How Approved Funded Handles Customer Data

This policy describes the personal information collected during account registration, checkout, simulator operations, and reward processing, and explains how that information is used, stored, shared, and protected. It applies to every visitor and customer of approvedfunded.com and the associated dashboard and admin services.

Last updated · April 2026

Plain-language summary

We collect the information needed to operate a simulator-trading service responsibly: account profile, payment metadata, identity verification at first payout, and operational telemetry. We do not sell your information. We share it only with the partners, processors, and authorities required to deliver the service or meet a legal obligation. You retain rights to access, correct, and delete your information, subject to retention rules required by law. The full policy below sets out the details.

1. Information We Collect

Account profile details submitted during registration, including full legal name, email address, country of residence, address line, postal code, and contact phone number.
Identity verification documents required at first reward payout — government-issued photo ID (passport, national ID, or driver's license) and proof of address (utility bill, bank statement, or government correspondence dated within the last ninety days).
Payment metadata including order ID, plan tier purchased, transaction timestamp, processor invoice reference, and (for cryptocurrency rails) destination wallet address. We do not store card numbers, CVV codes, or wallet private keys at any point.
Operational records tied to orders, simulator account lifecycle events, rule-flag history, daily-loss and drawdown breach records, reward request submissions, KYC review outcomes, and customer support correspondence transcripts.
Security and platform telemetry used for abuse detection, compliance controls, anti-fraud screening, and service reliability — including IP addresses, user-agent strings, session timestamps, login attempts, and platform action audit trails.
Marketing and partner attribution data when a customer arrives through a referral link, partner code, or paid acquisition campaign, including the upstream traffic source, referral identifier, and timestamp of first contact.

2. How We Use Your Information

To provision simulator accounts, process activation fee payments, route reward disbursement requests, and maintain the customer-facing dashboard and admin operational workflows that support these functions.
To enforce trading rules, daily-loss and drawdown limits, prohibited-behavior detection, news-window restrictions, and the compliance review process required before any payout is released.
To support customer service requests including order status inquiries, refund eligibility reviews, KYC verification, password resets, and any operational issue raised through the support channel.
To meet anti-money-laundering, counter-terrorist-financing, sanctions screening, and other legal obligations applicable to the operation of a regulated-adjacent financial-simulation business.
To detect and prevent fraud, abuse, multi-account violations, payment chargeback disputes, and platform manipulation that would compromise other customers' experience or the integrity of the rule framework.
To improve service quality through aggregated and anonymized analytics on platform usage, conversion funnel performance, customer-support response times, and product line take-up.

2A. Trading Activity Review

We review trading activity for compliance with our trading rules (described in full at /full-rules). This includes algorithmic detection of high-frequency patterns, news-trading patterns, and copy-trading patterns.
Activity that violates our rules may be flagged and reviewed by our compliance team. Customers will be notified of adverse compliance decisions through the registered email address on file, with a documented reason for the action taken.

3. Legal Bases For Processing

Performance of contract — processing necessary to deliver the service you purchased, including account provisioning, rule enforcement, and reward disbursement.
Legal obligation — processing required to comply with applicable financial, tax, anti-money-laundering, and consumer protection laws in the jurisdictions where we operate.
Legitimate interests — processing for fraud prevention, platform security, abuse detection, and operational analytics, balanced against your data protection rights.
Consent — processing for optional features such as marketing communications, where you have provided explicit opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Information Sharing & Third Parties

Payment processors — limited transaction data is shared with our payment partners (cryptocurrency settlement providers and card-network gateways) strictly to facilitate the activation fee charge and any subsequent refund. These partners are independently subject to their own privacy obligations.
Hosting and infrastructure — operational data is processed by our cloud hosting provider, database service, and content-delivery network under data processing agreements that bind them to confidentiality and security standards.
Compliance and KYC vendors — identity verification documents may be reviewed by our compliance team or by accredited third-party identity verification services strictly for the purpose of meeting legal know-your-customer obligations.
Email and transactional messaging — operational notifications (order confirmations, account activation, reward decisions, support replies) are delivered through a transactional email service that processes only the metadata required to send those messages.
Legal authorities — we will disclose information when compelled by valid legal process, court order, regulatory subpoena, or where disclosure is necessary to protect the rights, property, or safety of Approved Funded, our customers, or the general public.
We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their independent marketing purposes.

