Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes the privacy policy for Binance.US, operated by BAM Trading Services Inc., and specifies categories of personal data collected from account holders and permitted uses of that data. Binance.US collects government-issued identification, Social Security numbers, bank account details, biometric data, transaction records, device data, and browsing information, with authorization to share such data with third-party service providers, financial institutions, analytics vendors, advertisers, and law enforcement. The policy permits California residents to submit requests to access, delete, correct, or restrict sharing of their personal data through the Binance.US privacy request portal.
This document is the Privacy Policy for BAM Trading Services Inc. (operating as Binance.US), governing the collection, use, and disclosure of personal information for users of the Binance.US cryptocurrency exchange platform. The policy states that BAM collects identifiers (name, email, phone, government ID), financial information (bank account numbers, transaction history), device and technical data (IP address, browser type, operating system, cookies), biometric data collected during identity verification, and behavioral data (browsing activity, trading patterns); the terms authorize sharing this information with service providers, financial partners, law enforcement, and affiliates. The policy asserts broad data retention authority and describes sharing personal data with third-party analytics, advertising, and compliance vendors, while also disclosing the use of cookies and tracking technologies for behavioral analytics and marketing. The policy engages the California Consumer Privacy Act (CCPA) and its amendment under CPRA, the Bank Secrecy Act, FinCEN regulations, and general FTC Act consumer protection standards; as a U.S.-based cryptocurrency exchange, BAM is subject to financial services compliance requirements including KYC and AML obligations that necessitate collection of government-issued identification and financial records. California residents are expressly identified as having additional rights including the right to know, delete, correct, and opt out of sale or sharing of personal information, though the practical scope of those rights under CCPA depends on enforcement context and how BAM classifies its data processing activities.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trial5 important changes detected
5 versions captured · Last updated: June 2026
Binance.US updated its privacy policy on April 19, 2026 with five new sentences and modifications to eleven existing sentences. The policy now explicitly authorizes disclosure of user information to law …
View change record →Binance.US updated its Privacy Policy on March 12, 2026, adding explicit language authorizing disclosure of customer information to law enforcement and third parties to detect and prevent fraud and financial …
View change record →Binance.US removed explicit language describing fraud prevention disclosures and narrowed the channels available for filing privacy rights appeals. The policy previously stated that user information may be disclosed to law …
View change record →New explicit disclosure of biometric data collection during KYC processes represents a significant privacy expansion that was not previously disclosed.
Newly granular disclosure of highly sensitive personal identifiers (government ID, SSN) that were previously bundled under KYC collection.
New explicit provision detailing collection of transaction history and payment information, expanding disclosure beyond basic financial account data.
Removal of explicit retention policy disclosure post-account closure reduces transparency on data lifecycle management.
Removal of cross-border data transfer provision obscures where user data may be processed internationally.
Removal of affiliate-specific data sharing disclosure consolidates sharing practices into broader third-party provisions, reducing specificity.
Severity downgraded from high to medium and provision expanded to explicitly mention regulatory authorities and government agencies alongside law enforcement.
Renamed from 'CCPA Rights for California Residents' and now explicitly lists specific rights (know, delete, correct, opt out of sale/sharing).
Renamed to include 'Behavioral' and now specifies named tracking tools (Google Tag Manager, Google Analytics, RudderStack) with explicit purposes.
Renamed from 'Third-Party Data Sharing for Marketing' and expanded to explicitly include analytics and service provider partners beyond marketing; severity downgraded from high to medium.
Split into two separate provisions (Government ID and SSN Collection, and Financial Account Data) with more granular detail on specific data types collected.
Monitoring
Binance.US has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle Biometric Data Collection and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.