Privacy Policy

How Bablos processes, stores, and protects users’ personal data.

Bablos Privacy Policy

This Privacy Policy describes how Bablos processes and protects users’ personal data.

We aim to process only the information necessary to operate the service, process exchange requests, maintain security, and comply with applicable legal requirements.

1. General Provisions

Personal data is processed in accordance with applicable data protection laws.

Bablos takes reasonable legal, organizational, and technical measures to protect personal data against unauthorized or accidental access, alteration, blocking, copying, disclosure, distribution, or other unlawful actions.

Personal data is not disclosed to third parties without a lawful basis or the user’s consent, unless otherwise required by applicable law.

2. Personal Data We May Process

Depending on how the service is used, Bablos may process:

  • first and last name;

  • email address;

  • phone number;

  • account information;

  • payment details;

  • digital wallet addresses and transaction information;

  • IP address;

  • browser, device, and operating system information;

  • technical activity logs;

  • information provided when contacting support;

  • documents and information provided during AML/KYC verification;

  • other information necessary to process an exchange request or comply with legal requirements.

Bablos does not request information that is unnecessary for the relevant processing purpose.

3. Purposes of Processing

Personal data may be used for:

  • account registration and administration;

  • creation and processing of exchange requests;

  • communication with users;

  • customer support;

  • maintaining service security;

  • fraud prevention;

  • AML/KYC verification;

  • compliance with legal obligations;

  • technical logging and incident investigation;

  • improving the website and user interface.

Personal data is not used for purposes incompatible with the purpose for which it was originally collected.

4. Legal Grounds for Processing

Personal data may be processed:

  • with the user’s consent;

  • for entering into or performing an agreement with the user;

  • to comply with legal obligations;

  • in other cases permitted by applicable law.

Where consent is required, it is obtained separately from other documents or confirmations where required by law.

Users may withdraw consent in accordance with applicable legal requirements.

5. Data Storage

Personal data is retained only for as long as necessary for the purposes of processing, compliance with legal requirements, and mandatory retention periods.

Where applicable law requires certain personal data to be initially recorded, systematized, accumulated, stored, updated, or retrieved using databases located in the Russian Federation, Bablos complies with those requirements.

Once the purpose of processing has been achieved, personal data is deleted, anonymized, or retained only where there is another lawful basis for continued storage.

6. Disclosure to Third Parties

Personal data may be disclosed to third parties only to the extent necessary to operate the service or comply with legal requirements.

Such recipients may include:

  • banks and payment service providers;

  • technical infrastructure providers;

  • security and AML screening providers;

  • contractors processing data on behalf of Bablos;

  • public authorities where disclosure is required by law.

Bablos does not sell users’ personal data.

7. Cross-Border Data Transfers

Where processing requires the transfer of personal data outside the Russian Federation, such transfers are carried out only where legally permitted and in compliance with applicable data protection requirements.

8. Cookies and Technical Data

The website may use cookies and similar technologies to:

  • remember user preferences;

  • maintain authorization and session functionality;

  • support security;

  • ensure correct operation of the interface;

  • analyze technical errors and performance.

Some cookies are necessary for the website to function properly and cannot be disabled without affecting functionality.

Optional cookies, where used, are applied in accordance with the user’s settings and applicable legal requirements.

9. Security

Bablos uses reasonable technical and organizational safeguards, including access controls, secure connections, and other measures appropriate to the nature of the data being processed.

However, no method of data transmission or storage can guarantee absolute protection against every possible threat.

10. User Rights

Users may have the right to:

  • obtain information about the processing of their personal data;

  • request correction of inaccurate data;

  • request restriction or deletion of data where legally permitted;

  • withdraw consent to processing;

  • contact Bablos with questions regarding the processing of personal data.

Requests are handled within the time limits and procedures established by applicable law.

11. Marketing Communications

If Bablos uses personal data for direct marketing or promotional communications, such messages are sent only where the required consent has been obtained.

Users may opt out of such communications at any time.

12. Biometric Data

Bablos does not use biometric personal data for identity verification unless such functionality is separately introduced and implemented in accordance with applicable legal requirements.

If biometric identification is introduced, such data will be processed only where there is an appropriate legal basis and, where required, valid consent.

13. Changes to This Policy

Bablos may update this Privacy Policy in response to changes in law, service functionality, or data processing practices.

The current version of this Policy is always published on the website.

14. Contact Information

For questions regarding personal data processing, users may contact Bablos through the contact details provided in the “Contacts” section of the website.