Privacy policy
Effective date: October 22, 2026. Last Updated: October 22, 2026.
Operating entity: Prime Custody (Pty) Ltd
1. Introduction
PropFunding (the “Platform”, “we”, “us” or “our”) is operated by Prime Custody (Pty) Ltd in South Africa. We handle personal information in accordance with applicable law, including South Africa’s Protection of Personal Information Act (POPIA). This policy explains what we collect, how we use and share it, retention, security and your rights.
This policy applies to visitors, registered users, simulated traders, referral participants and other users of our services. Where consent is legally required, we seek it separately.
2. Information we collect
REGISTRATION
Name, username, email, country of residence, login details, preferences and account identifiers.
IDENTITY VERIFICATION
After qualification, an authorised external verification provider may collect identification documents, residential information, photographs, biometric checks when required, and verification information. The external verification provider stores the underlying KYC documents and verification data. PropFunding may receive and retain necessary verification status, reference identifiers, eligibility outcomes and compliance records for administering accounts and meeting legal requirements. The extent of data shared back to us depends on the provider integration and applicable requirements.
SIMULATED TRADING
PRP account balances, simulated positions, orders, profit or loss, drawdown, risk events, trading history, qualification and inactivity status. PRP is a simulated proprietary accounting unit, not deposited money or a freely traded token.
PAYMENTS AND REDEMPTIONS
Activation amounts and status, payment processor references, refunds, chargebacks, USDC redemption amounts, wallet addresses, supported blockchain networks and transaction hashes. We do not ask users for wallet private keys or recovery phrases.
REFERRALS
Referral links and codes, attributed accounts, trial and paid activation status, $50 reward eligibility, holding period, claim status and withdrawal records.
TECHNOLOGY
IP address, device and browser information, login and security events, cookies, feature usage and troubleshooting logs.
3. How we use information
We use information to register and authenticate users; run simulated PRP accounts; monitor trading rules and eligibility; complete verification through third-party providers; collect activation payments; process eligible USDC redemptions; administer referral rewards; provide support; prevent fraud and duplicate identities; comply with law; secure services; and analyse or improve the Platform.
We may send account, payment, security and policy notifications. Marketing messages are managed under applicable consent and opt-out requirements.
4. Lawful bases
Depending on applicable law and context, processing may be necessary for contract performance, compliance with legal duties, legitimate interests subject to safeguards, consent, or another lawful basis recognised by POPIA. Where consent is the basis, it can be withdrawn subject to legal limits.
5. Trading data and analytics
We may analyse simulated trading data for account evaluation, risk management, misuse detection, aggregate reporting and development of proprietary analytics and trading systems. We may use aggregated or appropriately de-identified records. Data that could reasonably identify a user remains personal information.
6. Information sharing
We do not sell personal information. Information may be shared as necessary with external KYC providers, payment processors, hosting and IT infrastructure vendors, trading technology providers, security and analytics services, customer support providers, professional advisers and competent authorities where required by law.
The external KYC provider stores the identity documents and verification data it collects. Its own privacy notice may also apply to its processing. We require appropriate contractual, confidentiality and security protections from service providers where applicable.
7. Community and leaderboards
We may display usernames, permitted simulated performance data and rankings through leaderboard and community features. We do not intentionally publish identification documents, non-public contact details or wallet recovery credentials. Users should avoid sharing personal or financial secrets in public channels.
8. Cookies
Cookies and similar tools may be used for login sessions, preferences, security, performance and analytics. Non-essential tracking requires consent where applicable. Browser or website settings may allow users to control cookies, although some features may stop working.
9. Security
We use reasonable organisational and technical safeguards such as access restrictions, authentication controls, appropriately protected transfers, monitoring and incident procedures. No service can guarantee absolute security. Users must protect account credentials and wallet information. Where required, we notify individuals and regulators of reportable incidents.
10. Retention
We retain information only as long as needed for service operations, legal duties, payment disputes, compliance, audit and fraud prevention. Accounts, trading records, activation and redemption histories, referral records and security logs may have different lawful retention periods.
The external KYC provider stores underlying verification documents and data under its applicable retention arrangements. We retain only verification outcomes and related records that are needed for our purposes, except where a specific lawful requirement or actual integration requires additional information. When no longer needed, information is deleted, destroyed or de-identified as appropriate. Closing an account does not necessarily immediately delete legally required records.
11. International transfers
Our verification, payment, hosting and technology vendors may process information outside South Africa. We take steps required by applicable law to protect information transferred internationally, including lawful transfer mechanisms and appropriate provider safeguards.
12. Your privacy rights
Subject to applicable law, you may request access, correction or eligible deletion; object to certain processing; withdraw applicable consent; and raise complaints. We may verify identity before responding and may retain records where legally required. Direct requests to help@propfunding.com. You may also complain to South Africa’s Information Regulator.
13. Automated monitoring
Automated tools may detect trading loss-limit breaches, 14-day inactivity, duplicate identity indicators, payment irregularities and referral abuse. Such monitoring can lead to account restrictions or closure subject to the Terms of Service. Where applicable law provides a right to challenge or seek human review, contact support.
14. Third-party services
Third-party websites, verification experiences, payment services and blockchain explorers may have separate privacy practices. Consult those providers’ own notices before providing information. Public blockchain transaction data may be permanent and accessible to others.
15. Age restrictions
The Platform is for persons aged 18 years or older. We do not knowingly permit minors to register and may close accounts discovered to belong to ineligible users, while treating associated data according to law.
16. Updates
We may change this policy as our services, technology and legal obligations evolve. Updated versions will be published with a revision date. We will provide additional notice of material changes when legally required.
17. Legacy traders
For legacy PropFunding programs operated by Prime Custody (Pty) Ltd, this policy applies unless a separate applicable notice provides otherwise. Moving existing account access to a separate subdomain does not, by itself, change the purposes for which personal data was collected.
18. Contact
Prime Custody (Pty) Ltd
2nd Floor, Nelson Mandela Square
West Tower, Maude Street
Johannesburg, Gauteng, 2146
South Africa
Email: help@propfunding.com
Website: https://propfunding.com