Security & Trust
Your money and data deserve the highest level of care. Here is exactly what we do to protect them.
Secure Accounts
Encrypted sessions, CSRF protection, and rate-limited login
Encrypted Sessions
Secure login with CSRF protection on every form
No Stored Passwords
Passwords hashed with bcrypt - never stored in plain text
Rate Limited
Brute-force protection on login, deposits, and contact forms
Account Security
Password protection
All passwords are hashed using PHP's bcrypt algorithm before storage. We never store or see your actual password. If you forget it, use your saved security questions to reset it.
Session management
Your login session is stored server-side and expires on logout or browser close. Sessions are bound to a unique token to prevent hijacking.
CSRF protection
Every form on the platform includes a cryptographically random CSRF token. Requests submitted without a valid token are rejected, preventing cross-site request forgery attacks.
Rate limiting
Login attempts, deposit submissions, and contact forms are rate-limited by IP address. Repeated failures result in a temporary cooldown to block automated attacks.
Security headers
All pages are served with X-Frame-Options (SAMEORIGIN), X-Content-Type-Options, and Referrer-Policy headers to reduce common browser-based attack vectors.
Your Money
Wallet segregation
Your wallet balance is tracked separately per account. Deposits are only credited after manual or automated verification of your payment proof.
Withdrawal verification
Withdrawals are processed by admin staff who confirm your identity and payment details before releasing funds. Pending amounts are reserved so they cannot be double-spent.
No fractional reserve
We do not lend or invest your uninvested wallet balance. Funds awaiting investment or withdrawal are held in trust.
Fraud detection
Our deposit verification system analyses payment proofs for consistency. Suspicious patterns trigger manual review before any credit is applied.
Property Security
Legal title review
Every property is reviewed for clear legal ownership and proper title documentation before being listed on the platform. We do not list disputed or encumbered properties.
Professional management
All properties are managed by vetted professional property management companies. We monitor occupancy and rent collection on your behalf.
Transparent reporting
Every dividend payment, fee deduction, and transaction is logged in your account in real time. Nothing is hidden.
What We Cannot Protect Against
Your own login credentials
Never share your password with anyone, including platform staff. We will never ask for your password by phone or email.
Phishing sites
Always verify you are on the correct platform URL before entering credentials. Bookmark this site. We will never send login links in unsolicited messages.
Investment market risk
Security measures protect your account and data, but cannot eliminate the inherent risks of real estate investment including vacancy, market downturns, and liquidity risk.