VISAYA CAPITAL Create account

Privacy Policy

This policy explains what personal data Visaya Capital collects, why we collect it, on what legal basis we process it, who can receive it, how long we keep it, and the rights you can exercise over it. It is written to be read, not skimmed past a cookie banner.

Definitions

In this policy, "Visaya Capital", "we", and "us" mean the platform operating at visaya-capital.org; "you" means any visitor or registered user of the site and platform. "Personal data" means information relating to an identified or identifiable person, and "processing" covers anything we do with that data, from collecting it to storing and eventually deleting it.

Personal data we collect

We collect the following categories of personal data, and only these:

  • Identity and contact data: first name, last name, email address, and phone number, given by you in the registration form.
  • Verification data: identity documents and, where applicable, a proof of address or selfie, provided for KYC purposes as described in our AML / KYC policy.
  • Query content: the text of messages you send to support, including complaint correspondence.
  • Account and transaction data: platform settings, strategy selections, deposits, withdrawals, and their records.

Usage data

When you browse the site, we receive technical usage data such as your IP address, browser type, pages visited, and referring page. This data is used to keep the service secure, to diagnose faults, and to understand in aggregate which pages help users. Usage data is not used to build advertising profiles of identified individuals.

Cookies

The site uses a small number of strictly necessary cookies and similar mechanisms to keep your session working and to remember security choices such as two-step verification state. Analytics cookies are only ever set if the site owner activates an analytics identifier, and you can refuse or delete them through your browser settings without losing access to the site's core functions.

Controller and processors

Visaya Capital is the controller of the personal data described in this policy: we decide why and how it is processed. Where third parties process data on our instructions only, such as hosting providers and identity-verification providers, they act as processors under written data-processing terms that limit what they may do with the data.

Purposes and legal bases of processing

  • Providing the service you asked for (account creation, strategy operation, withdrawals): processing necessary for the performance of our agreement with you.
  • Identity verification and AML obligations: processing necessary to comply with our legal obligations under Philippine requirements, including the AML Act.
  • Keeping the platform secure and preventing fraud: processing necessary for our legitimate interests in operating a safe service, balanced against your rights.
  • Answering your questions and handling complaints: necessary for performing our agreement and for legitimate interests in resolving disputes.
  • Marketing messages, if you agree to receive them: based on your consent, which you can withdraw at any time through the unsubscribe link or by writing to us.

Data retention

Account and contact data are kept while your account is active and for a reasonable period after closure, so that we can answer later questions about your own transactions. Verification data is retained for the period required by the anti-money-laundering obligations that apply to us. Query content is kept while the matter is open and for a shorter archival period after it closes. Usage data is kept for a maximum of twelve months. When retention ends, data is deleted or irreversibly anonymized.

Data sharing and recipients

We do not sell personal data. Data may be shared with: identity-verification providers; IT and hosting providers acting as processors; affiliated companies involved in delivering the service, such as liquidity and payment partners; and regulators or competent authorities where disclosure is required by law. Each category of recipient receives only the data its function requires.

Disclosure to authorities

Where Philippine law or a competent authority lawfully requires disclosure, for example in connection with anti-money-laundering reporting or a duly ordered investigation, we comply with the request and disclose only what it covers. We do not respond to informal requests that lack a legal basis.

Security of processing

We apply the technical and organizational measures described on our Security page: encryption in transit and at rest, role-based access, session controls, and audit records. No system is perfectly secure, so we combine these measures with incident procedures that freeze affected accounts first and investigate second.

Your rights

You have the right to request access to the personal data we hold about you; correction of data that is inaccurate; deletion of data where no retention obligation applies; restriction of processing while a dispute about accuracy is resolved; and to object to processing based on legitimate interests. To exercise any right, write to [email protected] from your registered address. We respond within thirty days, and there is no charge for a first, reasonable request.

Service providers

The providers we rely on include hosting and email-delivery services, identity-verification services, and analytics services when enabled. Providers are selected on the basis of the protections they offer, and each is bound by contract to process data only on our documented instructions.

Analytics

If an analytics identifier has been configured, analytics tools collect aggregate statistics such as page views and session duration. Analytics data is used to improve the site, not to make automated decisions about you. Where analytics requires consent in your jurisdiction, it is requested before any analytics cookie is set.

Advertising and retargeting

We do not run retargeting campaigns that share your personal data with advertising networks from this site. If this changes, this section will say so explicitly, and consent will be requested before any such processing starts.

Links to other sites

Our pages link to third-party sites, such as payment providers' help pages. Once you follow a link, the destination site's own policy applies; we recommend reading it. We are not responsible for the data practices of third-party sites.

Children's privacy

The platform is not directed at persons under eighteen, and we do not knowingly collect personal data from children. If we learn that an account was created by a minor, we close it and delete the associated data, subject to any legal retention duty.

Changes to this policy

We may update this policy to reflect changes in our processing or in applicable requirements. The current version is always published on this page with its effective date, and material changes are announced in the dashboard before they take effect. Continued use of the platform after a change takes effect means you accept the updated policy.

Contact us

Questions about this policy or your data can be sent to [email protected]. The Client Support & Compliance team handles privacy requests during Monday to Friday, 9:00–18:00 PHT (excluding public holidays), with a first reply usually under one business hour. Postal correspondence goes to Ayala Avenue, Makati Central Business District, Makati City, 1226 Metro Manila, Philippines.