CashMe Privacy Policy

CASHME PRIVACY POLICY

Effective Date: 2 August 2026
Last Updated: 2 August 2026
Version: 1.0

CashMe (“CashMe”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information collected through our services.

This Privacy Policy explains how CashMe collects, uses, stores, shares and protects personal data when you access or use CashMe through our website, applications, Telegram, WhatsApp, customer-support channels, exchange services, transfer services and any other CashMe products or services.

This Privacy Policy should be read together with the CashMe Terms of Service and any additional privacy notices or product-specific terms presented to you.

1. WHO CONTROLS YOUR PERSONAL DATA

For the purposes of applicable data-protection laws, CashMe determines how and why personal data is processed in connection with the Services and may therefore act as a data controller.

Where another party processes personal information on CashMe’s instructions, that party may act as a data processor or service provider.

CashMe may in the future be incorporated, reorganized or transferred to a registered company or other lawful business entity. Where this occurs, responsibility for relevant personal data may be transferred to the successor CashMe operator in accordance with applicable law.

2. SCOPE OF THIS POLICY

This Privacy Policy applies to personal information processed in connection with:

• the CashMe website;
• CashMe customer accounts;
• CashMe exchange services;
• crypto-to-fiat and fiat-to-crypto transactions;
• user-to-user transfers where available;
• bank and mobile-money transactions;
• Telegram and WhatsApp CashMe services;
• CashMe customer support;
• KYC and identity verification;
• tellers, agents and operational personnel;
• fraud, security and compliance monitoring;
• promotional or referral programs where offered;
• future CashMe wallet, merchant-payment or transfer functionality; and
• other services made available under the CashMe name.

Third-party services may maintain their own privacy policies.

3. PERSONAL INFORMATION WE MAY COLLECT

Depending on the Services you use, we may collect the following categories of personal information.

3.1 Identity Information

This may include:

• full legal name;
• date of birth;
• nationality;
• country of residence;
• gender where relevant and lawfully required;
• government-issued identification number;
• national identity card;
• passport;
• driver’s licence or other identification document;
• photograph or selfie used for identity verification; and
• other verification information.

We will only request information that is reasonably necessary for the applicable purpose.

3.2 Contact Information

This may include:

• telephone number;
• email address;
• residential or postal address;
• Telegram account information;
• WhatsApp number; and
• other contact details supplied to CashMe.

3.3 Account Information

This may include:

• CashMe account identifier;
• username;
• authentication information;
• account status;
• verification status;
• preferred language;
• country;
• account settings; and
• security-related account information.

Passwords should be stored using appropriate secure cryptographic methods rather than in readable form.

3.4 Financial and Payment Information

When you use exchange or payment Services, we may collect information such as:

• bank name;
• account holder name;
• bank account details;
• mobile-money provider;
• mobile-money number;
• payment reference;
• payment amount;
• currency;
• proof of payment;
• transaction status;
• payer or beneficiary information; and
• information necessary to verify receipt or payment of funds.

CashMe should not collect payment information that is unnecessary for providing the relevant Service.

3.5 Virtual-Asset and Blockchain Information

We may collect or process:

• blockchain wallet addresses;
• transaction hashes;
• blockchain networks;
• virtual-asset type;
• transaction amount;
• sending and receiving addresses;
• transaction timestamp;
• transaction status; and
• other blockchain-related information.

Certain blockchain information is publicly available by the nature of blockchain technology.

Once information is recorded on a public blockchain, CashMe may not have the technical ability to alter or erase that blockchain record.

3.6 Transaction Information

We may maintain information concerning:

• quotations;
• exchange rates;
• fees;
• buy and sell orders;
• payment methods;
• transaction amounts;
• recipients;
• transaction history;
• cancelled or failed transactions;
• teller assignments;
• settlement information;
• refunds;
• disputes;
• chargebacks; and
• related communications.

3.7 KYC AND COMPLIANCE INFORMATION

To comply with legal obligations and manage financial-crime risk, we may collect:

• identity documents;
• verification results;
• sanctions-screening results;
• politically exposed person screening where appropriate;
• source-of-funds information;
• source-of-wealth information where required;
• occupation or business information;
• reason or purpose for a transaction;
• payer and beneficiary information;
• risk indicators;
• investigation records; and
• information obtained during enhanced due diligence.

Basic KYC may apply ordinarily, but CashMe may request additional information where required by law or justified by risk.

