DJYTL 
1. Who we are
DJYTL Capital (Pty) Ltd is a private company incorporated in South Africa under registration number 2023/986167/07. Our registered office is 9th Floor, Atrium on 5th Street, Sandton, Gauteng, 2196, South Africa.
We operate the DJYTL Capital website and related services. We are the responsible party for personal information that we process through those services. Where the GDPR applies, we are the controller.
Our Information Officer can be reached at privacy@djytlcapital.com.
2. Information we collect
We may collect:
- Account information, including your email address, password, account settings and information received when you use Sign in with Google.
- Verification information, including identity and company documents, beneficial-ownership information and screening results where identity or business verification is required.
- Transaction information, including orders, trades, balances, deposits, withdrawals, bridge transactions, swaps, peer-to-peer transactions, disputes and linked wallet addresses.
- Technical information, including your IP address, device and browser information, security events and service logs.
- Communications, including messages sent to support, peer-to-peer dispute information and interactions with the help box.
- Information submitted to AI-supported features, including swap requests, peer-to-peer assistant messages, text submitted for translation and information relevant to a peer-to-peer dispute.
Hydra Wallet keys and recovery phrases are created and kept in your browser. We do not collect them.
Public-blockchain information is visible to anyone. It may be copied or stored independently by other people.
3. How we use information
We use personal information to:
- Create, operate and secure your account.
- Provide trading, wallet, swap, bridge and peer-to-peer features.
- Process transactions and display account and blockchain activity.
- Verify identity or business information where required.
- Prevent fraud, financial crime, sanctions breaches, security incidents and misuse.
- Meet legal, regulatory, accounting and record-keeping duties.
- Respond to support requests and peer-to-peer disputes.
- Translate communications and provide AI-supported explanations or summaries.
- Maintain and improve the Services using information that does not identify you or is appropriately protected.
- Establish, exercise or defend legal claims.
AI tools may generate descriptions, translations, assistance and dispute summaries. Their output may be incomplete or incorrect. AI does not decide whether to restrict or close an account and does not decide peer-to-peer disputes. A person decides disputes.
4. Why we may process information
Under South African law, we process personal information where:
- You consent to the processing.
- Processing is necessary to enter into or perform an agreement with you.
- Processing complies with a legal obligation imposed on us.
- Processing protects your legitimate interests.
- Processing pursues our legitimate interests or those of a third party, unless your rights and interests require protection.
Our legitimate interests include securing and operating the Services, preventing fraud, supporting customers, enforcing our terms and improving service reliability.
Where the GDPR applies, we rely on consent, performance of a contract, compliance with legal obligations and our legitimate interests, as appropriate. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.
If required information is not provided, we may be unable to create an account, complete verification or provide a feature.
5. When we share information
We share personal information only where reasonably necessary with:
- Identity-verification, screening and fraud-prevention providers.
- Infrastructure, hosting and security providers.
- Google when you choose Sign in with Google.
- Abraxas Technologies (Pty) Ltd, a South African group company that provides the website help box.
- AI service providers used for descriptions, assistance, translation and dispute summaries.
- Professional advisers, auditors and insurers where applicable.
- Courts, regulators, law-enforcement bodies and other authorities where disclosure is legally required or permitted.
- A purchaser or successor involved in a lawful corporate transaction, subject to appropriate protections.
We do not sell personal information.
Transactions recorded on DJYTL Chain or another public blockchain are public and cannot be erased or changed by us.
6. Retention
We retain personal information only for as long as needed for the purpose for which it was collected and to meet legal, regulatory, tax, accounting, security and dispute-resolution requirements.
Account and transaction records are kept while the account is active and afterwards for the applicable period required by South African record-keeping law. We may retain information for longer where a legal hold, investigation, dispute or enforcement matter requires it.
When retention is no longer required, we delete, destroy or de-identify the information where reasonably possible. Information permanently recorded on a public blockchain cannot be deleted by us.
7. Your rights
Subject to applicable law, you may ask us to:
- Confirm whether we hold personal information about you.
- Give you access to that information.
- Correct or update inaccurate or incomplete information.
- Delete or destroy information that we are no longer authorised to retain.
- Object to certain processing.
- Restrict certain processing where the GDPR applies.
- Provide certain information in a portable format where the GDPR applies.
- Review a decision based solely on automated processing where applicable.
- Stop direct marketing communications.
Contact privacy@djytlcapital.com to exercise a right. We may need to verify your identity before responding. Some rights are subject to legal exceptions, including duties to retain records.
You may complain to South Africa’s Information Regulator through the contact channels published at Information Regulator South Africa. If the GDPR applies, you may also complain to the data-protection authority responsible for your location.
8. International transfers
Our servers are rented from Contabo in Germany.
AI-supported information is processed:
- By Qwen Cloud, operated through Alibaba Cloud in Singapore, for people outside the EU or EEA, the United Kingdom and Switzerland.
- By Anthropic in the United States for people in the EU or EEA, the United Kingdom and Switzerland.
Other service providers may process information in countries where they operate. We transfer personal information outside South Africa only where the transfer is permitted by applicable data-protection law. These may include contractual protections, transfers to recipients subject to binding privacy rules, transfers to countries with adequate protection, consent where legally permitted, or transfers necessary to perform an agreement.
Where the GDPR applies, we use an applicable lawful transfer mechanism and supplementary safeguards where required. Contact privacy@djytlcapital.com for information about the safeguards relevant to your information.
9. Security
We use reasonable technical and organisational safeguards designed to protect personal information against loss, unauthorised access, interference, alteration and disclosure.
No online system is completely secure. You must protect your password, devices and Hydra Wallet recovery phrase and notify support@djytlcapital.com if you suspect unauthorised access.
10. Browser storage
We use browser storage that is strictly necessary to keep you signed in, maintain your wallet session and cache prices. We do not use advertising or analytics cookies.
Blocking necessary browser storage may prevent parts of the Services from working.
11. Children
The Services are not offered to anyone under 18. We do not knowingly invite children to create accounts.
12. Changes to this policy
We may update this Privacy Policy to reflect legal, operational or service changes. We will post the updated policy on this page and notify you of material changes before they take effect where required.
13. Contact
Privacy questions and requests may be sent to privacy@djytlcapital.com.
General support requests may be sent to support@djytlcapital.com.