Privacy Policy

Last Updated: May 2026

1. Introduction

AGK CORRETORA DE CAMBIO S.A. ("AGK", "we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our foreign exchange services, visit our website at www.agkcorretora-fn.it.com, or interact with us.

This policy covers our data processing practices in compliance with the Brazilian General Data Protection Law (LGPD - Lei Geral de Proteção de Dados, Law 13.709/18). We adhere to the highest standards of data protection and privacy.

Important: We never sell your personal data to third parties. Your financial privacy is of utmost importance to our business relationship.

2. Information We Collect

2.1 Information You Provide

• Personal identification: Full name, date of birth, CPF/RG numbers, nationality
• Contact information: Email address, phone number, home and business addresses
• Financial information: Bank account details, income verification, tax information
• Transaction data: Exchange transaction records, payment history, currency amounts
• Compliance documents: Proof of address, source of funds documentation, KYC records
• Communication records: Customer service interactions, inquiries, complaints

2.2 Automatically Collected Information

• Device information: IP address, browser type, operating system
• Usage data: Pages visited, time spent, click patterns
• Cookie data: Session IDs, user preferences, analytics data

3. How We Use Your Data

• Service delivery: Processing foreign exchange transactions, executing transfers, managing accounts
• Compliance: KYC verification, AML screening, sanctions checks, regulatory reporting
• Communication: Transaction confirmations, policy updates, security alerts, customer support
• Legal obligations: Tax reporting, regulatory submissions, responding to lawful requests
• Service improvement: Analysing usage patterns to enhance our website and services

4. Data Sharing and Disclosure

We may share your data with:

• Banking partners: For transaction execution and settlement
• Regulatory authorities: Central Bank of Brazil, COAF, tax authorities - as required by law
• Payment processors: For card transactions and wire transfers
• Western Union: For money transfer services at designated branches
• Legal requirements: Court orders, lawful government requests

We do not share your data for marketing purposes with third parties without your explicit consent.

5. Data Security

We implement technical and organisational security measures including encryption of data in transit (TLS) and at rest, access controls and authentication, regular security audits, employee training on data protection, and incident response procedures. In the event of a data breach affecting your personal data, we will notify you and the ANPD (National Data Protection Authority) in accordance with LGPD requirements.

6. Your Rights Under LGPD

• Confirmation and access: Request confirmation of whether we process your data and access to that data
• Correction: Request correction of incomplete, inaccurate, or outdated data
• Deletion: Request deletion of your personal data, subject to legal retention requirements
• Anonymisation or blocking: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another service provider
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent
• Information about sharing: Know which public and private entities we have shared your data with

To exercise any of these rights, contact us using the information below. We will respond within 15 days.

7. Data Retention

We retain your personal data for the following periods:

• Account and transaction records: 10 years after account closure (legal requirement)
• KYC documentation: 5 years after the end of the business relationship
• Marketing consent records: Until consent is withdrawn
• Website logs: Up to 2 years

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries outside Brazil when necessary for transaction execution (e.g., correspondent banks). We ensure appropriate safeguards are in place, including contractual clauses and compliance with LGPD adequacy requirements.

10. Contact Information

AGK CORRETORA DE CAMBIO S.A.
Rua Dr. Rafael de Barros, 209 - 9º andar
São Paulo - SP, 04003-041
Phone: +55 11 3123-7166
Email: info@agkcorretora-fn.it.com

Data Protection Officer (DPO): Contact us at the above address for privacy-related matters.

If you are not satisfied with our handling of your privacy concerns, you have the right to lodge a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

11. Policy Updates

We may update this Privacy Policy periodically. Changes will be posted on our website with the updated date. For material changes, we will notify you by email or through a prominent notice on our website. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.