1. Overview
KMK Gold ("the Platform", "we", "our", or "us") is committed to protecting the privacy, security, and integrity of your personal and financial information. This Privacy Policy details how we collect, store, handle, and safeguard your data when using the KMK Gold mobile application, trading services, and associated web interfaces, in full compliance with applicable precious metals, anti-money laundering, and data privacy regulations.
2. Information We Collect
To provide precious metals trading (physical gold and silver), vault storage, balance administration, and fulfillment operations, we collect:
- Identity & KYC Data: Full legal name, government-issued national identification or passport information (required for statutory Anti-Money Laundering & Know-Your-Customer compliance), verified telephone number, and email address.
- Financial & Transactional Records: Buy/sell order histories, physical bullion serial allocations in vaults, bank accounts designated for fiat deposits and withdrawals, and transaction transfer receipts.
- Technical & Diagnostic Data: IP address, operating system, unique device identifiers, and connection security telemetry.
- Local Biometric Authentication: Managed exclusively on-device via your hardware Secure Enclave or Android Keystore (Touch ID / Face ID / Fingerprint). Biometric raw data is never transmitted to or stored on our servers.
3. How We Use Your Information
We process personal data strictly for legitimate operational and legal purposes, including:
- Provisioning and administering your trading account, digital wallet, and vault holdings.
- Executing and settling precious metal buy, sell, deposit, and physical withdrawal orders.
- Complying with Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and financial statutory reporting mandates.
- Dispatching critical security notifications, verification one-time passwords (OTPs), and order receipts.
- Detecting, preventing, and mitigating fraudulent activities, security incidents, or technical faults.
4. Data Security & Ledger Integrity
We implement enterprise-grade security protocols designed for financial and precious metals custodianship:
- Cryptographic Standards: All transit communication is encrypted using TLS 1.3 / HTTPS. All confidential data at rest is protected with AES-256 encryption.
- Immutable Double-Entry Ledger: All balance movements and bullion allocations are enforced through an immutable, double-entry financial ledger preventing arbitrary balance alterations.
- Strict Principle of Least Privilege: Operational access to databases and KYC documents is compartmentalized and restricted to vetted compliance and security personnel.
5. Third-Party Disclosures
Data is shared solely on a need-to-know basis with:
- Licensed Banking & Payment Partners: To settle fiat deposits, bank wires, and withdrawal requests.
- High-Security Custody & Vault Operators: Solely for verifying client identity upon physical bullion pickup with one-time verification tokens.
- Regulatory & Law Enforcement Authorities: When strictly mandated by valid legal process, judicial order, or statutory regulations.
6. User Rights, Account & Data Deletion
In adherence to Google Play Store Policies, Apple App Store Review Guidelines (Guideline 5.1.1(v)), and data protection statutes, users retain fundamental rights over their personal data:
- Access & Portability: You may request an export of your account balance, transaction ledger, and bullion custody receipts.
- Rectification: You may update outdated contact or personal information through account settings or customer support.
Account & Data Deletion Procedure
Users may request the closure of their account and the erasure of associated personal data at any time through either of the following mechanisms:
- In-App Self-Service: In the KMK Gold mobile application, navigate to Settings > Security & Account > Delete Account and confirm the prompt.
- Email Request: Send an account deletion request from your registered email address to privacy@kmkgold.com specifying your username and registered phone number.
Statutory Retention Notice: Due to mandatory Anti-Money Laundering (AML) and financial record-keeping laws, transactional history and audit ledgers must be retained for the minimum statutory period required by financial authorities. Upon processing your request, all active access credentials, marketing profiles, and non-statutory data will be immediately and permanently purged.
7. Cookies & Session Storage
We use session cookies and local storage exclusively to maintain authenticated sessions and store your interface preferences (such as language selection). You may configure your browser to reject cookies, though certain security-critical functions may be impacted.
8. Contact Information
For inquiries regarding this policy, to exercise your privacy rights, or to submit a data inquiry, please contact our Data Protection team: