PRIVACY POLICY

PRIVACY POLICY

BEAM MARKET TECHNOLOGIES LIMITED

Last Updated: 20th May, 2026

This Privacy Policy (“Policy”) explains how Beam Market Technologies Limited (“Beam”, “we”, “our”, or “us”) collects, uses, stores, processes, discloses and protects your personal data when you access or use the Beam mobile application, website, APIs, software, products and related services (collectively, the “Platform”).

This Policy applies to all users of the Platform and should be read together with our Terms of Use and any other applicable policies or disclosures.

By accessing or using the Platform, you consent to the collection and processing of your personal data in accordance with this Policy.

1. ABOUT BEAM

Beam is a financial technology platform that enables users to access:

asset-backed lending services powered by Crednet Technologies Limited;

cryptocurrency buy and sell services facilitated through Quidax Technologies Limited;

U.S. securities trading through Alpaca Securities LLC and Magnartis Finance & Investment Ltd;

Nigerian securities trading and related investment services.

Because Beam operates within highly regulated financial sectors, we collect and process certain information to comply with legal, regulatory and operational obligations.

2. DEFINITIONS

“Applicable Laws” means all data protection, privacy, financial services, anti-money laundering, securities and virtual asset laws applicable to Beam and its users.

“Personal Data” means any information relating to an identified or identifiable natural person.

“Processing” means any operation performed on Personal Data including collection, storage, use, transmission, disclosure, deletion or analysis.

“Sensitive Personal Data” includes biometric data, financial information, government-issued identification, and other sensitive categories recognized under applicable law.

3. INFORMATION WE COLLECT

We may collect the following categories of information:

3.1 Information You Provide Directly

When you create an account or use the Platform, we may collect:

• Identity Information
• full name;
• date of birth;
• nationality;
• gender;
• photograph;
• government-issued ID;
• passport details;
• BVN/NIN where applicable;
• tax identification information.
• Contact Information
• email address;
• phone number;
• residential address;
• mailing address.
• Financial Information
• bank account details;
• card information;
• wallet addresses;
• transaction history;
• trading activity;
• investment information;
• source of funds;
• income information.
• Verification Information
• selfies and biometric identifiers;
• video verification;
• signatures;
• KYC documentation.
• Communications
• customer support interactions;
• complaints;
• emails;
• chat communications;
• survey responses.

3.2 Information Collected Automatically

When you use the Platform, we may automatically collect:

• IP address;
• device identifiers;
• operating system;
• browser type;
• app version;
• device fingerprinting information;
• geolocation data;
• cookies and tracking information;
• login activity;
• usage analytics;
• network and connection information.

3.3 Information from Third Parties

We may receive information from:

• identity verification providers;
• payment processors;
• banking partners;
• blockchain analytics providers;
• regulators;
• fraud prevention services;
• securities brokers;
• crypto service providers;
• sanctions screening providers;
• public databases.

4. HOW WE USE YOUR INFORMATION

We process your information for the following purposes:

4.1 To Provide Services

Including to:

• create and manage accounts;
• process transactions;
• facilitate lending services;
• facilitate crypto trading;
• facilitate securities trading;
• manage collateralized assets;
• execute investment orders;
• process withdrawals and deposits.

4.2 Compliance and Legal Obligations

Including to:

• conduct KYC and AML checks;
• verify identity;
• monitor transactions;
• prevent fraud;
• detect suspicious activities;
• comply with sanctions laws;
• satisfy regulatory reporting obligations;
• comply with court orders and law enforcement requests.

4.3 Security and Risk Management

Including to:

• secure user accounts;
• authenticate users;
• monitor cybersecurity threats;
• detect unauthorized access;
• protect against fraud and abuse;
• maintain Platform integrity.

4.4 Platform Improvement

Including to:

• analyze user behavior;
• improve user experience;
• develop products;
• conduct research and analytics;
• test features;
• troubleshoot technical issues.

4.5 Marketing and Communications

Where permitted by law, we may:

• send service-related notifications;
• provide product updates;
• send marketing communications;
• conduct promotions and campaigns.

You may opt out of marketing communications at any time.

5. LEGAL BASIS FOR PROCESSING

We process Personal Data based on:

• your consent;
• contractual necessity;
• compliance with legal obligations;
• legitimate business interests;
• fraud prevention and security purposes.

