The data is simulated: about 58% of deposits are round amounts, and there are roughly as many withdrawals as deposits. On a public blockchain anyone can compare three things: address, amount and time. Every deposit that matches the amount and falls between your deposit and your withdrawal could be yours.
In real life other details can connect your addresses too — a transfer between them is one. So add one more habit to the five: don’t top up your withdrawal address from your main wallet.
Anyone can see every deposit and every withdrawal.