Galaxia Predictions Market Infrastructure Network

1. Introduction

This Privacy Policy explains how Galaxia Predictions Market Infrastructure Network (GPMIN) collects, uses, stores, and protects your personal data in compliance with GDPR, CCPA, and other applicable data protection laws.

2. Data Controller

Galaxia Network is the data controller for personal data processed through GPMIN. Contact: privacy@galaxia.network

3. Data We Collect

3.1 Identity Information

Name, date of birth, nationality
Government-issued ID documents (passport, national ID, driver's license)
Proof of address documents
Photographs for identity verification

3.2 Financial Information

Wallet addresses and transaction history
Source of funds information
Bank account details (if applicable)
Transaction amounts and timestamps

3.3 Technical Information

IP address and geolocation data
Device information and browser type
Usage analytics and cookies
Security logs and access records

4. Legal Basis for Processing

Legal Obligation: AML/KYC compliance, tax reporting, regulatory requirements
Contract Performance: Providing prediction market services
Legitimate Interest: Fraud prevention, security, service improvement
Consent: Marketing communications (where applicable)

5. How We Use Your Data

KYC/AML verification and ongoing monitoring
Transaction processing and compliance checks
Travel Rule compliance for qualifying transactions
Sanctions screening and PEP checks
Fraud prevention and security
Regulatory reporting (SARs, CTRs, tax reports)
Service improvement and analytics
Customer support and complaint handling

6. Data Sharing

6.1 Regulatory Authorities

We may share data with regulatory authorities, law enforcement, and financial intelligence units when required by law or for compliance purposes (e.g., SAR filings, tax reporting).

6.2 Service Providers

We share data with trusted service providers for KYC verification, sanctions screening, cloud hosting, and analytics. All providers are bound by strict confidentiality agreements.

6.3 VASP-to-VASP Communication

For Travel Rule compliance, we share originator/beneficiary information with other Virtual Asset Service Providers (VASPs) when required by law.

7. Data Retention

Transaction Records: Minimum 5 years (AML requirement)
KYC Documents: 5 years after account closure
Compliance Records: 7 years (regulatory requirement)
Audit Logs: 7 years
Marketing Data: Until consent withdrawn

Data may be retained longer if required by legal hold or ongoing investigation.

8. Your Rights (GDPR)

Right of Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion (subject to legal holds)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for marketing

To exercise these rights, contact: privacy@galaxia.network

9. Data Security

End-to-end encryption for sensitive communications
Encryption at rest for all stored data
TLS 1.3+ for data in transit
Multi-factor authentication for account access
Regular security audits and penetration testing
Role-based access controls
Comprehensive audit logging

10. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure adequate safeguards through:

Standard Contractual Clauses (SCCs) for EU data
Adequacy decisions where applicable
Binding Corporate Rules for intra-group transfers

11. Breach Notification

In the event of a data breach affecting your personal data, we will:

Notify relevant supervisory authority within 72 hours (GDPR requirement)
Notify affected users without undue delay if high risk
Provide details of the breach and mitigation measures

12. Cookies and Tracking

We use cookies for essential functionality, analytics, and security. You can manage cookie preferences through your browser settings. See our Cookie Policy for details.

13. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect data from children.

14. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be notified to users via email or platform notification at least 30 days in advance.

15. Contact

For privacy inquiries, data subject requests, or complaints:

Email: privacy@galaxia.network
Data Protection Officer: dpo@galaxia.network
EU Representative: eu-rep@galaxia.network

Privacy Policy

Last Updated: December 6, 2025