Last Updated: March 20, 2026

⚠️ Important Announcement:：This is the legally binding English version of the MyDex Privacy Policy. A Traditional Chinese translation is available for reference only; in the event of any inconsistency between the two versions, this English version shall prevail.
Please read this Privacy Policy carefully before using the Services. If you do not agree with all or any part of this Policy, please stop accessing or using the Services. By using any MyDex Service, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

1. Scope of Application

This Policy applies to the products and services provided by MyDex, including but not limited to:

Account registration, login, and authentication
Wallet connection and account-wallet related services
Digital asset receipt, transfer, swap, and cross-chain bridge functions
Perpetual futures and other trading functions
AI analytics, risk alerts, and strategy assistance features
Points, referrals, rewards, campaigns, and customer support
The website, app, help center, announcement pages, and other related service pages

2. Information We Collect

2.1 Information You Provide to Us

When you register, log in, contact customer support, participate in campaigns, or submit feedback, you may provide:

Email address
Basic identification information associated with third-party login accounts (e.g., Google, Apple)
Wallet addresses you choose to connect and associated public on-chain identifiers
Feedback, inquiry, and complaint content
Registration information for campaigns or reward programs

2.2 Information Generated When You Use the Services

We may automatically collect or receive the following when you use the Services:

Account identifiers and login status
Device and network information (e.g., IP address, browser type, operating system, device model)
Log data and session information
Wallet addresses, transaction hashes, and on-chain transaction history
Authorization records, signature records, and approval logs
Deposit, withdrawal, swap, bridge, order placement, position closing, and liquidation records
AI feature interaction logs, including queries submitted, outputs generated, and usage preferences
Behavioral data related to risk control and reward mechanisms

2.3 Information from Third Parties

Where permitted by applicable law, if you access MyDex through or in connection with third-party services, we may receive necessary information from:

Identity verification and KYC/AML service providers
Account-wallet infrastructure providers
Blockchain infrastructure providers, nodes, oracles, and bridge services
Analytics and performance monitoring providers
Security and risk control service providers
Lawful business partners

3. Why We Process Your Information

We process your information for the following purposes:

Creating and managing your account; completing login, authentication, and security checks
Providing wallet connection, asset display, transfer, swap, bridge, and trading functions
Displaying orders, positions, margin balances, and other transaction records
Providing points, referrals, rewards, and campaign participation capabilities
Detecting unusual logins, devices, wallet addresses, or trading behavior
Preventing fraud, abuse, money laundering, manipulation of campaign rules, bulk registrations, and bot activity
Investigating system failures, interface anomalies, transaction issues, complaints, disputes, and security incidents
Improving page interactions, system performance, AI functionality, and the overall user experience
Responding to inquiries and sending service notices, security alerts, rule updates, campaign notices, and important announcements
Complying with applicable laws, regulations, and lawful requests from competent authorities

3.1 Special Note on AI Feature Data

When you use MyDex AI features, your interaction data (including queries submitted and outputs generated) may be processed for the following purposes:

Delivering AI-assisted analytics, risk alerts, and strategy outputs in real time
Improving the accuracy, relevance, and safety of AI outputs over time
Detecting misuse or abuse of AI features

We may share necessary AI interaction data with third-party AI service providers who power or support our AI features. Such providers are contractually required to process data only as instructed and to implement appropriate security measures. We do not use your AI interaction data to build profiles for advertising purposes.

4. Legal Bases for Processing

Where required by applicable law, we process personal information on one or more of the following legal bases:

Necessity for entering into or performing a contract with you (e.g., providing the Services you requested)
Compliance with applicable laws, regulations, or lawful requests from competent authorities
Legitimate interests in maintaining platform security, transaction integrity, and protecting users' lawful rights and interests
Your consent, where we have obtained it
Any other legal basis permitted under applicable law

5. Cookies, SDKs, and Similar Technologies

To ensure proper operation of the Services and improve your experience, we may use cookies, local storage, pixel tags, log analytics tools, device identifiers, or similar technologies for the following purposes:

Recognizing your login status and maintaining session continuity
Remembering your preferences and settings
Conducting security verification and fraud detection
Analyzing access patterns, feature usage, and product performance
Measuring campaign effectiveness

You may manage certain cookies or similar technologies through your browser or device settings. Please note that disabling certain technologies may affect the availability or functionality of some features of the Services.

