Crypto Dispensers Privacy Policy

Date of Last Update: August 1st, 2025

Welcome to Crypto Dispensers

At Crypto Dispensers, operated by Virtual Assets, Inc. (“Crypto Dispensers,” “we,” “us,” or “our”), safeguarding your privacy is a fundamental part of how we operate. This Privacy Policy outlines in detail how we collect, use, protect, and share your personal information when you engage with our services.

Our services include:

• A nationwide network of Bitcoin ATMs.
• Our secure and user-friendly web application.
• Payment methods facilitated through trusted third-party API integrations, including debit card, credit card, ACH transfers, and wire transfers.
• Any future mobile application we develop and launch.

By accessing or using our services, you acknowledge and agree to the terms of this Privacy Policy. Where applicable law requires your consent for the collection or processing of personal information, we will obtain it in advance. If you do not agree with the terms of this policy or are uncomfortable with any aspect of it, you should refrain from using our services.

In certain cases, we may provide additional notices specific to a particular service or feature. These supplemental notices should be read together with this Privacy Policy for a complete understanding of how we handle your information.

Changes to This Privacy Policy

We may update or amend this Privacy Policy at any time to reflect changes in our services, advances in technology, modifications in applicable law, or adjustments to our business operations.

When we make changes, the “Last Updated” date at the top of this page will be revised to indicate the effective date of the updated policy. If the changes are material, we will provide notice in advance through one or more of the following methods:

• A prominent notice on our website.
• An email sent to the address associated with your account.
• Any other method required by applicable law.

We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use, and protect your personal information. Your continued use of our services after an update becomes effective constitutes your acceptance of the revised policy. If you do not agree with the updated terms, you should discontinue use of our services.

The Personal Information We Collect

We collect personal information to deliver our services effectively, meet legal and regulatory obligations, maintain security, and provide you with a safe and reliable user experience. The information we collect falls into three main categories: information you provide to us directly, information collected automatically when you use our services, and information obtained from trusted third-party sources.

A. Information You Provide to Us

To create and maintain your account, process transactions, and comply with applicable laws, we may collect:

• Personal identification details such as full name, date of birth, nationality, phone number, email address, and residential address.
• Government-issued identification including driver’s licenses, passports, state ID cards, or other official documents, along with supporting documents such as utility bills for address verification.
• Financial information such as bank account numbers, payment card details, transaction history, and tax identification numbers.
• Employment or institutional information such as employer name, employer identification number (EIN), articles of incorporation for business accounts, and details regarding beneficial ownership.
• Transaction-specific information including recipient details, transaction amounts, dates, and timestamps.
• Communications and correspondence including customer support interactions, responses to surveys, and other information you choose to provide to us.

B. Information Collected Automatically

When you access or use our services, we may collect certain information automatically to ensure system security, prevent fraud, and improve your user experience. This includes:

• Device information such as IP address, browser type, operating system, device identifiers, and language preferences.
• Geolocation data, either approximate or precise, when enabled by your device settings.
• Usage data including pages visited, features used, clicks, authentication events, and session activity.
• Technical data collected through cookies, pixel tags, and similar tracking technologies to manage sessions, detect suspicious activity, and enhance personalization.

C. Information Obtained from Third Parties

We may receive information from reputable third-party sources to verify identities, meet compliance requirements, and enhance security. These sources may include:

• Identity verification service providers for Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance.
• Financial institutions to confirm payment details and process transactions.
• Public databases and regulatory watchlists for compliance screening.
• Marketing and analytics providers to understand how users discover and engage with our services.
• Blockchain analysis providers to identify and prevent illicit activity and ensure compliance with applicable regulations.

How Your Personal Information Is Used

Our primary purpose in collecting personal information is to provide you with a secure, efficient, and reliable way to access and use our services. We process your information only where permitted by applicable law, which may include legal obligations, contractual requirements, legitimate business interests, and, where necessary, your consent.

We may use your personal information for the following purposes:

