CODAC Portal Privacy Notice
1. Privacy Principles
Personal data shall be handled according to applicable privacy and data-protection requirements and the principles of transparency, legitimate purpose, proportionality, security, accuracy, and responsible retention.
CODAC shall collect and process only personal data reasonably necessary for declared and legitimate purposes.
2. Personal Information Controller
Personal data processed through the CODAC Portal is handled under the authority of the applicable CODAC-COIN Project Operator acting as the Personal Information Controller to the extent required by applicable privacy law. The identity of the legally responsible operating person or entity shall correspond to the applicable official registration, organizational, and privacy-compliance records.
Privacy Contact: [email protected]
3. Personal Data That May Be Processed
Depending on the CODAC service or account function used, applicable personal data may include:
- Full legal name and other identity information.
- Email address, mobile number, country, and contact information.
- Identity-verification information and applicable identification documents.
- Account identifiers, account category, verification status, and security records.
- Device, login, access, authentication, and security-event information reasonably required for account protection.
- Participation, qualification, task, points, learning, merchant, trading-verification, and reward records.
- Public external-wallet addresses and applicable wallet-ownership verification records.
- Applicable blockchain transaction hashes, block references, public transaction information, and verified trading records.
- Grand Reward eligibility, verification, approval, tax, claim, release, and transaction-reference records.
- Support requests, complaints, investigation records, evidence, appeals, and account-security communications.
- Tax, compliance, or other information legally required for an applicable transaction or Grand Reward release.
4. Information CODAC Does Not Require
CODAC does not require a member to provide a cryptocurrency wallet seed phrase or private key for Portal registration, wallet linking, ownership verification, participation verification, or designation of a Claim Destination Wallet.
Members must never disclose wallet seed phrases, private keys, wallet passwords, authentication codes, one-time passwords, or other secret wallet credentials to CODAC personnel or submit them through support messages, free-text forms, or account records. Normal secure CODAC Portal password-entry, login, password-creation, and password-reset functions are not included in this prohibition.
5. Purposes of Processing
Personal data may be processed for applicable purposes including:
- Creating and administering a CODAC Portal account.
- Verifying identity and One Person–One Account compliance.
- Providing account authentication and security.
- Detecting fraud, duplicate accounts, manipulation, unauthorized access, and other prohibited activity.
- Recording participation and qualification progress.
- Verifying applicable Channel, Merchant, Trading, Organization, or other qualified activities.
- Verifying ownership of a linked external wallet.
- Verifying applicable blockchain or trading records.
- Administering Grand Reward eligibility, approval, claim, tax, security, and release procedures.
- Responding to support requests, complaints, security incidents, and appeals.
- Maintaining auditable records.
- Complying with applicable legal, tax, regulatory, privacy, security, and lawful-order requirements.
6. Lawful Basis for Processing
CODAC shall process personal data only where an applicable lawful basis exists. Depending on the processing activity, this may include the data subject's consent, performance of an applicable service or agreement, compliance with a legal obligation, protection of lawful interests and security, or another lawful basis recognized by applicable law.
7. External Wallet and Blockchain Information
Personal external wallets remain under the control of their lawful owners. CODAC wallet linking does not transfer ownership or control of the external wallet to CODAC.
Where blockchain verification is required, CODAC may process applicable public blockchain information such as wallet addresses, transaction hashes, block references, transaction amounts, and other public records necessary to verify an approved activity.
Public blockchain information may remain publicly visible on the applicable blockchain independently of the CODAC Portal.
8. No Member Deposit Requirement
CODAC Portal registration does not require a member deposit or wallet funding. Personal data collected for account registration or verification shall not be treated as evidence that a member has deposited personal funds into the CODAC Portal.
9. Data Sharing and Authorized Recipients
Personal data may be disclosed only where reasonably necessary and permitted by applicable law, including to authorized service providers or persons supporting:
- Identity and account verification.
- Email, OTP, authentication, or account security.
- Hosting, infrastructure, database, or cybersecurity services.
- Fraud prevention and incident investigation.
- Payment, blockchain, or trading verification where applicable.
- Tax, accounting, audit, or professional services.
- Legal counsel and authorized compliance personnel.
- Government, regulatory, judicial, law-enforcement, or other lawful authorities where disclosure is legally required.
Access shall be limited according to applicable purpose, authorization, confidentiality, security, and legal requirements.
10. Sale of Personal Data
CODAC does not sell member personal data to advertisers or unrelated third parties as a condition of Portal registration or participation.
11. Data Security
CODAC shall apply reasonable organizational, physical, and technical safeguards appropriate to the nature of the personal data and the applicable risks.
Safeguards may include access restrictions, authentication controls, encryption where applicable, security monitoring, account logs, incident procedures, authorized-personnel controls, and auditable security records.
12. Data Retention
Personal data shall be retained only for as long as reasonably necessary for the declared purpose, account administration, security and fraud prevention, completion of applicable transactions or reward procedures, establishment or defense of legal claims, compliance with applicable tax or legal obligations, and other legitimate purposes permitted by law.
Data that is no longer required shall be securely deleted, anonymized, blocked, or otherwise disposed of in accordance with applicable retention and legal requirements.
13. Data Subject Rights
Subject to applicable law, a data subject may exercise applicable rights concerning their personal data, including the right to:
- Be informed about personal-data processing.
- Request access to applicable personal data.
- Object to applicable processing.
- Request correction or rectification of inaccurate data.
- Request erasure or blocking where legally available.
- Exercise applicable data-portability rights.
- Lodge a privacy complaint with the appropriate authority.
- Exercise other rights provided by applicable privacy law.
14. Requests, Corrections and Complaints
Privacy inquiries, access or correction requests, objections, complaints, or other applicable data-subject requests may be submitted through:
Email: [email protected]
CODAC may require reasonable identity verification before acting on a request in order to prevent unauthorized access to another person's information.
15. Automated Processing
Where automated processing, profiling, fraud detection, or automated verification materially affects a member, CODAC shall apply the disclosures, safeguards, human review, or other protections required by applicable law and CODAC policy.
16. Cross-Border Processing
Where personal data is processed, stored, or accessed outside the member's country, applicable privacy, security, contractual, transfer, and legal safeguards shall be applied where required.
17. Privacy Notice Updates
CODAC may update this Privacy Notice when data-processing practices, security procedures, services, legal requirements, or applicable CODAC policies materially change.
Where required, affected users shall be provided appropriate notice, acknowledgment, consent, or other lawful mechanism before a material change is applied.
18. Relationship With CODAC Terms
This Privacy Notice operates together with the CODAC Portal Common Terms & Conditions, applicable account-specific terms, security procedures, and other officially published CODAC policies.
Applicable privacy and data-protection law shall prevail where legally required.
© 2026 CODAC-COIN. All rights reserved.
Private Address and Precise Location
Detailed registered or official addresses, precise GPS coordinates, and location-verification data are treated as private account information. They are not intended for routine viewing by CODAC staff or administrators. Access, when technically necessary, must be limited to specifically authorized verification, security, compliance, legal, or account-protection functions and must follow access-control, confidentiality, logging, retention, and data-minimization safeguards.
Precise GPS location is requested only after the data subject takes an affirmative action and grants browser permission. CODAC should collect and retain only the location data necessary for a declared, legitimate purpose. Public IP-based location must not be silently obtained through an external client-side service; any future IP/location security processing must be disclosed and governed by the applicable privacy, security, retention, and lawful-processing rules.