Terms, privacy and policies

Terms of Service

These Terms govern your use of PayBit services, including our exchange, wallet, card, staking and business products. By creating an account you agree to them — please read carefully.

1 Acceptance of terms

By creating a PayBit account or using any PayBit service, you agree to be bound by these Terms, our Privacy Policy, and any additional terms that may apply to specific products. If you do not agree, do not use PayBit.

2 Eligibility

You must be at least 18 years old and legally able to enter into a binding contract in your jurisdiction. PayBit is unavailable in certain sanctioned regions — see the Restricted Countries list published at paybit.com/restricted.

• You represent that you are not listed on any sanctions list (OFAC, EU, UN, HMT).
• You are not acting on behalf of an entity we're prohibited from contracting with.
• You are not using the service while in a jurisdiction where it is unlawful.

3 Account security

You are responsible for maintaining the confidentiality of your credentials, device, and any seed phrases generated on your behalf. Enable 2FA on all accounts. PayBit will never ask for your password or private keys.

4 Prohibited conduct

You may not use PayBit for money laundering, terrorism financing, tax evasion, sanctions evasion, market manipulation, or any activity that violates applicable laws. We monitor for abuse and cooperate with law enforcement under published guidelines.

5 Fees

Current fees are published at paybit.com/fees and may be updated with at least 14 days' notice. Continued use after an update constitutes acceptance of the new fees. Deposit, withdrawal and network fees are passed through at cost.

6 Assumption of risk

Cryptocurrency markets are volatile. Past performance is not indicative of future results. Smart contracts may contain bugs. Self-custody means losing your seed phrase means losing your funds — permanently. You assume full responsibility for your trading, staking and custody decisions.

7 Limitation of liability

To the maximum extent permitted by law, PayBit's aggregate liability shall not exceed the fees paid by you to PayBit in the twelve months preceding the event giving rise to the claim. We are not liable for indirect, incidental, consequential or punitive damages.

8 Changes to these Terms

We may update these Terms from time to time. Material changes are notified by email and in-app at least 30 days in advance. A full changelog is maintained at the bottom of this page.

9 Governing law

These Terms are governed by the laws of the jurisdiction in which your account is registered, as reflected in your regional addendum below.

10 Contact

Questions about these Terms: [email protected]. For service of process: PayBit, 28 Liberty Street, 40th Floor, New York, NY 10005.

Privacy Policy

This policy explains what personal data we collect, why we collect it, how we protect it, and the rights you have over it. PayBit is a data controller under GDPR and CCPA.

1 What we collect

• Identity data: name, DOB, nationality, government ID, selfie, proof of address.
• Financial data: transaction history, deposits, withdrawals, source-of-funds declarations.
• Technical data: IP, device fingerprint, browser, OS version — used for fraud prevention.
• Usage data: pages visited, features used, clicks — anonymized after 13 months.

2 Why we process it

To provide the service, comply with AML/KYC obligations, prevent fraud, detect sanctions violations and improve the product. Processing grounds are contract performance, legal obligation and legitimate interest.

3 Who we share it with

Compliance partners (Chainalysis, Jumio), banking partners for fiat rails, cloud infrastructure (AWS, regioned), law enforcement when legally required, and product analytics (Segment). We publish a full list of sub-processors at paybit.com/subprocessors.

4 How long we keep it

KYC records are retained for 7 years after account closure as required by law. Non-mandatory data is deleted on request or after 13 months of inactivity.

5 Your rights

• Right to access, correct, erase or port your data.
• Right to object to legitimate-interest processing.
• Right to lodge a complaint with your supervisory authority.
• Right to know whether automated decisions affect you — we do not use solely automated decisions for significant outcomes.

6 Data protection officer

You can reach our DPO at [email protected]. For EU residents, our EU representative is located at Avenida da Liberdade 245, Lisbon.

Cookie Policy

We use cookies and similar technologies for authentication, security, preferences and analytics. You can change your choices any time via the cookie banner or your account settings.

AML, KYC & Sanctions

PayBit operates a risk-based financial-crime program that meets or exceeds the FATF Recommendations, the EU AMLA framework, and the US Bank Secrecy Act.

1 Customer due diligence

All new users complete standard KYC (identity document + selfie) before any transaction. Enhanced due diligence is triggered by jurisdiction, PEP status, transaction volume, or risk signals.

2 Transaction monitoring

Every deposit and withdrawal is screened using Chainalysis KYT against OFAC, EU, UN and UK sanctions lists. Flagged transactions are frozen pending manual review, typically resolved within 24 hours.

3 Travel Rule

PayBit is a participant in the TRUST / TRP travel-rule networks. Transfers above applicable thresholds (EUR 1,000 in the EU, USD 3,000 in the US) include originator and beneficiary data as required.

4 Reporting

We file Suspicious Activity Reports with FinCEN, the FIU-Portugal (for EU clients via MiCA passport) and equivalents. We do not tip off subjects of SARs.

Regional addenda

Local supplements that apply in addition to the global Terms above. The regional addendum for your account jurisdiction takes precedence where they conflict.

Licenses & registrations

PayBit operates under 14 financial-services authorizations across 6 regulators. All licenses are verifiable on the respective regulator's public register.

Ownership & restructuring

A brief, plain-language summary of the 2026 change of control, the move to a United States corporate structure, and the regulatory applications currently in flight under new leadership.

1 Change of control

In early 2026 the shareholders of the former PayBit group entered into an asset-sale and share-purchase agreement with a newly incorporated US parent, PayBit (Delaware). The transaction covers the PayBit brand, software, customer contracts and operating assets across all jurisdictions in which PayBit is active.

2 Move to US entity structure

Going forward, the group is being consolidated under PayBit, with regulated subsidiaries continuing to hold the local licences they already operate under. The US parent is in the process of applying — or re-applying, through change-of-control filings — for every licence listed in the Licenses & registrations section.

• PayBit — Delaware parent, new US headquarters in New York, NY.
• PayBit — FinCEN MSB, NYDFS BitLicense (transfer filed).
• PayBit — MiCA CASP via CySEC, FCA UK registration (transfer filed).
• PayBit — MAS Singapore, AUSTRAC Australia, JFSA Japan (transfer filed).

3 Restructuring & reorganisation

The business is currently in an active restructuring and reorganisation phase under new leadership. This includes leadership changes across the executive team, a refreshed board, updated internal controls, a re-examined risk framework and a reorganised product roadmap. Customer-facing services are unaffected by these internal changes.

4 Impact on customers

• No action required. Your account, balances, keys and personal data are unchanged.
• Non-custodial by design. PayBit never holds your keys or your coins — the ownership change does not affect self-custody in any way.
• Service continuity. Deposits, withdrawals, trading, staking and card services continue to operate under the current regulated entities until each licence transfer is approved.
• Terms & privacy. We will re-issue these Terms and our Privacy Policy once the transition completes, with 30 days' notice and a clean changelog entry.

5 Regulatory disclosure

All change-of-control filings have been submitted to the relevant regulators listed in the Licenses & registrations section. We are complying with each regulator's disclosure obligations throughout the transition. Questions from regulators, partners or press can be directed to [email protected].

6 Indicative timeline

7 Contact

For investor, regulatory or press enquiries about the restructure, contact [email protected]. For customer questions, see Help Center.

Changelog

Every material revision to our Terms, Privacy Policy, Cookie Policy and AML program — publicly logged.

Common legal questions

Short answers to the most-asked questions. For anything more specific, email [email protected].