This Privacy Policy (the "Policy") explains in clear terms: what personal information we collect when you use our Services; why and how we use it; who we may share it with; and what choices and rights you have. Please read it carefully before using our Services.
This Policy applies to all personal information collected in connection with our Services. It does not govern data collected through channels not operated by DOXA, or by independent third-party platforms that may be accessible through our Services -- each of those parties operates under its own privacy framework.
2. Your Consent
By accessing or using our Services in any manner -- whether by browsing the Site, creating an account, using any feature, or clicking "I agree" or a similar confirmation -- you confirm that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please do not use our Services.
To operate the Site and deliver the Services, we may collect and receive certain information about you and your activities. By using the Services, you authorize us to do so in accordance with this Policy.
3. Information We Collect
We gather information about you from three main sources:
3.1 Information You Provide Directly
When you register for or interact with our Services, you may voluntarily submit:
- Identity and Profile Data: your full name, date of birth, gender, and other personal details entered during registration or use of the Services.
- Contact Details: your email address, telephone number, and postal address.
- Account Credentials: usernames, passwords, and other information used to secure access to your account.
- Payment-Related Data: where applicable, bank account or card information (brand, expiry, number) and other data required to process fees or transactions. This data is collected and stored by authorized third-party payment processors acting under their own privacy policies; we do not store raw card or account numbers.
- Identity Verification Documents: in circumstances required by law or our compliance obligations, we may request government-issued documents such as a passport, national identity card, or driving license.
- Survey Responses and Feedback: information you submit when participating in surveys, research activities, or when contacting our support team.
- Correspondence Records: copies of communications you send us, retained for as long as required by applicable law.
3.2 Information Collected Automatically
When you visit Site or use our Services, our systems automatically record certain technical data:
- Network and Device Identifiers: your IP address, browser type and version, operating system, device type and identifiers, time zone, and language settings.
- Usage and Navigation Data: pages visited, features used, access times, session duration, and referring or exit URLs.
- Location Data: approximate geographic information derived from your IP address or, where permitted, more precise location data from GPS, Wi-Fi, or cell-site signals, used primarily for fraud prevention, compliance, and location-relevant content.
- Cookie and Tracking Data: information gathered via cookies and similar technologies. See Section 5 for full details.
3.3 Information from Third Parties
We may also receive data about you from external sources, including:
- Wallet and Authentication Providers: if you connect a third-party digital wallet or sign-in service, we may receive information from that provider consistent with the authorization you have granted.
- Business and Technology Partners: our service providers may share data with us in the course of delivering their services.
- Public Blockchain Networks: certain information -- such as wallet public addresses and on-chain transaction records -- is inherently public by the nature of distributed ledger technology.
- Authorized Account Connections: if you link your DOXA account to a third-party platform, we may receive information from that platform as part of the authorized connection.
4. How We Use Your Information
We use the information we collect for the following purposes:
- Account Management: to create, maintain, and personalize your account and ensure a consistent experience.
- Service Delivery: to operate, provide, and continuously improve the Services and develop new capabilities.
- Transaction Processing: to handle payments, fees, and related notifications and confirmations.
- Identity Verification and Fraud Prevention: to confirm your identity, detect and prevent fraud, and meet anti-money laundering and regulatory obligations.
- Security and Integrity: to monitor for, investigate, and respond to security incidents, unauthorized access, and prohibited activities.
- Communications: to respond to your enquiries, send account notices, and -- where permitted -- deliver marketing messages.
- Analytics and Research: to analyze usage patterns, measure performance, and conduct internal research to improve the reliability, security, and quality of our Services.
- Legal Compliance: to fulfil legal and regulatory obligations, respond to lawful authority requests, protect our rights, and enforce our policies.
- Advertising and Targeting: to serve or enable relevant advertising on our Site and on third-party platforms, using anonymized or aggregated data wherever possible.
- Other Disclosed Purposes: to fulfil any other purpose for which you have specifically provided your information to us.
Where we intend to use your information for a purpose materially different from those listed above, we will inform you before or at the time of collection.
5. Cookies and Similar Tracking Technologies
Cookies are small data files placed on your device when you visit a website, including our Site. We and our authorized partners use cookies and comparable technologies -- including pixel tags, web beacons, and clear GIFs -- to recognize returning users, remember preferences, measure performance, personalize content and advertising, and support fraud prevention.
