Privacy Policy

This Privacy Policy describes how SG Gold, its affiliates, service providers, and authorized partners collect, use, process, disclose, transfer, retain, and protect personal information when you access, browse, register for, or use our websites, mobile applications, digital bullion products, wallet services, payment features, customer support channels, and related offerings (collectively, the Services).

We are committed to responsible data practices, transparency, and security. This policy is intentionally comprehensive to support informed consent and to satisfy legal and regulatory expectations in jurisdictions where we operate. By creating an account, completing identity verification, or otherwise using the Services, you acknowledge that you have read and understood this Privacy Policy.

If you do not agree with this Privacy Policy, please discontinue use of the Services. We may provide supplementary privacy notices for region-specific products, promotions, or legal obligations, and those notices should be read together with this policy.

This Privacy Policy applies to information processed in connection with all SG Gold digital channels, including but not limited to account onboarding, identity verification, bullion purchase and sale workflows, delivery scheduling, scheme enrollment, referral and rewards programs, payment reconciliation, support interactions, security reviews, and fraud prevention systems.

This policy applies to current, former, and prospective users, and may also apply to visitors who interact with our support forms, marketing pages, and communications channels.

We collect information directly from you, automatically through your device and usage of our Services, from trusted third parties, and from lawful public sources where relevant and permitted.

We process personal information only where we have a legal basis and a legitimate business need. Primary purposes include identity verification, account management, transaction execution, legal compliance, customer service, fraud prevention, security hardening, and service improvement.

We also use data for audit trails, regulatory reporting, analytics, product testing, issue diagnostics, and communications regarding account activity, security alerts, policy updates, and essential service notices.

Depending on jurisdiction, we rely on one or more legal bases such as contractual necessity, legal obligation, legitimate interests, consent, and protection of vital interests. Where consent is required, you may withdraw it at any time, subject to lawful processing carried out before withdrawal.

Where processing is necessary to comply with financial regulations, anti-money laundering rules, tax requirements, fraud control, or law enforcement obligations, we may process and retain data even if you close your account.

Our web and app properties may use cookies, local storage, pixels, SDK instrumentation, and similar technologies for authentication, session continuity, fraud defense, performance monitoring, diagnostics, and analytics.

You can manage browser cookie settings and certain in-app permissions. Disabling some technologies may reduce availability of important account and security functions.

We do not sell personal information in the ordinary commercial sense. We disclose data only where necessary to deliver Services, satisfy legal obligations, maintain security, and support core operations.

Your information may be processed in countries other than your own. Where cross-border transfers occur, we implement safeguards such as contractual protections, access controls, data minimization, encryption, and transfer impact assessments where applicable.

By using the Services, you acknowledge that your information may be transferred and processed under systems and controls that are designed to maintain comparable levels of protection.

We retain personal information for as long as necessary to provide Services, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and support security and anti-fraud functions.

Retention periods depend on data category, account status, transaction history, legal requirements, and regulatory standards. When retention is no longer required, we delete, anonymize, or securely archive information in accordance with applicable rules.

We maintain layered administrative, technical, and physical controls designed to protect confidentiality, integrity, and availability of data. Controls may include encryption in transit, encryption at rest, tokenization, least-privilege access, monitoring, logging, anomaly detection, vulnerability management, incident response procedures, and role-based access governance.

No method of transmission or storage is absolutely secure. You are responsible for maintaining the confidentiality of account credentials, enabling device-level security, and promptly notifying us of suspected unauthorized activity.

Depending on your location, you may have rights including access, correction, deletion, portability, objection, restriction, and withdrawal of consent. You may also have rights related to automated decision-making and complaint submission to supervisory authorities.

We may need to verify identity before processing requests. Some rights may be limited where data retention or processing is legally required for security, compliance, anti-fraud, or contractual obligations.

Our Services are not directed to minors and are intended only for users of legal age to enter financial transactions under applicable law. We do not knowingly collect personal information from children. If we become aware of unauthorized collection, we will take appropriate steps to delete or restrict such information.

Our Services may include links to third-party websites, payment experiences, and tools that are not operated by SG Gold. We are not responsible for the content, security, or privacy practices of third parties. You should review applicable third-party privacy notices before sharing information.

We may send account-related communications, educational content, and promotional messages where permitted. You can manage marketing preferences through available settings or unsubscribe links. Transactional and security notifications are typically mandatory for account safety and service continuity.

We use rule-based and statistical systems to identify suspicious patterns, reduce abuse, and protect users. This may include velocity checks, behavioral signals, geolocation indicators, device fingerprints, and transactional anomaly scoring.

Automated systems may contribute to decisions such as temporary risk holds, verification escalation, or additional review requirements. Where required by law, we provide mechanisms to request review.

We maintain procedures to detect, investigate, contain, and remediate security incidents. Where legally required, we may provide notice to users, regulators, and other stakeholders. Incident records may be retained for legal and operational purposes.

You agree to provide accurate and current information and to update your account when details change. Inaccurate information may lead to account restrictions, delayed transactions, or compliance escalations.

You are responsible for safeguarding credentials, monitoring account activity, and reporting unauthorized use immediately.

Users in specific jurisdictions may receive supplemental notices describing region-specific rights and disclosures, including lawful basis details, rights exercise channels, and supervisory authority contacts. In the event of conflict between this policy and mandatory local law, local law controls.

We may revise this Privacy Policy periodically to reflect legal, technical, and business developments. Material changes may be communicated through in-app notices, website updates, email alerts, or other lawful means. Continued use of the Services after an effective date constitutes acceptance of the revised policy, to the extent permitted by law.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact SG Gold support using the official support channels available in the app or website. For legal and compliance inquiries, include sufficient detail to help us validate and process your request efficiently.

Effective Date: 20 March 2026

Last Updated: 20 March 2026