Privacy Policy

Last updated: 7 September 2026

1. Introduction

At BitcoinVN, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

By using our services, you consent to the practices described in this Privacy Policy. Please take the time to read and understand this policy.

2. Information We Collect

2.1. Personal Information:

We collect

• Email Address: When you create an account, we collect your email address for communication, authentication and account-related notifications. Guest use does not itself require an account email address.

We may collect

• Full name, nationality, birthdate: We may collect this information to verify your identity.
• Government-Issued ID: We may collect a copy of your government-issued ID or passport to verify your identity and comply with legal and regulatory requirements.
• Address, proof of residence: We may collect a copy of a document proving your current residence address to comply with legal and regulatory requirements.

Google User Data

If you decide to register or log in via Google, we will request and collect your email address and full name from Google for the reasons stated above.

2.2. Financial Information:

• Bank Account Information: We collect your bank account details for the purpose of facilitating settlements.
• Transaction Data: We collect information related to your cryptocurrency transactions on our platform like transaction IDs and destination addresses.

2.3. Technical Information:

We collect technical data for guest orders and orders made with an account. Browser data collection can start when the order form loads, before you submit an order. Your browser sends this data with the order submission. The data available depends on your browser and its settings.

Browser data

• Browser and language: Browser identification and version, operating system and platform, vendor, language settings, cookie support, privacy preferences, PDF support, automation indicators, plugin and content-type counts, and browser-provided brand and device information.
• Screen and window: Screen size and available area, color and pixel depth, pixel ratio, browser window size, and screen orientation.
• Hardware and battery: CPU core count, device memory, touch and pointer support, graphics processor details, battery level, charging state, and estimated charging or discharge times.
• Network: Online status, connection type, estimated speed and delay, and data-saving settings.
• Timezone: Timezone name, offset from UTC, and whether the timezone observes daylight saving time.
• Graphics and audio: Hashes calculated from generated canvas images and audio, graphics capabilities and extensions, and audio sample rate, delay, and channel capacity. A hash is a calculated identifier used to compare data.
• Fonts: Fonts detected from a predefined list.
• Storage: Support for local and session storage, browser databases and service workers, and estimated storage capacity and use.
• Media devices and permissions: Counts of audio inputs, audio outputs and cameras, plus permission states for notifications, location, camera and microphone.
• Performance and features: Browser memory statistics, navigation type, available browser APIs, and speech voice count. Feature checks include WebAssembly, shared memory, Bluetooth, USB, device interfaces, extended reality, credentials, payments, speech and gamepads.
• Display preferences: Color scheme, reduced motion, contrast and color settings, display color range, high dynamic range support, and display mode.
• Wallet extensions: Presence of Ethereum, Solana, Cardano, Bitcoin, Keplr, Tron, TON and Aptos wallet interfaces, selected wallet brands, and Ethereum provider count.
• Privacy-tool indicators: Ad-blocking checks, a Brave browser indicator, and a possible Tor browser indicator based on timezone and window dimensions. The Tor indicator is an estimate, not proof that you use Tor.

This collector reads permission states and device counts; it does not record camera or microphone content or request your location. Its audio hash comes from generated audio, not a microphone recording. Wallet-extension detection does not read private keys.

Server request data

We store your IP address and available request headers with the fingerprint record. These include browser identification; accepted languages, content types and compression formats; Cloudflare country, request and IP headers; forwarded IP addresses and connection protocol; browser client hints about brands, versions, platform, mobile status, processor architecture, bitness and device model; request destination, mode and site context; the Do Not Track preference; referrer; and origin. Order records also store the IP address, browser identification and origin country when available.

3. How We Use Your Information

We use your information for the following purposes:

• To provide our cryptocurrency exchange services.
• To prevent fraud and other illegal activity on the exchange.
• To enforce our Terms.
• To verify your identity.
• To process transactions.
• To improve our services.
• To comply with legal and regulatory requirements.
• To communicate with you about your account and our services.

How we use technical data

Selected browser signals form a device identifier, also called a browser fingerprint. These signals include browser and language settings, graphics and audio hashes, fonts, hardware, screen details, timezone, selected display preferences and WebAssembly support. We use the identifier to help find related orders and accounts, including checks for abuse and banned accounts. A match does not prove that two orders came from the same person.

We also calculate a server identifier from the IP address and browser identification. It supports security checks, checks for attempts to avoid identity-verification requirements, and checks when a guest order is claimed by an account.

Detailed browser and server data is available for admin review. Selected browser details also appear in law-enforcement reports. Data such as battery state, permission states, storage estimates, wallet-extension indicators and privacy-tool indicators is collected for review, rather than used to calculate the device identifier. These details are not all required to process an exchange.

4. Data Security and Retention

We employ industry-standard security measures to protect your information. We regularly review our security measures to consider available new technology and methods.

We retain information on active accounts indefinitely. If you violate our Terms, we may suspend your account, but we will keep your information.

Guest orders and technical data

Using the service without an account does not prevent us from storing order and technical data. Closing your browser does not delete these records.

• Completed guest orders: The application has no automatic deletion period for these orders and their transaction records, including stored addresses, amounts and transaction identifiers.
• Fingerprint records: The application has no automatic deletion period for browser and server identifiers or any of the browser and server data listed above. This applies to guests and account users.
• Canceled orders with no confirmed deposit: These orders become eligible for scheduled deletion one year after creation. Deletion runs in limited batches, so one year is not a guaranteed deletion deadline. This rule does not apply to completed orders or orders with a confirmed deposit.

Deleting an order does not automatically delete its related fingerprint record. The canceled-order deletion rule is not a deletion deadline for separate logs, backups, reports or records held by external providers. If you have questions about data retained for your guest order, contact [email protected].

5. Disclosure of Information

We may disclose your information to the following parties:

• Service Providers: We may share your information with third-party service providers who assist us in operating our platform.
• Legal and Regulatory Authorities: We may disclose your information to comply with legal and regulatory requirements.
• Blockchain Analysis Providers: We may share your transaction information with blockchain analysis providers in order to comply with legal requirements and uphold the integrity of all transactions on the exchange.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.

6. Your Choices

You have the following choices regarding your information:

• Access and Correct: You can access and correct your personal information through your account settings.
• Opt-Out: You can opt out of promotional communications by following the instructions in our emails.

7. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of any significant changes through our website or email.

8. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at [email protected].