Privacy Policy

This privacy statement explains how personal data is collected, used, disclosed, transferred, stored and otherwise processed in connection with the website and the services offered under the RD Funding brand. It applies to website visitors, registered users, clients, prospective clients, people who contact us, and anyone else whose personal data we process in connection with the website or the services. Please read it together with our Terms & Conditions and Cookie Policy.

The controller responsible for processing personal data in connection with the website and the services is RD Funding, Dubai South Free Zone, Dubai, United Arab Emirates — support@rdfunding.io. For the purposes of applicable data-protection law, including the GDPR where relevant, this controller determines the purposes and means of the processing.

In providing the services we use third-party and affiliated providers for technical infrastructure, software, back-office, marketing, payment processing and settlement, and related operational services. Depending on the operation, such providers act as processors on our instructions, as independent controllers for their own legal, regulatory, accounting, payment, fraud-prevention or claims purposes, or in other capacities required by law.

This may include first and last name; date of birth; residential address, billing address and country of residence; email address and telephone number; username, account and profile information; billing and payment information; communications with us, including support requests and complaints; information submitted in forms, surveys or promotions; KYC, identity-verification and compliance information and documents, particularly in connection with evaluations and challenge programmes; and anything else you provide voluntarily.

When you use the website or the services we may automatically collect your IP address; device identifiers; browser type and version; operating system; language and timezone settings; approximate geolocation derived from IP; referral source and campaign information; page views, clicks, session duration, navigation paths, scroll depth and feature usage; timestamps and login history; client-area activity and challenge-related usage data; simulated trading activity, trading logs and technical logs; and cookie and similar technology data.

We may receive personal data from payment processors and financial institutions; fraud-prevention and risk-monitoring providers; KYC and identity-verification providers; analytics, engagement and communication providers; affiliate and advertising partners; social-media platforms where you interact with us; customer-support and software providers; ByBit and trading-infrastructure providers; and legal, compliance or professional advisers.

We collect personal data directly from you when you register, book a challenge or evaluation, fill in forms, contact us or otherwise interact with us; automatically through cookies, tracking technologies, server logs and analytics tools; and from third parties where necessary to provide the services, verify identity, process payments, manage risk or improve the website and services.

Where applicable, including under the GDPR, we process personal data on one or more of the following legal bases: performance of a contract, steps taken at your request before a contract, compliance with legal obligations, legitimate interests, and consent.

To create and manage user accounts, authenticate users, maintain account settings and provide access to the client area and related features, including challenge and evaluation areas. Legal basis: performance of a contract or pre-contractual steps at your request.

To provide evaluation services, challenge access, customer support, simulated trading functionality — in particular via ByBit or comparable platforms — and related service features. Legal basis: performance of a contract.

To operate, maintain, secure, troubleshoot and support the website, the client area, the trading infrastructure and the simulated trading environment. Legal basis: performance of a contract and our legitimate interests in secure, reliable systems.

To process payments such as challenge fees, manage invoicing, administer settlements and profit distributions where applicable, detect payment abuse, handle disputes and chargebacks, and keep financial records. Legal basis: performance of a contract, legal obligations and our legitimate interests in fraud prevention and financial administration.

To perform identity verification, sanctions screening, anti-fraud controls, compliance checks, account monitoring and internal investigations — in particular to protect the integrity of the evaluations and detect prohibited trading practices. Legal basis: legal obligations and our legitimate interests in compliance and platform integrity.

To understand how users interact with the website and services, improve functionality, fix problems, analyse usage trends and develop new features. Legal basis: consent where required for non-essential cookies or trackers, otherwise our legitimate interests in improving and securing the services.

To send service updates such as challenge status and account information, respond to enquiries, send promotional communications where permitted, and manage campaigns and engagement. Legal basis: consent where required, otherwise our legitimate interests in promoting and improving the services.

To protect our systems, users, rights and business against abuse, prohibited trading practices, unauthorised access and other harmful conduct, and to establish, exercise or defend legal claims. Legal basis: our legitimate interests and, where applicable, legal obligations.

