Privacy Dashboard
EN

Onchain

Crypto.com Onchain Privacy Notice

The Crypto.com Onchain Privacy Notice (“Privacy Notice”) explains how Onchain Wallet Limited (formerly known as Growth Labs), a company incorporated under the laws of the Cayman Islands (the "Data Controller", “we”, “us”, “Crypto.com”) collects, uses, and protects your personal data through your use of the Services provided on our Site and Crypto.com Onchain App. Where we need to collect personal data by law, or under the terms of a contract we have with you, and you refuse to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you – for example, to provide you Services.
Dernière mise à jour: 29 Apr 2026

1. Important information and who we are

  • Controller: Onchain Wallet Limited (formerly known as Growth Labs), incorporated in the Cayman Islands, is responsible for your data.
  • Contact: Reach our Data Protection Officer at [email protected] for any privacy inquiries.
  • Complaints: You have the right to contact the Cayman Islands Ombudsman (https://ombudsman.ky). We appreciate the chance to resolve concerns directly first.
  • Minors: Our Services are not intended for individuals under 18.
  • Glossary: You can use it to understand the meaning of some of the terms used in this Privacy Notice.

2. The data we collect

We collect the following limited categories of personal data:
  • Wallet & Transactional Data: Public wallet addresses and transaction history.
  • Technical & Usage Data: IP addresses, device types, operating systems, login data, and app interaction logs (e.g., install time, event name).
  • Profile & Communications Data: Requests for products/services, feedback, and customer support communications.
  • Linked Data: Information regarding whether you have a Crypto.com App account, if you elect to connect it to the Crypto.com Onchain App. For more information, please refer to our Privacy Dashboard.
  • Marketing Data: Your preferences in receiving marketing from us or third parties, your survey responses and communication preferences.

3. How we use your personal data?

We process your data only where the Data Protection Act of the Cayman Islands (“DPA”) or other applicable laws (GDPR/CCPA) allow.
Purpose / Activity
Data Categories
Lawful Basis
Service Delivery:
  • Wallet & Transactional Data,
  • Profile & Communications Data, 
  • Linked Data
  • Performance of a Contract
Security & Fraud:
  • Wallet & Transactional Data, 
  • Technical & Usage Data, 
  • Marketing Data
  • Legitimate Interests
Relationship Management:
  • Profile & Communications Data, 
  • Wallet & Transactional Data, 
  • Marketing Data
  • Performance of a Contract 
  • Consent, if required
Improvement & Analytics:
  • Technical & Usage Data, 
  • Profile & Communications Data
  • Legitimate Interests 
  • Consent, if required
Marketing:
  • Technical & Usage Data, 
  • Profile & Communications Data, 
  • Marketing Data
  • Legitimate Interests 
  • Consent, if required

4. Data Sharing and International Transfers

  • Disclosures: We may share data with service providers, group affiliates, or law enforcement where the law requires.
  • International Transfers: Data may be transferred outside the Cayman Islands. We ensure protection via Ombudsman-recognized safeguards, such as transferring to "adequate" jurisdictions (e.g., EEA) or authorized adequacy assessments.

5. Security and Retention

  • Security: We implement technical and organizational measures ( such as encryption, pseudonymization, and access controls).
  • Retention: Data is kept as long as necessary for legal, tax, or fraud prevention purposes (e.g., up to 6 years for potential litigation).
BLOCKCHAIN REALITY: Blockchains are public, decentralized, and immutable. We cannot delete data written to a blockchain, and your right to erasure may not be fully enforceable on-chain. Erasure only applies to data held on our private systems.

6. Your Legal Rights

Under the DPA, you have the following rights:
  • Access & Correction: Request a copy of your data or update inaccurate records.
  • Erasure: Request deletion of data where no legal ground exists for continued processing.
  • Objection & Restriction: Object to processing based on legitimate interests or request a pause in processing.
  • Stop Marketing: Request that we cease processing for direct marketing at any time.
  • Data Portability: Request a transfer of automated data you provided to us.
We aim to respond to all legitimate requests within 30 days (or 21 days for stop-processing/automated decision requests).

7. Glossary

Legitimate Interest means the interest of our business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted by law). You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us.
Performance of a Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Comply with a legal obligation means processing your personal data where it is necessary for compliance with a legal obligation that we are subject to.
Site means the website at www.crypto.com.
Services shall have the same meaning as given in Section 3.1 of the Terms and Conditions.
Crypto.com means Onchain Wallet Limited and its affiliates.
Crypto.com App means the Crypto.com wallet mobile application.
Crypto.com Onchain App means the Crypto.com Onchain mobile application.