BAM Trading Services Inc. d/b/a Binance.US and its affiliates (collectively, “BAM” or “Binance.US”, “we”, “our” or “us”) have instituted the following policy related to any biometric data that we collect. In addition to the information we have provided you in our Privacy Policy, we want to help you better understand how BAM collects and treats biometric data. BAM cares about the security of your personal information and seeks to protect you and us against fraud. Where permitted by law, BAM and certain of our service providers use ID scanning and facial recognition technology to verify your identity and safeguard personal information as part of our security, compliance, and fraud prevention efforts. This notice more specifically describes our collection and use of biometric data.

As used in this policy, “biometric data” means data generated by the technological processing, measurement, or analysis of an individual’s biological, physical, or behavioral characteristics processed for the purpose of uniquely identifying an individual, including but not limited to a fingerprint, a voiceprint, scans or records of eye retinas or irises, facial mapping, facial geometry, facial templates, or other unique biological, physical, or behavioral patterns or characteristics, or as otherwise defined by law. Unless such data is used for identification purposes, “Biometric data” does not include a digital or physical photograph, an audio or voice recording, or any data generated from a digital or physical photograph or an audio or video recording.

When you consent to BAM’s use of your biometric data, BAM (or service providers, such as technology vendors, working on our behalf) collects face scan information—face geometry data and related information—necessary to accomplish the purposes stated in this policy, as disclosed at the time of collection, and/or in our Privacy Policy. Unless required by law, BAM does not otherwise collect, use, store, or disclose your biometric data without your consent.

We use your biometric data to verify or authenticate your identity, including when you create or reactivate your account, to detect and prevent fraud, and to comply with applicable anti-money laundering and sanctions screening obligations (“AML Regulations”). Subject to the storage and retention guidelines below, we store and use your biometric data for these purposes for the duration of your engagement with us or as otherwise permitted by law.

By enabling use of your device’s camera or other identification technology for the purposes of biometric data collection, you are authorizing BAM and/or our service providers to use your device technology, Internet connection, and any associated communications protocols to collect and share biometric data with BAM. BAM’s authorized service providers are under contract to collect and/or store such information on BAM’s behalf, and will not otherwise use your device-specific authorization to collect or use information for any other purposes without your specific consent.

Unless otherwise required by law, your biometric data is accessible only to us and our authorized service providers, which only process the data you provide us on our behalf to accomplish the purposes above, or to third parties engaged by BAM to audit or assess our compliance with AML Regulations. For example, we use Plaid, Inc. (“Plaid”) for identity verification services to identify and authenticate you when you create or reactivate an account with us. Specifically, Plaid will verify that the selfie you provide matches the photo on your government-issued ID. The information collected during this process may constitute biometric data, including facial recognition data and mathematical representations of your facial geometry. To learn more about Plaid’s privacy practices, please visit Plaid’s End User Privacy Policy. By submitting your information, you agree to Plaid’s End User Privacy Policy and End User Services Agreement. We may disclose your biometric data to our authorized service providers or other third parties if:

• You or your legally authorized representative consent to the disclosure;
• The disclosure is required pursuant to a valid warrant, subpoena, or court order issued by a court of competent jurisdiction.

BAM will collect, store, transmit, and protect your biometric data using a reasonable standard of care that is at least as protective as the way BAM collects, stores, transmits, and protects other confidential and sensitive personal information.

BAM will retain biometric data for the retention period required by financial laws and regulations. Unless required by a valid warrant, subpoena, or as otherwise required by law to maintain any specific biometric data for longer, we will securely delete biometric data at the end of such retention period(s), rendering it no longer available for inspection or access. Our identity verification service providers may retain your biometric data until one of the following events occurs: the identity verification purposes for the collection have been satisfied or in accordance with the applicable contract, which may state the same retention period required by financial laws and regulations.

Please contact us if you have any questions about this Policy or if you are seeking to exercise any of your statutory rights. You may contact us at privacy@binance.us or at our mailing address below: