Last updated 28 February 2026
Last updated 06 April 2026
This Privacy Policy explains how Bitsbazar (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our platform, including our website and any related applications (the “Platform”). Bitsbazar is operated by AMX Payments Inc. (registration number BC1571192).
By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy.
For the purpose of this Policy and associated Platform Terms of use at https://bitsbazar.com/terms-of-service/ “Personal Information” refers to any information that relates to an identified or identifiable individual. We do not consider Personal Information to include information that has been anonymised, where it does not identify a specific user.
Processing includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, procurement, collection, deletion, storage, modification, destruction, and use of personal data.
By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy.
2.1. We process personal data to the extent necessary to deliver our services in a consistent, user-friendly, secure, and dependable manner. Such data may fall across various categories, including inventory and contact data, browser and device data, content data, meta or transactional data, usage data, location data, sales data, and contract and payment data.
2.2. Your personal information may be collected, held, used, and disclosed for the following purposes:
2.3. Personal data is retained for as long as required to fulfil the relevant purpose(s) or as mandated by applicable law. Data that is no longer required for processing will be anonymized or permanently deleted.
2.4. We may engage third parties to process personal data on our behalf, or process such data jointly with or transfer it to third parties — in particular, specialist service providers whose services we utilise. We ensure that appropriate data protection standards are upheld in respect of any such third parties.
2.5. As a general principle, we process personal data only with the consent of the individual concerned, unless processing is otherwise permitted on another legal basis — for example, to perform a contract with the individual or to take pre-contractual steps at their request, to protect our overriding legitimate interests, or where processing is evident from the circumstances or has been communicated in advance.
2.6. We process information that individuals voluntarily provide to us when making contact — whether by post, email, instant messaging, contact form, social media, or telephone — or when registering for our services. Such information may be stored in an address book, a customer relationship management (CRM) system, or a comparable tool. Where data relating to third parties is transmitted to us, the person providing that data is responsible for ensuring compliance with applicable data protection obligations in respect of those individuals, as well as for the accuracy of the personal data submitted.
2.7. We additionally process personal data received from third parties, obtained from publicly available sources, or gathered in the course of our operations, to the extent that such processing is permitted on a valid legal basis.
2.8. We collect these types of Personal Information:
2.8.1. Non-Personally Identifiable Information. The first type is non-personally identifiable data and statistical information. Non-personally identifiable data that is being gathered consists of technical information and behavioral information that does not pertain to a specific individual (“Non-Personal Information”). This includes your device type, browser type and version, IP data, screen size and resolution, language and other technical data. While it is not specifically personally identifiable, it may be reverse-engineered to be identifiable and therefore is considered Personal Information.
2.8.2 Personally Identifiable Information. We also collect personally identifiable information — that is, information that identifies a specific individual or is of a private and/or sensitive nature. This includes the following categories:
In order to satisfy identity verification obligations under the PCMLTFA and to prevent fraud, we may collect and process biometric information as part of our KYC procedures. This may include:
Biometric information is processed exclusively for the purposes of identity verification, authentication, fraud prevention, sanctions screening, and AML/ATF compliance — specifically, to confirm that the individual undergoing verification is the legitimate holder of the identity document provided.
These verification checks are carried out by trusted third-party KYC service providers acting on our behalf. Such providers are contractually bound to:
We do not employ biometric data for automated decision-making unrelated to compliance, nor do we sell or disclose biometric identifiers for advertising, profiling, or any unrelated commercial purpose.
Where you do not consent to biometric verification, we are unable to complete the mandatory identity verification process and, consequently, cannot onboard you or provide our services.
2.9. We are committed to ensuring that the personal information we collect, use and disclose is relevant, accurate, complete and up-to-date.
2.10. We encourage you to contact us to update any personal information we hold about you. If we correct information that has previously been disclosed to another entity, we will notify the other entity within a reasonable period of the correction. Where we are satisfied that the information is inaccurate, we will take reasonable steps to correct the information within 30 days, unless you agree otherwise. We do not charge you for correcting the information.
3.1. Why We Use Your Data
We use your information to:
3.2. Personal Information is collected by us in the following circumstances:
3.2.1. Platform visits. When you access our Platform, your device — whether a computer, mobile phone, or other means of access — automatically transmits certain information to us, which may include your IP address, browser type, operating system, and other technical characteristics or identifiers associated with your device.
3.2.2. Account registration. Upon registering for our services, we collect identifying details such as your name, email address, phone number, date of birth, and residential or postal address. Where necessary, we may further request documentation such as a driver’s license or passport number, or other information required to verify your identity or address.
3.2.3. Service usage. As you use our services, we collect data relating to your transactions and activities on our website, including amounts sent or received, transaction dates and times, and recipient details such as name and address. Information about your access device may also be collected for the purpose of fraud prevention.
3.2.4. Fraud and misuse prevention. We may monitor and collect information regarding how you use and interact with our Platform in order to guard against fraud and the misuse of your Personal Information. This may involve assessing your device — whether a computer, mobile phone, or otherwise — to detect malicious software or activity that could affect the availability of our services.
3.2.5. Other sources. From time to time, we may collect additional information about you through other means, including through interactions with our customer support team.
If you registered to our service, we may contact you with periodic updates and promotional emails relating to the service and the products or services we offer. You may opt out of these at any time, but not from transactional emails, such as updates on payments, withdrawals, or cryptocurrency purchase orders. Moreover, if you showed interest in one of our products or services, we may contact you in relation to such product or service either by email, phone, text or post.
5.1. You can access, edit, update or delete your account or Personal Information we have collected at any time by accessing settings or contacting us via [email protected] . We will respond to your request within a reasonable period of time, but no later than the time period required by all applicable laws.
