1. Protect your password and personal information

1. Keep your password confidential. Never disclose it to anyone, including anyone claiming to represent the Company.

2. Do not write down your password or store it in an unprotected note, email or photograph.

3. Use a strong, unique password. Do not reuse passwords used for other accounts or services.

4. Do not use easily guessed information, such as your name, date of birth or telephone number, as your password.

5. Never share your one-time passwords (OTPs), authentication codes or other security credentials.

6. Do not provide your account number, password, identity document number or other personal information in response to unsolicited SMS messages, emails, calls or messaging-app requests.

7. Do not enter sensitive personal information through hyperlinks in unsolicited messages.

8. Change your password immediately and contact the Company if you suspect that your login details have been compromised.

2. Verify websites, hyperlinks and app downloads

9. Access your account only through the Company’s official app or website.

10. Check the actual website address—not merely the displayed link text—and ensure that it matches the official address published by the Company.

11. Do not rely on a familiar logo, website appearance or sender name as proof that a message or website is genuine.

12. Do not click login or account-verification links in unsolicited SMS messages, emails or social-media messages.

13. Download the trading app only from the official app-store listings identified on the Company’s official website.

14. Do not install apps or installation files sent by unknown persons or received through unsolicited messages.

15. If a message claims that your account will be suspended unless you act immediately, stop and verify it with the Company through an official contact channel.

3. Protect your mobile device and connection

16. Do not log in to your trading account using public or unsecured Wi-Fi. Use a trusted network or your mobile data connection.

17. Do not access your trading account through public or shared devices.

18. Do not use a jailbroken or rooted mobile device for trading.

19. Keep your trading app and device operating system up to date.

20. Protect your device with a strong screen lock and do not share your device passcode.

21. Do not allow others to remotely access or control your device while you access your trading account.

22. Do not leave your device unattended while logged in. Log out after use.

4. Use biometric authentication and device registration safely

23. Enable fingerprint or facial authentication only on a device used exclusively by you.

24. Before enabling biometric login, ensure that no other person’s fingerprints or facial data are enrolled on your device.

25. Do not add another person’s fingerprints or facial data to a device enabled for biometric access to your trading account.

26. If another person’s biometric data is already enrolled, remove it before enabling biometric login for your trading account.

27. Register only devices that you own and control. Never register a device at another person’s request.

28. Approve login, device-registration or other authentication requests only when you initiated the action and have checked the details.

29. Reject unexpected authentication requests and contact the Company immediately.

30. Notify the Company immediately if your registered device is lost or stolen, or you suspect that it has been compromised.

5. Monitor your account and report suspicious activity

31. Enable available account-security alerts and keep your registered contact details up to date.

32. Check login alerts, device-registration notices and transaction confirmations promptly.

33. Review your account statements regularly and report any unfamiliar transaction immediately.

34. Do not ignore notifications about changes to your password, registered device or contact details.

35. Report suspicious messages, unfamiliar logins or unauthorized transactions immediately to 25330722.

36. Verify suspicious communications using the contact details in the Company’s official app or website—not those provided in the suspicious message.

6. Company-specific anti-phishing notice

The Company will not ask you to provide your password, OTP or other authentication information through hyperlinks in SMS messages or emails. Never disclose such information to anyone. If in doubt, contact us at 25330722.