Most browsers accept cookies by default. You can configure your browser to block or delete cookies; however, doing so may limit your ability to use certain features of our Services and Site.
Some pages include tracking pixels that help us count page visits and compile aggregate usage statistics. These pixels cannot be declined individually, but disabling cookies in your browser will largely render them inactive.
Our Services and Site does not alter their behavior in response to browser Do Not Track ("DNT") signals, as no universally accepted standard for honoring such signals currently exists.
6. Analytics and Advertising Partners
To better understand how users engage with our Services and Site and to support our marketing activities, we work with third-party analytics and advertising providers. These partners may collect data about your activity on our Site and on other websites over time, using their own cookies and tracking technologies.
One example is Google Analytics, operated by Google LLC. For details on how Google processes this data, please refer to:
- Google Privacy Policy: https://policies.google.com/privacy
- Google Analytics data safeguards: https://support.google.com/analytics/answer/6004245
- Google Ad Preferences: https://adssettings.google.com/authenticated We may also work with retargeting services that display DOXA-related advertising to previous visitors, using cookie-based tracking. Any data collected by such partners is governed by their own privacy policies. By using the Services and Site, you consent to such processing to the extent permitted by applicable law.
7. How and When We Share Your Information
We do not sell your personal information. We may, however, share it in the following circumstances:
7.1 Contracted Service Providers
We engage third-party specialists to perform functions on our behalf -- such as cloud hosting, payment processing, identity verification, fraud screening, analytics, and customer support. These providers may access your information only to the extent needed to deliver their specific services and are contractually required to handle it securely and lawfully.
7.2 Corporate Group Members
We may share information with our parent company, subsidiaries, affiliates, or other entities within the DOXA corporate group where necessary for legitimate business operations. All such entities are required to treat your data consistently with this Policy.
7.3 Business Partners and Promotional Activities
From time to time, we may share your information with selected business partners so they can offer you relevant products, services, or promotions. Where applicable law gives you the right to object, please contact us at [email protected].
7.4 Corporate Restructuring
In the event of a merger, acquisition, sale of assets, reorganization, or insolvency proceedings, your personal information may form part of the transferred assets. We will notify you of any material change in the ownership or use of your information.
7.5 Legal Obligations and Safety
We may disclose your information where we believe in good faith it is necessary to:
- comply with a binding legal obligation, court order, subpoena, or lawful governmental request;
- protect the rights, property, or safety of DOXA, our users, or other persons;
- detect, prevent, or address fraud, security vulnerabilities, or technical issues; or
- meet national security or law enforcement requirements.
7.6 With Your Authorization
We may share your information with specific third parties, when authorizing a connection between your DOXA account and a third-party platform. Information shared with that third party is then governed by their privacy policy. We strongly recommend reviewing those policies before authorizing any connection. We will never share your raw card or bank account number with third parties except with your express written permission or as required by law.
7.7 Anonymized and Aggregated Data
We may compile, analyze, and share data that has been anonymized or aggregated so that it no longer identifies any individual, for internal research, Service/Site improvement, and sharing insights with partners and the public.
7.8 Publicly Available Blockchain Data
Certain information linked to blockchain-based features -- including wallet public addresses, usernames, and on-chain transaction records -- is inherently visible on public distributed ledger networks and may be accessed, shared, or downloaded by anyone, including via third-party APIs or SDKs.
8. How We Protect Your Information
We apply a layered combination of administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, modification, or destruction. These measures include encryption in transit and at rest, firewalls, strict need-to-know access controls, and regular security reviews.
No electronic system or internet transmission is entirely risk-free, and we cannot guarantee absolute security. Any transmission you make is at your own risk. You are responsible for keeping your account credentials confidential and for notifying us promptly if you suspect any unauthorized account access. We are not liable for circumvention of our security measures resulting from your own actions or omissions.