3.8 Communications

We may collect communications between you and CashMe, including:

• customer-support conversations;
• emails;
• Telegram messages;
• WhatsApp messages;
• complaints;
• feedback;
• transaction instructions; and
• security reports.

Where calls are recorded, CashMe will provide any notice required by applicable law.

3.9 Device and Technical Information

When you access CashMe electronically, we may automatically process information such as:

• IP address;
• browser type;
• operating system;
• device type;
• device identifiers;
• login timestamps;
• session information;
• approximate geographic information derived from IP address;
• security events;
• error logs; and
• website usage data.

CashMe should not collect precise location information unless it is necessary, lawful and appropriately disclosed.

3.10 Cookies and Similar Technologies

CashMe may use cookies and similar technologies for:

• essential website functionality;
• authentication;
• security;
• remembering user preferences;
• preventing fraud;
• analytics; and
• improving the Services.

Where consent is legally required for non-essential cookies, CashMe will seek that consent.

More information may be provided in a separate CashMe Cookie Policy.

4. HOW WE COLLECT PERSONAL DATA

We may obtain personal information:

• directly from you;
• when you register;
• when you submit KYC information;
• when you initiate or receive a transaction;
• when you contact customer support;
• from banks or mobile-money providers involved in your transaction;
• from blockchain networks and blockchain explorers;
• from authorized CashMe tellers or operational personnel;
• from identity-verification or fraud-prevention providers;
• from public records or legally available sources;
• through Telegram, WhatsApp or other channels used to interact with CashMe;
• through cookies and technical logs; and
• from regulators or competent authorities where legally appropriate.

5. WHY WE PROCESS PERSONAL DATA

CashMe may process personal information for the following purposes.

5.1 Providing the Services

We may process information to:

• create and administer accounts;
• provide exchange quotations;
• process buy and sell transactions;
• receive and make bank or mobile-money payments;
• execute blockchain transactions;
• facilitate user-to-user transfers;
• provide customer support;
• process refunds; and
• maintain transaction history.

5.2 Identity Verification

We may process information to:

• verify customer identity;
• prevent impersonation;
• validate account ownership;
• determine eligibility for Services; and
• protect customers against unauthorized account use.

5.3 Legal and Regulatory Compliance

We may process information where necessary to:

• comply with applicable laws;
• comply with anti-money-laundering and counter-terrorist-financing requirements;
• conduct sanctions and other compliance screening;
• maintain legally required records;
• respond to lawful requests from regulators, courts or law-enforcement authorities;
• investigate suspicious activity; and
• comply with reporting obligations.

5.4 Fraud Prevention and Security

We may process personal information to:

• detect unusual activity;
• identify fraudulent proof of payment;
• prevent account takeover;
• investigate scams;
• identify duplicate or suspicious transactions;
• secure CashMe systems;
• enforce account and transaction limits; and
• protect CashMe, its users and third parties.

5.5 Business Operations

We may process information for legitimate operational purposes, including:

• accounting;
• reconciliation;
• audits;
• record keeping;
• service improvement;
• quality assurance;
• performance monitoring;
• troubleshooting; and
• business continuity.

5.6 Communications

We may use your information to:

• send transaction updates;
• send security notices;
• respond to support requests;
• provide important service information;
• notify you about material changes to CashMe; and
• send marketing communications where permitted.

You may opt out of direct marketing where applicable, although you may still receive necessary transaction, security and legal communications.

6. LEGAL BASES FOR PROCESSING

Depending on applicable law and the circumstances, CashMe may process personal data because:

• processing is necessary to perform a contract with you;
• processing is necessary before entering into a contract at your request;
• processing is necessary to comply with a legal obligation;
• you have given valid consent;
• processing is necessary to protect legitimate interests that do not unlawfully override your rights;
• processing is necessary to prevent fraud or protect security;
• processing is necessary for establishment, exercise or defence of legal claims; or
• another lawful basis exists under applicable law.

Where processing is based solely on consent, you may withdraw consent subject to applicable law.

Withdrawal of consent does not necessarily require CashMe to delete information that must be retained for legal, fraud-prevention, transaction-record or other lawful purposes.

7. AML AND FINANCIAL-CRIME MONITORING

Because CashMe provides services involving fiat currencies and virtual assets, personal information may be processed for anti-money-laundering, counter-terrorist-financing, sanctions, fraud and financial-crime prevention purposes.

This may include screening customers and transactions, reviewing transaction patterns and requesting additional documentation.

