This Privacy Policy explains how RedDot (“RedDot”, “we”, “us” or “our”) collects, uses, discloses and protects personal data in connection with our website, enquiries and payment acceptance infrastructure services for Forex, CFD and other high-risk businesses.
This policy is a website and service overview. Any commercial relationship with RedDot may be governed by separate onboarding documents, partner requirements, data processing terms and service agreements.
1. Information we collect
We may collect information that you provide directly to us, including company name, contact person, business email, phone number, Telegram or messaging handle, monthly volume, target geographies, preferred payment flows and other information submitted through forms, calls, email or messaging channels.
During merchant review, onboarding or support, we may request additional business information such as corporate documents, ownership information, director or representative information, website details, licence or regulatory information, processing history, risk profile, settlement preferences and information required by banks, EMIs, payment partners or applicable law.
We may also collect technical information from website visitors, such as IP address, device data, browser type, pages viewed, referral source, approximate location, timestamps and cookie or analytics identifiers where enabled.
2. How we use information
We use information to respond to enquiries, evaluate merchant fit, prepare proposed payment infrastructure, perform onboarding and risk review, communicate with you, provide and improve services, support reconciliation and settlement processes, maintain security, prevent fraud, comply with legal obligations and enforce agreements.
Where relevant, payment and transaction-related information may be used to deliver payment processing, settlement, reconciliation, dispute handling, fraud monitoring, account management and operational support.
3. Legal bases and compliance
Depending on the jurisdiction, we may process personal data based on consent, performance of a contract, steps taken before entering into a contract, legitimate business interests, compliance with legal obligations or another lawful basis available under applicable data protection laws.
RedDot may process data in connection with KYC, KYB, AML, sanctions screening, fraud prevention, risk controls and banking or EMI partner requirements. Availability of KYC and No-KYC flows is subject to jurisdiction, partner approval, transaction type, merchant profile and applicable law.
4. Sharing of information
We may share information with banks, EMIs, acquiring partners, payment processors, compliance providers, fraud prevention providers, technology vendors, hosting providers, CRM or communication tools, professional advisers, regulators, law enforcement or other parties where required to provide services, comply with obligations or protect our rights.
We do not sell personal data. We only share data where there is a business, operational, legal or compliance reason to do so.
5. International transfers
Because RedDot supports international payment infrastructure, data may be processed in countries outside your country of residence or establishment. Where required, we use appropriate safeguards and contractual protections for cross-border data transfers.
6. Data retention
We retain information for as long as necessary to provide services, respond to enquiries, satisfy legal, tax, accounting, AML, dispute, audit and partner requirements, enforce agreements and resolve operational issues. Retention periods may vary depending on the type of data and applicable obligations.
7. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online service can guarantee absolute security.
8. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of your personal data, request data portability or withdraw consent. These rights may be limited by legal, regulatory, AML, fraud prevention, dispute or contractual requirements.
9. Cookies and analytics
The current RedDot website may use only essential functionality unless analytics, advertising pixels or tracking tools are added before launch. If analytics or marketing tools are enabled, this policy should be updated to identify those tools and explain user choices.
10. Contact
Privacy requests and general data enquiries should be sent to [email protected].