ShaFX
مامەڵە smart. دەستکەوتن کاشباک.

1. Who we are

ShaFX (“we”, “us”, “our”) operates the website at shafx.net and the related بازرگان داشبۆرد. We act as the data controller for personal data described in this Policy.

2. Data we collect

هەژمار data: name, email address, password hash, country, preferred currency, communication preferences.

بازرگانی data: linked برۆکەر name, برۆکەر هەژمار number (last digits), aggregated لۆت قەبارە per instrument, accrued کاشباک. We do not receive your وشەی تێپەڕبوون, balance, open positions, or P&L.

پارەدان data: chosen payout method (USDT wallet address, PayPal email, IBAN, broker credit), payout history, transaction references.

Technical data: IP address, browser, device, referring URL, pages visited, session duration. Used for security, fraud prevention, and product improvement.

Communications: پشتگیری tickets, ئیمەیڵ correspondence, Telegram messages with our team.

3. How we use your data

  • To create and operate your account
  • To calculate and pay cashback and loyalty rewards
  • To process payouts and meet anti-money-laundering obligations
  • To prevent fraud, abuse, and unauthorised access
  • To send service notifications, payout confirmations, and (with consent) marketing
  • To comply with legal and regulatory requirements

4. Legal bases (GDPR)

We process your data on the following bases: (a) contract — to deliver the Service you signed up for; (b) legitimate interest — to secure the Service and prevent fraud; (c) consent — for marketing communications and optional analytics; (d) legal obligation — for tax, AML, and regulatory record-keeping.

5. Sharing your data

We share data only with: (a) partner برۆکەرەکان, to verify your linked هەژمار and confirm قەبارە; (b) payment processors, to deliver your پارەدانەکان; (c) infrastructure providers (hosting, ئیمەیڵ, analytics) under strict confidentiality; (d) authorities, when legally required. We never sell your personal data.

6. International transfers

Your data may be processed in countries outside your home jurisdiction. Where required, we use Standard Contractual Clauses or equivalent safeguards.

7. Retention

We keep هەژمار and بازرگانی data for as long as your هەژمار is چالاک and for up to 7 years after closure to meet legal and tax obligations. Marketing-only data is deleted within 30 days of unsubscribe.

8. Your rights

You have the right to: access your data, correct inaccuracies, سڕینەوە your هەژمار, export your data in a portable format, restrict or object to processing, and lodge a complaint with your local supervisory authority. Most rights can be exercised directly from your داشبۆرد or by emailing privacy@shafx.net.

9. Security

We use TLS encryption in transit, hashed and salted وشەی تێپەڕبوون storage, principle-of-least-privilege access controls, and regular security هەڵسەنگاندنەکان. No سیستەم is 100% secure; please use a strong unique وشەی تێپەڕبوون and enable two-factor authentication when available.

10. Cookies

See our Cookie Policy for details on cookies and similar technologies.

11. Children

The Service is not directed to anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will سڕینەوە it.

12. Changes

We may update this Policy. Material changes will be notified by email or in-app notice at least 14 days before they take effect.

13. Contact

Privacy questions? ئیمەیڵ privacy@shafx.net.