1. What we collect

• Identity & contact: name, DOB, address, email, phone.
• Investor/KYC: ID documents, residency, beneficial ownership, sanctions/PEP checks.
• Transaction/usage: device, IP, logs, cookies/pixels, application details.
• Communications: support requests, preferences, recordings where disclosed.

2. Why we collect it

To operate and secure the Platform; process applications; perform KYC/AML and sanctions screening; administer investments; communicate updates; meet legal obligations; improve services; and conduct permitted direct marketing (opt-out anytime).

3. Direct marketing

We may send emails/SMS about updates or opportunities. You can unsubscribe using the link in messages. We comply with the Spam Act 2003 (Cth).

4. Cookies/analytics

We use cookies and analytics pixels to measure traffic and improve features. You can adjust browser settings; some functions may degrade.

5. Overseas disclosures

Service providers may process data outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure recipients protect it consistently with the APPs.

6. AML/CTF & sanctions

If we are a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), we must perform KYC and ongoing monitoring and retain certain records (generally 7 years). We may screen against Australian and international sanctions lists.

7. Security & retention

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access or disclosure, and retain it only as needed for legal and operational purposes.

8. Notifiable Data Breaches

Where a breach is likely to cause serious harm, we will notify affected individuals and the OAIC in line with the NDB scheme.

9. Access & correction

You may request access to or correction of your personal information. We’ll respond within a reasonable period (subject to lawful exceptions).

10. Contact & complaints

Email: policy@reoptyltd.com (privacy) or support@reoptyltd.com (general).
If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).