Privacy Policy

Infinity Hash Limited (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information and informs you of your privacy rights and how applicable laws safeguard your data when you: Visit our website (infinity-hash.com) or its subdomains (collectively, the “website”); Complete surveys, subscribe to newsletters, or communicate with our support team (“Voluntary provision of data”); and/or use our services.

Infinity Hash Limited is a company duly organized and existing under the laws of Hong Kong, with BRN (Business Registration Number): 77357234, having its registered address at World Trust Tower, 50 Stanley Street, Central, Hong Kong. We provide our services through our website and dashboard, ensuring compliance with relevant regulatory requirements.

This Privacy Policy aims to inform you about how Infinity Hash Limited collects and processes your personal data through your use of our website and/or services and/or voluntary provision of data, including:

• Data you provide to us directly;
• Data we collect automatically through your use of the website and/or services;
• Data obtained when you sign up for newsletters, complete surveys, or communicate with our support.

It is important to read this Privacy Policy alongside any other relevant privacy notices or fair processing policies that we may provide in specific situations when collecting or processing your data. This ensures you are fully aware of how and why we use your personal information. This Privacy Policy supplements our other policies and does not override them. Infinity Hash Limited is responsible for your personal data and its processing.

This version was last updated on the 28th of May 2026. We may update this Privacy Policy periodically. Any changes will be indicated by the “Last Updated” date above. If we make material changes to this Privacy Policy, we may notify you by posting an updated version on our website and/or services or by sending direct notifications where appropriate. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

We collect the following types of data:

Personal Data

• First name and last name
• Date and place of birth
• Primary citizenship
• Email address
• Residential address (if required for compliance)
• Confirmation of the current residential address (e.g., bank statement, utility bill issued within the last three months)
• IP addresses
• Login dates and times
• Information provided through website forms (e.g., support or contact requests)

Financial & Compliance Data

• Records of purchases, and mining rewards, including applicable fees
• KYC, AML, and verification data (including proof of identity, “selfie” verification, and wallet information)
• Source of funds for purchases and transactions
• Users receive the privacy policies of payment providers before using their services and can opt out by declining to use them

Technical & Analytics Data

• Device information, browser type, and browsing actions (hashed and/or delete where possible based on compliance requirements).
• Access log records such as IP address and user agent (hashed and/or delete where possible based on compliance requirements).
• Ad-click identifiers (e.g., URL parameters) if you arrive via an advertisement, stored temporarily to measure campaign performance via our backend.

We collect data through the following methods:

• Website forms – Support and contact forms collect an email address, and optionally, a name and message details.
• KYC verification – We verify user identity through our dashboard and conduct B2B verification in person or via video calls.
• Cookies & tracking – We use cookies strictly for authentication and essential user session management.
• Cloudflare protection – We utilize Cloudflare for DDoS protection, which may collect IP address and security-related data.
• Third-party sources – We may receive data from public databases, marketing partners, or compliance providers.

We use collected data for the following purposes:

• Providing our services – Creating user accounts, managing login sessions, processing financial transactions, and operating the dashboard.
• Compliance – Conducting KYC/AML checks to prevent money laundering and terrorist financing.
• User experience improvements – Analyzing website usage to improve navigation and design.
• Security and fraud prevention – Ensuring the integrity of accounts, transactions, and our platform.
• Marketing measurement – We securely process and share limited, hashed conversion data with our advertising partners (such as Google) solely to measure the effectiveness of our advertising campaigns, without utilizing live front-end tracking pixels.

We do not sell personal data or share it with third parties unless necessary to provide our services.

We share data only when required for service delivery or compliance:

• KYC and AML verification – We share KYC data with KYC and payment providers when legally required or when users choose to engage with them.
• Regulatory authorities – We may disclose data in response to lawful requests from regulators, law enforcement, or financial authorities.
• Essential service providers – We use third-party providers for security (Cloudflare) who may process limited technical data.
• Advertising partners – We may share specific, securely hashed transaction signals with platforms like Google Ads for offline conversion tracking and ad measurement. We do not use third-party tracking pixels on our website frontend.

We take extensive measures to secure user data:

• Encryption – Login credentials and sensitive data are encrypted.
• Restricted access – Only authorized personnel can access personal data.
• Secure infrastructure – Data is stored on secure servers with industry-standard protections.
• Retention periods – We store certain data as required by Hong Kong law.

Any data we are not required to keep for a prolonged period of time due to governmental or legal requirements is deleted as soon as it ceases to be useful for providing our service or leaves the boundaries set forth in this privacy policy.

Users have the following rights regarding their personal data:

• Access – Request a copy of the personal data we hold.
• Deletion – Request data deletion unless retention is required for compliance (e.g., AML regulations).
• Correction – Request updates to incorrect or outdated information.
• Restriction – Request limited processing of personal data under certain circumstances.

To exercise these rights, users may contact us at support@infinity-hash.com or compliance@infinity-hash.com.

We use the following tracking technologies:

• Session cookies – Required for login authentication and maintaining secure user sessions.
• Ad Measurement – We do NOT use any live front-end analytics tools or user tracking scripts (like Google Analytics). However, if you interact with one of our advertisements, we may temporarily capture standard ad-click parameters (URL parameters) to securely measure campaign performance via our backend systems.

For any questions or requests regarding this Privacy Policy, you can contact us at:

• Support inquiries: support@infinity-hash.com
• Compliance-related requests: compliance@infinity-hash.com

This Privacy Policy reflects our commitment to compliance with Hong Kong law and our dedication to data protection and transparency. Please review this policy regularly to stay informed of updates.