Privacy Policy

Your personal data and assets are our highest priority. We are fully committed to safeguarding them.

Nexus Gainlux collects and stores data necessary for your trading activities. How we collect and store this data is outlined in the Privacy Policy below.

The following principles guide our policy:

• To ensure full transparency about how we collect and store your personal data:

Our goal is to ensure you clearly understand how we collect and process data, so that you can make well-informed, confident decisions. We maintain clear guidelines and processes for handling data on this website. Our policy outlines the specific methods we use, providing you with clear, concrete information about how your data is used in practice. You are in the driver's seat.

We will always provide information promptly whenever we determine you should be informed. Transparency is central to us.

Our trained staff are always available to answer any questions you may have about any aspect of our processes, including our obligations under the laws of Malaysia. You can reach us at info@nexus-gainlux.com

• We do not use personal data for any purpose other than what is outlined in our Privacy Policy.

We process personal data for purposes such as ensuring the proper operation of Nexus Gainlux services and connecting trader-members with third-party trading platforms. We also use it to maintain and improve website features and services, protect our rights, and comply with regulatory or other legal requirements. Finally, where necessary, we use this data to deliver administrative and other business functions related to the Services provided to you, the client.

To deliver services tailored to your preferences and needs, Nexus Gainlux uses your personal data.

• To make sure you are able to effectively use essential tools to protect your personal data and safeguard your rights in this context:

You may contact us at any time to access all of your personal data. We can update or delete this information upon request. We also support requests to securely transfer your data to you or to an authorised third party. We provide these services to help you fully exercise your rights to privacy and control.

• Secure your personal data:

Our security systems meet the highest standards, using bank-grade protections. While a 100% guarantee isn’t possible, we are committed to continuously upgrading our systems and strengthening the measures we already have in place.

We have a detailed and comprehensive privacy policy and the highest-level security systems.

1. The Scope?

This policy sets out our procedures for the collection, processing, and sharing of any and all data relating to natural persons.

The terms of this policy apply to all identifiable natural persons. This includes any individual who can be, or has already been, identified through data entrusted to us or information we can access and/or combine.

Data processing, as defined in the Privacy Policy, specifically refers to the storage, management, and organisation of such personal data.

We do not collect, or attempt to collect, any information about individuals under the age of 18. We also do not allow individuals under the age of 18 to use our platform for any purpose. If we discover any user or information relating to a person under the age of 18, we will delete that information immediately.

2. What personal data do we retain?

When you register with us, we collect the necessary personal data to enable you to use our services. We may also request additional personal data when required for verification, such as confirming ownership of an account. To maintain and improve the quality of our services, we collect and analyse data about your use of our platform and services provided by third-party partners.

3. You are under no obligation to provide the Company with your personal data.

Although you are not obligated to share your data with us, withholding certain information may limit the services we can provide. It may also restrict your ability to use our platform.

4. What personal data do we collect? When you visit our website, we may collect the following personal data:

We do not collect information that directly identifies you as an individual. We do, however, log your specific account activity, IP address, and the date and time of access for audit purposes. For maintenance, security, and support services, we retain any system crash reports, browser information, and the type of device used to access your account. We also record the language preference set for your account.

Regarding personal data collection, we only collect and retain the information you consent to provide when you connect to a third-party trading platform through us.

The personal data you have provided to third-party platforms may include: your full name, address, telephone number, and email address.

5. Why does the company need my personal data, and is it lawful for them to collect it?

We collect, store, and process your personal data solely for the purposes described in the Policy. All such uses and processing are carried out in compliance with the applicable laws and regulations in Malaysia.

The company will only collect, use, or transmit your data in compliance with applicable laws in Malaysia. The following are the legal bases for doing so:

• You have agreed that the company may store and process your personal data. By submitting your information to the company, you authorise us to transfer it to the relevant third-party trading platform. You have consented to the processing of your personal data for one or more purposes.
• To improve its services, establish or defend legal claims, pursue legitimate interests, and for other lawful purposes, the company may need to store and process your personal data.
• Data processing is necessary to meet legal requirements.

If you would like more information about the data processing the company is required to undertake, please contact us via email.

Below is a list of the specific purposes for which we may process your personal data, along with the corresponding legal basis.