1. To maintain legal and regulatory compliance
   Many of our services are subject to laws and regulations that require us to collect, use, and store certain personal information. This includes identification and verification procedures necessary to comply with Anti-Money Laundering (AML) laws, Know Your Customer (KYC) regulations, and other applicable financial compliance requirements.
2. To enforce our agreements and terms of service
   We process your information to monitor, investigate, and address prohibited or illegal activities, violations of our Terms of Service, or breaches of other agreements. This may include using your information to collect fees owed and to resolve disputes.
3. To detect and prevent fraud, abuse, and loss of funds
   We use personal information to identify suspicious activities, prevent account compromise, mitigate fraud, and protect both you and our platform from unauthorized use or financial harm.
4. To provide and operate our services
   Your information enables us to process transactions, maintain your account, deliver requested services, and offer secure access to our network of Bitcoin ATMs, our web application, third-party payment integrations, and any future mobile application we launch.
5. To communicate service-related updates
   We use your contact details to send important information related to your account, including security alerts, policy updates, and transaction confirmations. These communications are essential for your account’s operation and cannot be opted out of while you maintain an active account.
6. To provide customer support
   We process your information to respond to inquiries, troubleshoot issues, and deliver timely assistance through our support channels.
7. To ensure quality control and staff training
   We may use customer interactions, transaction records, and related data for internal reviews, process improvements, and employee training to ensure a consistently high standard of service.
8. To maintain network and information security
   Your data may be used to monitor system integrity, verify account access, combat spam or other malicious activity, and meet applicable security laws and standards.
9. For research and development purposes
   We analyze user behavior, transaction trends, and service performance to improve our offerings, enhance features, and design new products that meet customer needs.
10. To provide a personalized user experience
    We may use your information to tailor content, recommend services, and implement the preferences you set within your account.
11. To support corporate transactions
    In the event of a merger, acquisition, restructuring, or sale of assets, your information may be processed as part of the necessary business operations and due diligence requirements.
12. For marketing and promotional purposes
    Where permitted by law or with your consent, we may send you information about our services, promotional offers, and relevant updates. You may opt out of receiving marketing communications at any time through your account settings or by contacting us.
13. For any purpose with your consent
    If we wish to use your information for a purpose not listed above, we will obtain your explicit consent before doing so.

Why and How We Share Personal Information

We share personal information only when it is necessary to provide our services, comply with applicable laws, protect our users, or operate our business effectively. We do not sell or rent your personal information to third parties. Any sharing is limited to trusted parties who are contractually obligated to protect your data and use it solely for the purposes specified.

A. Sharing for Compliance and Security

We may share your information with:

• Identity verification service providers to confirm your identity and prevent fraudulent activity. These providers may create derivative data based on your personal information solely for identity verification and fraud prevention purposes.
• Regulatory and law enforcement authorities when required to comply with subpoenas, court orders, or applicable legal obligations, or when we believe in good faith that disclosure is necessary to prevent harm, protect our platform, or investigate potential violations of law.

B. Sharing for Payment Processing and Transactions

We may share your information with:

• Financial institutions with which we partner to process payments, deposits, and withdrawals you authorize.
• Third-party payment processors that facilitate debit card, credit card, ACH transfers, and wire transfers through secure API integrations.
• Blockchain analysis providers to help identify and prevent illicit or prohibited transactions.

C. Sharing with Service Providers and Partners

We may share your information with third-party service providers who assist with:

• Network hosting and infrastructure.
• Data storage and backup solutions.
• Customer support operations.
• Transaction monitoring and risk management.
• Cybersecurity and fraud prevention.
• Marketing and analytics.

These providers are contractually required to protect your information and prohibited from selling or using it for unrelated purposes.

D. Sharing in Corporate Transactions

If Virtual Assets, Inc. enters into a merger, acquisition, asset sale, reorganization, or similar business transaction, your personal information may be transferred as part of the transaction. Any such transfer will be subject to applicable privacy laws and safeguards.

E. Sharing with Your Consent

We may share your personal information for any purpose you authorize. This includes situations where you explicitly instruct us to share information with another individual, business, or third-party service provider.

Data Protection and Security

Protecting your personal information is central to how we operate. We implement a combination of physical, technical, and administrative safeguards designed to protect your data from unauthorized access, disclosure, alteration, or destruction.

A. Security Measures We Use

We employ multiple layers of security, which may include:

• Encryption of sensitive data in transit and at rest using industry-standard protocols.
• Access controls that limit personal information access to authorized personnel who require it to perform their duties.
• Regular security testing and audits to identify and address potential vulnerabilities.
• Network and infrastructure monitoring to detect suspicious activity and unauthorized access attempts.
• PCI DSS compliance for payment card data, ensuring that cardholder information is securely processed and never stored on our servers in unencrypted form.
• Secure hosting environments with firewalls, intrusion detection, and multi-factor authentication.

B. Third-Party Security Requirements

When we engage third-party service providers to perform work on our behalf, we require them to maintain security measures at least as protective as those we apply to our own systems. These contractual obligations prohibit them from using your information for any purpose other than to provide the agreed-upon services.

C. Your Role in Protecting Your Data

Security is a shared responsibility. You can help protect your account by:

• Choosing a strong password that is unique to your Crypto Dispensers account.
• Keeping your login credentials confidential and never sharing them with others.
• Enabling two-factor authentication (2FA) where available.
• Logging out after each session, especially when using a shared or public device.
• Immediately notifying us if you suspect unauthorized access to your account.

D. Limitations of Security

While we take every reasonable precaution to safeguard your information, no method of transmission over the internet or method of electronic storage is completely secure. For this reason, we cannot guarantee absolute security. However, we remain committed to continuous monitoring, improvement, and rapid response to potential threats.

Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable laws and regulations, to resolve disputes, and to enforce our agreements. Retention periods vary depending on the type of information, the reason for its collection, and applicable legal requirements.

