Privacy Policy

Version: 1.0

DXBTOK respects your privacy and is committed to handling personal data responsibly and transparently. This Privacy Policy explains how DXBTOK collects, uses, stores, shares, and protects personal data when you visit our website, create an account, submit information, use our platform, or engage with property-related reservation and transaction workflows.

By using DXBTOK, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.

1. Who We Are

DXBTOK is operated by DXBTOK LTD (UK company no. 16596613), with registered office at 71–75 Shelton Street, Covent Garden, London, United Kingdom.

For privacy-related questions, you may contact us at: support@dxbtok.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through:

• the DXBTOK website

• account registration and login

• forms and onboarding workflows

• KYC and compliance submissions

• reservation and transaction pages

• support requests and communications

• dashboards, tools, and other platform features

This Privacy Policy should be read together with our:

• Terms and Conditions

• Cookie Notice

• Risk Disclosure

• any transaction-specific terms or notices where applicable

3. Personal Data We May Collect

Depending on how you use DXBTOK, we may collect and process the following categories of personal data:

a. Identity Data

• full name

• date of birth

• nationality

• passport or ID details

• photographs or identity verification records

b. Contact Data

• email address

• phone number

• residential address

• billing or correspondence address

c. Account Data

• login information

• account preferences

• account activity

• user ID

• dashboard actions and account history

d. Compliance and Verification Data

• KYC information

• AML and sanctions screening data

• source-of-funds documents

• tax residency or related compliance information

• payment evidence

• supporting onboarding documents

e. Transaction and Reservation Data

• selected property details

• reservation history

• transaction status

• payment-related information

• purchase summaries

• confirmations, timestamps, and related records

f. Technical Data

• IP address

• browser type

• device data

• operating system

• session data

• referring pages

• approximate geolocation derived from technical signals

• usage logs and analytics data

g. Communication Data

• messages sent through forms or email

• support requests

• communications with our team or service providers

• feedback and inquiry records

4. How We Collect Personal Data

We may collect personal data:

• directly from you when you fill in forms, create an account, upload documents, make inquiries, or interact with the platform

• automatically through cookies, analytics tools, and technical logging when you use the site

• from service providers, compliance providers, brokers, developers, payment providers, or professional advisers where reasonably necessary for onboarding or transaction support

• from publicly available or legally accessible sources where required for compliance, verification, or fraud prevention

  
  

5. How We Use Personal Data

We may use personal data for the following purposes:

• to provide access to the DXBTOK website and platform

• to create and manage user accounts

• to verify identity and eligibility

• to carry out KYC, AML, sanctions, fraud, and source-of-funds checks

• to manage reservations, onboarding, and transaction workflows

• to coordinate with brokers, developers, payment providers, compliance partners, legal professionals, and other service providers

• to send confirmations, service messages, and support communications

• to maintain records of transactions, acceptances, and user actions

• to improve the platform, user experience, and internal operations

• to detect misuse, fraud, technical issues, and security threats

• to comply with legal, regulatory, tax, accounting, reporting, and recordkeeping obligations

• to establish, exercise, or defend legal claims where necessary

6. Legal Bases for Processing

Where applicable, DXBTOK may process personal data on one or more of the following grounds:

• performance of a contract or steps taken at your request before entering into a contract

• compliance with legal or regulatory obligations

• legitimate interests pursued by DXBTOK, including operating the platform, managing risk, preventing fraud, supporting transactions, improving services, and maintaining records

• your consent, where consent is required for a specific activity

• establishment, exercise, or defense of legal claims

7. KYC, AML, and Compliance Processing

Because DXBTOK supports property-related reservation and transaction workflows, we may process identification, verification, and compliance-related information where necessary to:

• verify your identity

• assess eligibility

• review source of funds

• satisfy anti-money laundering requirements

• screen against sanctions or fraud concerns

• respond to legal or regulatory requirements

• coordinate with third-party compliance or transaction partners

• If required compliance information is not provided or cannot be verified, DXBTOK may delay, restrict, suspend, or cancel access to services or transactions.

8. Sharing of Personal Data

DXBTOK may share personal data where reasonably necessary with:

• brokers and property transaction partners

• developers and project-related counterparties

• payment providers and banking partners

• compliance providers and verification service providers

• legal, tax, accounting, or administrative advisers

• cloud providers, hosting providers, and technology vendors

• analytics and communication providers

• regulators, government authorities, courts, law enforcement, or other authorities where legally required

• professional advisers or counterparties in connection with legal claims, audits,

• investigations, or corporate matters

DXBTOK does not sell your personal data to third parties.

9. International Transfers

Your personal data may be stored, processed, or accessed in countries outside your home jurisdiction where DXBTOK, its service providers, or transaction partners operate.

Where personal data is transferred internationally, DXBTOK will take reasonable steps to ensure that appropriate safeguards are applied where required by law.

10. Data Retention

DXBTOK will retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• account administration

• onboarding and transaction support

• compliance and recordkeeping

• legal, tax, and regulatory obligations

• dispute resolution

• fraud prevention and risk management

Retention periods may vary depending on the nature of the data, the services used, and legal or operational requirements.

11. Data Security

DXBTOK takes reasonable technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

However, no online platform, transmission method, or storage system can be guaranteed to be completely secure. You are responsible for keeping your login credentials confidential and for using the platform in a secure manner.

12. Cookies and Tracking Technologies

DXBTOK may use cookies, pixels, analytics tools, and similar technologies to:

• operate and secure the website

• remember preferences

• analyze traffic and usage

• improve site functionality and user experience

• support performance and marketing insights where applicable

For more information, please refer to our Cookie Notice.

13. Your Rights

Depending on the laws applicable to you, you may have rights including:

• the right to request access to personal data

• the right to request correction of inaccurate data

• the right to request deletion of data in certain circumstances

• the right to request restriction of processing in certain circumstances

• the right to object to certain processing

• the right to request transfer of data where applicable

• the right to withdraw consent where processing is based on consent

• the right to lodge a complaint with a competent supervisory authority

These rights are not absolute and may be subject to legal, regulatory, contractual, compliance, or operational limitations.

14. Third-Party Links and Services

The DXBTOK website or platform may contain links to third-party websites, tools, services, or partner systems. DXBTOK is not responsible for the privacy practices, content, or security of third-party services not operated by DXBTOK.

You should review the privacy policies of those third parties separately.

15. Children

DXBTOK is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

16. Changes to This Privacy Policy

DXBTOK may update this Privacy Policy from time to time. Updated versions may be published on the website or platform with a revised effective date.

Where required, we may take additional steps to notify users of material changes.

17. Contact

If you have questions about this Privacy Policy or your personal data, you may contact:

DXBTOK LTD

71–75 Shelton Street, Covent Garden, London, United Kingdom

Email: support@dxbtok.com