KYC Policy

1 Introduction

This Know Your Customer ("KYC") Policy explains how FFUNDED verifies the identity of the people who use its Services. It describes when verification is required, what information we collect, how the process works, and what happens after it. This Policy supports, and should be read together with, the AML Policy and the Privacy Policy.

Identity verification protects our customers and our platform against fraud, impersonation, account takeover, sanctions evasion, and financial crime, and helps us meet our legal and regulatory obligations.

2 Why We Verify Identity

We verify identity in order to:

• Confirm that a customer is who they claim to be.
• Confirm that a customer meets our eligibility and jurisdiction requirements.
• Prevent duplicate, fraudulent, or synthetic accounts.
• Ensure that payouts are made only to the genuine, verified account holder.
• Screen against applicable sanctions and watchlists.
• Meet our AML, counter-terrorist-financing, and legal obligations.

3 When Verification Is Required

Identity verification may be required:

• Before or shortly after a first purchase.
• Before a first payout is processed.
• When account details change in a material way.
• When activity, device, or location signals warrant additional checks.
• Periodically, as part of ongoing compliance monitoring.

Completing verification is a condition of accessing certain features. A first purchase triggers a verification requirement that must be satisfied before full account access and any payout are granted.

4 How Verification Works

Verification is carried out through a specialist third-party identity-verification provider using a secure, guided flow. You will typically be asked to:

• Provide a valid government-issued photographic identity document.
• Complete a live selfie or liveness check so the document can be matched to you.
• Confirm your country of residence and, where relevant, your address.

The provider processes your documents and returns a verification result to FFUNDED. We describe how this data is handled in the Privacy Policy.

5 Information We May Collect

To complete verification, we may collect and process:

• Full legal name, date of birth, and nationality.
• Country and, where required, residential address.
• Government-issued identity document details and images.
• A selfie or biometric liveness result used solely to match you to your document.
• Verification metadata, such as the check result, timestamp, and risk signals.

We collect only what is necessary for the verification and compliance purposes described here.

6 Acceptable Documents

Acceptable documents generally include a valid passport, national identity card, or driving licence, depending on your country. Documents must be current, unexpired, clearly legible, and unaltered. We may decline documents that cannot be verified or that appear tampered with, and request an alternative.

7 Verification Outcomes

Following a check, an account may be:

• Approved — verification succeeds and the account continues normally.
• Pending — additional information or a repeat check is required.
• Declined — verification could not be completed or eligibility requirements are not met.

Where a check is declined, we will, where appropriate, allow you to resubmit. We are not obliged to disclose the specific detail of a risk-based decision where doing so would compromise the integrity of our controls or breach a legal obligation.

8 Enhanced Due Diligence

In higher-risk situations we may apply Enhanced Due Diligence ("EDD"). This may occur where, for example, a customer is connected to a higher-risk jurisdiction, where activity is inconsistent with an ordinary trading evaluation, where a customer is a politically exposed person, or where payout patterns require closer examination. EDD may involve additional documents, source-of-funds questions, or further checks.

9 Re-Verification

We may ask you to re-verify your identity where your existing verification has expired, where your details change, where a document has lapsed, or where new risk signals arise. Continued access to certain features may depend on completing re-verification.

10 Restricted Jurisdictions

FFUNDED does not provide its Services to residents or nationals of, or persons located in, certain restricted jurisdictions. Verification is one of the ways we enforce these restrictions. Attempting to conceal your true location, including through the use of a VPN, proxy, or false documentation, is prohibited and may result in termination and forfeiture. See the Restricted Jurisdictions page for the current list.

11 Data Protection and Retention

Identity data is sensitive, and we protect it accordingly. Access is restricted to authorised personnel and to our verification provider on a need-to-know basis. We retain verification data only for as long as necessary to meet the purposes described here and to satisfy our legal and record-keeping obligations, after which it is securely deleted or anonymised. Full detail on how we handle your personal data, and your rights over it, is set out in the Privacy Policy.

12 Your Responsibilities

You agree to provide accurate, current, and complete information during verification, to use only your own genuine identity documents, and not to verify on behalf of any other person or allow any other person to verify using your identity. Providing false, misleading, or borrowed identity information is a serious breach of the Terms of Service and may result in immediate termination, forfeiture of simulated profits, and reporting to the relevant authorities.

13 Changes to This Policy

We may update this KYC Policy to reflect changes in law, regulation, verification technology, or our procedures. Material changes will be published on the FFUNDED website, and the current version always applies.

14 Contact

If you have any questions regarding this KYC Policy, please contact FFUNDED at [email protected].