BiulinkPay Privacy Policy

Effective Date: October 1, 2025 | Last Updated: October 1, 2025

IMPORTANT NOTICE: Please read this Privacy Policy carefully to understand how we collect, use, store, and protect your personal information. By using BiulinkPay services, you consent to the practices described in this policy. If you do not agree with any part of this policy, please do not use our services.

1. Introduction & Overview

Biu Limited (referred to as "we" or "BiulinkPay") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our digital currency payment platform, virtual cards, and physical card services.

We comply with the Hong Kong Special Administrative Region's Personal Data (Privacy) Ordinance (Chapter 486) and other applicable data protection laws. As a fintech company, we understand the importance of protecting your financial and personal information.

Latest Update: This update includes detailed explanations about digital currency transaction data processing and clarifies our cross-border data transfer policy.

2. Information We Collect

We collect the following categories of personal information:

Identity Information

  • Name, date of birth
  • ID/Passport number
  • Proof of address documents
  • Selfie photos (for identity verification)

Financial Information

  • Bank account details
  • Transaction records
  • Tax information (if applicable)
  • Credit history (if applicable)

Digital Currency Information

  • Digital wallet addresses
  • Transaction hash values
  • Types of digital currencies held
  • Exchange records

We also automatically collect information through technical means:

  • Device Information: IP address, browser type, device identifiers
  • Usage Data: Page view history, clickstream data, feature usage
  • Location Information: Approximate geographic location (based on IP address)

3. How We Use Information

We use your personal information for the following purposes:

Service Provision

  • Account management and verification
  • Processing payment transactions
  • Digital currency exchange services
  • Card service activation and management

Compliance & Security

  • Fulfilling legal obligations
  • Preventing fraud and money laundering
  • Risk assessment
  • Security protection

Service Improvement

  • Product development
  • User experience optimization
  • Customer service improvement
  • Personalized recommendations
Legal Basis

We process your personal information based on the following legal grounds: (1) Performance of contractual obligations; (2) Compliance with legal requirements; (3) Your explicit consent; (4) Our legitimate business interests.

4. Information Sharing & Disclosure

We only share your information with third parties in the following circumstances:

  • Service Providers: Sharing with service providers who help us operate our business, such as cloud storage, payment processing, customer support, etc. These providers have contractual obligations to protect your information.
  • Financial Institutions: Sharing with banks, card networks, and other financial institutions to process payments and provide card services.
  • Legal Requirements: We may disclose information when required by law or in response to valid legal processes.
  • Business Transfers: In connection with mergers, acquisitions, or asset sales, we may transfer personal information.
International Data Transfers

Due to the nature of our business, your information may be transferred to countries/regions outside Hong Kong for processing. We ensure these transfers are protected by appropriate safeguards, such as standard contractual clauses or other legal mechanisms.

5. Digital Currency Transaction Privacy

Special Considerations for Digital Currency Transactions

Digital currency transactions have unique privacy characteristics. We take the following measures to protect your digital currency-related data:

  • We record necessary transaction data to fulfill regulatory obligations
  • Your digital wallet addresses are stored separately from identity information
  • We implement additional encryption measures to protect digital assets
  • Blockchain analysis is only used for security and compliance purposes

Blockchain Transparency: Please note that certain digital currency transactions are publicly visible on the blockchain. While we do not publicly associate your identity with blockchain addresses, the transparency of blockchain means transaction details may be analyzed by third parties.

Anonymity Limitations: To comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations, we need to verify your identity, which limits the complete anonymity of digital currency transactions.

6. Data Security

We employ industry-standard security measures to protect your personal information:

Technical Measures

  • SSL/TLS encryption for transmission
  • Encrypted data storage
  • Multi-factor authentication
  • Regular security audits

Organizational Measures

  • Employee privacy training
  • Access control
  • Physical security measures
  • Incident response plans

While we implement reasonable security measures, no method of internet transmission or electronic storage is 100% secure. We encourage you to use strong passwords and avoid accessing your account on public networks.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

  • Account Information: During your account's active period and up to 7 years after closure (according to financial regulatory requirements)
  • Transaction Records: At least 7 years to comply with tax and anti-money laundering regulations
  • Marketing Information: Until you withdraw consent or we no longer need the information
  • Website Usage Data: Up to 2 years for analysis and service improvement

When personal information is no longer needed, we securely destroy or anonymize it.

8. Your Privacy Rights

Under Hong Kong's Personal Data (Privacy) Ordinance, you have the following rights:

Access & Correction

  • Access your personal information held by us
  • Request correction of inaccurate information
  • Obtain copies of your data

Restriction & Deletion

  • Request deletion of personal information
  • Restrict processing of your information
  • Object to certain processing activities

Data Portability

  • Receive your data in a structured format
  • Transfer data to other service providers

Privacy Preference Settings

You can manage your privacy preferences through the following options:

  • Receive marketing communications
  • Participate in user experience improvement programs
  • Accept non-essential cookies

To exercise your rights, please contact us using the methods in Section 11. We will respond to your request within the timeframe required by law.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your user experience:

Essential Cookies

  • Maintain login status
  • Ensure website security
  • Remember preference settings

Analytics Cookies

  • Understand user behavior
  • Improve website functionality
  • Measure marketing effectiveness

Marketing Cookies

  • Personalize advertising content
  • Limit ad display frequency
  • Measure advertising effectiveness

You can control cookies through your browser settings. However, please note that disabling certain cookies may affect website functionality.

10. Policy Updates

We may update this Privacy Policy from time to time. If there are significant changes, we will notify you by email or by posting a notice on our website before the changes take effect.

We encourage you to review this policy regularly to understand how we protect your information. The "Last Updated" date at the top of the policy indicates the most recent revision time.

Change Notification: Continued use of our services indicates your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer through the following methods:

  • Email: support@biulinkpay.com

If you believe we have not resolved your privacy concerns, you have the right to file a complaint with the Hong Kong Privacy Commissioner for Personal Data.