Privacy Policy
1. Who We Are
Wasl Finance (“Wasl”, “we”, “us”, “our”) operates the platform accessible at wasl.finance. We provide a service that allows users to convert Libyan Visa debit card payments into USDT stablecoin delivered to a user-provided cryptocurrency wallet address.
Wasl Finance is in the process of registration as a company in the UAE (RAK DAO Free Zone). For privacy inquiries, contact us at: privacy@wasl.finance
2. Information We Collect
Information you provide directly
- Full legal name
- Email address
- Phone number
- Date of birth
- Nationality and country of residence
- Government-issued identity documents (Libyan national ID, passport)
- Selfie or biometric verification image
- Payment card details (card number, expiry, CVV — processed securely and never stored on our servers)
- Cryptocurrency wallet address (TRC-20)
- Source of funds information (for higher transaction tiers)
Information collected automatically
- IP address and approximate location
- Device type, browser, and operating system
- Pages visited and time spent on our platform
- Transaction history and amounts
- Session data and cookies
Information from third parties
- Identity verification results from our KYC provider (Sumsub)
- Transaction risk scores from our fraud detection systems
- Blockchain transaction data associated with wallet addresses you provide
3. How We Use Your Information
We use your information to:
- Verify your identity and comply with AML/KYC regulations
- Process your card-to-USDT conversion transactions
- Deliver USDT to your provided wallet address
- Detect and prevent fraud, money laundering, and other illegal activity
- Screen against OFAC, UN, and EU sanctions lists
- Communicate with you about your transactions and account
- Comply with legal and regulatory obligations
- Improve our platform and user experience
- Respond to your support requests
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract performance: To execute the conversion service you have requested
- Legal obligation: To comply with AML, KYC, sanctions screening, and financial regulations
- Legitimate interests: To prevent fraud and protect our platform and users
- Consent: Where you have explicitly provided consent for specific processing
5. Who We Share Your Information With
Service providers necessary to operate our platform:
- Sumsub — identity verification and KYC/AML compliance
- Our card payment processor — to charge your Libyan Visa debit card
- B2BinPay — to execute USDT payouts
- Cloud infrastructure providers — for secure data storage
Regulatory and legal authorities:
- Financial regulators as required by applicable law
- Law enforcement agencies when legally required
- OFAC and sanctions compliance screening services
We do not share your data with advertisers, marketing companies, data brokers, or any party not necessary for the operation of our service.
6. Data Retention
We retain your personal data for:
- Transaction records: 5 years from the date of transaction (regulatory requirement)
- KYC documents: 5 years from the end of our relationship with you
- Account data: Duration of your account plus 5 years
- Cookies and session data: As described in our Cookie Policy below
We may retain data longer where required by applicable law or regulatory obligation.
7. International Data Transfers
Your data may be processed in countries outside your country of residence, including the UAE and countries where our service providers operate. We ensure appropriate safeguards are in place for all international transfers in accordance with applicable data protection law.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (subject to our legal retention obligations)
- Restrict processing of your data in certain circumstances
- Object to processing based on legitimate interests
- Portability — receive your data in a machine-readable format
To exercise any of these rights, contact us at privacy@wasl.finance. Note that some rights may be limited where we are required to retain data for regulatory compliance.
9. Data Security
We implement industry-standard security measures including:
- TLS/SSL encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- PCI-DSS compliant card processing (we never store raw card numbers)
- Access controls and multi-factor authentication for internal systems
- Regular security audits and vulnerability assessments
No system is completely secure. If you believe your account has been compromised, contact us immediately at security@wasl.finance.
10. Cookies
We use essential cookies to operate our platform (session management, security). We do not use advertising or tracking cookies. You can disable cookies in your browser settings but this may affect platform functionality.
11. Children
Our service is not available to anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has submitted data to us, contact privacy@wasl.finance immediately.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or prominent notice on our platform. Continued use of our service after changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions or to exercise your rights:
Email: privacy@wasl.finance
Website: wasl.finance
Wasl Finance
RAK DAO Free Zone, UAE (Registration Pending)