collecting personal information for security is purposes, these is really a good thing to secure ones data. At least your company and the participant/investor itself can be the only one to claim any purchases, earnings. but aside from that do you still have other security options like double IP restrictions etc..?