5.2. Please note that notwithstanding the foregoing, there may be circumstances in which we are unable to accommodate a request to edit, update, access, or delete an account profile or Personal Information. This includes but is not limited to:
5.3. If we determine that we cannot respond to any request in any particular instance, we will provide you with an explanation of why that determination has been made and a contact point for any further inquiries. To protect your privacy, we will take commercially reasonable steps to verify your identity before responding to any request under this provision, including complying with any applicable legal requirement for verifying your identity.
5.4. To the extent permitted by applicable laws, we reserve the right to charge you a reasonable fee for the handling and processing of your requests to access your Personal Information, where applicable. If we so choose to charge, we will provide you with a written estimate of the fee we will be charging. Please note that in many jurisdictions, we are not required to respond to or deal with your access request unless you have agreed to pay the fee.
6.1. Your personal information may be disclosed to third parties for purposes described in this policy or described in any other specific and additional privacy provisions that apply to certain products and services provided by us. We may disclose your personal information to the following third parties:
6.2. Where necessary, such as when we transfer data to service providers, we put in place appropriate contractual arrangements and security mechanisms to protect the personal information shared and to comply with our data protection, confidentiality and security standards and obligations. We only allow our service providers to handle your personal information if we are satisfied, they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers relating to ensuring they can only use your personal information to provide services to us and to you.
6.3. We will not share your personal information with any other third party.
The personal data collected from you, as detailed in this Privacy Policy, may be transferred to, and stored at, servers located in countries outside your jurisdiction and countries according to our third-party providers’ standard contractual obligations. It may also be processed by our suppliers, service providers, or partners’ staff operating outside your country. We are committed to protecting your Personal Data. We will take appropriate steps to ensure that your Personal Data is processed and stored securely and in accordance with applicable privacy laws, as detailed in this Privacy Policy. Such steps include putting in place data transfer agreements or ensuring our third-party service providers comply with our data transfer protection measures. By submitting your Personal Information through the Platform, you acknowledge, and agree, in a jurisdiction where such consent is required, to such transfer, storing and/or processing of Personal Information.
8.1. We take reasonable steps to preserve the security of personal information it collects. Your personal information is held in an environment with reasonable security measures in writing or electronically, or both. We have implemented security procedures, controls, and protocols across all of our physical premises and electronic environments to minimise the risk of interference, loss, misuse, unauthorised access, modification, or disclosure of personal information. However, due to inherent risks in transmission of information over the Internet or other methods of electronic storage, we cannot guarantee that unauthorised access or use will never occur.
8.2. We will comply with applicable law in the event of any breach of the security, confidentiality, or integrity of your personal information and will inform you of such breach if required by applicable law.
8.3. To the extent that we implement the required security measures under applicable law, we shall not be responsible or liable for unauthorized access, hacking, or other security intrusions or failure to store or the theft, deletion, corruption, destruction, damage, or loss of any data or information included in the personal information.
8.4. We comply with local authorities in data breach notifications. We have appropriate security measures to prevent personal information from being accidentally lost or used or accessed unlawfully. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
Personal Information is retained for a minimum period of five (5) years. In determining the appropriate retention period applicable to your personal information, we take into account a number of factors, including the volume, nature, and sensitivity of the data, the potential risk of harm arising from its unauthorised use or disclosure, the purposes for which it is processed and whether those purposes could be achieved by other means, and the requirements imposed by applicable law and regulation. Personal information that is no longer needed for the purpose for which it was originally collected will be deleted, unless a valid legal basis for continued retention exists — such as the resolution of disputes or compliance with legal obligations.
AML Record Retention
Notwithstanding any other retention period set out in this Policy, we are required under the PCMLTFA to retain certain categories of records for a minimum of five (5) years. These include:
Such records must be preserved even in the event that you close your account or submit a request for the deletion of your personal information. Upon expiry of the applicable retention period, data will be securely destroyed unless further retention is required by law or justified by a legitimate business purpose.
10.1. We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device.
10.2. Types of Cookies We Use
10.3. Managing Cookies
You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of our services.
10.4. Retention: Cookies are stored for a maximum of 13 months, after which consent must be renewed. A consent banner is displayed to manage cookie preferences upon your first visit.
11.1 By using the Platform, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence, and you have given us your consent to allow any of your minor dependents to use this site.
11.2. We do not knowingly collect any personal information from children under the age of 18. If you are under the age of 18, please do not submit any personal information through the Platform and Services. If you have reason to believe that a child under the age of 18 has provided personal information to us through the Platform and Services, please contact us to request that we delete that child’s personal information from our Services.
12.1. AML / ATF Compliance Disclosure (PCMLTFA)
As a Money Services Business (“MSB”) registered with FINTRAC, we are subject to legal obligations under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (“PCMLTFA”) that require us to collect, use, and retain certain personal information. This includes information necessary to verify your identity, establish the nature and purpose of your transactions, monitor account activity, and maintain records in accordance with Canadian law.
Disclosure to FINTRAC. We may be required by law to disclose personal information to FINTRAC, including in connection with the filing of Suspicious Transaction Reports (STRs), Large Virtual Currency Transaction Reports (LVCTRs), Terrorist Property Reports (TPRs), or other mandatory regulatory reports.
Please be aware that we are legally prohibited from disclosing to you whether any such report has been filed in relation to your account or transactions.
Mandatory Collection. The provision of information required under the PCMLTFA is a condition of accessing our services. Where you decline to provide such information, we will be unable to open an account or deliver services to you. Information collected for AML/ATF compliance purposes cannot be deleted or withheld for so long as you remain a user of our services.
Be the first to enjoy priority access to our upcoming mobile app. Get early to explore the exclusive features, and stay up to date with the latest product developments, so you never miss an opportunity.