9. Data Retention
We retain your personal information only for as long as reasonably necessary to fulfil the purposes described in this Policy, to meet contractual obligations, to resolve disputes, to enforce our agreements, and to comply with applicable legal and regulatory retention requirements. Once data is no longer required for these purposes, we will securely delete, destroy, or anonymize it. Upon your request, we will endeavor to: (i) return all personal information we hold about you in a structured, machine-readable format and delete our copies; or (ii) permanently delete and destroy all personal information we hold, including backups, subject to any legal obligations to retain specific records.
10. International Transfers of Your Data
DOXA operates across multiple jurisdictions. Your personal information may be stored on or processed by systems located outside your country of residence, where data protection laws may differ from those in your home country.
By using our Services and Site, you acknowledge and consent to such transfers. We take all steps reasonably necessary to ensure your information is treated securely and in line with this Policy wherever it is processed, and we will not transfer your data to any country or organization unless adequate safeguards are in place.
11. Children's Privacy
Our Services are designed for adults and are not intended for children under the age of 18. We do not knowingly collect personal information from minors. If we discover we have inadvertently received such information, we will delete it promptly, unless legally required to retain it. If you believe we may have collected data from or about a child, please contact us immediately at [email protected]
12. Your Data Protection Rights
Depending on your location and applicable law, you may have some or all of the following rights. We will make reasonable efforts to honor valid requests. Please note:
- Your rights are not absolute and may be subject to legal exceptions or limitations;
- We may require identity verification before processing any request;
- We may decline requests that are manifestly unfounded, excessive, or that would prejudice the rights of others.
12.1 Right to Access
You may request a copy of the personal information we hold about you. Email us at [email protected] with the subject line "Access Request".
12.2 Right to Rectification
If any information we hold is inaccurate or incomplete, you may ask us to correct it. Email us at [email protected] with the subject line "Correction Request".
12.3 Right to Object
You may object to certain types of processing, including direct marketing. Email us at [email protected] with the subject line "Objection to Processing".
12.4 Right to Restriction
You may ask us to temporarily limit how we use your information in certain circumstances. Email us at [email protected] with the subject line "Restriction of Processing".
12.5 Right to Data Portability
Where required by law, you may request your personal information in a structured, machine-readable format. Email us at [email protected] with the subject line "Data Portability Request".
12.6 Right to Withdraw Consent
Where we rely on consent to process your data, you may withdraw it at any time without affecting prior lawful processing. Email us at [email protected] with the subject line "Withdrawal of Consent".
12.7 Right to Erasure
You may ask us to delete your personal information where it is no longer needed for its original purpose, or where you have withdrawn consent or objected. Email us at [email protected] with the subject line "Erasure Request". We will confirm once deletion is complete.
If you are in the European Economic Area, the United Kingdom, Switzerland, or Brazil, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal information infringes applicable law.
If you will submit one of the indicated above request, we may suspend or restrict of access to Site or Services and DOXA will be not responsible for that.
13. Managing Your Marketing Preferences
Registered users can review, update, or delete their personal information by following the instructions on the Site or by emailing [email protected] with the subject line "Personal Information Request".
To stop receiving marketing emails, click the "Unsubscribe" link in any marketing message, or email us at [email protected] with the subject line "Marketing Opt-Out". Opting out of marketing does not affect transactional or account-related messages necessary to manage your account. We will process requests promptly in line with applicable law.
14. Third-Party Websites and Services
Our Services and Site may include links to websites, applications, or platforms operated by independent third parties. This Policy does not apply to those external services. We have no control over how third parties collect or use your information and encourage you to review their privacy policies before sharing any data. Any information provided to a third party is governed solely by their policies.
Third-party advertising and tracking services may also deploy their own cookies or technologies when you use our Services and Site, potentially building profiles about your online behavior for targeted advertising. We do not control these technologies. For questions about a specific advertisement or tracking practice, please contact the relevant provider directly.
15. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors. When we make updates, we will revise the "Last Updated" date at the top of this page. For material changes, we may provide additional notice such as a prominent banner on our Site.
We encourage you to review this Policy periodically. Your continued use of our Services/Site after any revised version is posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, please stop using our Services and Site.
16. Jurisdiction
For disputes resolutions and applicable law applies the same rules as for the Terms of Use.This document is regulated by the same law as for Terms of Use.
17. How to Contact Us
For any questions, concerns, or requests relating to this Policy or our privacy practices, please contact us:
Email: [email protected] .