Wallet deposits and withdrawals update a simulated balance stored in the database. They do not move real money and they are not held by a custodian.
On a live platform, client money should be segregated, transfers should be confirmed on-chain or by your bank, and access should be protected with a strong password and two-factor authentication.
Never share your password or one-time codes with anyone, including people claiming to be ElonDigitalVault support.