Privacy policy

Effective date: 24 September 2026 · Last updated: 24 September 2026

1. Who we are

UltimateFunded (“UltimateFunded”, “we”, “us” or “our”) operates a proprietary trading evaluation program for contracts for difference (CFDs) and other leveraged products. Traders take part in simulated challenge and evaluation accounts on MetaTrader 5 and, if they meet our rules, may be offered a funded account and a share of simulated profits.

For the purposes of data protection law, UltimateFunded is the controller of the personal data described in this policy. This means we decide why and how your personal data is processed. You can reach us using the details in section 17.

UltimateFunded is not a broker, does not accept deposits and does not provide investment advice. Nothing in this policy changes that.

2. Scope of this policy

This policy applies to personal data we process when you:

• visit this website (ultimatefunded.com) or our trader area (app.ultimatefunded.com);
• register for an account, purchase a challenge, or trade on a challenge, evaluation or funded account;
• complete identity verification (KYC) or request a payout;
• join our affiliate program or are referred by an affiliate;
• contact our support team, or interact with us on community channels such as Discord.

It should be read together with our Terms of Service, trading rules and legal and risk information. Where we process data on behalf of another company, that company’s privacy policy applies instead.

3. Information we collect

We collect only the information we need to run our programs, meet our legal obligations and keep the platform fair and secure. The categories below describe what we collect and where it comes from.

3.1 Information you give us

• Account details — your full name, email address, phone number, country of residence, postal address, date of birth, and your login credentials (passwords are stored only in hashed form).
• Identity verification (KYC) data — a copy of a government-issued photo ID (such as a passport, national ID card or driving licence), proof of address, a selfie or liveness check, and the details contained in those documents, such as ID number, nationality and expiry date.
• Payout details — the information needed to send you a payout, such as a cryptocurrency wallet address or bank account details, and any tax information we are legally required to collect.
• Communications — messages you send to our support team, support tickets, survey responses, and any feedback or complaints.
• Affiliate details — if you join our affiliate program: your payout details, website or social media channels, and referral code.

3.2 Information generated when you use our services

• Trading data — your MetaTrader 5 account numbers, trades, orders, positions, instruments, lot sizes, timestamps, balance and equity history, drawdown, profit and loss, and rule-compliance results.
• Purchase and transaction data — the challenges you buy, prices, coupon codes used, resets, refunds, payout history and invoices.
• Technical and device data — IP address, approximate location derived from your IP address, device identifiers, browser type and version, operating system, time zone, login times and session records, both on our website and on the trading platform.
• Usage data — pages visited, links clicked, referring website, and how you navigate our website and trader area.

3.3 Information from third parties

• Payment processors — confirmation that a payment succeeded or failed, the payment method type, the last four digits of a card, card country, and fraud-risk signals. We do not receive or store your full card number or security code.
• Cryptocurrency networks — public blockchain data associated with transactions you make to or from us, such as wallet addresses and transaction hashes.
• Identity verification providers — the result of your KYC check, including document authenticity checks and screening against sanctions, politically exposed person (PEP) and adverse-media lists.
• Affiliates — if you were referred by an affiliate, we receive the referral code or link that brought you to us.
• Trading platform providers — trading and account activity data from the MetaTrader 5 server infrastructure on which your accounts run.

3.4 Special categories of data

We do not ask for sensitive data such as health, religious beliefs or political opinions. A selfie or liveness check during KYC may involve biometric processing by our verification provider for the sole purpose of confirming that you are the person shown on your ID. Where the law requires it, we will ask for your explicit consent before this happens.

4. How we use your information

We use your personal data to:

• Provide our services — create and manage your account, process challenge purchases, issue MetaTrader 5 credentials, track your progress against the trading rules, and deliver funded accounts.
• Process payments and payouts — take payment for challenges, apply coupons and refunds, calculate profit splits and send payouts.
• Verify your identity — confirm who you are before a funded account is issued or a payout is paid, check your age and country of residence, and screen against sanctions lists.
• Enforce our rules and prevent abuse — detect prohibited trading practices, account sharing, multiple accounts, copy trading between traders, exploitation of platform errors, and payment fraud.
• Support you — answer your questions, resolve issues and handle complaints.
• Run the affiliate program — attribute referrals, calculate commission and pay affiliates.
• Communicate with you — send account and service messages such as credentials, rule breaches, payout confirmations and policy changes, and, where permitted, marketing.
• Improve our services — understand how our website and programs are used, fix problems and develop new features, using aggregated or de-identified data where possible.
• Comply with the law — meet accounting, tax, anti-money-laundering and sanctions obligations, respond to lawful requests from authorities, and establish, exercise or defend legal claims.

5. Legal bases for processing

If you are in the European Economic Area, the United Kingdom or another country with similar laws, we rely on the following legal bases:

If you do not provide information we need to perform our contract with you or meet a legal obligation — for example, KYC documents — we may be unable to issue a funded account or pay a payout.

6. Risk monitoring and automated decisions

To keep our programs fair, we use automated systems to monitor trading activity and account access. These systems check every account against our trading rules — for example, daily and maximum loss limits — and may automatically close a challenge account when a hard rule is breached.

Our risk systems also compare IP addresses, device data and trading patterns across accounts to detect account sharing, prohibited copy trading, hedging between accounts and other abuse. Accounts flagged by these checks are reviewed by a member of our risk team before any decision that denies a payout or terminates a funded account for suspected abuse.

If you believe an automated decision about your account is wrong, contact support. You have the right to request human review, to express your point of view and to contest the decision.

