Last Updated: 01-01-2026
This policy outlines how Osool Gamma for Investment Company collects, uses, stores, shares, and protects personal data when you use the Company's platform, website, application, investment services, or official communication channels.
This policy applies to:
This policy is an integral part of the Terms and Conditions of Use and the Personal Data Protection Notice.
The Data Controller responsible for personal data is:
The Company determines the purposes and means of processing personal data related to the Platform's services, in strict compliance with the Saudi Personal Data Protection Law (PDPL) and its executive regulations.
The Company confirms that the primary servers, the official domain, data storage systems, and the Escrow Accounts associated with the Platform are located or managed within the Kingdom of Saudi Arabia.
The Company does not transfer personal data outside the Kingdom except in cases permitted by the PDPL and its regulations, and only after implementing the necessary legal and technical safeguards and obtaining required approvals where applicable.
The Company may collect the following categories of data, depending on your use of the Platform and the nature of the requested service:
The Company may collect optional data only when the User enables a specific feature or provides consent, such as:
The Company obtains personal data from the following sources:
The Company processes personal data for the following purposes:
The Company does not use personal data for purposes incompatible with the above unless based on a valid legal ground or after obtaining consent when required.
The Company relies on one or more of the following legal bases to process personal data:
Certain processing activities may involve data classified as "sensitive" under the PDPL, where applicable (e.g., financial/credit verification data, geolocation data, or biometric data if used). The Company handles this data with elevated security measures and only processes it when there is a clear legal basis and strictly to the extent necessary for the specified purpose.
The Company may share personal data, strictly to the extent necessary, with the following categories:
The Company legally binds its contracted service providers to use the data solely for specified purposes, maintain its confidentiality and security, and prohibits them from selling it or using it for independent purposes.
The Company endeavors to minimize the personal data published on any blockchain network and relies, wherever possible, on indirect identifiers, hashed data, or encrypted data instead of direct identity information.
However, the User acknowledges that certain technical ledgers associated with blockchain or smart contracts may be inherently immutable (cannot be deleted or modified). In such cases, the Company applies the rights of correction, deletion, or restriction across its internal "off-chain" systems, or by severing the link between the User's identity and the technical identifiers, wherever legally and technically feasible.
The Platform uses cookies and similar technologies for various purposes, including:
The User can control cookies through browser settings or the settings panel available within the Platform (if applicable). Please note that disabling essential cookies may impact the functionality of the Platform.
The Company only sends marketing messages when consent has been obtained or where legally permitted. The User has the right to opt out of marketing messages at any time via the unsubscribe link, account settings, or official communication channels.
Conversely, operational, security, and statutory messages (such as verification codes, transaction alerts, and updates to terms) will continue to be sent, as they are essential for service delivery and legal compliance.
The Company may use WhatsApp or similar messaging channels to communicate with Users upon their consent or based on an existing relationship that legally permits such communication. The Company strictly commits to never using these channels to request passwords, private keys, recovery phrases, or fund transfers to unofficial accounts.
The User has the right to decline communication via these channels or withdraw consent at any time without affecting the core service, except for features specific to that optional channel.
The Company retains personal data for the duration necessary to fulfill the processing purposes or to comply with statutory, tax, accounting, and AML/CTF obligations.
The retention period for certain records may extend to the statutory periods required, which can be up to ten years or more if mandated by laws, compliance requirements, or potential legal claims.
Once the statutory or operational need expires, the Company securely deletes, destroys, anonymizes, or disables access to the data.
The Company implements technical and organizational measures to protect personal data, which include, depending on the data's nature and associated risks:
However, no digital system can guarantee absolute security. Therefore, Users must take active steps to protect their devices, accounts, and login credentials.
Under the Saudi Personal Data Protection Law (PDPL), the data subject holds rights, subject to statutory conditions and limitations, including:
The withdrawal of consent does not affect the lawfulness of processing conducted prior to the withdrawal, nor does it halt processing necessary for the performance of a contract or compliance with a legal obligation.
The data subject may exercise their rights through the official channels published on the Platform or by writing to the Company at its National Address. To protect data security, the Company may request additional information to verify the applicant's identity prior to execution.
The request must clearly include:
The Company will respond to requests within the statutory timeframes. It may refuse a request entirely or partially if there is a legal justification, providing the reason where legally required.
The investment services on the Platform are not directed at minors or individuals lacking legal capacity. A minor may not create an investment account or execute transactions on the Platform except as permitted by law and through a legal guardian or representative, where applicable.
If the Company discovers it has collected a minor's data without a valid legal basis, it will take appropriate steps to delete the data or suspend the account in accordance with the law.
The Company may use automated tools to assist in identity verification, fraud detection, risk assessment, or platform protection. The Company does not rely on purely automated decisions that produce significant legal effects on the User without appropriate human review or statutory disclosure, where legally required.
The Platform may contain links to external websites or services. The Company assumes no responsibility for the privacy practices or content of those third-party sites. Users should review the privacy policies of such sites before providing any personal data.
In the event of a breach, leak, loss, or unauthorized access to personal data that could harm the data subject or compromise their rights, the Company will take the necessary legal and technical measures. This includes notifying the competent regulatory authority within the statutory timeframe (not exceeding 72 hours, where applicable) and notifying the affected data subjects when required by law.
The Company may update this policy from time to time to reflect regulatory, technical, or operational changes. The updated version will be published on the Platform with the "Last Updated" date. The Company may request renewed consent if legally required by the update.
For inquiries, requests, or complaints regarding privacy and data protection, you may contact the Company via the official channels published on the Platform, through the Company's official domain, or at the following National Address:
If a complaint is not resolved to the satisfaction of the data subject, they have the right to escalate the matter to the competent Saudi data protection authority in accordance with approved official mechanisms.
Subscribe to our newsletter to receive all updates.
