Privacy Policy

SECTION 1. COMPREHENSIVE DATA SOVEREIGNTY PROTOCOL 1.1. This Privacy Policy governs the manner in which Cortez Capital Limited collects, uses, maintains, and structurally protects personal data. 1.2. The Firm systematically collects personal identification information strictly required by statutory Know Your Customer (KYC) mandates. SECTION 2. DATA LOCALIZATION: HONG KONG 2.1. Pursuant to the record-keeping obligations enforced by the Securities and Futures Commission (SFC), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Public Equities and Exchange Traded Funds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Hong Kong is strictly subordinated to this overriding statutory retention mandate. 2.2. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Over-the-Counter (OTC) Derivatives. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Securities and Futures Commission (SFC). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Hong Kong. 2.3. In accordance with the stringent data localization mandates of the Securities and Futures Ordinance (Cap. 571), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Asset-Backed Securities (ABS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Hong Kong unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Futures Commission (SFC). 2.4. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Hong Kong. Any anomalous attempts to interface with the Collateralized Debt Obligations (CDO) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Securities and Futures Commission (SFC). 2.5. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Sovereign Debt Instruments. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Hong Kong. 2.6. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Hong Kong. Any anomalous attempts to interface with the High-Yield Corporate Bonds execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Securities and Futures Commission (SFC). 2.7. In accordance with the stringent data localization mandates of the Securities and Futures Ordinance (Cap. 571), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Private Equity Syndications shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Hong Kong unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Futures Commission (SFC). SECTION 3. DATA LOCALIZATION: SINGAPORE 3.1. Pursuant to the record-keeping obligations enforced by the Monetary Authority of Singapore (MAS), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Public Equities and Exchange Traded Funds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Singapore is strictly subordinated to this overriding statutory retention mandate. 3.2. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Over-the-Counter (OTC) Derivatives. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Singapore. 3.3. Pursuant to the record-keeping obligations enforced by the Monetary Authority of Singapore (MAS), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Asset-Backed Securities (ABS) for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Singapore is strictly subordinated to this overriding statutory retention mandate. 3.4. In accordance with the stringent data localization mandates of the Securities and Futures Act (Cap. 289), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Collateralized Debt Obligations (CDO) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Singapore unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Monetary Authority of Singapore (MAS). 3.5. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Singapore. Any anomalous attempts to interface with the Sovereign Debt Instruments execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Monetary Authority of Singapore (MAS). 3.6. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of High-Yield Corporate Bonds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Monetary Authority of Singapore (MAS). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Singapore. 3.7. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Private Equity Syndications. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Singapore. SECTION 4. DATA LOCALIZATION: UNITED KINGDOM 4.1. Pursuant to the record-keeping obligations enforced by the Financial Conduct Authority (FCA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Public Equities and Exchange Traded Funds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United Kingdom is strictly subordinated to this overriding statutory retention mandate. 4.2. In accordance with the stringent data localization mandates of the Financial Services and Markets Act 2000, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Over-the-Counter (OTC) Derivatives shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of United Kingdom unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Financial Conduct Authority (FCA). 4.3. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from United Kingdom. Any anomalous attempts to interface with the Asset-Backed Securities (ABS) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Financial Conduct Authority (FCA). 4.4. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from United Kingdom. Any anomalous attempts to interface with the Collateralized Debt Obligations (CDO) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Financial Conduct Authority (FCA). 4.5. In accordance with the stringent data localization mandates of the Financial Services and Markets Act 2000, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Sovereign Debt Instruments shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of United Kingdom unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Financial Conduct Authority (FCA). 4.6. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of High-Yield Corporate Bonds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Financial Conduct Authority (FCA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United Kingdom. 4.7. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Private Equity Syndications. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Financial Conduct Authority (FCA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United Kingdom. SECTION 5. DATA LOCALIZATION: EUROPEAN UNION 5.1. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Public Equities and Exchange Traded Funds shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 5.2. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Over-the-Counter (OTC) Derivatives shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 5.3. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Asset-Backed Securities (ABS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 5.4. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Collateralized Debt Obligations (CDO) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 5.5. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Sovereign Debt Instruments shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 5.6. Pursuant to the record-keeping obligations enforced by the European Securities and Markets Authority (ESMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to High-Yield Corporate Bonds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of European Union is strictly subordinated to this overriding statutory retention mandate. 5.7. