Bitfuse LogoBitfuse
Legal & Privacy Disclosure

Privacy Policy

BitFuse Limited is committed to protecting your personal information and handling your data transparently and securely in accordance with applicable data protection laws in the Republic of Malawi.

Version: 1.0
Effective Date: October 2026
Last Updated: October 2026

1. Who We Are

This Privacy Policy is provided by BitFuse Limited, a private company incorporated in Malawi under company registration number COY-7P7FJWY ("BitFuse", "we", "us", or "our").

Our business location is situated at Lilongwe Area 43, Malawi. For the purposes of applicable data protection legislation in Malawi, BitFuse Limited acts as the data controller for personal information collected through our web platform located at https://bitfuse.mw and associated application interfaces.

2. Scope of Policy

This Policy describes how we handle personal information when you visit our website, register an account, complete identity verification, execute digital asset or mobile money conversion transactions, or communicate with our support team.

BitFuse does not sell or rent personal information to third parties, nor do we utilize identity documents or transaction histories for targeted advertising.

3. Information We Collect

We collect personal information directly from you when you register, as well as automatically when you use our digital platform. We distinguish between required information necessary to provide services and optional profile details.

Required Registration & Account Data

  • First name and last name
  • Email address (and verification status)
  • Malawian phone number (Airtel Money or TNM Mpamba format)
  • Account password (stored as a secure salted cryptographic hash)

Optional Profile Data

  • User-entered city or district location (e.g., Lilongwe, Blantyre)
  • Profile preference settings
  • Note: BitFuse does not collect or track precise device GPS location.

Transaction & Order Data

  • Order amounts (USDT and MWK values), exchange rates, and fee calculations
  • Mobile money transaction IDs and reference codes
  • External blockchain wallet addresses (TRON / TRC-20 and BNB Smart Chain / BEP-20)
  • Blockchain transaction hashes (txHash)
  • Internal P2P transfer recipient usernames and idempotency keys

Technical & Security Data

  • IP address, browser type, and operating system details
  • Session activity information used to maintain account security and enforce session timeouts
  • Security log events (login timestamps, failed attempts, token refreshes)

4. KYC & Identity Verification

To comply with applicable customer due diligence and anti-money laundering standards in Malawi, BitFuse requires identity verification prior to granting full trading eligibility.

  • Collected Verification Documents: National ID number, front and back images of your official National Identity Card, and a selfie photo.
  • Access-Controlled Storage: KYC documents are stored using access-controlled systems and are accessible only to authorised compliance personnel and systems that require access for legitimate compliance, security, or support purposes.
  • No Automated Biometric Profiling: BitFuse does not currently use automated facial-recognition profiling for routine KYC review. Identity submissions are reviewed manually by authorised compliance staff.

5. Google & Third-Party Authentication

If you choose to sign up or log in using Google Identity Services, Google provides BitFuse with basic profile information associated with your account, such as your email address, name, and profile identifier.

BitFuse processes Google authentication tokens solely to verify your identity during sign-in. BitFuse does not store Google access tokens or retain access to your private Google account credentials.

6. How We Use Personal Information

We use your personal information strictly for legitimate operational, security, and legal purposes:

  • Creating, maintaining, and securing your BitFuse account;
  • Verifying your identity and checking trading eligibility;
  • Executing buy, sell, withdrawal, and internal P2P transfers;
  • Facilitating MWK payouts and payment verification via Airtel Money and TNM Mpamba;
  • Detecting, investigating, and preventing fraud, security breaches, and illegal activity;
  • Providing customer support and responding to inquiries;
  • Complying with statutory accounting, reporting, and legal obligations under Malawian law.

7. Lawful Bases for Processing

Under applicable data protection law, we process your information on specific legal bases:

  • Performance of Contract: To fulfill our Terms and Conditions, manage your account, and execute requested orders.
  • Legal Obligation: To comply with mandatory identity verification, financial record-keeping, and legal duties under Malawian legislation.
  • Legitimate Interests: To maintain platform security, protect against fraud, enforce session timeouts, and improve service delivery.
  • Consent: Where required for specific optional communications or interactions.

8. Blockchain & Public Ledgers

When you initiate a digital asset withdrawal, transaction details (including your external wallet address, transaction hash, asset amount, and timestamp) are broadcast to public blockchain networks (such as TRON or BNB Smart Chain).

Public blockchain ledgers are decentralised and immutable. Information broadcast to a blockchain network cannot be modified, deleted, or edited by BitFuse. Off-chain personal details held within BitFuse databases remain subject to our standard security and privacy controls.

9. Mobile Money & Third-Party Services

To process Malawian Kwacha settlements, BitFuse interacts with licensed mobile money operators (Airtel Money and TNM Mpamba). Transaction reference numbers, phone numbers, and payment amounts are shared with these operators solely to execute transfers.

Mobile money providers process payment details under their own terms and privacy notices. BitFuse does not control third-party telecommunications infrastructure.

11. International Data Processing

Some service providers or infrastructure used by BitFuse (such as cloud hosting, authentication, or email delivery services) may process or store personal information outside Malawi.

Where applicable, BitFuse will take the safeguards required by applicable law when transferring or allowing access to personal information across borders, ensuring appropriate contractual and technical protections are maintained.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide our services, maintain transaction and business records, prevent fraud, comply with applicable legal and regulatory obligations, resolve disputes, and enforce our agreements.

Certain information (such as financial transaction records, KYC logs, and identity details) may be retained for longer periods where required or permitted by applicable Malawian statutory retention obligations.

13. Data Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss, misuse, or destruction.

Information transmitted to or from BitFuse across public networks is protected using encryption in transit. We enforce strict role-based access controls and security protocols for stored information. However, no internet transmission or electronic storage system can be guaranteed 100% secure.

14. Your Privacy Rights

Subject to applicable law and statutory exemptions, you may have the right to:

  • Request access to the personal information we hold about you;
  • Request correction or updating of inaccurate or incomplete personal information;
  • Request deletion of personal information, subject to statutory record-retention requirements;
  • Object to or request restriction of certain processing activities;
  • Lodge a complaint with the competent data protection authority under applicable law.

We will handle valid requests within the period required by applicable law, subject to necessary identity verification and any lawful extensions or limitations.

15. Browser Storage & Cookies

BitFuse utilizes browser local storage (`localStorage`) solely for strictly necessary application functions:

  • Storing session authentication tokens (`bitfuse:accessToken`, `bitfuse:refreshToken`) to keep you securely logged in;
  • Persisting active order references (`bitfuse:active_buy_order_id`) so you can resume order flows across page refreshes.

BitFuse utilizes Google Analytics 4 (`G-80LTZLPJH5`) strictly for anonymous platform usage, performance measurement, and route navigation metrics. No personal identifiers (such as emails, phone numbers, or identity documents), financial values, balances, or transaction details are transmitted to Google Analytics. BitFuse does not use third-party advertising cookies or cross-site tracking pixels.

16. Children's Privacy

BitFuse services are strictly intended for individuals who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that an account has been registered by a minor, the account and associated data will be suspended immediately in accordance with applicable law.

17. Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, technical, or legal developments. Updated versions will be published on our platform with an updated version number and "Last Updated" date.

18. Complaints & Contact

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our legal and privacy contact:

Company Entity: BitFuse Limited (`COY-7P7FJWY`)
Contact Email: bitfusemw@gmail.com
Business Location: Lilongwe Area 43, Malawi
View Terms & Conditions →© 2026 BitFuse Limited. All rights reserved.