Pro API keys do not need deposit/withdrawal permissions
API keys are the "keys" to access your trading exchange account with a 3rd party app. If an app has withdrawal permissions, it can theoretically steal your crypto. This bot does not need such permissions to work, thus it can lose money if not configured properly, but it can't steal your money.
Pro It supports backtesting
Backtesting is basically running a set of rules on past market data and see how would the bot have performed during that period. With good projection, an experienced trader can always find similar market conditions to the current ones in past data and then carry out that winning strategy on to the future.