Protecting your personal information and privacy

Lotus Holdasca treats the protection of your personal information as a priority. Each processing activity has a specific purpose, is communicated in clear terms and follows applicable law, including Qatar’s relevant data-protection requirements. This policy explains what information may be gathered, how it is used, how long it is kept and the safeguards applied to protect it.

1. Who controls the data

The operator of the Lotus Holdasca website and platform acts as the data controller. Its registered name, contact information and other required legal details appear in the appropriate section. The designated data-protection contact may also help you exercise your rights.

2. Personal information categories

We limit collection to information needed to provide the service, satisfy compliance duties and keep the platform secure. The categories may include:

Identity information: given name, family name and birth date, used mainly to verify who you are and confirm that you satisfy the minimum-age requirement.
Contact information: your email, supplied telephone number, country of residence and, when needed to deliver the service, postal address.
Account and payment activity: payment information, deposited or withdrawn amounts and records of transactions that have been completed.
Device and usage details: IP address, browser type, device attributes, connection timestamps and related technical records.
Verification material: identity documents, address evidence or other records needed for applicable KYC/AML reviews.

Except where the law requires it or you specifically permit it, we generally do not seek sensitive information such as medical details or religious views.

3. How information is sourced and collected

Your information can be obtained from several sources, each subject to suitable protective controls:

Information you submit: for example, when opening an account, changing your profile, uploading evidence or sending us a form enquiry.
Information gathered automatically: through cookies, server records, measurement services and technical data produced by your device during browsing.
Information supplied by partners: such as payment services handling deposits and withdrawals, KYC/AML screening providers or social sign-in services where you have authorised their use.

4. Reasons we process your information

We use your information only for defined and lawful purposes that are explained to you:

To open, manage and maintain your account and provide access to the platform’s available functions.
To handle and safeguard payment activity, including requests to deposit or withdraw funds.
To address your questions and offer suitable support.
To fulfil applicable legal and regulatory duties, including KYC, AML and tax obligations in Qatar.
To defend our systems and help prevent fraud, improper use and unauthorised entry.
To understand how the service is used, refine the experience and build platform improvements.
To provide messages or promotional communications only where you have given clear consent.

5. Grounds for processing

To perform our agreement with you or take necessary steps before entering into that agreement.
To meet legal requirements, including measures designed to prevent money laundering and terrorist financing.
For legitimate interests, such as preserving the platform’s safety, security and operational resilience.
With your permission, especially for marketing communications and non-essential functions.

6. Recipients and disclosure rules

We disclose information only where a valid legal basis exists, to known recipients and subject to appropriate controls:

Banks and payment institutions that support deposit and withdrawal processing.
Specialist providers carrying out identity checks and KYC/AML screening.
Cloud and technical service providers acting as processors under agreed contractual conditions.
Security and analytics services that use anonymised or pseudonymised data where practicable.
Outside professionals, including legal or tax consultants, when their support is needed for our responsibilities.
Administrative or court authorities when the law requires disclosure or it is necessary to safeguard our legal rights.

We do not trade your personal information or provide it to third parties for their independent marketing or prospecting.

7. International transfers beyond Qatar

Certain processors, such as hosting or analytics providers, may operate outside Qatar. In those cases, we apply the safeguards required by applicable law to preserve an appropriate level of protection.

8. Organisational and technical safeguards

We protect information through robust technical safeguards and internal practices, including:

Data in transit is protected with current encryption standards, including TLS 1.3 or a subsequent version.
Sensitive stored data is encrypted, including with AES-256 technology where appropriate.
We conduct security reviews, audits and penetration assessments at intervals, involving independent specialists when suitable.
Ongoing system oversight supports the detection of abnormal activity and attempted unauthorised sign-ins.
Access permissions reflect each employee’s role and assigned responsibilities.
Client money is maintained in segregated accounts with partners that remain subject to their own regulatory duties.

Every information system carries some risk, and no control can remove it entirely. We still use reasonable safeguards to limit potential exposure.

9. How long information is retained

We keep information only for as long as needed for the stated purposes or as required under applicable law:

Throughout the time your account is active and our contractual relationship continues.
Following closure, for the periods mandated by law, which can be 5 to 10 years for certain tax or regulatory records.
Where consent is the basis for processing, especially marketing, until you revoke that permission.

Once retention is no longer necessary, we securely erase the information or anonymise it so it can no longer be linked to you.

10. Rights relating to your information

Under applicable data-protection rules, you may have several rights concerning your personal information, including:

To confirm whether we process your personal information and request a copy.
To correct information that is inaccurate and complete records that are missing details.
To ask for deletion when no legal or other valid reason requires us to keep the information.
To seek limits on processing in situations recognised by applicable law.
To obtain your information in a structured, widely used, machine-readable form and transfer it to another provider where applicable.
To revoke consent at any point for processing that takes place afterwards.
To submit a complaint to the relevant data-protection or regulatory authority in Qatar.

11. Cookies and related technologies

Cookies and comparable technologies help the site function, show us how the service is used and improve navigation. Essential cookies operate by default, while analytics and advertising cookies are used only with your permission. Our cookie policy provides additional information.

12. Policy updates

This policy may be revised to reflect changes in legislation, new responsibilities or developments in the service. Updated wording will be posted online. For a significant change, we may also contact you by email or display a notice within the platform.

13. Contact regarding personal information

If you need clarification about this policy, your information or your rights, contact us at $site_gmail or submit the site’s contact form. The appropriate team will assess your request and reply within a reasonable timeframe.

When you use Lotus Holdasca, you acknowledge that you have reviewed this policy and agree to its provisions.