AML / KYC Policy

1. Introduction

This policy explains why Striven Steadex verifies the identity of its clients (Know Your Customer, or KYC), and how we work to prevent money laundering and terrorism financing (Anti-Money Laundering / Counter-Terrorism Financing, AML/CTF). These procedures exist to protect our clients, our platform and the wider financial system from misuse, and they apply to every account regardless of how small the intended deposit is.

This policy applies to every client of Striven Steadex, regardless of the size of their intended deposit, and it is reviewed periodically to stay aligned with the Australian regulatory environment.

2. What KYC is

KYC is the process of confirming who you are before you can fully use the platform. It means collecting basic identifying details and checking that supporting documents genuinely belong to you and are current. It is a standard requirement across regulated financial and crypto-related platforms, not something unique to Striven Steadex.

It typically involves confirming your name, date of birth and address against the documents you provide, rather than relying on self-reported information alone.

3. What AML/CTF means

AML/CTF covers the policies and controls we use to stop the platform being used to disguise the origin of illegally obtained funds, or to finance terrorism. This includes assessing the risk profile of clients and transactions and monitoring account activity on an ongoing basis, not only at signup.

These controls exist across the regulated financial sector, not only at technology platforms like ours, because the same underlying risks apply anywhere money moves.

4. Why identity verification is required

Verification protects clients from fraud carried out in their name, protects account security more generally, helps us meet applicable regulatory obligations, and reduces the platform's exposure to financial crime risk. It is a safeguard, not a formality — accounts that cannot be verified will have restricted functionality.

It also helps us respond quickly if an account is ever reported as compromised, since we can confirm who the legitimate account holder is.

5. Documents we may request

Depending on your risk profile, we may ask for a government-issued photo ID (driver's licence or passport), a proof-of-address document such as a recent utility bill or bank statement, and a selfie or short liveness check to confirm the ID belongs to you. We only request documents that are actually needed to complete verification and never ask for more than applicable requirements call for.

Documents are reviewed only for the purpose of verification and are never used for any unrelated purpose.

6. The verification process

Verification generally follows these steps: you register and provide basic contact details; you submit the requested identity and address documents through your account; our system runs an automated check on the documents provided; if the automated check cannot confirm your details, a member of our compliance team reviews the submission manually; you're notified of the outcome, and if verification is successful, full account functionality is unlocked.

You can track the status of your verification from your account dashboard at any point in this process.

7. Enhanced due diligence

In some cases — larger deposits, activity that doesn't match your stated profile, or a match against certain risk indicators — we may apply enhanced due diligence. This can mean requesting additional documents, information about the source of funds, or a short call with our compliance team before allowing further transactions.

8. Verification timelines

Automated checks are usually completed within minutes of you submitting your documents. Where manual review is required, it typically takes one to two business days, though this can extend if additional information is needed from you. You will always be told if your submission requires further action on your part.

If we need more time for a specific case, we'll tell you rather than leaving you to guess at the status.

9. Reasons a verification can be declined

Verification can be declined or paused for reasons including: an unreadable or expired document, details that don't match across the documents provided, indications a document may have been altered, or a failure to supply requested information within a reasonable time. If your verification is declined, you'll be told the general reason and, where applicable, given the chance to resubmit.

A declined verification is not necessarily final — most clients successfully resubmit once the specific issue has been corrected.

10. Transaction monitoring

Account activity is monitored on an ongoing basis using automated risk scoring alongside manual review where warranted. Unusual patterns — for example, activity that is inconsistent with your account history — can result in a temporary limitation on certain account functions, such as withdrawals, while the activity is reviewed.

Any limitation applied during a review is intended to be proportionate and temporary, and is lifted once the review is complete.

11. Your responsibilities

You're responsible for providing accurate, current and genuine information and documents, and for telling us if your details change. Providing false information, or documents that don't belong to you, can result in account suspension and, where applicable, a report to the relevant authorities.

Repeated submission of inaccurate information may also affect our ability to keep your account open.

12. Data storage and protection

KYC and AML-related information is stored securely with access limited to staff who need it to perform verification and compliance duties. Storage and retention follow the same protections described in our Privacy Policy, which this section should be read alongside.

We do not retain KYC documents for longer than necessary for the purposes described in this policy and applicable record-keeping obligations.

13. Who we may share data with

Where necessary, KYC/AML information may be shared with identity-verification providers acting on our behalf, IT infrastructure providers, affiliated group companies, and regulators or government authorities where we are legally required to disclose it. We do not sell this information.

We do not share KYC/AML data with marketing partners or any party outside the categories listed here.

14. Compliance with applicable requirements

Our AML/KYC program is designed to meet the requirements that apply to our business in Australia, including obligations under Australian anti-money-laundering and counter-terrorism-financing law. We review and update this policy as those requirements evolve.

Where our obligations change, we update our internal procedures first and this policy shortly after.

15. Contact and support

Questions about verification or this policy can be sent to [email protected]. Our Client Support & Compliance team handles AML/KYC queries during standard support hours: Monday to Friday, 9:00-17:30 AEST (excluding public holidays).