5. Cookies & Tracking Technologies

Strictly necessary cookies — required for authentication, session management, CSRF protection, and the secure operation of the customer dashboard and admin panel. These cannot be disabled without breaking the service.
Functional cookies — used to remember non-essential preferences such as the most recent payment method selection, the active product line on the pricing page, and whether you have dismissed promotional banners.
Analytics cookies — used to aggregate platform usage statistics that help us improve the service. Where required by law we will request your consent before placing analytics cookies.
Marketing pixels — third-party advertising platforms (Meta, Google, TikTok) may set conversion-tracking pixels on the public marketing surface to measure ad effectiveness. These pixels do not access dashboard or trading data.
You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the dashboard, checkout, and admin panel from functioning.

6. Data Retention Periods

Active customer records are retained for the duration of the customer relationship plus any period required by ongoing operational, accounting, or legal obligations.
Closed-account records are retained for a minimum of seven years following account closure where retention is required for tax, anti-money-laundering, or fraud-prevention purposes.
KYC documents are retained for the period required by applicable identity verification rules in the customer's jurisdiction, typically five to seven years from the date of verification.
Trading telemetry, rule-flag records, and audit logs are retained for the lifetime of the simulator account plus the period needed to resolve any dispute or regulatory inquiry that may arise.
Marketing and analytics records are retained in aggregated, non-identifying form indefinitely, and in personally identifiable form for the period required to support the original processing purpose.
When a retention period expires, records are deleted or anonymized through routine data-lifecycle processes.

7. Your Rights

Right of access — you may request a copy of the personal information we hold about you and a description of how it is being processed.
Right to rectification — you may request correction of inaccurate or incomplete information in your account profile or operational records.
Right to erasure — you may request deletion of your personal information, subject to overriding legal, accounting, anti-fraud, or compliance retention obligations that prevent immediate deletion.
Right to restriction — you may request that we limit the processing of your information while a dispute, correction request, or compliance review is pending.
Right to data portability — you may request a structured, machine-readable export of the information you have provided to us.
Right to object — you may object to processing carried out under legitimate-interest grounds, including direct marketing.
Right to lodge a complaint — you may contact a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.
Privacy requests can be submitted through the support channel. We will respond within thirty days, or sooner where required by applicable law. Identity verification may be required before a request can be processed.

8. International Data Transfers

Approved Funded operates with a globally distributed customer base. Personal information may be processed in jurisdictions outside the country where the customer resides, including jurisdictions where data protection law differs from local standards.
Where personal information is transferred internationally, we rely on appropriate safeguards including standard contractual clauses, adequacy decisions where applicable, and binding contractual commitments with our infrastructure providers.
By using the service, customers acknowledge that their information may be processed in such jurisdictions. We remain committed to applying the same operational and security standards regardless of where the processing takes place.

9. Protection & Security

Access to sensitive data is limited through role-based authorization, with administrative privileges granted only to operators whose role requires direct customer-data access.
Authentication uses industry-standard credential hashing, time-limited session tokens, and Cloudflare-fronted protection against credential-stuffing and bot traffic.
Payment data is handled exclusively by accredited payment processors. Approved Funded never receives, stores, or sees raw card numbers, CVV codes, or wallet private keys.
Network traffic between customer browsers, the public marketing surface, the customer dashboard, the admin panel, and our backend systems is protected by TLS encryption with modern cipher suites.
Backend operations log every administrative action against an audit trail. Destructive operations are subject to confirmation prompts and append-only audit-log records.
Security incidents that affect customer information will be communicated within the timeframes required by applicable breach notification law.

10. Children's Privacy

Approved Funded is intended exclusively for adult users who meet the minimum age requirements applicable in their jurisdiction. The service is not directed to children, and we do not knowingly collect personal information from anyone under the age of eighteen.
If we become aware that personal information has been collected from a person under the applicable minimum age, that information will be deleted promptly, and any associated account will be terminated.
Parents or guardians who believe a minor has submitted personal information to the service should contact the support channel to request immediate deletion.

11. Changes To This Policy

Approved Funded may update this privacy policy from time to time to reflect changes in legal requirements, operational practices, or service offerings.
Material changes will be communicated by email to active customers, by an in-dashboard notification, or by a conspicuous notice on the public-facing privacy page, depending on the significance of the change.
The date at the top of this page indicates when the policy was last revised. Continued use of the service after the effective date of an updated policy constitutes acceptance of the revised terms.
Historical versions of this policy are retained internally and are available on request through the support channel.

12. Contact & Privacy Requests

Privacy questions, data subject requests, and complaints regarding the handling of personal information should be directed to the support channel listed in the site footer.
Requests submitted by email should include the registered account email, a description of the request, and any additional information needed to verify the requester's identity.
Where required by applicable law, a designated data protection officer is available to handle escalated inquiries through the same channel.
We will acknowledge receipt of privacy requests within five business days and provide a substantive response within thirty days, subject to any legitimate extension permitted by applicable law.