Masspool Privacy Policy

Agreement to Policy

1.1. You accept this Policy by checking the box “I agree to the Privacy Policy” during Account registration or by continuing to use our Services.

1.2. If you disagree with any part of this Policy, you must immediately stop using the Services.

Purposes of Processing and Storage

We process your personal data for the following purposes:

• To provide and operate the Services (account access, mining pool participation).
• To comply with AML/CFT and regulatory obligations.
• To ensure security, fraud prevention, and risk management.
• To communicate with you (support, updates, notices).
• To send marketing/promotional communications (if consent is given).

Storage periods:

• Account-related data: stored for the lifetime of the Account.
• KYC/AML data: stored for 5 years after Account closure (as required under Singapore PDPA & MAS guidelines).
• Marketing data: stored until you withdraw consent.
• Automatically collected data: stored for the duration necessary for system security and analytics.

‍

Legal Basis for Processing

We process personal data under the following legal grounds:

• Consent – when you explicitly agree (e.g., marketing communications).
• Performance of contract – to provide Services under our Terms of Service.
• Legal obligations – compliance with Singapore law (PDPA, CDSA, TSFA, MAS Notices).
• Legitimate interests – ensuring security, preventing fraud, improving Services.

Disclosure of Personal Data

We may share your personal data with:

• Affiliates – other Masspool entities.
• Service providers – IT, hosting, payment processors, KYC/AML verification partners.
• Regulatory and law enforcement authorities – when required by law.
• Business partners – strictly as needed for mining pool operations.

All third parties are bound by confidentiality and data protection obligations.

Cross-Border Transfers

As a Singapore-based company, we comply with the Personal Data Protection Act (PDPA) regarding cross-border transfers.

• Data may be transferred outside Singapore where necessary (e.g., to cloud providers).
• Transfers are made only to jurisdictions with comparable data protection standards, or with additional contractual safeguards.
• Encryption and secure protocols are applied to protect data in transit.

Your Rights

Under Singapore’s PDPA (and where applicable, GDPR-like standards), you have the following rights:

• Access – request a copy of your personal data.
• Correction – update or rectify inaccurate data.
• Deletion – request erasure of data where no legal obligation requires retention.
• Withdrawal of consent – opt out of marketing or specific processing activities.
• Data portability (where applicable) – receive your data in a machine-readable format.
• Complaint – lodge a complaint with Singapore’s Personal Data Protection Commission (PDPC) if unsatisfied with our response.

‍

Blockchain-Specific Considerations

• Transactions on public blockchains (e.g., Bitcoin, Ethereum) are immutable and may expose wallet addresses.
• Masspool cannot alter or delete blockchain records once created.
• Users acknowledge that linking wallet addresses with verified identities may impact their privacy profile on-chain.

‍

Amendments

We may update this Policy periodically. The updated version will be posted on our website with the “Last Updated” date. Continued use of the Services after updates constitutes acceptance.