We use cookies and similar technologies to operate the website, improve performance, understand user behaviour, support communication and improve the experience. Third-party tools for analytics, session recording, product intelligence and engagement may collect page views; clicks and navigation paths; session duration; scroll depth; device and browser information; approximate geolocation; attribution and campaign data; and, where applicable, replay-like interaction data.

Non-essential cookies and similar technologies are activated only after your consent, where applicable law requires it. Consent preferences are managed through the cookie-consent mechanism on the website and can be withdrawn or changed at any time. Web push notifications are enabled only where you expressly agree and can be disabled through your browser or device settings. See the Cookie Policy for details.

We may share personal data, as necessary for the purposes described here, with cloud hosting and infrastructure providers; ByBit and trading-infrastructure providers; software and SaaS providers; customer-support and communication providers; analytics, session-recording and engagement providers; payment processors, financial institutions, settlement providers and collection agents; affiliated group companies where required to provide the services; KYC, identity-verification, fraud-prevention and compliance-screening providers; marketing, communication, affiliate and advertising providers; legal, accounting, tax, audit and compliance advisers; regulators, courts, law enforcement or other public bodies where disclosure is legally required or necessary to protect rights, property or safety; and prospective or actual acquirers, investors or lenders in connection with a corporate transaction, subject to appropriate confidentiality safeguards.

Because of the international nature of our business and the structure of our service providers, personal data may be transferred to, accessed from or processed in jurisdictions outside your country of residence, including the United Arab Emirates. Where applicable law requires it, we take measures to ensure international transfers are subject to appropriate safeguards — contractual measures such as standard contractual clauses, vendor due diligence, internal policies, restrictive access controls and recognised transfer mechanisms.

We retain personal data only for as long as necessary for the purposes described here. Account and contract data is generally kept for the duration of the relationship and a reasonable period after for compliance, record-keeping and claims purposes; payment and transaction data as long as required by accounting, tax, anti-fraud and legal obligations; KYC and compliance data as long as required by law or internal compliance requirements; support and communication records for service quality, dispute resolution and legal purposes; analytics and cookie data in line with applicable law, vendor configurations and our retention schedule; and marketing data until you opt out, withdraw consent or object. Where possible, data no longer needed is deleted, aggregated or anonymised.

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access — including access controls and authentication, role-based access restrictions, logging and system monitoring, encryption in transit and where appropriate at rest, vendor controls, internal policies and procedures, and business-continuity and incident-response practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, including the GDPR where relevant, you may have the right to request access to your personal data; request correction of inaccurate or incomplete data; request deletion in certain circumstances; request restriction of processing; object to processing based on legitimate interests, including direct marketing; withdraw consent at any time without affecting prior processing; request data portability; and lodge a complaint with a competent supervisory authority. Some rights are not absolute and may be limited where an exemption applies or continued processing is required by law, contract or compliance obligations. To exercise your rights, contact support@rdfunding.io — we may request information necessary to verify your identity first.

We do not intend to make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you, unless permitted by applicable law with appropriate safeguards. Certain automated tools may be used for fraud detection, security monitoring, platform integrity — such as detecting prohibited trading practices — and service optimisation, but material decisions are not based solely on automated processing unless legally permitted.

If you believe your personal data has been processed in breach of applicable law, please contact us first so we can address your concern. You may also have the right to complain to a competent data-protection or privacy supervisory authority in the jurisdiction relevant to your complaint.

The website or services may contain links to third-party websites, tools or services. We are not responsible for the privacy practices of such third parties and encourage you to review their privacy notices and terms.

The website and the services are not intended for anyone under 18 years of age, and we do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us personal data, contact us so we can take appropriate action.

We may amend or update this statement from time to time. Each updated version is made available on the website and takes effect on publication unless stated otherwise. We recommend reviewing it periodically.

RD Funding, Dubai South Free Zone, Dubai, United Arab Emirates. Email: support@rdfunding.io.