GENERAL PROVISIONS

This Terms of Use, Privacy, and Data Protection Notice establishes the conditions for the use of the DEX website and platform, part of the Ether ecosystem, and clearly describes how users' personal data is handled.

DEX is a technological environment linked to Ether, strictly following governance, compliance, information security, and anti-money laundering guidelines.

The processing of personal data will be carried out in accordance with Law No. 13,709/2018 (LGPD) and other applicable regulations. By accessing the DEX website or platform, the user agrees to the provisions presented herein.

ACCEPTANCE OF TERMS

Accessing and using the DEX website and platform implies full acceptance of the Terms of Use. If the user does not agree with any part, they must immediately stop using the platform.

OBJECT

The DEX platform offers a technological environment for the execution of specific operational functionalities, as described in Ether's contracts and commercial conditions. Use must strictly follow current legislation, sector regulation, Ether's internal rules, and compliance and governance policies.

USER OBLIGATIONS

The user commits to providing truthful information, keeping registration updated, using the platform only for legal purposes, not performing acts that violate legislation, not using the technology for illicit purposes, and maintaining the confidentiality of their credentials. Non-compliance may result in blocking or account closure.

SECURITY AND ACCESS

The platform may implement reinforced authentication, including MFA, access monitoring, and log records for security and fraud prevention. The user must protect their devices and not share authentication codes.

DATA CONTROLLER

For LGPD purposes, the Ether group company responsible for DEX will act as the Controller of personal data processed on the platform. The Data Processing Officer (DPO) can be contacted through the indicated official channel.

PERSONAL DATA COLLECTED

The following personal data may be collected: data provided by the holder (name, CPF or CNPJ, identification document, phone, email, address, and necessary financial information) and automatically generated data (access records: IP, date and time, authentication logs, and device data). Collection will follow the principles of necessity and minimization.

PROCESSING PURPOSES

Personal data may be processed for: contract execution; preliminary contracting procedures; authentication and access security; fraud and money laundering prevention; compliance with legal obligations; user support; internal audits and governance; platform improvement.

LEGAL BASES

Data processing may be based on: contract execution; compliance with legal obligation; legitimate interest, respecting the holder's rights; consent, when applicable; credit protection and fraud prevention.

DATA SHARING

Personal data may be shared with: financial institutions and partners; technology providers; service providers; public authorities, as required by law. Ether does not sell personal data.

INTERNATIONAL TRANSFER

If suppliers or systems outside Brazil are used, international data transfer may occur, always respecting the guarantees and mechanisms of the LGPD.