Security

Your funds. Your keys. Always.

BuyCrypt is non-custodial by design. We never hold, transfer, or have access to your trading capital.

No custody

You connect your own Binance / Bybit / OKX account via API key. Funds stay on your exchange. We never have transfer or withdrawal permission.

Encrypted API keys

Your keys are encrypted at rest with per-key encryption. Decrypted in-memory only at trade time. Never logged. We can't read or recover them ourselves.

No withdrawal scope

When you create your API key, only enable read + trade permissions. Withdrawal must remain disabled. We physically cannot move funds off your exchange.

Isolated sub-accounts (investor pools)

Investor pool capital sits in dedicated Bybit sub-accounts — auditable, scope-limited, automatic settlement on tournament end.

Operational

Infrastructure & monitoring

✓
Per-request rotating proxies — exchange API calls go through randomised proxies to protect rate-limit identity.
✓
Distributed timezone on-call — engineering team across 3 timezones handles incidents 24/7.
✓
Live monitoring — every order, position, and balance change is observable internally with alerts on anomalies.
✓
DDoS + WAF protection — Cloudflare in front of all public endpoints.
✓
Daily DB backups — encrypted snapshots of trade history and accounts.