AQ Investment ("we," "us," or "our") is committed to protecting your privacy and the security of your personal data. This Privacy Policy describes how we collect, use, share, store, and protect information when you access or use our investment platform ("Platform") at www.aq-investment.online. By using the Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

2.1. Account Information: When you create an account, we collect your full name, email address, password (stored in hashed form), phone number (optional), country of residence, and date of birth. 2.2. KYC Documents: For identity verification, we collect government-issued photo identification (passport, national ID, or driver's license), proof of address (utility bill, bank statement), and selfies or live photos for facial verification. 2.3. Financial Information: We collect details of your investment plans, deposit and withdrawal history, wallet addresses, bank account details (for wire transfers), and transaction records. 2.4. Technical Data: We automatically collect your IP address, browser type and version, device type, operating system, referring URL, pages visited, time spent on the Platform, and access times. 2.5. Communications: We store records of your correspondence with our support team, including emails, chat transcripts, and in-app messages. 2.6. Cookies and Tracking: We use cookies, web beacons, and similar technologies to remember your preferences, maintain session security, and analyze Platform usage. See Section 6 for details.

We use your personal data for the following purposes: 3.1. Account Management: To create and maintain your account, process your transactions, and provide customer support. 3.2. Identity Verification: To verify your identity through KYC/AML procedures as required by applicable regulations. 3.3. Transaction Processing: To process deposits, withdrawals, and distribute weekly returns to your account. 3.4. Security and Fraud Prevention: To detect and prevent unauthorized access, fraud, money laundering, and other illegal activities. 3.5. Communication: To send you account notifications, transaction confirmations, platform updates, and respond to your inquiries. 3.6. Regulatory Compliance: To comply with legal obligations, regulatory requirements, and requests from supervisory authorities. 3.7. Analytics and Improvement: To analyze Platform usage patterns, improve functionality, and enhance user experience. 3.8. Marketing (Optional): With your consent, to send promotional materials and investment opportunities. You may opt out at any time.

4.1. We do not sell your personal data to third parties. 4.2. We may share your data with the following categories of recipients: (a) Service Providers: Cloud infrastructure providers (AWS, GCP), payment processors, identity verification services, and customer support platforms, all bound by data processing agreements. (b) Banking Partners: Tier-1 banking institutions that hold segregated client custody accounts, for the purpose of facilitating deposits and withdrawals. (c) Regulatory Authorities: Supervisory or regulatory authorities, upon lawful request and in accordance with applicable law. (d) Law Enforcement: Courts, law enforcement agencies, or government bodies when required by law, court order, or to protect the rights and safety of AQ Investment and its users. (e) Professional Advisors: Legal, accounting, and audit firms engaged by the Company in connection with the provision of services. 4.3. In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.

5.1. We implement industry-leading security measures to protect your data: • AES-256 encryption for all data at rest • TLS 1.3 encryption for all data in transit • Multi-factor authentication (MFA) support • Infrastructure controls aligned with global security best practices and continuous security monitoring • Real-time intrusion detection and prevention systems • Regular penetration testing and vulnerability assessments • Role-based access controls with strict least-privilege principles • Automated threat monitoring and incident response procedures 5.2. Despite our security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but will promptly notify affected users in the event of a data breach, in accordance with applicable law.

6.1. Essential Cookies: Required for Platform functionality, including session management, authentication, and security tokens. These cannot be disabled. 6.2. Analytics Cookies: Help us understand how users interact with the Platform, which pages are most visited, and where users encounter errors. We use privacy-respecting analytics tools. 6.3. Preference Cookies: Remember your language, theme, and display settings to provide a personalized experience. 6.4. You may manage cookie preferences through your browser settings. Disabling essential cookies may impair Platform functionality. 6.5. We do not use third-party advertising cookies or cross-site tracking mechanisms.

7.1. Account Data: Retained for the duration of your account and for five (5) years after account closure, as required by applicable AML regulations. 7.2. KYC Documents: Retained for five (5) years after your last transaction, in compliance with regulatory retention requirements. 7.3. Transaction Records: Retained for seven (7) years from the date of the transaction, as required by applicable financial regulations. 7.4. Technical and Log Data: Retained for two (2) years from the date of collection. 7.5. Upon expiration of the retention period, data is securely deleted or anonymized in accordance with our data destruction policies.

Depending on your jurisdiction, you may have the following rights: 8.1. Right of Access: You may request a copy of the personal data we hold about you. 8.2. Right to Rectification: You may request correction of inaccurate or incomplete personal data. 8.3. Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements. 8.4. Right to Restrict Processing: You may request that we limit the processing of your personal data. 8.5. Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format. 8.6. Right to Object: You may object to the processing of your personal data for certain purposes, including direct marketing. 8.7. Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise these rights, please contact our Data Protection Officer at privacy@aq-investment.online.

9.1. For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local data protection laws. 9.2. Legal Basis for Processing: We process your data based on: (a) contractual necessity (providing investment services), (b) legal obligations (AML/KYC compliance), (c) legitimate interests (platform security and improvement), and (d) consent (marketing communications). 9.3. International Transfers: Your data may be transferred to and processed in countries outside the EEA. We ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission or other approved transfer mechanisms. 9.4. Data Protection Officer: Our designated DPO can be reached at dpo@aq-investment.online. 9.5. Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been infringed.

10.1. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. 10.2. Material changes will be communicated via email or in-platform notification at least fourteen (14) days before they take effect. The "Last updated" date at the top of this policy reflects the most recent revision. 10.3. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated policy.

11.1. The Platform is intended for users aged 18 and older. We do not knowingly collect personal data from individuals under the age of 18. 11.2. If you believe we have inadvertently collected personal data from a minor, please contact us at privacy@aq-investment.online so that we can promptly delete the information.

For questions or concerns about this Privacy Policy or to exercise your data rights, please contact: Data Protection Officer AQ Investment (القرنين للاستثمار) Email: privacy@aq-investment.online DPO: dpo@aq-investment.online Website: www.aq-investment.online