6. Disclosure of Personal Data to Third Parties

To store and process IP addresses, conduct user surveys and analysis, and provide related services, the company may share anonymised personal data with third-party service providers.

At your request, we may share specific personal data you provide with third-party services. In such cases, the use of your data will be governed by that company's privacy policies. This may include multiple digital trading platforms.

To better serve our clients and enhance our overall services, the company may share personal information with its affiliates and partner companies.

Where required by law or to protect our company's rights and assets, and those of our third-party partners, we may disclose data to competent legal or regulatory authorities.

In the event of a material corporate transaction, such as a company sale, an investment or a loan, we may share relevant data in a lawful and appropriate manner. This also applies in the event of any merger, restructuring, consolidation, or bankruptcy, in accordance with applicable law.

7. Use of Cookies and Third-Party Services

To support site analytics and to collaborate with advertising partners, we may, from time to time, use cookies and similar technologies, in line with legal requirements and common industry practices.

Cookies—small data files stored on your device when you visit a website—are used to gather information about your browsing behaviour and preferences. Their purpose is to personalise and enhance your experience. They allow us to remember your settings and preferences, and to tailor our service offerings accordingly. These cookies are also used for site analytics and statistical reporting to support strategic planning.

Broadly, two types of cookies are used on this site. Session cookies are stored only for the duration of your visit and are deleted when you close the browser. The others are persistent cookies, which remain in your browser even after your session ends. These enable the site to recognise you as a returning visitor and make it easier to use.

Types of cookies:

Cookies may be used as necessary, for their intended purpose:

Cookies have been blocked or removed

If you wish to delete or block cookies, please do so in your browser settings. Follow the links below for step-by-step instructions for the most popular browsers.

• firefox
• Microsoft Edge
• Google Chrome
• safari

Blocking cookies will prevent some functions and site features from working as intended.

ONLINE TRACKING NOTICE

Your personal data will be retained for as long as necessary to perform the operations described in this policy. It may be kept longer to comply with local laws, regulations and company policies.

Your personal data will be shared—at your request and discretion—with third-party trading platforms for a 12-month period. Upon expiry of that 12-month period, and with your consent, the data will be shared for a further 12 months.

Our operations include the regular review of all personal data to determine whether it is still required.

9. Cross-border transfers of personal data to other countries or international organizations

When required to deliver our services or for security reasons, we may transfer personal data to countries outside your own and to international organisations, using robust security measures. We apply the highest standards of data protection to safeguard your information and to ensure you can exercise your legal rights and remedies in all circumstances.

Within the EEA (European Economic Area), all residents are protected by data protection laws and safeguards.

• All data transfers are carried out under the EU’s legal jurisdiction and competence, in accordance with the data protection standards set out in Article 45(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”)
• All data transfers between public entities and authorities are carried out in accordance with Article 46(2). Such transfers are governed by a legally binding and enforceable agreement.
• The European Commission’s Standard Contractual Clauses, issued under Article 46(2)(c) of the GDPR, define the conditions for data transfers and are applied accordingly. The Clauses are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For further details on the specific security measures the company uses to safeguard your personal data during transfers to third countries, please email your request to info@wealthwaydigital.uk

10. Protection of Personal Data

Personal data is safeguarded with the highest level of technical and organisational measures, in line with industry-leading standards. These measures are designed to prevent any unlawful or accidental destruction of data, and to mitigate the risk of loss or alteration throughout its lifecycle.

While we apply the highest levels of care and industry-leading procedures for data protection, as required by law, it is not possible to guarantee in all circumstances that your personal data will remain completely error-free. For this reason, we cannot be held liable for any disclosure of personal data, or for damages of an incidental, intangible, or consequential nature. This includes circumstances beyond our control, such as disclosures arising from transmission errors, unauthorised access by third parties, or any other cause of a similar nature.

If we receive legally binding requests from regulators or legal authorities, we may be required to share your personal data with them. Once shared under a legal obligation, we cannot control how those authorities handle, store, or protect your data.

Any information transmitted over the internet, including personal data, carries a risk of interception and cannot be guaranteed to be 100% secure. The Company cannot guarantee the security of any data transmitted online.

11. Links to third-party websites

On this website, you may come across links to third-party applications and websites. Please note that these are not our affiliates and are not under the company’s control, and our privacy policy does not apply to them. They have their own policies and processes for collecting and processing personal data, and we are not responsible for those activities. Use at your own discretion.

