Privacy Policy
How we collect, use, and protect your personal data.
On this page
Last updated: January 2024
1. Overview
This Privacy Policy explains how Blockchain Tumbler ("we", "our", or "us") collects, uses, stores, and protects personal information when you use our cryptocurrency wallet platform at blockchaintumbler.com (the "Platform").
By registering for an account and using our services, you acknowledge and agree to the practices described in this policy. If you do not agree to this policy, please do not use our Platform.
We take your privacy seriously. We are committed to handling your personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) where applicable.
2. Data We Collect
We collect the following categories of personal data:
Account Information
Your full name, email address, password (hashed and never stored in plaintext), date of birth, and any profile information you provide during registration or onboarding.
KYC / Identity Documents
As part of our KYC compliance requirements, we collect copies of government-issued identity documents (passport, national ID, driver's licence), proof of address documents, and selfie photographs. These are processed and stored securely for compliance purposes.
Transaction Data
Details of all transfers and withdrawals including amounts, cryptocurrency types, wallet addresses, processing tier selected, timestamps, and transaction status.
Technical Data
IP addresses, browser type and version, operating system, device identifiers, session data, and access logs. This data is automatically collected when you use the Platform.
Communications
Any messages you send to us via the contact form, support tickets, or email correspondence related to your account.
3. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account and provide access to our Platform
- To process cryptocurrency transfers and withdrawals as requested
- To verify your identity as required by our AML/KYC compliance obligations
- To detect and prevent fraud, money laundering, and other illegal activities
- To comply with legal and regulatory obligations
- To send you transactional notifications about your account and transfers
- To respond to support requests and enquiries
- To improve our platform and services through anonymised usage analysis
- To enforce our Terms of Service and other policies
4. Data Storage & Security
Your data is stored on secure servers using industry-standard encryption. Passwords are hashed using bcrypt and are never stored in plaintext. KYC documents are encrypted at rest using AES-256 encryption and are accessible only to authorised compliance staff.
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include firewalls, access controls, two-factor authentication for admin accounts, and regular security reviews.
Despite our best efforts, no method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.
6. Data Retention
We retain your personal data for as long as your account is active or as required to provide you with our services. If you close your account, we will retain certain data as required by law — typically for a period of 5–7 years following account closure — to comply with anti-money laundering regulations and other legal obligations.
KYC documents are retained for the legally required period following account closure. Transaction records are retained for a minimum of 5 years to comply with financial record-keeping regulations.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, please contact us using the details in Section 9. Note that some requests may be subject to identity verification and legal limitations.
9. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Last updated: January 2024. We may update this policy from time to time. Changes will be notified to registered users via email and/or a notice on the Platform.