Privacy policy
This policy sets out what personal information Taman Yieldholm collects, the purposes of processing, the legal bases, retention periods, who your data is shared with, and your rights as a data subject. It is written in plain language so you can understand it without a lawyer.
Definitions
In this policy, "personal data" means any information identifying you directly or indirectly; "processing" covers collection, storage, use and disclosure; the "operator" is Taman Yieldholm as the data controller, and a "processor" is a party that processes data on our behalf under our instructions.
Personal data we collect
We collect the following categories: identification data (full name, email, phone number, country of residence); verification data (copies of identity documents, proof of address, liveness selfie results for KYC); transaction data (deposit, trading and withdrawal history); technical data (IP address, browser and device type, session logs); and the content of your communications with support (queries, complaints and our replies).
Usage data
When you browse the site we record visited pages, visit times and referrers in aggregate form to improve navigation and content. This data is kept apart from your identification profile except where it is needed for account security, for example recording the devices you normally use.
Cookies
We use functional cookies to keep you signed in and to remember your language choice, plus security cookies that protect forms from abuse. Marketing cookies are used only with your consent and can be refused without breaking the site's core functions. You can delete or block cookies in your browser settings at any time.
Operator and processors
Taman Yieldholm is the operator of your personal data. Processors include the cloud hosting provider storing data in secure data centres, the KYC provider running document and sanctions-list matching, the transactional email provider, and internal analytics tooling. All processors are bound by data-processing agreements that limit their use of data to our instructions.
Collection and use of information
Each category of data has a clear purpose: identification data to open and manage your account; verification data to meet KYC/AML obligations; transaction data to execute and record your trades; technical data to detect and prevent fraud; and communications to answer your queries and complaints. We never sell your personal data.
Legal bases for processing
Processing rests on: performance of a contract (providing the service you register for); compliance with the law (identity-verification and financial record-keeping duties); legitimate interests (platform security and fraud prevention); and consent (marketing communications), which you may withdraw at any time without affecting your account.
Data retention
KYC verification data is kept for the period mandated by financial record-keeping requirements, then securely destroyed. Transaction data is kept while the account is active plus an audit window afterwards. Communications are kept up to two years after a case closes. Data of closed accounts is erased or anonymised within twelve months unless the law requires longer storage.
Data transfers
Data is shared only with recipients necessary for the service: contracted KYC and IT providers, payment partners executing your deposits and withdrawals, group affiliates for cross-fraud prevention, and regulators or enforcement bodies where the law requires it. Every transfer is protected by contract and, for cross-border transfers, by equivalent security safeguards.
Data disclosure
We do not disclose your personal data to others except: with your permission; to comply with a lawful legal process; to protect the rights, property or safety of users or the platform; or in a corporate transaction such as a merger, where the recipient is bound by an equivalent policy. Requests from authorities are recorded in the internal audit log.
Security
Controls include AES-256 encryption of stored data, TLS on every connection, role-based access control, two-factor authentication for staff on critical systems, un-editable audit logs, and regular penetration testing. No system is perfect; if a breach affects your data, we notify you and the relevant authorities within the period the law requires.
Rights of data subjects
You may request access to your personal data, correction of inaccurate data, erasure of data whose processing is no longer necessary, restriction of processing while a dispute is reviewed, and objection to processing based on legitimate interests. Send requests to [email protected]; we respond within thirty days with written confirmation of the action taken or the reason a request cannot be fully met.
Service providers
A list of provider categories is available on request; it covers cloud hosting, email delivery, KYC verification, analytics and customer-support tooling. We assess new providers before contracting and re-run assessments periodically.
Analytics
Internal analytics reviews site usage in aggregate to improve content and the registration flow. Third-party analytics tools, where enabled, operate without personal identifiers unless you are signed in, and IP data is truncated before storage. The Google Analytics slot exists but stays inert until the SEO team fills in their own tracking ID.
Advertising and retargeting
We do not run profile-based retargeting advertising without your consent. If a retargeting campaign runs in future, it will use aggregated audiences only and never your email list or verification data.
Third-party website links
This policy covers taman-yieldholm.org only. Third-party sites you reach through our links have their own privacy policies; we encourage you to read them before sharing information there.
Children's privacy
Our services are not directed at anyone under eighteen, and we do not knowingly collect children's personal data. If we learn that a child's data has been collected, it is deleted immediately after verification.
Changes to this policy
This policy is updated when processing changes or the law requires it; the new version is published here with its effective date, and material changes are announced to registered account holders by email before taking effect.
Contact us
Privacy questions can go to [email protected], Client Support & Compliance, Level 33, Menara Prestige, Jalan Pinang, 50450 Kuala Lumpur, Malaysia. We reply usually under one business hour during working hours Monday to Friday, 9:00–18:00 MYT (excluding public holidays).