1. Who We Are
LeziFx is a prediction trading platform. When we refer to "LeziFx," "we," "us," or "our" in this policy, we mean the operator of the LeziFx platform accessible at lezifx.com and app.lezifx.com.
For privacy enquiries, contact us at [email protected].
2. Data We Collect
We collect only the minimum data necessary to operate the platform safely and process payments.
| Category | Data collected | Why we collect it |
|---|---|---|
| Account | Full name, email address, phone number, hashed password | To create and manage your account and verify your identity |
| Payments | M-Pesa phone number, transaction reference numbers, deposit and withdrawal amounts | To process deposits and withdrawals via Safaricom M-Pesa |
| Trading | Trade history, stake amounts, win/loss records, wallet balance | To operate the trading engine, display your history, and calculate payouts |
| Technical | IP address, device type, browser, session timestamps | To secure your account, detect fraud, and maintain platform stability |
We do not collect: government-issued ID documents, facial images, or biometric data of any kind.
3. How We Use Your Data
- To create and maintain your account.
- To process M-Pesa deposits and withdrawals through Safaricom Daraja API.
- To display your trade history, wallet balance, and leaderboard position.
- To send transactional notifications (deposit confirmations, withdrawal updates) via email.
- To detect and prevent fraud, account manipulation, and money laundering.
- To comply with applicable legal obligations.
We do not use your data for advertising profiling or sell it to any third party for marketing purposes.
4. Legal Basis for Processing
- Contract: Processing your account data and payments is necessary to provide the service you signed up for.
- Legitimate interest: Fraud prevention, security monitoring, and platform stability.
- Legal obligation: Retaining transaction records as required by applicable financial regulations.
5. Third-Party Services
We share limited data with the following third parties solely to operate the platform:
- Safaricom (M-Pesa Daraja API) — receives your M-Pesa phone number and transaction amounts to process payments. Governed by Safaricom's own privacy policy.
- Brevo (email delivery) — receives your email address to deliver transactional emails. No marketing use.
- Railway (cloud hosting) — hosts the platform infrastructure. Your data is stored on servers within their infrastructure. Data is not shared with Railway for their own use.
No other third parties receive your personal data.
6. Data Retention
We retain your account and transaction data for as long as your account is active and for a minimum of 5 years after account closure to comply with applicable financial record-keeping requirements.
You may request deletion of your account at any time. Where legal retention obligations apply, we will anonymise rather than delete the relevant records.
7. Data Security
We implement industry-standard security measures to protect your data, including:
- AES-256-GCM encryption for sensitive credentials stored in our database.
- TLS encryption for all data in transit.
- Password hashing using BCrypt — we never store your password in plain text.
- Access controls limiting which staff can access personal data.
No system is completely immune to security risks. If you suspect a breach affecting your account, contact us immediately at [email protected].
8. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your account and personal data, subject to legal retention obligations.
- Portability — request your trade history and account data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, email [email protected] with the subject line "Privacy Request." We will respond within 30 days.
9. Cookies
The LeziFx trading platform uses essential cookies only — session tokens necessary to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
10. Children's Privacy
LeziFx is strictly for users aged 18 and above. We do not knowingly collect data from anyone under 18. If we discover a user is under 18, their account will be suspended and their data deleted.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or a notice on the platform. The date at the top of this page reflects when the policy was last revised.
12. Contact
For any privacy-related questions or requests, contact us at [email protected].