Privacy Policy
Last updated: October 7, 2026
Who we are
UTS Exchange ("UTS", "we", "us") operates a digital asset trading platform offering spot markets and perpetual futures. This Policy explains how we handle personal information when you visit our website, create an account or use our services.
Information we collect
Account data you give us (username, email, password hash, invite code of the person who referred you) or receive from Google when you sign in with Google (name, email and account ID); security data (two-factor authentication status, hashed recovery codes, trusted-device records and sign-in attempt history); identity verification data where required by law (name, date of birth, government ID, proof of address); transaction data (deposits, withdrawals, transfers between Spot and Futures wallets, orders, positions, rewards, wallet addresses and memo or tag values); and technical data (IP address, device and browser type, log files and session identifiers).
How we use information
To open and operate your account, execute trades, process deposits, withdrawals and wallet transfers, pay referral commissions and rewards, verify sign-ins and sensitive actions with two-factor authentication, limit repeated attempts to protect accounts, prevent fraud and market abuse, comply with anti-money-laundering and sanctions obligations, respond to support requests and, with your consent, send product updates. We never sell your personal information.
Legal bases
We process data to perform our contract with you, to meet legal and regulatory obligations, for our legitimate interests in running a secure and reliable exchange, and on the basis of your consent where required.
Sharing
We share data only with service providers who help us operate (hosting, authentication, identity verification, payment processing, market data and analytics), with law enforcement or regulators when legally required, and with successors in a corporate transaction. If you joined through an invite, the person who invited you can see your UID and the commission earned from your activity, but not your balances or personal details.
Security
We use encryption in transit, strict role-based access, server-side verification of every balance change, two-factor authentication for withdrawals and password changes, one-time recovery codes stored only in hashed form, rate limits on sign-in and account actions, review of withdrawals and account-lock controls. No system is perfectly secure; protect your password and authenticator app and never share codes with anyone, including people claiming to be UTS staff.
Retention
We keep account and transaction records for as long as your account is open and for the period required by applicable financial and anti-money-laundering laws (typically five to seven years after closure). Security logs such as sign-in attempts are kept only as long as needed to protect accounts.
Your rights
Depending on your location you may have rights to access, correct, delete, restrict or port your data, and to object to certain processing. Contact support to exercise these rights. We may need to verify your identity first.
Cookies
We use essential cookies and local storage to keep you signed in, remember trusted devices and secure your session, and limited analytics to improve performance. You can control non-essential cookies in your browser settings.
Changes
We may update this Policy from time to time. Material changes will be announced on the platform before they take effect.
Contact support
Questions about this policy or your account? Reach the UTS support team.