6. SHARING OF PERSONAL DATA

We may share your information with:

6.1 Service Providers and Partners

Including:

• Crednet Technologies Limited;
• Quidax Technologies Limited;
• Alpaca Securities LLC;
• Magnartis Finance & Investment Ltd;
• payment providers;
• cloud hosting providers;
• analytics providers;
• compliance vendors;
• customer support vendors.

6.2 Regulatory Authorities

We may disclose information to:

• securities regulators;
• central banks;
• tax authorities;
• anti-money laundering agencies;
• law enforcement agencies;
• courts and tribunals.

6.3 Corporate Transactions

In the event of:

• merger;
• acquisition;
• restructuring;
• sale of assets;
• financing transactions,

your data may be transferred as part of the transaction.

7. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in jurisdictions outside Nigeria, including jurisdictions where our service providers and partners operate.

Where cross-border transfers occur, Beam shall implement appropriate safeguards including:

• contractual protections;
• data transfer agreements;
• regulatory compliance mechanisms;
• security measures required under applicable laws.

8. DATA RETENTION

We retain Personal Data for as long as necessary to:

• provide services;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• satisfy regulatory retention requirements.
• Retention periods may vary depending on:
• account activity;
• regulatory requirements;
• nature of the information;
• legal obligations.

9. YOUR PRIVACY RIGHTS

Subject to Applicable Laws, you may have the right to:

• access your Personal Data;
• request correction of inaccurate data;
• request deletion of certain information;
• withdraw consent;
• object to processing;
• request restriction of processing;
• request portability of your data;
• lodge complaints with regulators.

Requests may be submitted through our designated support channels.

Beam may refuse requests where legally permitted or required.

10. COOKIES AND TRACKING TECHNOLOGIES

We may use:

• cookies;
• software development kits (SDKs);
• analytics tools;
• tracking pixels;
• local storage technologies.
• These technologies help us:
• authenticate users;
• improve performance;
• analyze usage;
• personalize experiences;
• prevent fraud.

You may disable cookies through your browser settings, although this may affect functionality.

11. SECURITY MEASURES

We implement reasonable technical, administrative and organizational safeguards including:

• encryption;
• access controls;
• multi-factor authentication;
• transaction monitoring;
• penetration testing;
• security audits;
• cybersecurity controls.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. BLOCKCHAIN AND PUBLIC LEDGERS

Certain crypto transactions may be recorded on public blockchain networks.

Blockchain transactions are:

• public;
• immutable;
• not controlled by Beam.

Information written to a blockchain may remain permanently visible and cannot generally be deleted.

13. CHILDREN’S PRIVACY

The Platform is not intended for individuals under the age of eighteen (18).

Beam does not knowingly collect information from minors.

If we become aware that data relating to a minor has been collected, we may delete such information and terminate the associated account.

14. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites or services.

Beam is not responsible for:

• third-party privacy practices;
• third-party content;
• external websites;
• partner systems.

Users should review third-party privacy policies separately.

15. AUTOMATED DECISION-MAKING

Beam and its partners may use automated systems and algorithms for:

• fraud detection;
• risk assessment;
• credit scoring;
• transaction monitoring;
• compliance reviews.

These systems may affect account approvals, lending decisions or transaction restrictions.

16. MARKETING COMMUNICATIONS

You may receive:

• promotional messages;
• newsletters;
• product announcements;
• service updates.

You may unsubscribe from marketing communications at any time using available opt-out mechanisms.

Service-related communications may still be sent where necessary.

17. REGULATORY DISCLOSURES

Because Beam operates within regulated financial sectors, we may be legally required to:

• verify identity;
• monitor transactions;
• report suspicious activities;
• disclose information to regulators;
• retain records for statutory periods.

You acknowledge and consent to such disclosures where required by law.

18. CHANGES TO THIS POLICY

Beam may amend this Policy from time to time.

Updated versions shall become effective upon publication on the Platform.

Your continued use of the Platform constitutes acceptance of revised versions.

19. CONTACT INFORMATION

For privacy-related inquiries or complaints, contact:

Beam Market Technologies Limited

Email: [privacy@beammarket.com]

Address: [●]

Website: [●]

20. GOVERNING LAW

This Policy shall be governed by the laws of the Federal Republic of Nigeria and applicable international data protection laws where relevant.

21. CONSENT

By accessing or using the Platform, you:

acknowledge that you have read and understood this Privacy Policy;

consent to the processing of your Personal Data as described herein;

authorize Beam and its partners to process and share information where necessary to provide services and comply with Applicable Laws.