Malaz GoldPrivacy Policy
Last updated: 2026-10-17
1. Who we are
The Malaz Gold app and the website www.malazgold.com are operated by Malaz for Jewellery LLC, Km 19.5 Alexandria–Matrouh Road, Abu Youssef, El Dekheila, Alexandria, Arab Republic of Egypt ("we"). This policy explains what data we collect when you use the app and the website, why, how we protect it, and your rights. We comply with Egypt's Personal Data Protection Law No. 151 of 2020 and other applicable laws.
2. Data we collect
- Account data: full name, email, phone number, preferred language.
- Security data: password and PIN (stored as one-way hashes that cannot be reversed), session records and the devices you sign in from.
- Identity verification (KYC): photos of the front and back of your national ID card and a selfie, and the review outcome.
- Financial data: wallet balance, top-ups and the transfer receipts you upload, withdrawal requests and the payout details you enter (beneficiary name, bank and account number/IBAN, InstaPay address, mobile-wallet number and provider), gold and silver buy/sell orders and your holdings, and what you set up in the app: savings goals, recurring purchase plans, target-price orders and price alerts, and physical-bar requests with the details you enter for them (recipient name and phone, delivery address).
- Gifts and invitations: when you gift gold or silver you enter the recipient's phone number or email, we show you their first name and the initial of their second name to confirm, and the recipient sees your name and your message if you add one. When an invitation code is used we record who invited whom.
- Notification data: your device's push-notification token and its operating system (iOS or Android).
- Technical data: IP address and request times in server logs, for security and abuse prevention.
We use no advertising, analytics or tracking tools in the app, and we do not sell your data.
3. Why we use it
- To run your account and process top-ups, withdrawals, purchases, sales and gifts.
- To carry out what you set up: automatic savings plans, target-price orders, price alerts and referral rewards.
- To verify your identity and comply with anti-money-laundering and counter-terrorist-financing laws.
- To protect your account (PIN, verification codes, abuse detection, freezing the account at your request).
- To send service messages by email and push notification: email verification, password-reset and PIN-change codes, status updates on your requests and price alerts.
- To answer your questions and complaints.
4. Who we share it with
- Infrastructure providers: the service is hosted, documents are stored and emails are sent through Amazon Web Services in the EU (Ireland). Your data is processed there only on our behalf and instructions, under data-processing agreements, and in line with the cross-border transfer requirements of Law 151/2020.
- Notification services: to deliver app notifications we pass your device token and the notification text through the Apple Push Notification service (iPhone) or Google's Firebase Cloud Messaging (Android). A notification may include the status or quantity of your request or the price an alert reached; it never includes your identity documents or bank details.
- Other users: only for gifts, as described in section 2.
- Authorities: when required by law, court order or a regulator.
- We never share your data for marketing.
5. How we protect it
Encrypted connections (HTTPS), private document storage reachable only through short-lived links, staff access on a need-to-know basis, an audit log of administrative actions, and encrypted daily backups. We will never ask for your password, PIN or a verification code by phone or message.
6. Retention
- Account data is kept while your account is open.
- When you delete your account we immediately erase your name, email, phone number, password, PIN, sessions, device tokens and notifications.
- Financial transaction records and identity-verification documents are kept for the period required by Egyptian law (at least five years after the relationship ends or the last transaction, under anti-money-laundering rules), and then deleted.
7. Your rights
You may access, correct, request deletion of, and object to the processing of your data, within the limits of the law. You can delete your account in the app (Account → Delete account) once your balance is withdrawn, your metals sold and no request is pending, and you can turn off app notifications in your phone settings. For any other request write to support@malazgold.com.
8. Children
The service is for people aged 21 or over (the age of majority under Egyptian law); we do not knowingly collect data from younger people.
9. The website
The website uses no cookies and no analytics tools. It loads its fonts from Google Fonts, so your IP address may reach Google when they load.
10. Changes
We may update this policy and will notify you in the app before any material change takes effect.
11. Contact
Malaz for Jewellery LLC — email: support@malazgold.com.