6. How We Share, Transfer, and Disclose Information

6.1 Sharing

We do not sell your personal information. We may share necessary information in the following circumstances:

With third-party service providers that support identity verification, account wallets, cloud hosting, log analytics, customer support, security and risk control, notification delivery, blockchain infrastructure, nodes, oracles, bridge services, trading, or settlement support — solely to the extent necessary to provide the Services
With third-party AI service providers that power or support our AI features, as described in Section 3.1
With our affiliates, where necessary to provide consistent services, maintain security controls, conduct internal management, or fulfill compliance obligations
With competent judicial, regulatory, or governmental authorities, where required by applicable law, court order, or lawful demand

6.2 Transfer

Unless we obtain your separate consent or are otherwise required by law, we will not transfer your personal information to another company, organization, or individual. In the event of a merger, demerger, restructuring, asset transfer, bankruptcy, liquidation, or similar transaction, your information may be transferred as part of that transaction, and we will notify you in accordance with applicable law.

6.3 Public Disclosure

We may publicly disclose your information only where you have separately consented, where required by law, court order, regulatory demand, or government directive, or where necessary to protect the life, property, or other significant lawful rights and interests of MyDex, our users, or the public, as permitted by law.

7. Cross-Border Transfers

Given the nature of blockchain services, cloud infrastructure, third-party providers, and our global operations, your information may be transferred to, accessed from, stored in, or processed in jurisdictions outside your country or region, including the British Virgin Islands, jurisdictions where our infrastructure providers are located, and jurisdictions where our AI service providers operate.

Where cross-border transfers occur, we will take reasonable measures required under applicable law to ensure that your information receives a level of protection comparable to that described in this Policy, including through contractual safeguards with receiving parties, reliance on applicable adequacy determinations, or other lawful transfer mechanisms.

8. How We Store and Protect Your Information

8.1 Retention

We retain your information only for as long as necessary to fulfill the purposes described in this Policy. As a general guide:

Account and identity information: for the duration of your account and for a reasonable period thereafter as required for compliance, audit, or dispute resolution purposes
Transaction records: generally up to 5 years, or longer where required by applicable law
Log and security data: generally up to 90 days, unless a longer period is required for security investigation or legal proceedings
AI interaction data: retained for a limited period necessary for service delivery and quality improvement, after which it is deleted or anonymized

After the applicable retention period expires, we will delete or anonymize the relevant information in accordance with applicable law. Please note that information recorded on a public blockchain is outside our control and cannot be deleted by us.

8.2 Security Measures

We implement reasonable technical and organizational measures to protect your information, including:

Access controls and role-based permission management
Encrypted transmission of data in transit
Storage-layer protections where appropriate
Log monitoring and anomaly detection systems
Regular security audits and vulnerability remediation
System maintenance and patching processes
Employee access management, training, and confidentiality obligations

However, no method of network transmission, blockchain interaction, third-party system, or electronic storage can be guaranteed to be absolutely secure. In the event of a security incident that is likely to affect your rights and interests, we will notify you in accordance with applicable law.

9. Your Rights

To the extent provided by applicable law, you may have the following rights regarding your personal information:

Access and review: request a copy of the personal information we hold about you
Correction: request that we correct inaccurate or incomplete information
Deletion: request that we delete your personal information, subject to applicable legal obligations
Withdrawal of consent: where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing
Restriction or objection: request that we restrict or cease certain processing activities
Data portability: request a copy of your information in a structured, machine-readable format where technically feasible
Account closure: request closure of your MyDex account
Complaint: lodge a complaint with a competent supervisory authority in your jurisdiction

To exercise any of these rights, please contact us at service@mydex.io. We will respond to your request within 30 days of receipt. To protect security and prevent fraud, we may verify your identity before processing your request.

Please note that we may be unable to correct, delete, or revoke data that has already been recorded on a public blockchain, is publicly visible, and is not solely controlled by MyDex. In such cases, we will inform you of the limitation and take any other steps that are technically feasible.

10. Minors

The Services are not directed to persons under the age of 18. If you are under 18 years of age, please do not register for or use MyDex. If we become aware that a person under 18 has provided personal information to us without appropriate parental or guardian authorization, we will take prompt steps to delete such information and terminate the relevant account in accordance with applicable law.

11. Third-Party Websites, Protocols, and Services

The Services may contain links to or integrations with third-party websites, protocols, wallets, bridge services, identity verification providers, social media pages, or other external resources. These third-party services are independently operated by their respective providers and are governed by their own terms of service and privacy policies, which we encourage you to review before use.

We do not control how third parties collect, use, or protect your information, and we are not responsible for the privacy practices of any third party.

12. Updates to This Policy

We may update this Privacy Policy from time to time in response to product changes, legal or regulatory developments, business needs, security considerations, or other factors. The updated version will be posted through the app, website, help center, announcement pages, or other reasonable channels, and will become effective upon posting or on the date stated in the update notice.

Where required by applicable law or where changes are material, we will provide advance notice or seek your renewed consent before the updated Policy takes effect.

13. Contact Us

If you have any questions, comments, complaints, or rights requests regarding this Privacy Policy, please contact us:

Contact Email: service@mydex.io

We will acknowledge receipt of your request promptly and respond within 30 days.