How Binance, Coinbase and Other Major Crypto Exchanges Handle Your Data.

Bakkt (last updated Oct. 28, 2020)

“We also collect information about you from third parties, such as money laundering and fraud prevention information providers, marketing agencies, identity and creditworthiness verification services, and analytics and information providers. We may combine information we collect about you with information from third parties.”

Binance (last updated Jan. 12, 2022)

“We may receive information about you from other sources such as credit history information from credit bureaus.”

Bitfinex (last updated May 27, 2021)

Not specified

BitMEX (last updated Aug. 28, 2020)

“We receive personal data from partners when they refer you to us (for example, we receive data about the service you used, and that referred you). We will receive confirmation from Yubico Cloud that you have successfully authenticated using a Yubikey registered with that service. Third parties may monitor the Web on our behalf, for example looking for stolen usernames and passwords. Our communications service provider may also enable us to learn more about your social media presence, in order for us to send you more personalised communications. Finally, some authorities or other persons seeking access to information about users may provide information about the circumstances of their request, and about the individuals of interest.”

Bitstamp (last updated Nov. 5, 2020)

“We may collect Personal Data from third-party partners and public sources, which include:
– Reputational information;
– Financial information;
– Business activities of corporate customers.”

Bittrex (last updated Dec. 31, 2019)

“Analytic providers such as Google Analytics; advertising networks; search information providers.
Identity, Contact, AML / KYC Data from publicly available sources such as public court documents, the corporate registrars with the U.S. and other jurisdictions, and from electronic data searches, online KYC search tools (which may be subscription or license based), anti-fraud databases and other third party databases, sanctions lists, outsourced third-party KYC providers and from general searches carried out via online search engines (e.g. Google).”

Blockchain.com (last updated Dec. 16, 2021)

Affiliates, banks or payment processors, advertising or analytics providers.
“Banks or payment processors that you use to transfer fiat currency may provide us with basic Personal Data, such as your name and address, as well as, your bank account information.
Advertising or analytics providers may provide us with anonymised information about you, including but not limited to, how you found our website.”

BlockFi (last updated June 15, 2021)

“May include, but are not limited to, public databases, credit bureaus, identity verification partners, resellers and channel partners, joint marketing partners, advertising networks and analytics providers, social media platforms, and our BlockFi Rewards Visa Signature Card partner.”

Celsius (last updated October 2021)

“Our affiliates, our service providers, or our affiliates’ service providers; public websites or other publicly accessible directories and sources, including bankruptcy registers, tax authorities, governmental agencies and departments, and regulatory authorities; and/or from credit reporting agencies, sanctions screening databases, or from sources designed to detect and prevent fraud or financial crimes.”

Coinbase (last updated Oct. 8, 2021)

Companies affiliated with Coinbase, public databases, credit bureaus, ID verification partners, joint marketing partners and resellers, advertising networks and analytics providers, public blockchains.

Crypto.com (last updated Sept. 30, 2021)

“- Fraud and crime prevention agencies,
– a customer referring you,
– public blockchain,
– publicly available information on the Internet (websites, articles etc.).”

Deribit (undated)

Not specified

eToro (last updated May 20, 2020)

“May include, for example, identity verification agencies, credit referencing agencies and similar bodies. We may also collect information about you from third parties, when you use or connect to eToro by or through a third party platform, such as Facebook or another site, you allow us to access and/or collect certain information from your Third Party Platform profile/account as permitted by the terms of the agreement and your privacy settings with the third party platform. We will share such information with the third party platform for their use.”

FTX (last updated Dec. 23, 2021)

“We may also use Google Analytics and other service providers to collect information regarding visitor behavior and visitor demographics on our Services… We may use Plaid Technologies, Inc. (‘Plaid’), as a vendor to collect information about you…
if you access our Services through a third-party application, such as an app store, a third-party login service, or a social networking site, we may collect information about you from that third-party application that you have made public via your privacy settings. Information we collect through these services may include your name, your user identification number, your user name, location, gender, birth date, email, profile picture, and your contacts stored in that service.”

Gemini (last updated Dec. 8, 2021)

“Identification Information, such as name, email, phone number, postal address, government identification numbers (which may include Social Security Number or equivalent, driver’s license number, passport number);
Financial Information, such as bank account information, routing number;
Transaction Information, such as public blockchain data (bitcoin, ether, and other Digital Assets are not truly anonymous).
Credit and Fraud Information, such as credit investigation, credit eligibility, identity or account verification, fraud detection, or as may otherwise be required by applicable law; and additional Information.

Huobi (last updated April 27, 2021)

Not specified

Kraken (last updated Nov. 23, 2021)

Banks: name, address, bank account details.
Users’ business partners: name, address, financial.
Advertising networks, analytics providers, search information providers: anonymized or de-identified information on how you found website.
“Credit agencies do not provide us with any personal information about you, but may be used to corroborate the information you have provided to us.”

LocalBitcoins (last updated June 10, 2020)

Not specified

Nexo (undated)

Not specified

Okcoin (last updated Dec. 18, 2020)

Not specified

OKEx (last updated Dec. 3, 2020)

Not specified

Paxful (undated)

Service providers and data processors, affiliates, “third-parties who may help us verify identity, prevent fraud, and protect the security of transactions,” “third-parties who may help us evaluate your creditworthiness or financial standing,” “third-parties who may help us analyze Personal Data, improve the Website or the Services or your experience on it, market products or services, or provide promotions and offers to you,” social media platforms

Poloniex (last updated May 4, 2020)

“We may obtain Personal Data about you from other sources, including through third party services such as sanctions screening services and other organizations to supplement information provided by you.”

SALT (last updated Jan. 6, 2021)

Google Analytics, Full Story.
Public databases and ID verification partners, public blockchains: “Such information may include your name, address, job role, public employment profile, credit history, status on any sanctions lists maintained by public authorities, and other relevant data.”
“We may analyze public blockchain data to ensure parties utilizing our services are not engaged in illegal or prohibited activity under our Terms, and to analyze transaction trends for research and development purposes.”