This policy explains what we collect, why we collect it, who can see it, and how you can ask about it. It covers the public pages, sign-up, sign-in, and the dashboard you use after you sign in. It does not cover a site that we do not operate.
1.Who we are
The public site and the dashboard are operated by Global Triumph Wealth Group. In this policy, “we”, “us”, and “the firm” mean that firm. “You” means the person who reads these pages, creates an account, or writes to us.
The contact page is the way to reach us about this policy. There is no separate phone line published on this site. Do not send a password or a sign-in code in a contact message.
2.Information you give us
We store what you submit so the account and the reply have a record.
- Account. Email, name, a hash of the password, phone number if you add one, the currency you choose, and whether the account is PAMM, MAM, or both.
- Profile. Country, city, address, postal code, date of birth, and gender, if you add them. A profile image, if you upload one.
- Codes. The 6-digit codes we email for sign-up, sign-in, password reset, or a withdrawal check. They are kept only until they expire or you use them.
- Money. Deposit and withdrawal requests, the amounts, the wallet and balance records, and files you upload as proof.
- Results. Trades and results the firm records on the account, including a PAMM allocation or a MAM account.
- Messages. Contact-form messages, support tickets, and files attached to a ticket.
- Referrals. A referral code, and the account that referred you, if you use one.
- Preferences. Notification settings, whether the balance is hidden, and whether two-factor sign-in is on.
3.Information from using the site
When you sign in or try to sign in, we store the time, the IP address, and the count of failed attempts. Too many failed attempts can lock the account for a short time. If two-factor sign-in is on, we store the secret used to check the code and any backup codes you have not used.
The public pages do not sign you in. Reading about, questions, contact, terms, or this policy does not open the dashboard.
4.Identity checks
Before the firm accepts some requests, it may ask you to verify your identity. You may be asked for a passport, a national identity card, or a driver’s licence, the document number, a photograph of the front and back, and a photograph of you. Staff notes may be stored with that submission so the review can be finished later.
We use those files to check that the account belongs to you and to review deposits, withdrawals, and other requests. We do not use them as a public profile.
5.How we use it
We use the information to:
- open and run the account, including the currency and the PAMM or MAM choice;
- send sign-up, sign-in, reset, and withdrawal codes to the email on the account;
- record deposits, withdrawals, balances, and the results written on the account;
- check identity documents and decide deposit, withdrawal, and verification requests;
- answer a contact message or a support ticket;
- apply a referral when you use a referral code;
- protect the account from misuse, including locking it after repeated failed sign-ins;
- keep the records the firm needs after a request is closed.
The password is stored as a hash. We cannot read the password you typed, and we do not ask you to send it to us.
We do not sell this information. A contact message is not added to a mailing list. We email you about the account, a code you asked for, or a message you sent.
6.Who we share it with
Firm staff who review accounts, documents, deposits, withdrawals, and messages can see the records they need for that work. A service that sends the email codes, or that stores the files and the database, processes that information for us and only for that purpose.
We may disclose information if the law requires it, or if we need it to protect the firm, an investor, or the account from fraud or misuse. We do not publish your balance, documents, or messages.
7.Cookies
This site sets its own cookies. It does not use an advertising cookie. The cookies are:
- Session. An access cookie and a refresh cookie keep you signed in. If you choose “Keep me signed in”, the refresh cookie lasts longer.
- Sign-in steps. Short cookies carry you through the email code, a password reset, or a two-factor check. They expire within minutes.
- Forms. A cookie holds a token that stops another site from submitting a form as you.
- View. If a staff member looks at the customer dashboard, a cookie remembers that view.
The session cookies are not read by script on the page. If you block cookies, sign-in and protected forms will not work. You can clear them in the browser; that signs you out.
8.How long we keep it
Account, transaction, and verification records stay while the account is open, and for as long after that as the firm needs them to show what was deposited, withdrawn, or recorded. Closing an account does not erase a deposit, a withdrawal, a recorded result, or an identity check the firm has to keep.
Email codes are removed when they expire or when you use them. A contact message and a support ticket stay so the reply remains with the question. Uploaded proof stays with the request it belongs to.
9.Security
Passwords are hashed. Session cookies are marked so a script on the page cannot read them, and they are sent only to this site. Sign-in can require an email code or a two-factor code. No method of storage is perfect. Use a password you do not use elsewhere, and do not share a sign-in code.
10.Your requests
You can ask us to:
- tell you what we hold for the email on the account;
- correct a name, address, or other detail that is wrong;
- close the account, from the dashboard or from the contact page if you cannot sign in;
- explain a deposit, a withdrawal, or a document request.
Write from the contact page and name the email on the account. We may ask you to sign in, or to complete an email code, before we change or disclose the account. We can refuse a request that would hide a record of money or of an identity check, or that would expose someone else’s account.
11.Children
The account is for an adult who can enter a contract. We do not intend the dashboard to be used by anyone under 18. If you believe a child’s information was submitted, write to us from the contact page and we will close that access.
12.Changes
We may update this policy when the dashboard changes or when we have to describe a new record. The date at the top is the date of this version. The version on this page is the one that applies. Continued use of the account after the date of an update means the updated policy applies to information collected from then on.
13.Contact
Questions about this policy go through the contact page. Include the email on the account if you have one. The terms of use explain how the account itself may be used.