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Private Equity Syndications shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). SECTION 6. DATA LOCALIZATION: UNITED STATES 6.1. In accordance with the stringent data localization mandates of the Securities Act of 1933, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Public Equities and Exchange Traded Funds shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of United States unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Exchange Commission (SEC). 6.2. Pursuant to the record-keeping obligations enforced by the Securities and Exchange Commission (SEC), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Over-the-Counter (OTC) Derivatives for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United States is strictly subordinated to this overriding statutory retention mandate. 6.3. Pursuant to the record-keeping obligations enforced by the Securities and Exchange Commission (SEC), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Asset-Backed Securities (ABS) for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United States is strictly subordinated to this overriding statutory retention mandate. 6.4. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Collateralized Debt Obligations (CDO). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Securities and Exchange Commission (SEC). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United States. 6.5. Pursuant to the record-keeping obligations enforced by the Securities and Exchange Commission (SEC), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Sovereign Debt Instruments for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United States is strictly subordinated to this overriding statutory retention mandate. 6.6. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for High-Yield Corporate Bonds. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United States. 6.7. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Private Equity Syndications. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United States. SECTION 7. DATA LOCALIZATION: SWITZERLAND 7.1. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Public Equities and Exchange Traded Funds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Swiss Financial Market Supervisory Authority (FINMA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Switzerland. 7.2. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Over-the-Counter (OTC) Derivatives. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Switzerland. 7.3. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Switzerland. Any anomalous attempts to interface with the Asset-Backed Securities (ABS) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Swiss Financial Market Supervisory Authority (FINMA). 7.4. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Collateralized Debt Obligations (CDO). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Swiss Financial Market Supervisory Authority (FINMA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Switzerland. 7.5. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Sovereign Debt Instruments. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Switzerland. 7.6. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Switzerland. Any anomalous attempts to interface with the High-Yield Corporate Bonds execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Swiss Financial Market Supervisory Authority (FINMA). 7.7. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Private Equity Syndications. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Switzerland. SECTION 8. DATA LOCALIZATION: CAYMAN ISLANDS 8.1. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Public Equities and Exchange Traded Funds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Cayman Islands Monetary Authority (CIMA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Cayman Islands. 8.2. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Over-the-Counter (OTC) Derivatives. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Cayman Islands. 8.3. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Asset-Backed Securities (ABS). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Cayman Islands Monetary Authority (CIMA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Cayman Islands. 8.4. In accordance with the stringent data localization mandates of the Mutual Funds Act, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Collateralized Debt Obligations (CDO) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Cayman Islands unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Cayman Islands Monetary Authority (CIMA). 8.5. Pursuant to the record-keeping obligations enforced by the Cayman Islands Monetary Authority (CIMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Sovereign Debt Instruments for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Cayman Islands is strictly subordinated to this overriding statutory retention mandate. 8.6. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for High-Yield Corporate Bonds. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Cayman Islands. 8.7. In accordance with the stringent data localization mandates of the Mutual Funds Act, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Private Equity Syndications shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Cayman Islands unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Cayman Islands Monetary Authority (CIMA). SECTION 9. DATA LOCALIZATION: DUBAI 9.1. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Public Equities and Exchange Traded Funds. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Dubai. 9.2. In accordance with the stringent data localization mandates of the DFSA Rulebook, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Over-the-Counter (OTC) Derivatives shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Dubai unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Dubai Financial Services Authority (DFSA). 9.3. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Dubai. Any anomalous attempts to interface with the Asset-Backed Securities (ABS) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Dubai Financial Services Authority (DFSA). 9.4. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Collateralized Debt Obligations (CDO). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Dubai Financial Services Authority (DFSA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Dubai. 9.5. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Dubai. Any anomalous attempts to interface with the Sovereign Debt Instruments execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Dubai Financial Services Authority (DFSA). 9.6. Pursuant to the record-keeping obligations enforced by the Dubai Financial Services Authority (DFSA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to High-Yield Corporate Bonds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Dubai is strictly subordinated to this overriding statutory retention mandate. 9.7. In accordance with the stringent data localization mandates of the DFSA Rulebook, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Private Equity Syndications shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Dubai unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Dubai Financial Services Authority (DFSA). SECTION 10. ZERO-TRUST METROLOGY DIRECTIVES 10.1. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Real Estate Investment Trusts (REITs). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Securities and Futures Commission (SFC). