1. Introduction
This Privacy Policy explains how Cashed Ltd collects, uses, stores and shares personal information when you visit cashed.fun, create a Cashed account, purchase a programme, use a simulated trading account, request a payout, participate in rewards or affiliate programmes, contact customer support, or otherwise interact with Cashed.
The data controller is Cashed Ltd (company number 17256234), contactable at privacy@cashed.fun.
2. Information we collect
2.1 Account and identity information
Full name; date of birth; username; email address; telephone number; residential address; country of residence; nationality; profile photograph; account preferences; and Cashed account identifiers.
2.2 Verification information
Where verification is required, we may collect or receive passport, driving-licence or national identity-card information; proof of address; selfie/liveness results; age-verification results; sanctions and politically-exposed-person screening; source-of-funds and source-of-wealth information; and verification-provider reference numbers. We aim to avoid storing complete identity-document images longer than necessary where a provider can instead supply a verification result.
2.3 Payment and wallet information
Cryptocurrency wallet addresses; blockchain network; transaction hash; payment amount; token used; invoice details; payment status; refund and chargeback information; wallet-risk or transaction-screening results; and information supplied by payment processors. Cashed does not normally receive or store private wallet keys.
2.4 Trading and platform information
Programme purchases; account type and size; simulated orders and positions; entry and exit times; prices; profit and loss; risk and drawdown measurements; breached rules; market selections; payout requests and history; rewards and XP; affiliate referrals; account notes; and risk-review decisions.
2.5 Device and technical information
IP address; browser type; operating system; device type and identifiers; approximate location derived from IP; language; time zone; login times; session identifiers; cookie identifiers; referral URLs; error logs; security events; and platform-interaction data.
2.6 Communications
Support requests, emails, chat messages, complaint information, survey responses, social-media messages and records of our responses. Calls or live-chat sessions may be recorded where lawful and where appropriate notice has been provided.
2.7 Affiliate and marketing information
Affiliate IDs; referral links; attributed customers; commission records; promotional content; campaign performance; email-marketing preferences; and records of marketing consent or opt-out requests.
2.8 Information from third parties
We may receive information from identity-verification providers, payment processors, blockchain analytics providers, fraud-prevention services, market-data providers, affiliate platforms, analytics providers, email providers, public sanctions lists, public databases, and law-enforcement or regulatory bodies.
3. How we use personal information
3.1 Create and manage accounts — registering you, authenticating logins, maintaining settings and providing access to purchased programmes. Lawful basis: performance of a contract.
3.2 Process purchases and payments — invoices, crypto-payment confirmation, account activation, refunds and transaction records. Performance of a contract; legal obligations.
3.3 Provide simulated trading services — recording orders, calculating P&L, applying account rules, resolving markets and displaying performance. Performance of a contract.
3.4 Review payouts — eligibility, calculation, risk review and sending approved payments. Performance of a contract; legitimate interests; legal obligations.
3.5 Verify identity and eligibility — checking age, identity, residence, account ownership and payment-wallet control. Legal obligations; performance of a contract; legitimate interests.
3.6 Prevent fraud, abuse and financial crime — detecting duplicate accounts, account sharing, location concealment, stolen identity, payment fraud, chargeback abuse, prohibited trading, market exploitation, sanctions evasion and money laundering. Legitimate interests; legal obligations.
3.7 Secure and improve the Services — troubleshooting, analytics, monitoring, performance measurement and product development. Legitimate interests; consent where non-essential cookies require it.
3.8 Communicate with you — account notifications, purchase confirmations, security alerts, rule-breach notices, payout updates, support replies, legal notices and service announcements. Performance of a contract; legal obligation; legitimate interests.
3.9 Send marketing — products, promotions, competitions and platform updates. Consent where required, or legitimate interests where lawfully permitted. You may unsubscribe at any time.
3.10 Administer XP, promotions and affiliate programmes — awarding points, attributing referrals, calculating commissions, detecting abuse. Performance of a contract; legitimate interests.
3.11 Establish and defend legal rights — complaints, legal claims, investigations, regulatory requests and enforcement. Legitimate interests; legal obligation.
4. Legitimate interests
Where we rely on legitimate interests, those interests may include preventing fraud and platform abuse; enforcing trading and payout rules; protecting users and systems; improving our products; analysing service performance; responding to complaints; recovering debts; maintaining business records; and conducting appropriately targeted business marketing. We consider whether our interests are overridden by your rights and freedoms before relying on this basis.
5. Automated analysis and risk decisions
Cashed may use automated tools to identify duplicate accounts, suspicious login patterns, shared devices, unusual trade correlations, prohibited trading strategies, location inconsistencies, payment or wallet risk, and potentially fraudulent payout requests. Automated tools may flag an account for review. Where a decision has a legal or similarly significant effect, Cashed will ordinarily include human review rather than relying exclusively on automated processing, unless applicable law allows otherwise. You may contact privacy@cashed.fun to request information about a significant automated decision or ask for human review.