7. Cookies and similar technologies

Cookies are small files stored on your device. We also use similar technologies such as browser local storage. We use them for the following purposes:

• Strictly necessary — keeping you signed in to the trader area, securing your session, remembering the challenge you selected before checkout, and preventing fraud. These cannot be switched off because the service would not work without them.
• Affiliate tracking — when you arrive through an affiliate link, we store a referral cookie for up to 90 days so the referring affiliate can be credited if you purchase a challenge.
• Analytics and preferences — where used, these help us understand how visitors use the website and remember your settings. We only set non-essential cookies with your consent where the law requires it.

Our website also loads fonts from Google Fonts, which means your IP address is sent to Google when the page loads. You can control or delete cookies through your browser settings. Blocking strictly necessary cookies may stop parts of the website or trader area from working.

8. How we share your information

We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share personal data only with the following recipients, and only as far as they need it:

• Service providers who process data on our behalf under contract, including hosting and cloud infrastructure, trading platform and technology providers, payment processors and cryptocurrency payment gateways, identity verification and sanctions screening providers, email and customer support tools, and analytics providers.
• Affiliates — if you were referred by an affiliate, they can see limited information in their dashboard, such as the fact that a referral registered or purchased and the commission earned. We do not share your KYC documents, contact details or trading data with affiliates.
• Professional advisers — lawyers, accountants, auditors and insurers, where necessary.
• Authorities and law enforcement — regulators, tax authorities, courts and law enforcement agencies, where we are legally required to or where it is necessary to prevent fraud or protect our rights, users or the public.
• Business transfers — a buyer, investor or successor in connection with a merger, acquisition, financing or sale of all or part of our business. The recipient will be bound to protect your data in line with this policy.
• With your consent — in any other case where you have asked us to share your information or agreed that we may.

We may publish aggregated statistics, or with your permission, your first name, country and payout amount (for example, on a payout certificate or leaderboard). We will not publish your full name or other identifying details without your consent.

9. International transfers

We and our service providers operate internationally, so your personal data may be transferred to and processed in countries other than the one you live in, including countries whose data protection laws differ from yours.

When we transfer personal data out of the EEA, the UK or Switzerland to a country without an adequacy decision, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, together with any additional measures needed. You can ask us for more information about these safeguards.

10. How long we keep your data

We keep personal data only for as long as we need it for the purposes described in this policy, including to meet legal, accounting and reporting requirements. In general:

• Account, trading, transaction and payout records are kept for the life of your account and for up to 7 years after it closes, so we can meet tax and accounting obligations and handle disputes.
• KYC and anti-money-laundering records are kept for at least 5 years after our relationship ends, or longer where the law requires.
• Support communications are kept for up to 3 years after the matter is closed.
• Technical and security logs are normally kept for up to 12 months, unless needed to investigate a security incident or suspected abuse.
• Marketing preferences are kept until you unsubscribe, after which we keep a record of the opt-out so we do not contact you again.

When data is no longer needed, we delete or anonymise it securely. Where we must keep data for a legal claim or investigation, we keep it until the matter is resolved.

11. How we protect your data

We use technical and organisational measures designed to protect your personal data against loss, misuse, and unauthorised access or disclosure. These include encryption in transit (TLS), hashed passwords, access controls limited to staff who need the data for their role, secure storage of KYC documents with our verification provider, and regular review of our systems.

No system is completely secure. You help protect your account by using a strong, unique password, keeping your trader-area and MetaTrader 5 credentials private, and telling us immediately if you suspect unauthorised access. If a personal data breach is likely to put your rights at high risk, we will notify you and the relevant authorities as required by law.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — ask for a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data, subject to our legal obligations to keep certain records.
• Restriction — ask us to limit how we use your data while a concern is resolved.
• Portability — receive data you gave us in a structured, machine-readable format, or have it sent to another organisation.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time.
• Automated decisions — request human review of decisions made solely by automated means that significantly affect you.

California and other US state residents may also have the right to know what personal information we collect, use and disclose; to request deletion or correction; and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in US state privacy laws. We will not discriminate against you for exercising your rights.

To exercise a right, contact us using the details in section 17. We may need to verify your identity before responding. We aim to respond within one month, or within the time required by the law that applies to you. You may use an authorised agent where the law allows.

You also have the right to complain to a data protection authority, in particular in the country where you live or work, or where you believe your rights were infringed. We would appreciate the chance to address your concerns first.

13. Marketing communications

We may send you news, offers and promotions about our programs by email or other channels where the law allows, or where you have given consent. You can unsubscribe at any time using the link in any marketing email or by contacting support. You will still receive service messages about your account, such as credentials, rule notifications and payout updates, because these are necessary to provide our services.

14. Children

Our services are only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will close the account and delete the data, except where we must keep it by law. If you believe a minor has provided us with personal data, please contact us.

15. Third-party sites and services

Our website and trader area link to third-party services, including MetaTrader 5, payment providers, and community channels such as Discord. These services are run by other companies under their own privacy policies. We are not responsible for their privacy practices, and we encourage you to read their policies. Anything you post in public community channels can be seen by other members.

16. Changes to this policy

We may update this policy from time to time to reflect changes to our services, the law or our practices. The “last updated” date at the top shows when it was last changed. If we make material changes, we will tell you by email or through a notice in the trader area before the changes take effect. Your continued use of our services after that date means the updated policy applies to you.

17. Contact us

If you have questions about this policy, want to exercise your rights or have a privacy concern, contact us through:

• Support ticket — open a ticket from your trader dashboard with “Privacy request” in the subject line.
• Contact page — see our contact page for all current channels.

Please do not send KYC documents or other sensitive information through public community channels such as Discord.