CashMe may be prohibited by law from informing a customer about certain reports, investigations or regulatory disclosures.

Nothing in this Privacy Policy requires CashMe to provide information where disclosure is prohibited by applicable law.

8. AUTOMATED PROCESSING AND RISK ASSESSMENT

CashMe may use automated tools to assist with:

• fraud detection;
• duplicate-transaction detection;
• transaction-risk scoring;
• sanctions screening;
• security monitoring; and
• identifying transactions requiring additional review.

Where applicable law gives you rights concerning decisions based solely on automated processing that produce legal or similarly significant effects, CashMe will respect those rights.

CashMe may arrange human review where required by applicable law.

9. HOW WE MAY SHARE PERSONAL INFORMATION

CashMe does not disclose personal data indiscriminately.

We may share necessary personal information with the following categories of recipients where there is a lawful reason to do so.

9.1 Banks and Mobile-Money Providers

Information may be exchanged with payment providers where necessary to:

• process payments;
• verify transactions;
• investigate payment errors;
• manage refunds;
• address chargebacks; or
• prevent fraud.

9.2 Blockchain and Technology Providers

Information may be processed through:

• blockchain networks;
• wallet infrastructure;
• blockchain analytics providers;
• hosting providers;
• cloud-service providers;
• cybersecurity providers; and
• technical infrastructure providers.

9.3 Identity and Compliance Providers

CashMe may use third parties to assist with:

• identity verification;
• document verification;
• sanctions screening;
• fraud detection;
• transaction monitoring; and
• compliance checks.

9.4 Telegram, WhatsApp and Communication Providers

If you choose to use CashMe through Telegram, WhatsApp or another third-party platform, information necessary for that interaction may be processed by the relevant platform according to its own privacy terms.

CashMe does not control all data collected independently by those platforms.

9.5 CashMe Tellers and Authorized Personnel

Authorized personnel may access personal information only to the extent reasonably necessary to perform their assigned duties.

Access should be restricted according to role and business need.

9.6 Professional Advisers

CashMe may share necessary information with lawyers, auditors, accountants, insurers or other professional advisers where appropriate and subject to confidentiality obligations.

9.7 Regulators and Public Authorities

CashMe may disclose information to:

• regulators;
• courts;
• law-enforcement agencies;
• tax authorities;
• financial-intelligence authorities; or
• other competent authorities,

where disclosure is required or permitted by applicable law.

9.8 Business Transfers

If CashMe becomes incorporated, reorganized, sold, merged, transferred or acquired, personal information may be transferred as part of that transaction where legally permissible.

Any successor handling your personal information will remain subject to applicable data-protection obligations.

10. WE DO NOT SELL PERSONAL DATA

CashMe does not sell personal data merely because a person uses CashMe.

If CashMe ever introduces an activity that constitutes a sale or commercial sharing of personal information under applicable law, this Privacy Policy and any required consent or opt-out mechanism will be updated before that activity is undertaken.

11. INTERNATIONAL AND CROSS-BORDER DATA TRANSFERS

CashMe’s technology providers, messaging platforms, blockchain-related service providers or other vendors may operate infrastructure outside Tanzania.

CashMe may also provide Services in countries outside Tanzania.

Where personal data is transferred internationally, CashMe will seek to ensure that the transfer is made in accordance with applicable data-protection law and any required regulatory authorization, permit, safeguard or adequacy requirement.

CashMe may use appropriate contractual, organizational and technical safeguards where required.

Availability of a foreign service provider does not by itself authorize CashMe to transfer personal information internationally in violation of applicable law.

12. DATA RETENTION

CashMe retains personal information only for as long as reasonably necessary for the purpose for which it was collected or for another lawful purpose.

Retention periods may vary according to the type of information.

CashMe may retain information for longer periods where necessary for:

• AML/CFT requirements;
• tax or accounting requirements;
• financial transaction records;
• fraud prevention;
• regulatory requirements;
• dispute resolution;
• legal claims;
• court orders; or
• security investigations.

When personal information is no longer required, CashMe will seek to securely delete, destroy or anonymize it, subject to applicable law and technical limitations.

Public blockchain information may remain permanently available on the relevant blockchain and may not be capable of deletion by CashMe.

13. SECURITY OF PERSONAL DATA

CashMe seeks to maintain reasonable technical and organizational safeguards appropriate to the nature and sensitivity of personal data.