6. Who we share information with
We may share information with technology and hosting providers; identity-verification providers; payment and blockchain providers (crypto processors, blockchain networks, wallet-screening and analytics services); market and data providers; communications and customer-support providers; analytics and advertising providers (subject to cookie and consent requirements); professional advisers (lawyers, accountants, auditors, insurers, consultants and compliance advisers); corporate-transaction parties (potential buyers, investors, lenders or advisers, under appropriate confidentiality); and authorities and legal recipients (courts, regulators, law-enforcement, tax authorities) where legally required or reasonably necessary to protect rights, users or the public. We do not sell personal information to third-party data brokers.
7. International transfers
Some providers may process information outside the United Kingdom. Where information is transferred to a country not recognised as providing adequate protection, we will use an appropriate safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, another approved contractual mechanism, or a legally recognised exception. Contact us for further information about the safeguards used for a particular transfer.
8. Data retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Typical retention periods:
| Information | Typical retention |
|---|---|
| Basic account information | Active account period plus 6 years |
| Purchase and transaction records | 6 years after the relevant financial period |
| Trading and programme records | 6 years after account closure or completion |
| Payout and affiliate records | 6 years |
| Identity-verification results | Active relationship plus up to 6 years |
| Identity-document copies | Only as long as necessary, subject to compliance requirements |
| Support and complaint records | Up to 6 years after resolution |
| Security and access logs | Normally 12–24 months |
| Marketing preferences | Until withdrawal, plus a suppression record |
| Unsuccessful application data | Normally up to 2 years |
| Cookie and analytics data | Per the period stated in our cookie settings |
We may retain information longer where necessary because of an ongoing dispute, fraud investigation, legal claim, regulatory request, court order, tax obligation or another lawful requirement. When information is no longer required, we will delete or anonymise it.
9. Cookies and similar technologies
9.1 Strictly necessary — login sessions, security, checkout, fraud prevention, preferences and core platform operation. These cannot normally be disabled because the service may not function without them. 9.2 Analytics — used to understand traffic, performance and feature usage, only after consent where required. 9.3 Advertising — used to measure campaigns, attribute referrals and deliver relevant advertising, only after consent where required. You can manage non-essential cookies through the cookie banner or preference centre; withdrawing consent does not affect processing that occurred before withdrawal.
10. Marketing choices
You may unsubscribe from promotional emails via the unsubscribe link, your account preferences, or by emailing privacy@cashed.fun. We may retain your email on a suppression list so we do not accidentally send further marketing. Service, security and legal messages are not marketing and may continue while your account remains active.
11. Security
We use organisational and technical measures designed to protect personal information, including where appropriate encryption in transit, restricted system access, role-based permissions, secure authentication, logging and monitoring, provider due diligence, database backups, incident-response procedures and fraud-detection systems. No online system is completely secure; you must use a strong, unique password and immediately report suspected unauthorised access.
12. Your data-protection rights
Depending on the circumstances, you may have the right to request access; request correction; request deletion; request restriction; object to processing based on legitimate interests; object to direct marketing; request transfer of information you provided; withdraw consent; request human review of certain automated decisions; and complain to a data-protection authority. The right to object is expressly recognised under Article 21 UK GDPR. These rights are not absolute — we may retain information required for tax, fraud-prevention, legal-claim or compliance purposes.
13. Exercising your rights
Send requests to privacy@cashed.fun, including your name, registered email address, the right you wish to exercise, and sufficient information for us to identify the relevant records. We may request proof of identity. We normally respond within one month; a lawful extension may apply to complex or numerous requests. We do not ordinarily charge a fee, but may charge a reasonable fee or refuse where the law permits because a request is manifestly unfounded or excessive.
14. Complaints
Please contact us first at privacy@cashed.fun so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom.
You may also be entitled to complain to a supervisory authority where you live or work.
15. Children
The Services are intended only for people aged 18 or over. We do not knowingly allow children to register or purchase programmes. Where we reasonably believe a user is under 18, we may suspend the account, request age verification and delete the information where legally appropriate.
16. Blockchain information
Public blockchains maintain permanent, publicly accessible transaction records. Where a wallet address or transaction is recorded on a public blockchain, Cashed may not control that record, it may be visible worldwide, it may not be technically possible to delete or alter it, and other parties may associate the transaction with additional information. We will still apply applicable data-protection requirements to information held within systems controlled by Cashed.
17. Third-party websites
The Services may contain links to external websites or services. Cashed is not responsible for the privacy practices of independent third parties; review their policies before supplying personal information.
18. Changes to this Privacy Policy
We may update this Policy to reflect changes in our Services, technology, service providers, data practices or legal requirements. Material changes will be communicated through the platform, website or registered email address where appropriate. The effective date at the top identifies the latest version.
19. Contact us
For privacy questions or rights requests: Cashed Ltd — Privacy: privacy@cashed.fun · Legal: legal@cashed.fun · Support: support@cashed.fun