We collect information when you register on Bitmula, place an order, submit a support request, respond to a survey, or fill out any form. As needed, we may ask for your name, email address, phone number, or other details required for verification and service delivery. You can browse the site without registering, but full features require an account.
For cryptocurrency services, we follow strict know-your-customer rules under laws like Kenya's Virtual Asset Service Providers Act, 2025. This means we collect identity proof, address details, and transaction data to verify users and comply with anti-money laundering requirements across East Africa.
We take your data security seriously. Sensitive payment information, like credit card details, goes through secure processors such as Stripe during transactions. We do not store your full credit card numbers, social security details, financial account info, or similar sensitive data on our servers after processing.
All data handling follows strong security practices, including encryption for transmission and storage where applicable. We comply with Kenya's Data Protection Act, 2019, which requires secure recording, storage, and transmission of personal data. This Act applies directly to virtual asset providers under the 2025 VASP Act, so we implement safeguards to protect against unauthorized access, loss, or misuse.
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties for their own purposes. We may share it with trusted third parties who help run our site, process payments, provide services, or support operations—but only if they agree to keep it confidential and use it only for those tasks.
We may release your information if required by law, to enforce our policies, protect our rights, property, or safety, or the rights, property, or safety of others. This includes responding to valid legal requests from authorities in East Africa or elsewhere, such as under anti-money laundering reporting obligations or court orders.
In line with regulations like Kenya's VASP Act, 2025, and similar rules in the region, we may share data with regulators or financial intelligence units when needed for compliance, supervision, or investigations..
We comply with children's privacy rules. We do not knowingly collect any personal information from anyone under 13 years old. Our platform, products, and services target people 13 years and older. If we learn we have collected data from a child under 13, we will delete it promptly.
Note that in many East African countries, including Kenya under the Data Protection Act, 2019, additional protections apply to minors' data, and we treat all users under 18 with extra care regarding consent and processing.
If we update this privacy policy, we will post the changes here with the new effective date. Check back periodically. Continued use of the platform after changes means you accept them.
We keep your data as long as your account is active, or as needed to provide services, resolve issues, enforce policies, or meet legal obligations. For example, transaction records may be kept for at least seven years to comply with Kenya's VASP Act, 2019 requirements and anti-money laundering laws.
When you delete your account or request removal (subject to legal holds), we will delete or anonymize your personal data where possible, except for records we must retain by law.
We do not and will never share, disclose, sell, or otherwise provide your personal data to other companies for their marketing or advertising of products or services. Your information stays used only for our operations, compliance, and service improvement.