Arabic UAE

Privacy Policy

UPDATED AUGUST 2025

This is the Privacy Policy (“Policy”) of MANTRA Finance FZE (which shall hereinafter be called “MANTRA Finance”). You have been directed to this Policy because MANTRA Finance is collecting, using or disclosing your personal data. This Policy applies to all personal data that you may provide to MANTRA Finance and the personal data MANTRA Finance holds about you. By providing MANTRA Finance with your personal data or by accessing, using or viewing MANTRA Finance’s website (including app.mantra.finance (“website”)), applications, exchanges, wallets, platforms, software, products, services, and the functions or contents therein (including transmitting, caching, or storing of any such personal data) (collectively, “Sites”), you shall be deemed to have agreed to each and all the terms, conditions, and notices in this Policy. If you do not agree, please cease use of the Sites and do not provide any personal data to MANTRA Finance.

This Policy primarily addresses the requirements of applicable data protection laws in the United Arab Emirates, including the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and relevant free zone regulations. In line with these laws, we are committed to principles of data minimisation, accuracy, and purpose limitation in all our data processing activities. MANTRA Finance FZE is also committed to adhering to other critical regulatory requirements that inform its data handling and record retention practices, including those stipulated under the UAE Federal Decree-Law No. (20) of 2018 on Anti-Money Laundering and Combating the Financing of Terrorism and Financing of Illegal Organisations, along with its implementing regulations such as Cabinet Decision No. (10) of 2019, all as amended from time to time.

Additionally, for individuals in the European Union, this Policy complies with the EU General Data Protection Regulation 2016/679 (the “GDPR”), and it has been designed to align with similar personal data protection principles adopted by other foreign government agencies.

1. What personal data is collected

For the purposes outlined in Clause 2 below, we may collect and process the following information about you when you visit the Sites or use any of our products and services:

(A) Data collected directly from you

This may be done through the Sites, use of our products and services, over the phone, email, or in person when you meet our staff or representative, when you report any problem(s) to us or request any support from us, or when you complete any survey or questionnaire that we send to you. Information that you provide us may include but is not limited to: (i) your name, employment information, contact information including your (first and last) name, (billing and/or delivery) address, birthdate, email address and telephone number. We need your email address and telephone number so that we may contact you if we have questions or information for you regarding your order or the service that we are providing or will provide to you; (ii) other financial information required to be able to provide you with the products and services, such as credit card information, bank account information, and other personal description necessary to facilitate the same; (iii) if you have an account with us, the preferences and interests stored in such profile or account; and (iv) if you have contacted us, the details of the contact and the contact history. ‍

(B) Data collected by automated means

Various technologies may be used on our Sites and/or products and services. Such technologies may lead to data being collected automatically by us. Such data may include but is not limited to: (i) technical information, including the Internet protocol (IP) address used to connect your computer to the Internet and your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; (ii) information about your visit, including the full Uniform Resource Locators (URLs), clickstream to, through and from the Sites (including date and time), products and services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs); and (iii) methods used to browse away from the page, and any phone number used to call our customer service number. ‍

(C) Data collected from third parties

We work with third parties and we may receive information about you from them, for example: (i) business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers and search information

2. Uses made of the information

2.1. MANTRA Finance may use your personal data for the following purposes:

  • providing, improving and developing the Sites and our products and services;

  • researching, designing and launching new features or products and services;

  • presenting content and information in our Sites in the most effective manner for you and for the device you use;

  • providing you with alerts, updates, materials or information about our services or other types of information that you requested or signed up to;

  • enforcing obligations owed to us such as collecting owed payments in any part of the world;

  • responding or taking part in any claims, actions or legal proceedings (including but not limited to drafting and reviewing documents, transaction documentation, seeking legal advice, and facilitating dispute resolution) and/or protecting and enforcing our contractual and legal rights and obligations;

  • complying with legal and regulatory obligations and requirements such as anti-money laundering laws across jurisdictions;

  • accounting, risk management, compliance and record keeping purposes;

  • staff training;

  • communicating with you and responding to your issues, questions, requests or feedback, purposes directly related or incidental to the above;

  • if you have consented, for the purposes of marketing products and services offered on our Sites; and

  • matching any personal data held which relates to you for any of the purposes listed herein.

