Privacy Policy

Last updated: 2026-01-17

1. Introduction

Arbitto Finance ("Arbitto", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and protect personal data when you use our services, including Real World Asset (RWA) tokenization, decentralized finance (DeFi) investment products, and offline quantitative finance services for yield optimization. We comply with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and, where applicable, international best practices such as the EU General Data Protection Regulation ("GDPR").

2. Data We Collect

  • Personal Information: name, email, phone number, nationality, residential or business address, and identity verification documents (e.g., passport/ID, proof of address, corporate registration documents) for Know Your Customer/Business (KYC/KYB) purposes.
  • Financial and Blockchain Data: wallet addresses, on-chain transaction hashes and history, deposit/withdrawal records, and account identifiers with custodians or brokers (as relevant).
  • Usage Data: device and browser information, IP address, pages visited, referral data, time spent, language settings, cookies and similar tracking technologies on our websites and platform.

3. How We Use Your Data

  • KYC/KYB & Compliance: to verify identity, conduct due diligence, and comply with AML/CFT and sanctions laws.
  • Provide Services: to operate RWA tokenization, manage DeFi products, and deliver quantitative finance services.
  • Risk Management & Security: to prevent fraud, monitor suspicious activity, and secure our systems and users.
  • Support & Operations: to communicate with you, handle inquiries, and maintain business records.
  • Marketing: to send updates about products and events with your consent; you may opt out at any time.
  • Legal Obligations: to comply with court orders, regulatory requests, and statutory record-keeping.

4. Sharing and Transfers

We may share personal data with:

  • Affiliates within our corporate group (subject to confidentiality safeguards).
  • Service Providers (e.g., KYC/KYB vendors, cloud hosting, analytics, payment and custody partners) bound by contracts.
  • Regulators, Law Enforcement, Auditors where legally required or to protect our rights or users.
  • Business Transactions such as mergers, acquisitions, or asset transfers (with continued protection of your data).

Your data may be transferred to and processed in jurisdictions outside Hong Kong. Where required, we apply appropriate safeguards (e.g., contractual clauses) to ensure an equivalent level of protection.

5. Retention and Security

We retain personal data only for as long as necessary to fulfill the purposes described above and to meet legal, regulatory, accounting, or reporting requirements. We implement administrative, technical, and physical security measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; risks remain.

6. Your Rights

Subject to applicable law, you may have the right to request access to, correction of, deletion of, or a copy (portability) of your personal data, and to withdraw consent where processing is based on consent. These rights are subject to legal limitations and verification. We will respond within a reasonable period as required by the PDPO (and GDPR where applicable).

7. Cookies and Tracking

We use cookies and similar technologies to operate our site, remember preferences, measure performance, and improve services. You can manage cookies via your browser settings. Some features may not function properly if certain cookies are disabled.

8. Children

Our services are not directed to children. We do not knowingly collect personal data from minors.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at info@arbitto.com or by post:

Arbitto Finance, Rm 1204, 12/F., K Wah Centre, 191 Java Road, North Point, Hong Kong

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the latest version on this page and indicate the effective date. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.