Measures may include:

• encryption where appropriate;
• secure communication protocols;
• password hashing;
• access controls;
• role-based permissions;
• authentication controls;
• audit logging;
• transaction monitoring;
• secure backups;
• restricted access to KYC documents;
• vulnerability management; and
• staff or contractor confidentiality controls.

No internet-based, electronic or blockchain system can be guaranteed to be completely secure.

Customers must also protect their own account credentials, devices and communication channels.

14. PERSONAL DATA BREACHES

If CashMe becomes aware of a personal-data breach, CashMe will investigate and take reasonable measures to contain and mitigate the incident.

Where applicable law requires notification to a data-protection authority or affected individuals, CashMe will provide the required notification within the applicable legal framework.

CashMe may preserve incident records for security, regulatory and evidential purposes.

15. YOUR DATA-PROTECTION RIGHTS

Depending on applicable law and circumstances, you may have rights concerning your personal data, including the right to:

• be informed about processing;
• request access to your personal data;
• request correction of inaccurate or incomplete information;
• request deletion or destruction of eligible personal data;
• request restriction of certain processing;
• object to certain processing;
• request portability of eligible data;
• withdraw consent where processing relies on consent;
• object to direct marketing;
• exercise rights relating to certain automated decisions;
• make a complaint concerning the processing of your personal information; and
• exercise any other rights granted by applicable law.

These rights are not absolute.

For example, CashMe may need to retain certain KYC, transaction, fraud-prevention or compliance information even after an account is closed.

CashMe may request identity verification before processing a data-rights request in order to prevent unauthorized disclosure.

16. DELETION REQUESTS

A request to delete a CashMe account does not necessarily result in immediate deletion of every associated record.

CashMe may retain information where necessary or permitted for:

• legal or regulatory compliance;
• AML/CFT obligations;
• fraud prevention;
• dispute resolution;
• transaction records;
• tax or accounting;
• security;
• legal claims; or
• protection of CashMe and its users.

Information that is eligible for deletion will be deleted, destroyed or anonymized in accordance with applicable law.

17. CORRECTION OF PERSONAL INFORMATION

You should maintain accurate personal information.

If important identity, contact or payment information changes, you should notify CashMe or update the information through available account controls.

CashMe may require re-verification following certain changes.

Historical transaction records may be preserved even where current account information is corrected.

18. CHILDREN’S PRIVACY

CashMe is not intended for children under 18 or any higher minimum age required by applicable law for the relevant Service.

CashMe does not knowingly permit minors to conduct CashMe financial transactions.

If CashMe discovers that an account is being operated by an ineligible minor, CashMe may restrict the account and take appropriate steps concerning the personal information involved.

19. MARKETING

CashMe may send information about new products, promotions or features where legally permitted.

Where consent is required, CashMe will request consent before sending applicable marketing communications.

You may unsubscribe from marketing communications without preventing CashMe from sending necessary:

• security notices;
• account information;
• transaction updates;
• compliance communications; or
• legal notices.

20. TELEGRAM AND WHATSAPP PRIVACY

When you communicate with CashMe through Telegram or WhatsApp, information may pass through infrastructure controlled by those platforms.

Their independent collection and processing practices are governed by their own privacy policies.

For greater security:

• use only official CashMe accounts or bots;
• do not send passwords or private wallet keys;
• do not send sensitive documents to unofficial accounts; and
• follow CashMe’s official verification instructions.

CashMe will never require your blockchain wallet private key or seed phrase as part of ordinary KYC or support.

21. BLOCKCHAIN PRIVACY

Blockchain systems may make certain transaction information permanently public.

A blockchain wallet address may become associated with an identifiable individual when combined with other information.

CashMe may process public blockchain information for:

• transaction verification;
• fraud detection;
• sanctions screening;
• compliance monitoring; and
• investigation of suspicious activity.

CashMe cannot guarantee anonymity when a customer uses a public blockchain.

22. TELLER PRIVACY AND ACCESS

CashMe tellers, agents or authorized personnel may receive only the information reasonably necessary to perform assigned transaction functions.

CashMe should apply access controls designed to prevent tellers from accessing unrelated customer records.

Tellers and personnel must not independently use customer data for marketing, personal contact, solicitation or any purpose unrelated to authorized CashMe activity.

Unauthorized access or use may result in suspension, termination or other appropriate action.

23. ACCOUNT SECURITY AND CUSTOMER RESPONSIBILITY

You are responsible for taking reasonable steps to protect your account and personal data.

