Privacy Policy - LVL Funding

1. Data Controller Identification

The commercial brand LVL Funding is operated by AUA MARKET SERVICES LTD, registered under number HE 487625, incorporated under the Companies Law, Cap. 113 of the Republic of Cyprus, with registered office at Neofytou Nikolaidi & Theodorou Kolokotroni, ONISIFORU CENTER, 2nd Floor, Agios Theodoros, 8011, Paphos, Cyprus. The company acts as Data Controller under Regulation (EU) 2016/679 (GDPR) and the Cyprus Data Protection Law 125(I)/2018. Privacy contact: team@lvlfunding.trade.

2. Scope of Application

This Policy applies to all users of the website lvlfunding.trade, challenge participants, funded traders, and any other users located in the European Union or any other jurisdiction where LVL Funding operates or provides services.

3. Data Collected

We collect the following categories of personal data:

• Identification Data: full name, date of birth, nationality, and KYC documents (passport copy, national ID, or tax number).
• Contact Data: e-mail address, telephone number, and postal address.
• Financial Data: payment records via credit/debit card or cryptocurrency, and transaction history.
• Operational Data: trading history on MetaTrader 5, IP logs, and device/session data.
• Monitoring Data: information collected for anti-fraud and AML/KYC compliance purposes.

4. Purposes of Processing

Personal data are processed for contractual execution and account management; enforcement of the Regulation and Trading Policies; compliance with legal obligations, including AML/KYC; fraud prevention and detection; payment processing; platform security and integrity; and user communications regarding account, services, and updates.

5. Legal Basis

• Performance of a Contract - Art. 6(1)(b) GDPR: necessary for the provision of contracted services.
• Legal Obligation - Art. 6(1)(c) GDPR: compliance with AML/KYC requirements and applicable law.
• Legitimate Interests - Art. 6(1)(f) GDPR: protection of the business model and fraud prevention.
• Consent - Art. 6(1)(a) GDPR: where applicable, in particular for marketing communications.

6. Data Sharing

Personal data may be shared, to the extent strictly necessary, with technology infrastructure and cloud service providers; MetaTrader 5 platform operators; anti-fraud and compliance partners; payment processors and partner financial institutions; associated brokers and prime brokers; and legal, regulatory, or tax authorities when required by law or court order.

7. International Data Transfers

As a company registered in the Republic of Cyprus - a Member State of the European Union - AUA MARKET SERVICES LTD ensures that any transfer of personal data to third countries is carried out under standard contractual clauses approved by the European Commission, adequacy decisions, or other safeguards provided by the GDPR, guaranteeing a level of protection equivalent to that required within the European Union.

8. Audit and Payment Retention

LVL Funding may audit accounts, analyze technical logs, and retain payments under investigation where there is reasonable suspicion of a breach of the Regulation, fraud, prohibited arbitrage, or operational manipulation, in accordance with the principles of proportionality and necessity under the GDPR.

9. Automated Decisions

Automated systems may be used to detect trading irregularities and anomalies, which may result in account suspension, account closure, or payment retention. Data subjects have the right to request human review of any automated decision that significantly affects them, pursuant to Art. 22 GDPR.

10. Data Retention

Personal data will be retained for the period strictly necessary to fulfil the purposes for which they were collected, for the duration of the contractual relationship, and for the periods required by applicable law (generally 5 to 7 years after termination) or as long as necessary for legal defense.

11. Data Subject Rights

Under the GDPR, data subjects may exercise the following rights by contacting team@lvlfunding.trade:

• Access, rectification, erasure (right to be forgotten), data portability, restriction of processing, objection, and withdrawal of consent.
• Right to lodge a complaint with the competent supervisory authority in Cyprus (Office of the Commissioner for Personal Data Protection - ODPC).

12. Information Security

AUA MARKET SERVICES LTD implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure, including encryption in transit and at rest, role-based access control, continuous security monitoring, and incident response procedures.

13. Policy Amendments

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes. Any amendments will be published on lvlfunding.trade with the updated date. For materially significant changes, users will be notified by e-mail or via a prominent notice on the platform.

AUA MARKET SERVICES LTD
HE 487625 - Republic of Cyprus
Neofytou Nikolaidi & Theodorou Kolokotroni, ONISIFORU CENTER, 2nd Floor
Agios Theodoros, 8011, Paphos, Cyprus
Email: team@lvlfunding.trade