KYC / AML Policy

1. Introduction

KYC/AML measures exist so that financial services are not used to hide the origin of illicit funds or to finance criminal activity. For a platform like ours they mean three permanent tasks: identifying and verifying every user, assessing the risk their activity represents and monitoring transactions for unusual patterns.

These checks directly protect the honest user: they are what stop a third party opening accounts in your name, and they underpin your right to recover your account if you lose access. The clearer and more complete your file, the faster issues are resolved later.

2. What KYC is

KYC (know your customer) is the process through which we confirm you are who you say you are. We collect your identification details, check them against official documents and verify that the information is consistent and current. Basic verification is completed when you register; full verification, with documents, is required before withdrawals are enabled.

KYC is not a one-off formality: details are kept up to date and certain events (a change of address, unusual activity, growing amounts) can trigger a file refresh even if you were already verified.

3. What AML is

AML is the set of measures to prevent money laundering and terrorist financing. It includes the risk assessment of each client, continuous transaction monitoring and the obligation to report suspicious operations to the competent authorities under the applicable rules. It also covers staff training and record keeping.

In practice, this means the platform watches patterns: volumes that do not match the declared profile, rapid deposit-and-withdraw cycles with no trading activity, or details that do not add up. Spotting these signals early protects the whole user community.

4. Why identity verification is required

Four concrete reasons. Preventing fraud: so nobody opens an account in your name. Protecting your account: verification is the foundation of access recovery and claims. Complying with the law: UK requirements oblige us to identify users of financial and digital-asset services. And reducing financial risk for everyone: verified clients mean less room on the platform for funds of illicit origin.

5. Documents required

For standard verification we ask for: a valid photographic ID (passport, driving licence or national identity card), a recent proof of address (a utility bill, bank statement or council tax letter dated within the last three months) and a liveness check: a brief selfie or short video confirming that the person in the document is present in the application. We do not use facial recognition for any other purpose and we do not share it with third parties outside the process.

We never, under any circumstances, ask for the password of your email or other accounts, verification codes or full card details by phone or chat. If someone requests them in the name of Thriventage, it is fraud: report it.

6. The verification process, step by step

1. Registration. You create the account with your name, email and phone number.
2. Submission of details and documents. You upload your ID, proof of address and liveness check from the dashboard, or send them through the secure channel your manager indicates.
3. Automated review. The system checks the document’s validity, the data match and the liveness check; most cases are resolved here.
4. Manual review where needed. If a detail does not add up or the image has problems, a specialist reviews the file and asks you, if necessary, for a new document or a clarification.
5. Outcome. You receive confirmation by email and your account status updates: withdrawals enabled once verification is full.

7. Enhanced due diligence (EDD)

For higher-risk profiles we apply enhanced due diligence: clients with complex activity or source of funds, corporate structures as account holders, high trading amounts or links to weakly supervised jurisdictions. Enhanced diligence may include additional evidence of the origin of funds (for example, proof of earnings or of an asset sale) and more frequent file updates. It is a longer process, not an accusation: it responds to the level of risk, not to the person.

8. Verification timescales

Automated review resolves most verifications within minutes. When a file passes to manual review, the typical time is one to three business days, depending on the clarity of the documents and how quickly you answer clarifications. Enhanced-diligence cases may take longer. You can check the status of your verification in the dashboard at any time, and your manager can tell you if anything is missing so you do not have to guess.

9. Reasons for rejection

A verification may be suspended or rejected for: expired, illegible or altered documents; details that do not match between the form and the document; reasonable suspicion of forgery; refusal to provide requested information; or because the liveness check does not correspond to the document holder. In most of these cases you can correct the cause and resubmit: the system or the specialist will tell you exactly which document or detail to correct. Definitive rejection prevents trading on the platform.

10. Transaction monitoring

The platform’s transactions are monitored continuously with rules that detect unusual patterns: amounts atypical for the profile, anomalous deposit and withdrawal frequency, fund flows unrelated to trading activity, or connections to known risk sources. When a transaction raises an alert, an additional check may be applied, information on the origin of funds may be requested, or an account feature may be temporarily limited while the matter is resolved.

11. User responsibilities

It is your responsibility to provide truthful, complete and up-to-date details; to notify relevant changes (address, phone, email); to use only funds of lawful, personal origin; and not to allow third parties to operate an account in your name. False information can lead to suspension of the account, loss of access to the services and, where the law requires it, the filing of reports with the authorities. If you noticed an unintentional error in your details, tell us: correcting in time is always simpler than explaining afterwards.

12. Data retention and protection

KYC/AML data and documents are kept encrypted with restricted access for the periods required by the applicable rules, and securely destroyed when those periods end. The complete processing of your personal data, including your rights of access, rectification, erasure and objection, is described in the Privacy Policy, which forms an integral part of this document.

13. Data transfers

To carry out verifications, the platform shares strictly necessary information with: specialist identity-verification providers, technology providers operating under confidentiality contracts, group companies when they take part in providing the service, and authorities and regulators where the applicable rules require it. Every transfer is limited to the minimum necessary and documented. We never sell personal data.

14. Regulatory compliance

Thriventage operates in accordance with the UK regulatory framework applicable to its activity, complies with the applicable requirements on client identification, money-laundering prevention, record keeping and complaint handling. The compliance programme is reviewed periodically and adjusted when the rules in force change. You can request written confirmation of compliance status by writing to [email protected].

15. Contact for KYC/AML matters

For questions about your verification, the status of a file or any point of this policy, write to [email protected] with the subject line “KYC”. The compliance team replies within the next business day. If your enquiry is urgent because a withdrawal depends on the verification, say so in the subject line so it can be prioritised.