2.2. When using your personal data to contact you for the above purposes, MANTRA Finance may contact you via regular mail, email, SMS, telephone or any other electronic means.

2.3. If MANTRA Finance needs to use your personal data for any other purposes, MANTRA Finance will notify you and obtain your consent beforehand. You will be given the opportunity to withhold or withdraw your consent for the use of your personal data for these other purposes.

3. Disclosure of your information

3.1. MANTRA Finance will not sell your personal data to third parties.

3.2. MANTRA Finance will keep your personal data confidential, but you agree MANTRA Finance may provide your personal data to:

  • any member of our company to allow us to provide the products and services which you have requested;

  • personnel, agents, advisers, auditors, contractors, financial institutions, and service providers in connection with our operations or provision of the products and services (for example, staff engaged in the fulfillment of your order, the processing of your payment and the provision of support services);

  • our overseas offices, affiliates, business partners and counterparts (on a need-to-know basis only);

  • persons or entities under a duty of confidentiality to us;

  • persons or entities to whom MANTRA Finance are required to make disclosure under applicable laws and regulations in any part of the world;

  • actual or proposed transferees of our operations (or a substantial part thereof) in any part of the world;

  • third parties where you have provided us consent and in the situations expressly set out in this Policy; and

  • our strategic partners and business associates if you have consented to receiving marketing information from us.

3.3. You fully understand and consent that MANTRA Finance may transfer your personal data to the jurisdictions in which MANTRA Finance operates for the purposes set out in this paragraph 3. When transferring your personal data, MANTRA Finance will protect your personal data to a standard comparable to the protection accorded to your personal data under the GDPR by ensuring that the recipient is either in a jurisdiction which has comparable data protection laws, or is contractually bound to protect your personal data.

4. Storage and Retention of your information

4.1 MANTRA Finance only retains personal data for so long as it is necessary for the purposes for which it was collected (as outlined in Clause 2 of this Policy) and to comply with MANTRA Finance’s extensive legal and regulatory obligations, particularly those applicable to MANTRA Finance as a Virtual Asset Service Provider (VASP).

In accordance with regulatory requirements applicable to VASPs, including those set forth in VARA's Compliance and Risk Management Rulebook, books and records related to MANTRA Finance’s VASP activities—which include, but are not limited to, audit trails of all transactions, client identification and due diligence information (KYC, CDD, EDD), ongoing monitoring records, business correspondence, payment instructions, details of accounts or VA Wallets, and communications related to client complaints or investigations—will generally be retained for a minimum period of eight (8) years. This period typically commences from the date of the completion of a transaction, the termination of the business relationship, or the closing of an account. These records, whether electronic or physical, will be maintained in a manner sufficient to permit the reconstruction of individual transactions and to demonstrate compliance with all applicable laws and regulatory requirements.

Please note that certain records which may relate to the national security of the UAE may be retained by MANTRA Finance for an indefinite period as required by law. Other specific legal requirements, such as those pertaining to anti-money laundering (AML) reporting or specific directives from the Dubai World Trade Centre Authority, may also dictate longer retention periods for certain types of information, or establish minimums that are met or exceeded by MANTRA Finance’s general 8-year retention policy for VASP records. For example, documents related to suspicious transaction reports (STRs) or ongoing investigations may need to be kept for longer periods as specified by relevant laws or until the conclusion of legal proceedings.

MANTRA Finance will cease to retain your personal data, or remove the means by which the data can be associated with you (such as by anonymization), as soon as it is reasonable to assume that its retention no longer serves the original purpose for which it was collected and is no longer necessary to meet these stated legal, regulatory, or essential business purposes after all applicable minimum retention periods have been fulfilled.

4.2 MANTRA Finance may store and process all or part of your personal and transactional information, including certain payment information, such as your encrypted bank account and/or routing numbers wherever in the world where our facilities or our service providers are located. MANTRA Finance protects your personal information by maintaining physical, electronic, and procedural safeguards in compliance with the applicable laws and regulations.

5. Use of cookies

5.1. Our website uses cookies to distinguish you from other users of our websites. This helps us to provide you with a good experience when you browse our websites and also allows us to improve our websites.

5.2. A cookie is a small file of letters and numbers that MANTRA Finance stores on your browser or the hard drive of your computer if you agree to the use of cookies. Cookies contain information that is transferred to your computer’s hard drive.

