Last updated: 23 July 2025
Who we are:XM Amila Bro (“we”, “us”, “our”) operates xmamilabro.com and the “XM Amila bro” mobile app.
1. Data We Collect
- Account data: name, email, phone, username.
- KYC documents: NIC/Passport, selfies, bank slips (you upload them).
- App data: Firebase push token, notification logs stored locally (SharedPreferences).
- Usage data & cookies: IP, browser info, pages viewed, device info (via Google Analytics / similar tools).
2. Why We Collect It
- Verify your identity & meet compliance requirements.
- Process deposits/withdrawals and show your dashboard history.
- Send trading signals/updates via push notifications, email & Telegram.
- Improve our services, prevent fraud & secure accounts.
- Legal/record keeping (tax, disputes).
3. Legal Basis
- Your consent (when you register / upload docs / accept notifications).
- Contract performance (to provide exchange & VIP services).
- Legitimate interest (security, analytics).
- Compliance with Sri Lankan laws (e.g., anti–money laundering) and other applicable regulations.
4. How We Share Data
- Service providers: hosting (Web/WordPress), email delivery, Firebase, analytics.
- Law enforcement/regulators if legally required.
- We do not sell your personal data.
5. Data Retention
We keep data as long as needed for your account, legal obligations, or dispute resolution. You may request deletion—subject to legal limits.
6. Cookies & Tracking
We use essential cookies (login/session) and analytics cookies. You can block cookies in your browser, but some features may break.
7. Your Rights
Depending on your jurisdiction: access, correct, delete, restrict, or object to processing.
Email us at [contact@xmamilabro.com] to action these rights.
8. Security
We use SSL/TLS, role-based admin access, and encrypted storage where possible. No method is 100% secure—use strong passwords and keep them confidential.
9. Children
Our services are for users 18+ only. We do not knowingly collect data from minors.
10. International Transfers
Your data may be stored/processed on servers outside Sri Lanka. We take steps to ensure adequate protection.
11. Third-Party Links
Our site/app may link to Telegram, Binance, XM, etc. Their policies apply on those platforms.
12. Changes
We may update this policy. The “Last updated” date shows the latest version. We’ll notify you of major changes.
13. Contact
Email: contact@xmamilabro.com
Website: xmamilabro.com