A. General Retention Guidelines

• Personal information collected to meet legal and regulatory obligations, such as Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements, is retained for the period mandated by law after your account is closed.
• Transaction records are kept for the time necessary to comply with financial reporting and tax requirements.
• Communications and correspondence with our support team may be stored for a period that allows us to review past interactions, resolve disputes, and improve our customer service.

B. Specific Retention Practices

• Identification documents and verification records: Retained for the legally required period after account closure to comply with AML and KYC laws.
• Financial records and transaction history: Retained to meet accounting, tax, and reporting requirements.
• Contact information for marketing purposes: Retained until you opt out of receiving marketing communications. Once you opt out, your information will be placed on a suppression list to prevent further contact.
• Content you post or submit (such as feedback, reviews, or support tickets): May be retained to prevent fraudulent behavior, address security issues, and comply with applicable laws.
• Technical data collected through cookies and analytics tools: Retained for a defined period from the time of collection, after which it is deleted or anonymized.

C. Secure Disposal of Information

When personal information is no longer needed and is not required to be retained by law, we securely delete, anonymize, or otherwise dispose of it in accordance with industry best practices.

Your Privacy Rights

Depending on your location and the laws that apply to you, you may have certain rights regarding your personal information. We are committed to making it straightforward for you to exercise these rights, subject to applicable legal requirements and any necessary verification steps.

A. Access and Portability

You may request a copy of the personal information we hold about you. In certain jurisdictions, you may also have the right to receive your information in a structured, commonly used, and machine-readable format, and to request that we transfer it directly to another data controller where technically feasible.

B. Correction of Inaccurate or Incomplete Information

If any personal information we hold about you is inaccurate or incomplete, you may request that we update or correct it. You can make certain updates yourself through your account settings or by contacting our support team.

C. Deletion of Your Information

You may request the deletion of your personal information where permitted by law. We will honor such requests unless we are required to retain the information for compliance with legal obligations, dispute resolution, fraud prevention, or other legitimate business purposes.

D. Restriction of Processing

In some jurisdictions, you may have the right to request that we restrict the processing of your personal information under specific circumstances, such as when you contest the accuracy of the data or object to its processing.

E. Objection to Processing

Where permitted by applicable law, you may object to the processing of your personal information for certain purposes, including direct marketing. If you object to processing for direct marketing purposes, we will stop processing your data for that purpose.

F. Withdrawal of Consent

Where we rely on your consent for processing, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before your consent was withdrawn.

G. Automated Decision-Making and Profiling

If applicable law grants you the right, you may request not to be subject to decisions based solely on automated processing, including profiling, that have a legal or similarly significant effect on you, except in cases where such processing is necessary for entering into or performing a contract, authorized by law, or based on your explicit consent.

H. How to Make a Privacy Rights Request

You can submit a request through your account dashboard, or, if you cannot access your account, by contacting us at help@cryptodispensers.com. We may require additional information to verify your identity before fulfilling your request.

International Data Transfers

As part of providing our services, your personal information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws, which may not provide the same level of protection as the laws in your home jurisdiction.

A. Where We Process Information

We may process and store your personal information in the United States, as well as in other jurisdictions where we or our trusted service providers operate. This can include locations in North America, Europe, Asia, and other regions, depending on the operational requirements of our services.

B. Safeguards for International Transfers

Whenever we transfer your personal information to a country that may not have equivalent data protection laws, we take steps to ensure your information is handled in accordance with this Privacy Policy and applicable laws. These safeguards may include:

• Contractual protections such as Standard Contractual Clauses approved by regulatory authorities.
• Binding corporate rules where applicable.
• Requiring third-party service providers to adhere to strict data protection and security obligations.

C. Your Acknowledgment

By using our services, you understand that your personal information may be transferred to, stored in, and processed in countries where our facilities, service providers, or partners are located. While in those jurisdictions, your information may be accessed by courts, law enforcement, and national security authorities in accordance with their laws.

Children’s Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect, maintain, or use personal information from anyone under the age of 18.

If we become aware that we have inadvertently collected personal information from an individual under 18, we will take immediate steps to delete that information from our records.

If you believe that a person under the age of 18 has provided personal information to us, please contact us promptly so that we can investigate and take appropriate action.

We also take measures to verify the age of individuals during the account creation and identity verification process to help ensure that our services are not accessed by minors.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, advancements in technology, updates to applicable laws, or modifications to our business practices.

When changes are made, the “Last Updated” date at the top of this page will be revised. If the changes are material, we will provide advance notice using one or more of the following methods:

• Posting a prominent notice on our website.
• Sending an email to the address associated with your account.
• Any other method required by applicable law.

We encourage you to review this Privacy Policy periodically so you remain informed about how we collect, use, and protect your personal information. Your continued use of our services after an updated Privacy Policy takes effect will signify your acceptance of the changes. If you do not agree to the revised terms, you should discontinue using our services.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us using the information below:

Virtual Assets, Inc.

205 N Michigan Ave, Suite 250

Chicago, IL 60601, USA

Email: help@cryptodispensers.com

‍