Privacy Policy

At Veloxverse Pty Ltd (“Veloxverse”, “we”, “us”, or “our”), we take privacy seriously. This Policy explains how we handle personal information across our websites, app, support channels, and financial, remittance, credit, travel, lounge, connectivity, membership, referral, and related services (the “Platform”).

This Policy is governed by the Privacy Act 1988 (Cth) and Australian Privacy Principles (APPs). Other laws, including the GDPR, UK GDPR, New Zealand privacy law, and applicable United States state laws, apply where legally relevant.

We collect information necessary to provide the Platform, verify identity, process services, provide support, meet KYC/AML and other legal obligations, prevent fraud, and improve customer experience.

a. Personal Identification Information

• Full name
• Date of birth
• Nationality
• Government-issued ID (e.g., passport, driver’s license)
• Tax identification number or equivalent (if required by law)

b. Contact Information

• Email address
• Phone number
• Residential and mailing address

c. Transaction Information

• Payment method details (e.g., bank account, card data – tokenized and encrypted)
• Amounts sent and received
• Currency used
• Recipient, applicant, booking, service, and transaction information

d. Device and Technical Data

• IP address
• Browser type
• Device type and OS (e.g., Android, iOS)
• App usage and navigation logs
• Cookies and similar tracking technologies (see our Cookies Policy)

e. Location Data

• Based on IP address or device GPS (for regulatory or fraud prevention purposes)

We may collect personal information through:

• Direct interactions (e.g., registration, applications, bookings, identity verification, and consent)
• Your use of our websites, mobile app, services, and customer-support channels
• Automated technologies (e.g., cookies, analytics, security, device, and fraud-prevention tools)
• Third-party integrations, including KYC/AML, payments, travel, cloud, and other partners
• Communications with Veloxverse or outsourced customer service

We process personal information for the purposes and lawful bases below:

We may disclose or permit access where authorised, necessary, or lawful, including to:

• Our staff, representatives, affiliates, and Australian or overseas customer-service teams
• Third-party service providers and integrated platform partners, such as:
  • Payment, banking, payout, and foreign-exchange providers
  • Identity, KYC/AML, fraud, credit, and compliance partners
  • Cloud, infrastructure, CRM, outsourced support, cybersecurity, and storage providers
  • Travel, insurance, telecommunications, analytics, and marketing partners
• AUSTRAC, ASIC, police, courts, regulators, government authorities, or relevant Australian or overseas departments, when authorised or required by law
• Financial institutions, lenders, insurers, banks, advisers, auditors, and dispute-resolution bodies
• Recipients and international partners needed to complete a requested service

Our providers must follow appropriate privacy and security obligations. Independent providers may apply their own policies. Requesting a service authorises necessary sharing, subject always to applicable law.

Global providers and support teams may access, process, or store information in Europe, Asia, North America, Africa, New Zealand, or elsewhere. We apply required safeguards, including APP 8.

• We assess relevant recipients, locations, purposes, risks, and legal bases
• Providers acting for us must use appropriate privacy and security safeguards
• We use contractual, consent-based, or other recognised safeguards where required

We take reasonable steps to protect your personal information from:

• Unauthorised access
• Misuse or loss
• Modification or disclosure

We implement industry best practices including:

• Encryption (at rest and in transit)
• Role-based access control
• Multi-factor authentication
• Regular penetration testing and security audits

We retain personal information only for as long as reasonably necessary to:

• Providing our services
• Meeting legal, regulatory, and tax obligations
• Handling disputes or investigations

Transaction and compliance records may be kept for at least 7 years or longer where legally required.

Depending on your location, relationship with us, and applicable law, you may have rights to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request data deletion (subject to legal requirements)
• Withdraw consent (e.g., marketing)
• Restrict or object to data processing
• Request data portability (where applicable)

Contact privacy@veloxverse.com to exercise a right. Identity verification and lawful limits may apply.

We may send you service-related and promotional messages. You can opt-out of marketing at any time by:

• Clicking the “unsubscribe” link in our emails
• Updating your communication preferences in your account
• Contacting us at privacy@veloxverse.com

Transactional and service messages (e.g., receipts, alerts) will still be sent as required.

We and approved providers may use cookies, beacons, SDKs, pixels, and analytics to:

• Improve performance and user experience
• Monitor site and app usage
• Provide location-specific services

Please refer to our separate Cookies Policy for detailed information.

Our Platform relies heavily on third-party links, APIs, integrations, provider platforms, and outsourced support. They may access information needed for the service. Independent providers apply their own privacy policies, which you should review.

Our services are generally not intended for children under 18 unless a service permits information supplied by a parent or guardian. We will address unauthorised collection as required by law.

We may update this Privacy Policy to reflect changes in law, technology, providers, integrations, countries, or business practices. The current version and effective date will be published on our website.

We may notify you by email or in-app message where a change is material or notice is required.

For questions, complaints, access or correction requests, or concerns about this Privacy Policy, contact: