Privacy Policy

Botswana Mercantile Exchange Limited ("BMX", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our services, or interact with us as a member or participant.

We comply with the Data Protection Act of Botswana and other applicable data protection laws. By using our services, you consent to the practices described in this policy.

We may collect the following types of information:

• Personal Identification Information: Name, email address, phone number, physical address, date of birth, national ID/passport number.
• Financial Information: Bank account details, payment information, trading history, transaction records.
• Corporate Information: Company registration details, beneficial ownership information, financial statements.
• Technical Information: IP address, browser type, device information, log data, cookies.
• KYC/AML Information: Identity documents, proof of address, source of funds, source of wealth.
• Usage Information: Trading activity, platform usage, communication records.

We use your information for the following purposes:

• Process membership applications and verify your identity
• Facilitate trading, clearing, and settlement services
• Comply with AML/CFT regulations and regulatory reporting obligations
• Communicate with you about your account and services
• Improve our platform, products, and services
• Detect and prevent fraud and market abuse
• Provide customer support and technical assistance
• Send you important notices, updates, and marketing communications (with your consent)

We may share your information with:

• Regulatory Authorities: NBFIRA, Financial Intelligence Agency, Bank of Botswana, and other regulatory bodies as required by law.
• Service Providers: Third-party vendors who assist with clearing, settlement, technology, and other services.
• Clearing Members: As necessary for trade clearing and settlement.
• Law Enforcement: When required by law, subpoena, or court order.

We do not sell your personal information to third parties.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Multi-factor authentication for system access
• Regular security audits and penetration testing
• Access controls and segregation of duties
• 24/7 monitoring and incident response procedures

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations (including record-keeping requirements under the Financial Intelligence Act), resolve disputes, and enforce our agreements.

Trading records are typically retained for 7 years as required by NBFIRA regulations.

You have the right to:

• Access your personal information we hold
• Correct inaccurate or incomplete information
• Request deletion of your information (subject to legal retention requirements)
• Withdraw consent for marketing communications
• Lodge a complaint with the Data Protection Commissioner

To exercise these rights, please contact our Data Protection Officer at dpo@bmx.co.bw.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or our data practices, please contact us:

Data Protection Officer
Botswana Mercantile Exchange Limited
Plot 70667, Ground Floor, Fairscape Precinct, Fairgrounds
Gaborone, Botswana
Email: dpo@bmx.co.bw
Phone: +267 310 0000