KYC- & AML-Richtlinie
Wie und wann wir Identitäten prüfen und Finanzkriminalität verhindern.
Zuletzt aktualisiert: October 3, 2026
1. Purpose
This policy describes how Cryptoback verifies the identity of its users (Know Your Customer, "KYC") and prevents money laundering, terrorist financing, and other financial crime (Anti-Money-Laundering, "AML").
2. When verification is required
Verification is triggered primarily by withdrawals: once your all-time withdrawal total reaches the thresholds shown in the withdrawal flow, a completed identity check is required before further funds are released. A standard check applies at the first threshold and an enhanced check at the second. We may also require verification at any time based on risk signals, unusual activity, regulatory obligations, or at our discretion. Small withdrawals below the thresholds generally do not require verification.
3. How verification works
Verification is carried out by Cryptoback's own compliance team. You upload your documents through the secure verification page in your account, and a member of our team reviews them against your account details. We do not use automated decision-making: every approval, request for resubmission, and rejection is made by a person. Reviews are normally completed within 2–3 business days, and the outcome is shown in your account and sent to your registered email. A standard check normally only has to be completed once.
4. What we ask for
A standard check requires a clear, unedited image of a valid government-issued identity document (passport, national ID card, or driving licence) showing your full name, date of birth, photo, and expiry date, together with a photo of you holding that document. The name and date of birth on the document must match your account. An enhanced check additionally requires proof of your residential address dated within the last three months (for example a utility bill or bank statement) and may require proof of source of funds or clarification of specific transactions. We may escalate a standard check to an enhanced check at our discretion.
5. Screening
As part of every review, our compliance team checks the verified name against applicable sanctions lists, including the consolidated OFAC, EU, and UK lists, and may check politically-exposed-person (PEP) registers and adverse-media sources. Potential matches are reviewed manually and may lead to refusal of service where required by law.
6. Ongoing monitoring
AML compliance does not end at onboarding. We monitor account activity — including deposit, wagering, and loss or win patterns reported by our data provider, withdrawal behaviour, and referral activity — for indicators of abuse, including structured or low-risk wagering designed to extract rewards, bonus arbitrage, and collusive or bulk account activity. We may re-verify users, request updated documents, adjust or reverse accruals, or freeze withdrawals pending review.
7. Withdrawal controls
Withdrawals above defined thresholds require completed KYC and may require two-factor authentication. Low-risk withdrawals may be approved automatically; others queue for manual review by our compliance team. We may delay or refuse payouts where verification is incomplete or where legal obligations require it.
8. Data handling
Documents you submit are stored in encrypted, access-restricted storage controlled by Cryptoback and are never made publicly accessible. Access is limited to authorised compliance staff, and every access and decision is logged. Verification records are retained for the periods required by applicable AML regulations and are then deleted. We do not share your documents with third parties except where required by law. See our Privacy Policy for full details of how personal data is protected.
9. Resubmission, refusal, and account closure
If a document is unreadable, expired, or does not match your account, we will tell you why and ask you to resubmit. We may refuse verification, decline transactions, or close accounts where identity cannot be established, where documents appear forged or manipulated, where sanctions or legal restrictions apply, or where continuing the relationship would breach our regulatory obligations. Where lawful, legitimate balances remain payable after successful verification.
10. Age verification and contact
The Service is available only to persons aged 18 or over, or the age of majority where you live, if higher. Verification includes an age check, and accounts of underage users are closed immediately. Questions about this policy: support@cryptoback.club.