AML / KYC Policy

1. Introduction

Know Your Customer (KYC) and Anti-Money-Laundering / Counter-Terrorism Financing (AML/CTF) procedures exist to confirm who our clients are, prevent our platform from being used to move illegally obtained funds, and meet the obligations that apply to a technology platform providing services connected to trading and digital assets in Australia. This policy sets out what we check, why, and what it means for you as a client.

We recognise that verification steps can feel like friction between you and using the platform. They exist because the alternative, a platform with no meaningful checks on who is using it, creates real risk for every client on it, not just for us. Reading this page in full before you register means fewer surprises during onboarding.

2. What KYC means

KYC is the process of confirming a client's identity and verifying that the information they provide is genuine and belongs to them. In practice, this means matching a government-issued identity document, a proof of address, and in some cases a live selfie check, against the details entered during registration, before an account is allowed to deposit, trade or withdraw at full capacity.

3. What AML/CTF means

Anti-money-laundering and counter-terrorism financing procedures cover the ongoing side of compliance: assessing the risk profile of each client relationship, watching account activity for patterns that don't match a client's stated purpose or typical behaviour, and reporting matters that meet the legal threshold for reporting to the relevant Australian authority, principally AUSTRAC.

4. Why identity verification is required

Verification protects clients as much as it protects the platform. It reduces the chance of someone opening an account in another person's name, limits the platform's exposure to funds connected to criminal activity, and is a condition of the regulatory framework we operate under in Australia. We do not treat verification as a formality; an account that fails to complete it will have restricted functionality until it does.

5. Documents we require

Depending on your account tier and risk profile, we may request: a government-issued photo ID (passport or driver licence), a recent proof of address (a utility bill or bank statement no older than three months), and a selfie or short liveness check to confirm the person submitting the documents matches the ID photo. We only request documents that are actually necessary for the verification step in question; we do not collect documents we have no use for.

6. The verification process

Verification follows a consistent sequence: you register and provide your basic details, you then upload the requested identity and address documents, our system runs an automated check against the document data, and where the automated check cannot confirm a match with full confidence, a compliance team member manually reviews the submission. You receive a confirmation once verification is complete, and can then use the account at its full tier limits.

7. Enhanced due diligence

Some accounts require Enhanced Due Diligence (EDD) beyond standard checks, for example where deposit volumes are unusually high relative to a client's stated profile, or where an account shows activity consistent with a higher-risk pattern. EDD can involve requesting a source-of-funds declaration, additional supporting documents, or a short call with our compliance team. EDD is a normal part of a functioning AML programme, not a punitive measure, and most clients never trigger it.

8. Verification timelines

Standard automated verification is often completed within minutes of document submission. Where manual review is required, it typically takes one to three business days, though this can extend if documents are unclear, incomplete, or require a follow-up request. Complex or high-risk cases requiring EDD can take longer; we'll keep you updated by email if your case falls into this category.

9. Reasons a verification can be declined

Verification may be declined or paused for reasons including: an illegible or expired document, a mismatch between the document details and the information provided at registration, indications that a document may have been altered, a failed liveness or selfie match, or a client's failure to respond to a follow-up request for additional information within a reasonable period. A decline is not necessarily final; most issues can be resolved by resubmitting clearer documents.

10. Transaction monitoring

Account activity is monitored on an ongoing basis for patterns inconsistent with a client's profile, such as unusually large or rapid transactions, or activity that doesn't match the stated purpose of the account. Where monitoring flags something for review, we may temporarily limit specific account functions, such as withdrawals, while the matter is assessed. This is a standard control, applied automatically by risk-scoring rules, not a judgement about any individual client.

11. Your responsibility

You are responsible for providing accurate, current and genuine information and documents, and for updating your details if your name, address or other verification-relevant information changes. Submitting false or altered documents, or providing information that doesn't belong to you, is a serious breach of our terms and may result in account suspension, closure, and, where required by law, a report to the relevant authority.

12. Data storage and protection

Identity and verification data is stored securely, encrypted at rest, and access is limited to the compliance and support functions that need it to do their job. Retention periods follow applicable Australian recordkeeping requirements for financial-services-adjacent businesses. Full detail on how we handle personal data generally is set out in our Privacy Policy, which this section should be read alongside.

13. Data sharing

Verification data may be shared, only where necessary, with: identity-verification service providers who perform the automated document checks on our behalf, IT infrastructure providers who host encrypted data, affiliated entities within our corporate group, and regulators or government authorities where we are legally required to disclose information, such as under an AUSTRAC reporting obligation or a lawful request.

14. Regulatory compliance

This policy is designed to meet applicable Australian anti-money-laundering and counter-terrorism financing requirements, including reporting obligations that apply to relevant businesses under Australian law. As the regulatory framework for digital-asset-adjacent services continues to evolve, we review and update our AML/KYC programme to stay aligned with current requirements.

15. Contact and support

If you have questions about the verification process, need to update a document, or want to understand why a check is taking longer than expected, contact our compliance team at [email protected]. Include your registered email address so we can locate your account quickly.