BBX Privacy Policy

Effective Date: March 27, 2026

BBX Protocol ("BBX", "us", "we", or "our") operates this website and related applications. This Privacy Policy ("Policy") explains how we collect, use, and protect information when you visit our Site or use our Services.

By accessing or using the Services, you acknowledge that you have read and understood this Policy.

1. Information We Collect

1.1. Information You Provide. We may collect information you voluntarily provide, such as your email address or the content of your inquiries when you contact us.

1.2. Automatically Collected Information. When you access the Site, we may automatically collect: (a) IP address and approximate geolocation (used for geographic access control enforcement); (b) device type, operating system, and browser information; (c) pages visited, time on page, and referral source; (d) wallet public address (when you interact with the Protocol).

1.3. Blockchain Data. Transactions on the blockchain are publicly visible by design. Wallet addresses, transaction amounts, and timestamps are recorded on-chain and are not controlled by BBX. BBX does not associate on-chain data with your personal identity unless required by law.

1.4. Information We Do NOT Collect. We do not independently collect or store your identity verification (KYC) data. Where KYC is required, a verification interface may be provided within the Site. Any personal information you submit through this interface (such as name, identification documents, and proof of address) is processed by our licensed third-party partner in accordance with its own privacy policy. BBX does not use your KYC data for any purpose other than facilitating the verification process.

2. How We Use Information

We use collected information for the following purposes: (a) to operate and maintain the Site and Services; (b) to enforce geographic access restrictions and sanctions compliance (IP geofencing, wallet screening); (c) to detect and prevent suspicious activity, fraud, and security threats; (d) to improve the functionality and user experience of the Site; (e) to respond to your inquiries and provide support; (f) to comply with applicable legal obligations.

We do NOT use your information for: targeted advertising, user profiling, behavioral tracking, or selling your data to third parties.

3. Information Sharing

We do not sell, rent, or trade your personal information. We may share information with: (a) licensed third-party partners (e.g., brokerage and custody providers) to the extent necessary for the execution of Services; (b) blockchain analytics providers for sanctions screening and transaction monitoring; (c) law enforcement or regulatory authorities when required by valid legal process; (d) professional advisors (legal, audit) under confidentiality obligations.

4. Data Retention

We retain information only as long as necessary for the purposes described in this Policy: (a) IP address and geolocation data: 90 days (rolling); (b) device and browser information: 90 days (rolling); (c) usage data and logs: 12 months; (d) compliance records (sanctions screening logs, access control logs): minimum 5 years from creation, or longer if required by applicable law; (e) blockchain data: permanent and immutable by the nature of blockchain technology — BBX does not control on-chain data retention.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, regular security assessments, and incident response procedures. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) request correction of inaccurate information; (c) request deletion of your information, subject to legal retention requirements; (d) object to or restrict certain processing activities; (e) withdraw consent where processing is based on consent.

Please note that certain information recorded on the blockchain cannot be modified or deleted due to the immutable nature of blockchain technology.

7. Cookies

The Site uses strictly necessary cookies for core functionality (session management, security, compliance gating). We may also use analytics cookies to understand how visitors interact with the Site. Analytics cookies are only set with your consent. We do not use marketing, advertising, or cross-site tracking cookies. You can manage cookie preferences through your browser settings or the cookie consent banner on the Site.

8. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. Where such transfers occur, we implement appropriate safeguards in accordance with applicable data protection laws.

9. Children

The Services are not intended for individuals under the age of 18. We do not knowingly collect information from minors.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated through the Site. Your continued use of the Services after any update constitutes acceptance of the revised Policy.

11. EU and EEA Users' Rights

If you are a resident of the European Economic Area ("EEA"), you generally have the right to access, rectify, download, or erase your information, as well as the right to restrict and object to certain processing of your information. While some of these rights apply generally, certain rights apply only in certain limited circumstances. You have the right to access your personal data and, if necessary, have it amended, deleted, or restricted. In certain instances, you may have the right to data portability. Please contact team@bbx.com to fulfill any requests relating to your data subject rights.

You can also ask us not to send marketing communications and not to use your personal data when we carry out profiling for direct marketing purposes. You can opt out of receiving e-mail newsletters and other marketing communications by following the opt-out instructions provided to you in those e-mails. Transactional account messages will be unaffected even if you opt out from marketing communications.

Should you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), please reach out to team@bbx.com. If our reply is not satisfactory, you have the right to raise a concern with your local supervisory authority.

12. Your California Privacy Rights

BBX may have collected, used, and shared, for business purposes, personal information about you as described in this Policy. Each category of data may be used by BBX or shared with third parties also as described in this Policy. Residents of California have the right to request access to and deletion of the information BBX holds about them. Such requests may be submitted by email to team@bbx.com. BBX will not sell your personal information without your consent. BBX will not discriminate against you for exercising your rights under the CCPA. Specifically, we will not: (a) deny access to our Services; (b) charge a different rate for the use of our Services; or (c) provide a different quality of service.

13. Supplemental Terms: Events

This section applies only when you participate in events organized or hosted by BBX. In connection with events, BBX may collect your: (a) name; (b) email address; (c) company name; (d) role and job level; (e) industry; (f) state and country; (g) LinkedIn profile; (h) card payment details; and (i) billing address. We collect this data to facilitate the ticketing process, for internal analytics, and for internal BBX marketing purposes. With your consent, certain data (name, title, company, and email address) may be shared with event sponsors. Payment details and registration information are shared with the event platform solely for processing purposes. All event-related data sharing is subject to the same protections described in Section 3 of this Policy.

14. Contact Us

Any questions about this Privacy Policy or about our use of your personal information should be addressed to team@bbx.com.