5.3. MANTRA Finance uses persistent cookies and session cookies. A persistent cookie stays in your browser and will be read by us when you return to our websites or a partner site that uses our services. Session cookies only last for as long as the session (usually the current visit to a website or a browser session).  All web-browsers offer the option to refuse any cookie, and if you refuse our cookie then MANTRA Finance does not gather any information on that visitor.

5.4. MANTRA Finance use the following cookies:

  • Strictly necessary cookies

    These are cookies that are required for the operation of our websites. They include, for example, cookies that enable you to log into secure areas of our websites, use a shopping cart or make use of e-billing services.

  • Analytical/performance cookies

    They allow us to recognize and count the number of visitors and to see how visitors move around our websites when they are using it. This helps us to improve the way our websites work, for example, by ensuring that users are finding what they are looking for easily.

  • Functionality cookies

    These are used to recognize you when you return to our websites. This enables us to personalize our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

  • Targeting cookies

    These cookies record your visit to our websites, the pages you have visited and the links you have followed. MANTRA Finance will use this information to make our websites and the information displayed on it more relevant to your interests.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you do so, you may not be able to access all or parts of our websites.  MANTRA Finance may use third-party web services on our websites.

The service providers that administer these services use technologies such as cookies (which are likely to be analytical/performance cookies or targeting cookies), web server logs and web beacons to help us analyze how visitors use our websites and make the information displayed on it more relevant to your interests. The information collected through these means (including IP addresses) is disclosed to these service providers. These analytics services may use the data collected to contextualize and personalize the marketing materials of their own advertising network.

6. Third-party sites

Our Sites or our communications with you may from time to time contain links to third-party websites over which MANTRA Finance have no control. If you follow a link to any of these websites, please note that they have their own practices and policies. MANTRA Finance encourages you to read the privacy policies or statements of these websites and understand your rights. MANTRA Finance accepts no responsibility or liability for any practices of third-party websites.

7. Security

7.1. All information you provide to us is stored on our secure servers.

7.2. Where MANTRA Finance has given you (or where you have chosen) a password that enables you to access certain parts of the Sites, you are responsible for keeping this password confidential. MANTRA Finance asks you not to share a password with anyone.

7.3. MANTRA Finance restricts access to personal information to our employees, service providers, agents, representatives and contractors on a strictly need-to-know basis and ensures that those persons are subject to contractual confidentiality obligations.

7.4. MANTRA Finance reviews our information collection, storage and processing practices from time to time to guard against unauthorized access, processing or use.

7.5. Please note that the transmission of information via the Internet is not completely secure. Although MANTRA Finance will do our best to protect your personal data, MANTRA Finance cannot guarantee the security of your data transmitted to the Sites. Any transmission is at your own risk. MANTRA Finance recommends that you change your passwords often, use a combination of letters and numbers, and ensure that you use a secure browser.

7.7. If applicable, you undertake to keep your username and password secure and confidential and shall not disclose or permit it to be disclosed to any unauthorized person, and to inform us as soon as reasonably practicable if you know or suspect that someone else knows your username and password or believe the confidentiality of your username and password has been lost, stolen or compromised in any way or that actual or possible unauthorized transactions have taken place. MANTRA Finance are not liable for any damages resulting from any security breaches, on unauthorized and/or fraudulent use of your username and password.

7.8 In the event of a personal data incident that requires notification, MANTRA Finance will adhere to all applicable legal and regulatory requirements for notifying relevant authorities, including VARA where applicable, and affected data subjects in accordance with stipulated timelines.

8. GDPR

8.1 For individuals who are located in the European Economic Area, United Kingdom or Switzerland at the time their personal data is collected, MANTRA Finance rely on legal bases for processing your information under Article 6 of the GDPR. MANTRA Finance generally only process your data where MANTRA Finance are legally required to, where processing is necessary to perform any contracts MANTRA Financeentered with you (or to take steps at your request prior to entering into a contract with you), for our legitimate interests to operate our business or to protect our or your, property, rights, or safety, or where MANTRA Finance have obtained your consent to do so.

