KYC/AML POLICY

This KYC/AML Policy (the "Policy") sets out how the Website Owner conducts Know Your Customer (KYC) checks and Anti-Money Laundering / Counter-Terrorist Financing (AML/CFT) measures, as well as related procedures to verify identity, age and lawful use of the Website. By using the Website, creating an account and/or performing transactions on the Website, the User confirms that they have read and accept this Policy. This Policy applies together with the Terms of Use and the Privacy Policy.

Checks are carried out in order to: • verify the User’s identity, age and other registration data; • review the User’s use of the Website and financial transactions; • prevent fraud, circumvention of restrictions and data falsification; • comply with applicable law, including AML/CFT requirements; • protect the security of the Website and Users and ensure proper performance of the Terms of Use.

The Owner informs the User that in certain cases we may conduct security investigations to confirm your identity, age and other registration data you provide, and to review your use of the Website and your financial transactions, to ensure there is no potential breach of our Terms and/or applicable law. For this purpose we may use your Personal Information and disclose it to third parties to verify the information you provide for use of the Website, including, where applicable, international information exchange. Summary data compiled from such security checks may include a credit report request and/or other verification of information you provide against third-party databases. Personal Information may also be obtained from customer lists that may be lawfully acquired from third parties.

As part of security checks, fraud prevention, anti-money laundering (AML) and age verification (KYC), the Owner reserves the right at any time to require the User to complete dynamic biometric identity verification (ID-Liveness verification). This procedure may include: • providing an identity document; • completing a real-time face scan using the Owner’s technical means or engaged specialized third-party KYC providers; • other reasonable measures needed to confirm the User’s identity and presence. The User must provide accurate data and documents and must not obstruct the check. Attempts to bypass, substitute or falsify biometric or other data (including, without limitation, deepfakes, photos/videos shown on a screen, or third-party documents) are prohibited.

Processing of Personal Information for KYC/AML purposes is limited to what is necessary for the purposes of this Policy and may include disclosure to third parties — KYC/AML providers, payment and other services engaged by the Owner to perform checks. Such processing and disclosure may be carried out in accordance with applicable law and the Privacy Policy, including possible international information exchange where required to complete the verification.

If the User refuses to complete ID-Liveness / KYC verification, fails to provide requested documents and information within the set time, provides inaccurate data, or attempts (successfully or not) to bypass or falsify biometric or other data, the Owner may unilaterally: • restrict access to the Account and certain Website features; • block Inventory withdrawals and other operations; • suspend or cancel transactions; • cancel bonuses and virtual currency on the balance; • restrict or terminate access to the Website without compensation to the User, and apply other measures provided by the Terms of Use and applicable law.

The User may contact the Owner regarding processing of personal data for KYC/AML purposes as described in the Privacy Policy, including requests for access, correction or deletion — subject to legal limitations (including where retention is required for AML/CFT compliance, dispute resolution or protection of the Owner’s legitimate interests).

For questions about this KYC/AML Policy or identity verification procedures, please contact us at: support@skinbox.io.