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Hong Kong. 10.2. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Real Estate Investment Trusts (REITs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Singapore. 10.3. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Real Estate Investment Trusts (REITs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United Kingdom. 10.4. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Real Estate Investment Trusts (REITs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within European Union. 10.5. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Real Estate Investment Trusts (REITs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United States. 10.6. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Real Estate Investment Trusts (REITs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Switzerland. 10.7. Pursuant to the record-keeping obligations enforced by the Cayman Islands Monetary Authority (CIMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Real Estate Investment Trusts (REITs) for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Cayman Islands is strictly subordinated to this overriding statutory retention mandate. 10.8. In accordance with the stringent data localization mandates of the DFSA Rulebook, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Real Estate Investment Trusts (REITs) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Dubai unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Dubai Financial Services Authority (DFSA). 10.9. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Non-Deliverable Forwards (NDFs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Hong Kong. 10.10. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Non-Deliverable Forwards (NDFs). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Monetary Authority of Singapore (MAS). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Singapore. 10.11. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Non-Deliverable Forwards (NDFs). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Financial Conduct Authority (FCA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United Kingdom. 10.12. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from European Union. Any anomalous attempts to interface with the Non-Deliverable Forwards (NDFs) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the European Securities and Markets Authority (ESMA). 10.13. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Non-Deliverable Forwards (NDFs). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Securities and Exchange Commission (SEC). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United States. 10.14. In accordance with the stringent data localization mandates of the Financial Services Act (FinSA), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Non-Deliverable Forwards (NDFs) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Switzerland unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Swiss Financial Market Supervisory Authority (FINMA). 10.15. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Non-Deliverable Forwards (NDFs). The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Cayman Islands. 10.16. In accordance with the stringent data localization mandates of the DFSA Rulebook, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Non-Deliverable Forwards (NDFs) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Dubai unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Dubai Financial Services Authority (DFSA). 10.17. In accordance with the stringent data localization mandates of the Securities and Futures Ordinance (Cap. 571), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Cryptographic and Digital Assets shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Hong Kong unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Futures Commission (SFC). 10.18. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Cryptographic and Digital Assets. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Singapore. 10.19. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from United Kingdom. Any anomalous attempts to interface with the Cryptographic and Digital Assets execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Financial Conduct Authority (FCA). 10.20. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Cryptographic and Digital Assets. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within European Union. 10.21. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Cryptographic and Digital Assets. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United States. 10.22. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Cryptographic and Digital Assets. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Switzerland. 10.23. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Cayman Islands. Any anomalous attempts to interface with the Cryptographic and Digital Assets execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Cayman Islands Monetary Authority (CIMA). 10.24. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Cryptographic and Digital Assets. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Dubai. 10.25. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Venture Capital Funds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Securities and Futures Commission (SFC). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Hong Kong. 10.26. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Singapore. Any anomalous attempts to interface with the Venture Capital Funds execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Monetary Authority of Singapore (MAS). 10.27. Pursuant to the record-keeping obligations enforced by the Financial Conduct Authority (FCA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Venture Capital Funds for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United Kingdom is strictly subordinated to this overriding statutory retention mandate. 10.28. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Venture Capital Funds. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within European Union. 10.29. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Venture Capital Funds. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within United States. 10.30. In accordance with the stringent data localization mandates of the Financial Services Act (FinSA), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Venture Capital Funds shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Switzerland unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Swiss Financial Market Supervisory Authority (FINMA). 10.31. In accordance with the stringent data localization mandates of the Mutual Funds Act, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Venture Capital Funds shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Cayman Islands unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Cayman Islands Monetary Authority (CIMA). 10.32. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Venture Capital Funds. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Dubai Financial Services Authority (DFSA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Dubai. 10.33. Pursuant to the record-keeping obligations enforced by the Securities and Futures Commission (SFC), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Commodity Futures Contracts for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Hong Kong is strictly subordinated to this overriding statutory retention mandate. 