Effective Date: [Insert Date]
Version: 1.0
Your privacy is important to us.
This Privacy Policy explains how BitSukuk Wallet Service collects, uses, stores, processes, discloses, and protects your personal information when you access or use our services.
By accessing or using the BitSukuk Wallet Service, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.
If you do not agree with this Privacy Policy, you should discontinue use of the Services.
BitSukuk Wallet Service is operated by DIGITAS LLP together with its affiliates, trustees, custodians, technology providers, service providers, and authorized partners ("BitSukuk", "Company", "we", "our", or "us").
BitSukuk provides digital asset wallet services, tokenized Sukuk infrastructure, custody services, settlement solutions, trustee-controlled digital asset services, and related financial technology services.
To provide our Services safely and in compliance with applicable laws and regulations, we may collect various categories of information.
We may collect:
• Full name
• National identification number
• Passport information
• Date of birth
• Nationality
• Residential address
• Email address
• Mobile phone number
• Occupation and employment details
• Tax identification information
• Biometric verification information where permitted by law
For institutional and business users, we may collect:
• Company registration information
• Business licenses
• Corporate structure information
• Shareholder information
• Director information
• Beneficial ownership information
• Regulatory licenses and approvals
• Authorized signatory information
We may collect:
• Bank account details
• Payment information
• Source of funds information
• Source of wealth information
• Investment profile information
• Transaction records
• Digital asset holdings
• Custody account information
We may automatically collect:
• Internet Protocol (IP) address
• Device identifiers
• Browser information
• Operating system information
• Session information
• Application usage information
• Security logs
• Authentication records
Because our Services interact with blockchain networks, we may process:
• Public wallet addresses
• Blockchain transaction hashes
• Smart contract interactions
• Token ownership records
• Digital signatures
• On-chain verification records
• Transaction metadata
Certain blockchain information may be publicly visible and permanently recorded on distributed ledger networks.
We collect information directly from you when you:
• Create an account
• Complete identity verification
• Submit forms or applications
• Use our Services
• Contact customer support
• Participate in compliance reviews
• Upload documents
We may also receive information from:
• Identity verification providers
• Compliance screening providers
• Regulatory authorities
• Banking partners
• Custodians
• Trustees
• Service providers
• Publicly available sources
We use your information for legitimate business, operational, compliance, and legal purposes.
These purposes include:
• Creating and maintaining accounts
• Providing wallet services
• Managing custody arrangements
• Facilitating tokenized Sukuk transactions
• Processing payments and settlements
• Managing investor records
• KYC verification
• AML compliance
• Counter-Terrorism Financing compliance
• Sanctions screening
• Fraud prevention
• Risk management
• Regulatory reporting
• Audit requirements
• Identity verification
• Account protection
• Cybersecurity monitoring
• Detection of suspicious activities
• Prevention of unauthorized access
• Investigation of security incidents
• Customer support
• Service improvements
• Product development
• Internal reporting
• Statistical analysis
• Business continuity planning
We process personal information based on one or more of the following grounds:
• Your consent
• Performance of contractual obligations
• Compliance with legal obligations
• Legitimate business interests
• Protection of legal rights
• Compliance with regulatory requirements
We may disclose information where necessary to operate our Services and comply with applicable laws.
Recipients may include:
• Securities regulators
• Financial services authorities
• Central banks
• Tax authorities
• Law enforcement agencies
• Courts and tribunals
• Lawyers
• Auditors
• Compliance consultants
• Shariah advisors
• Accountants
• Cloud hosting providers
• Identity verification providers
• Custodians
• Trustees
• Settlement agents
• Technology providers
• Cybersecurity providers
Information may be transferred in connection with:
• Mergers
• Acquisitions
• Corporate restructuring
• Sale of business assets
• Joint ventures
Users acknowledge that blockchain transactions may be publicly visible and permanently recorded on distributed ledger networks.
Information such as wallet addresses, transaction hashes, and smart contract interactions may be visible to network participants and may not be capable of deletion, modification, or reversal.
BitSukuk cannot control how third parties access or analyze publicly available blockchain data.
Your information may be processed, stored, or transferred across jurisdictions where BitSukuk, its service providers, custodians, trustees, or technology partners operate.
Where international transfers occur, we will take reasonable steps to ensure that appropriate safeguards are implemented.
We retain information only for as long as necessary to:
• Provide our Services
• Fulfil contractual obligations
• Comply with legal requirements
• Meet regulatory obligations
• Resolve disputes
• Enforce agreements
Where required by law, records may be retained for a minimum of seven (7) years or longer if required by applicable regulations.
BitSukuk maintains administrative, technical, and organizational measures designed to protect information against unauthorized access, disclosure, alteration, or destruction.
Security measures may include:
• Data encryption
• Multi-factor authentication
• Access controls
• Security monitoring
• Audit logging
• Penetration testing
• Disaster recovery procedures
• Secure custody controls
While we strive to protect your information, no system can guarantee absolute security.
Subject to applicable law, you may have the right to:
• Request access to your personal information
• Request correction of inaccurate information
• Withdraw consent where applicable
• Request restriction of processing
• Request deletion where legally permissible
• Lodge complaints with applicable authorities
Requests may be submitted through the contact details provided below.
We may use cookies and similar technologies to:
• Authenticate users
• Maintain secure sessions
• Improve functionality
• Analyze usage patterns
• Enhance security
Users may manage cookie preferences through browser settings.
The Services are not intended for individuals who are not legally permitted to enter into binding agreements.
We do not knowingly collect personal information from minors except where permitted by applicable law and accompanied by appropriate authorization.
Where products or services are reviewed by Shariah advisors or Shariah supervisory bodies, information may be disclosed to such advisors as necessary to facilitate governance, compliance reviews, audits, and certification processes.
We may update this Privacy Policy from time to time.
Material changes may be communicated through the Platform, email notifications, or other appropriate communication channels.
Continued use of the Services following publication of an updated Privacy Policy constitutes acceptance of the revised version.
DIGITAS LLP
B15-18 iSOVO @ iCITY
Jalan Persiaran Multimedia
Seksyen 7
40170 Shah Alam
Selangor, Malaysia
Privacy Officer: privacy@bitsukuk.com
Data Protection Officer: dpo@bitsukuk.com
Legal Department: legal@bitsukuk.com
This Privacy Policy shall be governed by and interpreted in accordance with the laws of Malaysia, including applicable data protection, financial services, anti-money laundering, and digital asset regulations.
By accessing or using the BitSukuk Wallet Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, processing, storage, and disclosure of your information as described herein.