Always review the privacy policy of any company or service when visiting their website before sharing any personal data. Ensure that their data collection, use, and processing policies align with your preferences and priorities. Any data you choose to share should be provided directly to the service provider.

12. Policy Amendments

We reserve the right to update or amend our policy at any time. We will provide notice of any changes on the website and through other appropriate channels. The updated version of the privacy policy will be posted on the website and will take effect immediately upon publication, unless stated otherwise.

13. Your Personal Data Rights

You retain full control and the final say over how your personal data is used, including the right to verify its accuracy, correct errors, and choose to delete or limit the scope and nature of any processing we perform.

This page provides information relevant to EEA residents:

Your personal data is protected under the rights described herein. By sending an email to the address below, you may immediately exercise those rights.

Accessing Your Rights

You may access the personal data you have provided to us at any time to confirm its accuracy. All personal data we process is accessible to us and therefore verifiable.

You may request your personal data for verification at any time, and we will provide it in electronic format. If you request additional copies of your personal data that we are processing, beyond the initial copy provided to you, a reasonable fee may be applied.

Rights granted by law and our Privacy Policy must not infringe the rights of others. The Company may refuse or restrict access to personal data where such access would infringe the rights and freedoms of others.

Right to Rectify Errors

Any errors in your personal data, whether due to omissions or inaccurate details, may be corrected by you or by the Company to ensure it is processed properly.

Erasure Rights

You have the right to request deletion of your personal data in the following circumstances. 1) If your personal data has been processed without your consent or in breach of applicable law. 2) If you request its removal and the Company has no legal obligation to retain it. 3) If you no longer accept any processing by us, even where lawful and based on our or a third-party provider’s legitimate interests, and finally 4) If we are required by law to delete your data.

The right to erasure is overridden and superseded by legal obligations under EU law or the laws of any Member State. Likewise, this applies where data is required for the establishment, exercise, or defence of legal claims.

Right to Restrict Data Processing

You have the right to request a restriction on the processing of your personal data in circumstances where you believe it is inaccurate or incomplete.

If you request restriction of the use of your personal data, we will delete it except in the following situations: 1) where a legal requirement under the laws of the European Union or any Member State prevents this. 2) With your consent, where needed to establish, exercise, or defend legal claims. 3) To protect the rights of another natural person.

Data Portability Rights

You have the right to access and review any personal data you have provided, if you have consented in any manner to its collection and its processing is carried out by automated systems.

You have the right to request that your personal data be transferred to another company or organisation, where technically feasible. This does not affect your right to have your data deleted. This right cannot be exercised where doing so would infringe the rights or freedoms of another natural person.

Right to object to data processing

Notwithstanding the Company’s legitimate interests, or those of a third-party service provider, you have the right to object to processing and request that it cease. This right does not apply where there are compelling legal grounds to continue processing, including to establish, exercise, or defend legal claims. In such cases, we may continue processing your personal data.

You may at any time request that your personal data not be processed for the purposes of any direct marketing activities.

Right to Refuse or Withdraw Consent

At any time, and where possible with immediate effect, you have the right to withdraw your consent to our processing of your personal data. This will not apply retroactively to any processing that occurred prior to your withdrawal of consent.

If you are dissatisfied for any reason, you have the right to lodge a complaint with any legal, regulatory, or other supervisory authority.

If you believe your rights and freedoms have been infringed in connection with the processing of your personal data, Member States of the European Union have established regulatory and supervisory authorities for this purpose. You may file a complaint with these authorities at your discretion.

Section 13 outlines circumstances where your personal data rights may be limited under European Union law or the laws of its Member States.

Once we receive your request concerning your personal data and its processing, we will provide access to the information you requested, as outlined in Section 13 of this policy. We may extend this timeframe by up to two months, depending on the volume and nature of requests. If an extension is required, we will notify you of the revised deadline within one month of receiving your request.

We will provide the requested information to you electronically at no charge, unless doing so is prohibited by law or by the provisions of Section 13. We reserve the right to charge a reasonable fee or to refuse requests that are deemed frivolous, excessive, or repetitive.

We reserve the right to request further proof of identity if there is any reasonable doubt about the person requesting personal data, for data protection and security purposes.