Protect your identity and payment data

Know who controls your data

The privacy notice should identify a legal entity, explain purposes and retention, and provide a credible route for privacy requests.

Protect the account itself

• Use a unique password and multi-factor authentication where available.
• Never share one-time codes or passwords with support agents.
• Check the domain before uploading identity documents.
• Review active sessions and payment records regularly.