We collect the following categories of personal data:

• Identity data — name, date of birth, National Registration Card details, selfie and liveness images, address, and source-of-funds information collected during KYC.
• Contact data — phone number and email address.
• Financial data — deposits, withdrawals, orders, positions, balances, and linked mobile-money or bank identifiers.
• Technical data — device information, IP address, app version, and usage analytics.

We process your data to open and operate your account; verify your identity and screen against sanctions and politically-exposed-person lists as required by the Financial Intelligence Centre Act; execute your deposits, conversions, orders, and withdrawals; detect fraud and market abuse; meet record-keeping obligations; and improve the product. We do not sell your personal data.

We share data only as needed with our regulated partners: identity-verification and AML-screening providers, U.S. and Zambian brokerage partners, banks and mobile-money operators, cloud infrastructure providers, and communications providers. We disclose data to regulators and law enforcement where legally required — including the Securities and Exchange Commission, Bank of Zambia, and Financial Intelligence Centre.

Some partners process data outside Zambia (for example, U.S. brokerage partners and cloud providers). Where data leaves Zambia, we ensure a lawful transfer mechanism and contractual safeguards consistent with the Data Protection Act, 2021.

We retain KYC and transaction records for at least ten years after your account closes, as required by Zambian anti-money-laundering law. Technical and analytics data is kept for shorter periods appropriate to its purpose.

All connections use TLS encryption. Sensitive data is encrypted at rest. Access is role-based and logged. Identity documents are stored in segregated, access-controlled storage. We test our defences regularly and operate continuous monitoring.

Under the Data Protection Act, 2021 you may request access to, correction of, or deletion of your personal data; object to certain processing; and lodge a complaint with the Office of the Data Protection Commissioner. Some rights are limited where we must retain data by law. To exercise a right, email privacy@ophirmarkets.com.

We use strictly-necessary cookies for login sessions and privacy-respecting product analytics to understand how the platform is used. You can control optional analytics in Settings once logged in.

We will notify you of material changes through the app or by email at least 14 days before they take effect. The “last updated” date above reflects the latest revision.