You should:

• use secure passwords;
• protect your phone and email accounts;
• avoid sharing authentication credentials;
• verify official CashMe communication channels;
• report suspected account compromise promptly; and
• never disclose wallet seed phrases or private keys.

CashMe is not responsible for independent privacy practices of third parties to whom you voluntarily disclose personal information.

24. THIRD-PARTY LINKS AND SERVICES

CashMe may contain links or integrations involving independent third-party services.

CashMe is not responsible for the privacy practices of an independent third party merely because CashMe provides a link or technical integration.

You should review the third party’s privacy policy before providing personal information.

25. USER-TO-USER TRANSFERS

Where CashMe permits transfers between users, certain information may need to be processed concerning the sender and recipient.

CashMe will seek to disclose only information reasonably necessary for the transfer and applicable legal requirements.

Users must not use recipient information obtained through CashMe for:

• unsolicited marketing;
• harassment;
• identity theft;
• fraud;
• data harvesting; or
• any unrelated unlawful purpose.

26. FUTURE WALLET AND PAYMENT SERVICES

If CashMe introduces wallet balances, custodial functionality, merchant payments, additional assets or other payment functionality, additional categories of personal data may become necessary.

CashMe will update this Privacy Policy or provide an additional privacy notice before materially different processing is introduced where required by law.

Launch of additional functionality remains subject to applicable privacy, financial, licensing and regulatory requirements.

27. DATA CONCERNING DECEASED OR INCAPACITATED USERS

Requests concerning the account or personal information of a deceased or legally incapacitated customer will be handled in accordance with applicable law.

CashMe may require sufficient evidence of authority before releasing information or permitting account-related actions.

28. REGULATORY INVESTIGATIONS AND CONFIDENTIALITY

CashMe may be required to preserve or disclose information in connection with lawful investigations.

Where applicable law restricts disclosure of the existence of an investigation, report or authority request, CashMe may be legally prohibited from notifying the affected customer.

29. HOW TO EXERCISE YOUR PRIVACY RIGHTS

You may submit privacy requests through CashMe’s official privacy or support contact details published on the CashMe website.

A request should provide enough information for CashMe to identify:

• the requesting person;
• the relevant account where applicable; and
• the right being exercised.

CashMe may request additional verification where necessary to protect personal information against unauthorized access.

CashMe Privacy Contact:
support@cashme.cc

Website:
www.cashme.cc

30. COMPLAINTS

If you have concerns about how CashMe processes your personal information, you should first contact CashMe through the official privacy or support channel so the concern can be investigated.

You may also have the right to complain to the competent data-protection authority.

For users in Tanzania, the relevant authority is the Personal Data Protection Commission, subject to applicable law and current regulatory procedures.

Nothing in this Privacy Policy removes a right to approach a competent authority where such right is provided by law.

31. COUNTRY-SPECIFIC PRIVACY REQUIREMENTS

CashMe may operate in more than one country.

Residents of certain countries may receive additional privacy notices reflecting local data-protection requirements.

Where mandatory local data-protection law provides greater rights or obligations than this Privacy Policy, the applicable mandatory law will govern to the required extent.

CashMe may restrict availability in a jurisdiction until applicable privacy and regulatory requirements can be met.

32. CHANGES TO THIS PRIVACY POLICY

CashMe may update this Privacy Policy to reflect changes in:

• Services;
• technology;
• data-processing activities;
• law;
• regulation;
• security practices; or
• business structure.

The current version will be published through CashMe’s official website or Services.

Where required by applicable law, CashMe will provide appropriate notice of material changes.

33. CONTACT CASHME

For privacy questions, complaints, personal-data requests or security concerns, contact CashMe using the official contact details published on:

www.cashme.cc

Privacy requests should not be sent to unofficial social-media accounts, unknown Telegram accounts or unauthorized third parties.

PRIVACY SUMMARY

CashMe collects only information reasonably required to operate, secure and lawfully provide its Services.

CashMe may use personal information to:

• verify your identity;
• process transactions;
• communicate with you;
• prevent fraud;
• comply with legal obligations; and
• improve and protect the Services.

CashMe does not require your blockchain wallet private key or seed phrase.

CashMe does not sell your personal data merely because you use CashMe.

Some information may need to be retained after account closure because of financial, legal, AML/CFT, fraud-prevention or regulatory obligations.

By using CashMe, you acknowledge that your personal information will be processed as described in this Privacy Policy and as otherwise permitted or required by applicable law.