Privacy Policy

1. Introduction

Bitlink (“we”, “our”, “us”) is operated by Wanted Broker Sàrl, a Swiss limited liability company and financial intermediary under the Swiss Anti-Money Laundering Act (AMLA). We are a member of the Self-Regulatory Organization (SRO), recognized by FINMA, and subject to its ongoing supervision.

We are committed to safeguarding your personal data and ensuring transparent processing in line with the Swiss Federal Act on Data Protection (FADP, 2023) and our obligations under AMLA and SRO regulations. The EU General Data Protection Regulation (GDPR), applies where the personal data being processed relates to a natural person, such as a controlling person or representative of a Merchant, who is located in or a resident of the European Union or the European Economic Area.

This Privacy Policy explains how we collect, use, and protect your personal data.

2. Scope

This Policy applies to:

2.1.  Merchants (legal entities) who use Bitlink services

2.2.  Beneficial owners, directors, and representatives of merchant companies

2.3. Customers of our merchants (payers) where identification is required under AMLA rules (e.g., for large or high-risk transactions)

2.4. Visitors to our website (bitlink.ch)

3. Data We Collect

We collect personal data as required for regulatory compliance, risk management, and service delivery:

3.1.  Identification Data: name, surname, date of birth, nationality, passport/ID, proof of address.

3.2.  Corporate Data: company registration, legal documents, controlling persons, beneficial owners.

3.3.  Financial & Transaction Data: blockchain wallet addresses, bank account details, transaction references, conversion instructions, source of funds/wealth.

3.4.  Compliance Data: PEP/sanctions/negative news screening results, blockchain analytics, risk classifications, other additional information that may be requested ad-hoc for clarification purposes in case of necessity.

3.5.  Technical Data: IP addresses, login records, device/browser information.

3.6. Communications: onboarding forms, KYC declarations (Form A, Form K), support emails, and contracts.

4. Purpose of Processing

We process your data for:

4.1. Regulatory Compliance (Legal Obligation)

4.1.1.     Customer due diligence (KYC/KYB)

4.1.2.     Identification of controlling persons and/or beneficial owners

4.1.3.     Transaction monitoring (fiat and crypto, including blockchain analytics)

4.1.4.     Reporting to the Swiss Money Laundering Reporting Office (MROS) and to the State Secretariat for Economic Affairs (SECO) , where required

4.2. Service Delivery (Contract Performance)

4.2.1.     Onboarding and account verification of merchants

4.2.2.     Processing crypto-to-fiat and fiat settlements

4.2.3.     Generating and reconciling payment links

4.2.4.     Maintaining transaction history and statements

4.2.5.     Managing account access and customer support

4.3. Risk Management & Security (Legitimate Interests)

4.3.1.     Preventing fraud and illicit use of our services

4.3.2.     Enforcing our business restrictions (prohibited sectors and countries)

4.3.3.     Detecting unusual activity and protecting system integrity

4.4. Legal & Administrative

4.4.1.     Record-keeping and audit requirements.

4.4.2.     Responding to lawful requests from regulatory authorities and auditors.

We do not use your data for advertising or resell it to third parties.

5. Legal Basis

We process your data based on:

5.1.  Legal obligations under AMLA, FADP, GDPR, SRO (SO-FIT) rules.

5.2. Contractual necessity to provide our services.

5.3. Legitimate interests in fraud prevention and compliance.

5.4. Consent, where explicitly required (e.g., optional communications).

6. Data Sharing

Your personal data may be shared with:

6.1. Banks and exchanges to execute conversions, settlements and respond to eventual RFI (Requests for Information).

6.2. Compliance service providers (identity verification, sanctions screening, blockchain analytics).

6.3. Regulators & Authorities (SO-FIT, FINMA, MROS, SECO, auditors).

6.4. IT providers hosting systems in Switzerland or the EU.

We never sell or rent personal data.

7. Data Retention

In accordance with Art. 7 AMLA and our SRO obligations, we keep KYC/KYB files, beneficial ownership declarations, monitoring reports, and transaction data for at least 10 years after the end of a business relationship or execution of a transaction. After the statutory period, data is securely deleted or anonymized.

8. International Transfers

8.1. We primarily process data in Switzerland or the EU. Where data must be transferred internationally, we apply safeguards such as adequacy decisions or Standard Contractual Clauses (SCCs).

8.2. We do not service customers from countries or sectors prohibited under our AML Policy (e.g., sanctioned countries, prohibited industries)

9. Your Rights

Subject to applicable law, you have the right to:

9.1. Access your personal data.

9.2. Request corrections of inaccurate data.

9.3. Request erasure, where not restricted by law.

9.4. Restrict or object to certain processing.

9.5. Request portability of your data.

Please note that under AMLA, we cannot delete or restrict AML-relevant data during the mandatory 10-year retention period.

You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

10. Security

We use strict safeguards to protect your data, including:

10.1.      Encrypted storage and secure servers in Switzerland.

10.2.      Immutable KYC/AML files accessible only to authorized staff.

10.3.      Multi-factor authentication and strict access controls.

10.4.      Regular third-party audits.

11. Updates

This Privacy Policy may be updated to reflect legal, regulatory, or operational changes. The latest version will always be available on our website.

12. Contact

For data protection, please contact: dataprotection@bitlink.ch;

For general requests: info@bitlink.ch

Wanted Broker Sàrl (Bitlink)
Chemin du Débarcadère 10, 1247 Anières, Switzerland, company ID: CHE-459.289.609