8.2 When processing your personal data as set out in this Policy, as MANTRA Finance are located in various countries throughout the world, it will have been transferred outside the EU. However, if your personal data is originally collected from within the EU, it will only be transferred on one of the following bases: 

  • the country that MANTRA Finance sends the personal data to is approved by the European Commission as providing an adequate level of protection for personal data;
    or 

  • you have explicitly consented to the same. To find out more about international transfers by us of your personal data and the countries concerned, please contact our Data Protection Officer.

9. Your rights

9.1 If you have any questions, comments or requests regarding the processing of your personal data or about this Policy, if you do not accept the Policy, if you wish to withdraw any consent you have given us at any time, or if you wish to update or have access to your personal data, please contact us at:

Email: [email protected]

Attention it to the “Data Privacy Officer”‍

9.2 Your rights under UAE Data Protection laws:

  • To obtain access to, and copies of, the personal data that MANTRA Finance hold about you;

  • To require that MANTRA Finance cease processing your personal data if the processing is causing you damage or distress;

  • To require us not to send you marketing communications;

  • To require us to erase your personal data;

  • To require us to restrict our data processing activities;

  • To receive from us the personal data MANTRA Finance hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller; and

  • To require us to correct the personal data MANTRA Finance holds about you if it is incorrect.

  • To object to decisions based solely on automated processing, including profiling, which produce legal effects or significantly affect you, and to request human intervention.

If your personal data is processed by MANTRA Finance under the UAE's Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you are entitled to certain rights and specific information regarding the processing of your data as stipulated by the PDPL, in addition to the rights generally available. You also have the right to lodge a complaint with the UAE Data Office (the relevant data protection authority in the UAE) if you believe MANTRA Finance's processing of your personal data infringes the PDPL. For requests under PDPL or to exercise your rights, please contact our Data Protection Officer."

Please note that the rights listed above, including those under the PDPL and GDPR, are not absolute, and MANTRA Finance may be entitled to refuse requests where exceptions apply. If you are located in Europe, you may refer to the EU regulator in your location for more information on your GDPR rights. Individuals in the UAE may refer to the UAE Data Office for more information on their PDPL rights. If you have any questions about how MANTRA Finance uses your personal data, or you wish to exercise any of your rights, please contact our Data Protection Officer.

9.3. Any request under Clause 10.2 may be subject to a small administrative fee to meet our cost in processing your request.

9.4 All requests for correction or for access to your personal data must be in writing. MANTRA Finance will endeavor to respond to your request within 30 days, and if that is not possible, MANTRA Finance will inform you of the time by which MANTRA Finance will do so.

9.5 MANTRA Finance may be prevented by law from complying with any request that you may make. MANTRA Finance may also decline any request that you may make if the law permits us to do so.

9.6 In many circumstances, MANTRA Finance needs to use your personal data in order for us to provide you with products and services which you require or have requested. If you do not provide us with the required personal data, or if you do not accept the Policy or withdraw your consent to our use and/or disclosure of your personal data for these purposes, it may not be possible for us to continue to serve you or provide you with the products and services that you require or have requested.

10. Children's Privacy

10.1 Our Sites and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact our Data Protection Officer so we may delete the information.

11. Changes to your policy

MANTRA Finance may amend this Policy from time to time by posting the updated policy on our Sites. By continuing to use our Sites and products and services after the changes come into effect means that you agree to be bound by the revised policy.

12. Languages

In case of discrepancies between the English and other language versions of this policy, the English version shall prevail.‍

13. General Disclaimer and Limitation of Liability

13.1 To the maximum extent permitted by law, MANTRA Finance shall not be liable in any event for any special, exemplary, punitive, indirect, incidental or consequential damages of any kind or for any loss of reputation or goodwill, whether based in contract, tort (including negligence), equity, strict liability, statute or otherwise, suffered as a result of unauthorized or unintended use, access or disclosure of your personal data.

13.2 Our total aggregate liability to you (if any) for any individual claim or series of connected claims for losses, costs, liabilities or expenses which you may suffer arising out of, or in connection with, any breach of this Policy by MANTRA Finance shall be limited to a maximum aggregate value of the value of the Digital Currency Wallet at the time of the relevant. Where MANTRA Finance considers a specific claim relating to a specific transaction this sum shall be further limited to the purchase / sale amount (as relevant) of the transaction in dispute. MANTRA Finance shall not be liable where the said liability has arisen from your negligence, misconduct or fraud.