This Privacy Policy explains how Bold Funded Ltd ("Bold Funded", "we", "us"), an International Business Company registered in Saint Lucia, collects and uses personal data when you visit www.boldfunded.com, create an account, purchase an evaluation, trade a simulated account, request a payout or contact us. We are the data controller for this data. Questions and requests go to support@boldfunded.com.
1. Data we collect
Data you give us. Name, email address, country of residence, phone number (optional), account login details, messages you send to support, survey answers and anything you post in our community channels.
Identity verification data. Before your first payout (and before purchase where you pay by card) our identity-verification provider collects a government-issued identity document, a selfie or liveness check, date of birth and address, and screens you against sanctions and politically-exposed-person lists. We receive the result, the document type and a reference; the provider processes the underlying images under its own privacy policy.
Payment data. When you buy an evaluation, our payment processors collect your card or payment details. We receive a transaction reference, the last four digits of a card, the amount and the billing country; we never store full card numbers. For payouts we store the wallet address or Rise account you give us.
Trading data. Every order, position, balance, equity and rule check on your simulated accounts, the platform you connected from, and the IP address and device used, so that the risk engine can enforce the rules and we can investigate prohibited conduct.
Technical data. IP address, browser and device type, pages viewed, referring URL and approximate location, collected through server logs and the analytics and cookies described below. To protect the programme against duplicate accounts, affiliate fraud and account takeover we also set a strictly necessary security cookie holding a random device identifier, and derive a device signature from your browser's technical characteristics (for example browser version, screen size, time zone and graphics renderer). We use these only for security and fraud prevention, never for advertising.
2. Why we use it and the legal basis
We use your data to provide the Services and perform our contract with you (account, evaluations, payouts, support); to comply with legal obligations (identity verification, sanctions screening, record keeping, tax and accounting); for our legitimate interests in running a fair programme (detecting prohibited trading conduct, fraud and abuse, securing our systems, improving the product, and sending you service messages about your account); and, with your consent where the law requires it, to send marketing emails and to set non-essential cookies. You can withdraw consent at any time without affecting the lawfulness of earlier processing.
3. Who we share it with
We share data only where needed to run the Services: our identity-verification provider; payment processors and payout providers (including crypto payout infrastructure and Rise); trading-platform and market-data providers (MetaTrader 5 licensing, TradingView and market-data vendors) to the extent needed to provision your simulated accounts; cloud hosting, email, analytics and customer-support tools that process data on our instructions; professional advisers; and law-enforcement, regulators or courts where we are legally required to. We do not sell personal data.
Public certificate verification. Your pass and payout certificates are publicly verifiable by default so that anyone you show them to (and anyone who scans the QR code or enters the certificate reference at boldfunded.com/verify) can confirm they are genuine. A verification page shows only your first name and the initial of your last name (for example "Ama M."), the programme or payout amount, the division and the dates. It never shows your email, account logins, payment details or account IDs. Verification pages are not listed in search engines. You can make any certificate, or all of them, private at any time from Certificates in your dashboard, and choose to keep future certificates private; a private certificate shows nothing and its existence is not revealed. Public pass certificates are also listed on our Wall of Funded Traders (boldfunded.com/funded-traders) with your first name and last initial, programme, account size and date, and your country of residence is counted (never shown next to your name) in the Wall's funded-by-country leaderboard; you can remove yourself from the Wall in your dashboard while keeping your certificates verifiable.
4. International transfers
We operate from Saint Lucia and use providers in the United States, the European Union, the United Kingdom and elsewhere. Where data is transferred out of a jurisdiction that restricts transfers, we rely on the provider's standard contractual clauses or an equivalent lawful mechanism.
5. Cookies and analytics
We use strictly necessary cookies to keep you signed in and secure the site, and analytics cookies to understand how the site is used. Where the law requires consent for non-essential cookies we ask for it through the cookie notice and you can change your choice at any time from the footer. You can also block cookies in your browser; the site will still work but some features may not.
6. How long we keep data
Account and trading data: for as long as your account is open and for five years after it closes, which is the period we need to meet record-keeping, dispute and anti-money-laundering obligations. Identity-verification records: five years after the relationship ends. Payment records: seven years for accounting. Marketing preferences: until you unsubscribe. Server logs: 12 months. We delete or anonymise data when it is no longer needed.
7. Your rights
Depending on where you live you may have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to processing, to receive it in a portable format, and to complain to a data-protection authority. To exercise a right email support@boldfunded.com from the address on your account; we may ask you to verify your identity first. We answer within 30 days. We cannot delete data we must keep by law, for example identity-verification and payment records during their retention period.
8. Security
Data is encrypted in transit and at rest, access is limited to staff and contractors who need it, and we log and review access to sensitive data. No system is perfectly secure; if a breach affects your data we will notify you and any authority as required by law.
9. Children
The Services are for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
10. Marketing
We send service emails about your account without your opt-in because they are part of the Services. We send marketing emails only where you have opted in or where the law allows it for existing customers, and every marketing email has an unsubscribe link.
11. Changes
We will post any updated policy on this page with a new version number and date, and notify you by email or in your dashboard for material changes.
12. Contact
Bold Funded Ltd, Saint Lucia. Email: support@boldfunded.com.