Legal
Privacy Policy
How Lyma Win collects, uses, and protects your personal information in the mobile app and on our website.
This Privacy Policy explains how Lyma Win ("we", "us", or "our") handles personal information when you use our Android and iOS mobile applications, our website, and related services connected to https://api.lymawin.com.
By creating an account or using our services, you acknowledge that you have read this policy. If you do not agree, please do not use the app or website.
1. Who is responsible for your data
Lyma Win operates the platform and is responsible for personal data processed in connection with your account, identity verification, and platform activity.
For privacy-related requests, contact us at info@lymawin.com. We will respond within a reasonable time and in line with applicable law.
2. Scope
This policy applies to:
- The Lyma Win mobile app (package name com.lymawin.app on Android)
- Our public website and any web pages that link to this policy
- Customer support and email communications we send to you
- Back-office processing performed on our servers to run deposits, packages, rewards, transfers, withdrawals, and KYC review
3. Information we collect
Account and profile
- Email address, username, and password (stored only as a secure hash on our servers)
- Email verification status and one-time verification codes (hashed or time-limited)
- Optional two-factor authentication configuration
- Profile details you choose to provide (for example display name or profile photo)
- Referral code and referral relationships when you invite others or sign up with a code
Financial and platform activity
- USDT balance, ledger entries, package purchases, reward accruals, and points exchanges
- Deposit requests, uploaded deposit proofs, and approval status
- Withdrawal requests, payout methods, and transaction references
- Internal transfers between users, payment methods you save, and wallet or crypto addresses you provide
- Analytics and lifetime statistics derived from your account activity on our platform
Identity verification (KYC)
- Government ID images (front, back, passport, or driver license as applicable)
- Selfie or live-capture photo for identity matching
- Full legal name, document type and number, date of birth, and nationality when you submit them
- Verification status, reviewer notes, and resubmission reasons
Device and technical data
- Authentication tokens stored in secure device storage
- Optional biometric unlock preference (processed on your device via the OS; we do not receive your fingerprint or face data)
- Optional saved credentials on your device when you enable biometric login
- Camera and photo library access when you scan QR codes, upload profile or KYC images, or attach deposit proofs
- Network connectivity, app version, and basic diagnostic logs needed to operate the service
Communications
- In-app notifications we send about KYC, withdrawals, transfers, rewards, and system messages
- Support emails or messages you send to us
4. How we use your information
- Create and secure your account, authenticate sessions, and prevent fraud
- Operate deposits, packages, daily rewards, points exchange, transfers, and withdrawals
- Verify your identity, meet compliance obligations, and assign KYC-based reward tiers
- Provide customer support and respond to your requests
- Send service-related emails (verification, security, and account notices)
- Maintain ledger integrity, auditing, and dispute resolution
- Improve reliability and security of the app and APIs
- Comply with legal obligations and enforce our Terms of Service
5. Legal bases for processing (where applicable)
Depending on your location, we rely on one or more of the following: performance of a contract (providing the platform you signed up for), legitimate interests (security, fraud prevention, and service improvement), consent (where required for optional features), and legal obligation (KYC, tax, or regulatory requirements).
7. Data retention
We keep information for as long as your account is active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal retention requirements.
KYC documents and verification records may be retained for a longer period where required for anti-fraud, audit, or regulatory compliance. You may request deletion subject to limits described in Section 9.
Ledger and transaction records may be retained even after account closure where necessary for financial integrity and legal compliance.
8. Security
We use industry-standard measures including encrypted connections (HTTPS/TLS), hashed passwords, role-separated APIs, secure token storage on devices, and access controls for operator tools.
No method of transmission or storage is completely secure. You are responsible for keeping your password and device secure.
9. Your rights and choices
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to receive a copy in a portable format.
You can update profile information in the app where available. To exercise other rights or request account deletion, email us at info@lymawin.com. We may need to verify your identity before fulfilling a request.
You can disable biometric login in the app and revoke camera or photo permissions in your device settings; some features may not work without those permissions.
10. Children
Our services are not directed to anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a minor has provided us data, contact us and we will delete it promptly.
11. International users
Your information may be processed on servers located outside your country. We take steps designed to ensure an appropriate level of protection consistent with this policy.
12. Third-party links and wallets
The app may open external links (for example app stores, email, or blockchain wallet apps such as MetaMask). Those services have their own privacy policies. We are not responsible for third-party practices.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be communicated in the app or by email where appropriate.
14. Contact
Questions about this policy: info@lymawin.com. See also our Contact page.