10.34. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Commodity Futures Contracts. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Singapore. 10.35. Pursuant to the record-keeping obligations enforced by the Financial Conduct Authority (FCA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Commodity Futures Contracts for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of United Kingdom is strictly subordinated to this overriding statutory retention mandate. 10.36. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Commodity Futures Contracts. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within European Union. 10.37. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from United States. Any anomalous attempts to interface with the Commodity Futures Contracts execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Securities and Exchange Commission (SEC). 10.38. In accordance with the stringent data localization mandates of the Financial Services Act (FinSA), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Commodity Futures Contracts shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Switzerland unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Swiss Financial Market Supervisory Authority (FINMA). 10.39. In accordance with the stringent data localization mandates of the Mutual Funds Act, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Commodity Futures Contracts shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Cayman Islands unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Cayman Islands Monetary Authority (CIMA). 10.40. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Commodity Futures Contracts. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Dubai. 10.41. The Firm explicitly disclaims any liability for the unauthorized interception, decryption, or exfiltration of the Client's telemetric data during the transmission of execution orders for Interest Rate Swaps. The Client assumes absolute responsibility for maintaining the cryptographic integrity of their asymmetric authentication keys while accessing the secure portal from within Hong Kong. 10.42. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Interest Rate Swaps. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Monetary Authority of Singapore (MAS). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Singapore. 10.43. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from United Kingdom. Any anomalous attempts to interface with the Interest Rate Swaps execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Financial Conduct Authority (FCA). 10.44. Pursuant to the record-keeping obligations enforced by the European Securities and Markets Authority (ESMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Interest Rate Swaps for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of European Union is strictly subordinated to this overriding statutory retention mandate. 10.45. In accordance with the stringent data localization mandates of the Securities Act of 1933, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Interest Rate Swaps shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of United States unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Exchange Commission (SEC). 10.46. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Interest Rate Swaps. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Swiss Financial Market Supervisory Authority (FINMA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Switzerland. 10.47. Pursuant to the record-keeping obligations enforced by the Cayman Islands Monetary Authority (CIMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Interest Rate Swaps for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Cayman Islands is strictly subordinated to this overriding statutory retention mandate. 10.48. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Interest Rate Swaps. The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Dubai Financial Services Authority (DFSA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Dubai. 10.49. In accordance with the stringent data localization mandates of the Securities and Futures Ordinance (Cap. 571), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Credit Default Swaps (CDS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Hong Kong unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Futures Commission (SFC). 10.50. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Credit Default Swaps (CDS). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Monetary Authority of Singapore (MAS). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of Singapore. 10.51. The Client consents to the automated profiling and algorithmic risk-scoring of their behavioral data as it pertains to the holding and trading of Credit Default Swaps (CDS). The Firm utilizes this telemetric data strictly to satisfy the capital adequacy and risk management directives issued by the Financial Conduct Authority (FCA). Under no circumstances shall this data be monetized, syndicated, or leased to unauthorized third-party data brokers operating outside of United Kingdom. 10.52. In accordance with the stringent data localization mandates of the Markets in Financial Instruments Directive (MiFID II), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Credit Default Swaps (CDS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of European Union unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the European Securities and Markets Authority (ESMA). 10.53. In accordance with the stringent data localization mandates of the Securities Act of 1933, all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Credit Default Swaps (CDS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of United States unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Securities and Exchange Commission (SEC). 10.54. In accordance with the stringent data localization mandates of the Financial Services Act (FinSA), all personally identifiable information (PII), biometric signatures, and Know Your Customer (KYC) documentation associated with the Client's trading of Credit Default Swaps (CDS) shall be subjected to AES-256 encryption at rest. The Firm guarantees that no such data shall be transferred outside of Switzerland unless the recipient jurisdiction provides an equivalent level of statutory protection as determined by the Swiss Financial Market Supervisory Authority (FINMA). 10.55. Pursuant to the record-keeping obligations enforced by the Cayman Islands Monetary Authority (CIMA), the Firm is statutorily mandated to retain all transactional metadata, routing logs, and communication transcripts relating to Credit Default Swaps (CDS) for a minimum period of seven (7) years. The Client's right to execute a data erasure request under the applicable privacy frameworks of Cayman Islands is strictly subordinated to this overriding statutory retention mandate. 10.56. The Firm utilizes advanced heuristic intrusion detection systems to monitor all traffic originating from Dubai. Any anomalous attempts to interface with the Credit Default Swaps (CDS) execution API shall result in the immediate and permanent termination of the Client's session, the cryptographic locking of the account, and the automatic generation of a suspicious activity report (SAR) to the Dubai Financial Services Authority (DFSA).