AML & KYC POLICY
Last updated: February 1, 2025
Regulatory Standards
1. In strict accordance with applicable AML legislation, kikibet.co.uk operates under a high-level governance structure: the full management board retains ultimate accountability for financial crime prevention, while a designated Anti-Money Laundering Compliance Officer (AMLCO) independently manages daily policy enforcement and reports directly to General Management.
2. To ensure our defense system remains dynamic and effective, any major updates or modifications to the Kikibet AML framework require a dual-approval process, authorizing changes only when signed off by both Novasphere Entertainment’s General Management and the AMLCO.
3. The Company collects and verifies specific user data to fulfill its three core regulatory pillars: • First Pillar: Establishing the true identity of every player using reliable, independent source documents to secure platform integrity.
• Second Pillar: Implementing rigorous measures to identify the ultimate beneficial owner of any account, thoroughly analyzing ownership structures to prevent fraudulent concealment of assets.
• Third Pillar: Evaluating the intended nature and purpose of the relationship between the user and the platform, ensuring gaming and betting services align with the player’s declared intent.
4. To fulfill the fourth regulatory pillar, the Company maintains continuous scrutiny of all transactions and account behavior, ensuring financial activity aligns with the player’s risk profile and conducting strict Source of Funds (SoF) verifications whenever necessary to neutralize financial crime risks.
Risk Monitoring & System Audits
5. The Company employs an integrated oversight framework where artificial intelligence operates alongside human expertise to detect and instantly flag anomalous user behavior; our compliance team regularly audits automated checks and retains absolute authority to initiate manual reviews or supplemental verification at any time.
6. Backed by advanced data analysis systems, we actively monitor the platform for high-risk indicators and behavioral deviations, which include: • Depositing and withdrawing funds without reasonable gaming or betting activity.
• Attempting to utilize mismatched payment methods or different bank accounts for deposits versus withdrawals.
• Frequent or unexplained changes to account settings, such as registered nationality, currency, or general activity patterns.
• Indicators suggesting that an account is being accessed by an unauthorized third party rather than the original verified owner.
7. To completely eliminate the risk of illicit fund routing, users are strictly required to utilize the exact same payment methodology and channel for withdrawals as was used for their initial deposits, up to the total cumulative amount of those deposits.
8.kikibet.co.uk maintains a comprehensive Enterprise-Wide Risk Assessment (EWRA) tailored specifically to the Kikibet business model (analyzing product offerings, player profiles, transactional trends, and regional geographic distribution), which undergoes a formal reassessment and comprehensive update on an annual basis.
Privacy Standards
9. All compliance rules and minimum KYC benchmarks are translated into precise operational guidelines securely hosted on Kikibet internal systems to guarantee 24/7 access for all relevant personnel, who must undergo mandatory AML training tailored to their specific iGaming role led by kikibet.co.uk specialists.
10. The Company enforces a strict data-retention policy, requiring all identification records and transaction history to be encrypted and securely stored in both online and offline environments for at least ten (10) years after a business relationship or transaction concludes.
11. To maintain flawless compliance, the Company conducts periodic internal audits of all AML activities to generate detailed reports for management, reserving the right to also commission independent external experts to perform objective reviews of our infrastructure.
12. User data security remains our core priority: personal information is never sold or traded to third parties for commercial use, and is only disclosed to official state AML authorities when legally mandated or necessary to prevent financial crime.
13. The Company strictly adheres to the core privacy and safety principles outlined in the data protection directive (Directive 95/46/EC) alongside modern privacy legal frameworks to guarantee that all customer information remains fully protected.
Verification Levels
14. Kikibet implements a graduated verification framework where the first level must be completed by every player prior to their initial withdrawal; this stage requires the user's full name, permanent residential address, and date of birth, followed by rigorous screening against Politically Exposed Person (PEP) databases and global sanctions lists (including the UN, EU, and the U.S. Treasury’s OFAC Specially Designated Nationals).
15. A second level of verification becomes mandatory the moment a user’s cumulative deposits or withdrawals reach £2,000 (calculated daily based on all historic activity, including peer-to-peer transfers); until this process is fully finalized, all related transactions will be automatically placed on hold.
16. To clear this second level, users must submit their place of birth, nationality, and identity number via a dedicated subpage, uploading a valid, unexpired government-issued photo ID (passport or identity card). If the ID does not display the current address, supplementary documents like a utility bill or bank statement not older than six (6) months are required.
17. At the £2,000 threshold, players undergo deeper screenings for PEP status and corruption risk through specialized resources like Transparency International and knowyourcountry.com. If the required documentation is not provided within thirty (30) days of reaching this limit, the Company will terminate the business relationship and file a report with the Financial Intelligence Unit (FIU).
18. A third level of verification is triggered when aggregate deposits or withdrawals reach £5,000; at this stage, the user must declare and provide concrete evidence regarding their Source of Wealth (such as employment details or business income) to prove that their platform activity is justified by their economic profile.
19. Enhanced Due Diligence (EDD) is strictly applied in high-risk scenarios (residents of high-risk jurisdictions, PEPs, or transactions favoring anonymity) and includes intensified monitoring, public database searches, management approval, and granular evidence of the Source of Funds (e.g., personal savings, share dividends, property sales, or gambling winnings).
20. All uploaded identification documents must be perfectly clear, showing all four corners with all text fully readable. While users may blur non-essential details (such as gender), the name, date of birth, and photo must remain visible; data processing may involve AI-assisted tools backed by manual employee audits, and failure to comply will result in the freezing or closure of the account.
Country Risk Classifications
21. Any nation not specifically designated under medium or high-risk tiers is classified as a standard-risk jurisdiction, subjecting users from these regions to the standard verification thresholds (Step 1 at withdrawal, Step 2 at £2,000, and Step 3 at £5,000).
22. A heightened monitoring regime applies to users from specific medium-risk jurisdictions, including Bulgaria, Burkina Faso, Cameroon, Democratic Republic of the Congo, Croatia, Haiti, Jamaica, Kenya, Mali, Mozambique, Namibia, Nigeria, Philippines, Senegal, South Africa, South Sudan, Syria, Tanzania, Türkiye, Vietnam, and Yemen. For these users (as well as any user from a low-risk region initiating crypto-to-crypto or crypto-to-fiat conversions), thresholds are lowered: • Step 2 Verification: Triggered at £1,000 in cumulative deposits or withdrawals.
• Step 3 Verification (Source of Wealth/Funds): Triggered at £2,000.
23. The Company actively monitors for linked transactions which, while individually below the trigger amounts, meet or exceed the £2,000 threshold when combined; transactions are treated as linked if they occur within a single gaming session, involve the same player, or are conducted through the same game.
24. Upon hitting the cumulative £2,000 threshold under the medium-risk tier, users must supply Proof of Address, an Identity Number, and Source of Funds/Wealth documentation within thirty (30) days; failure to comply results in relationship termination, with account activity remaining suspended throughout this 30-day window.
25. Nations identified as high-risk are subject to an absolute service ban updated dynamically to reflect global environments, fully restricting jurisdictions identified via the FATF lists, the CFATF Public Statement, the European Commission’s strategic AML/CFT deficiency list, the U.S. State Department’s INCSR report, U.S. Treasury (OFAC) sanctions, or nations flagged as state sponsors of terrorism.
Transaction Monitoring & Escalation
26. The Company maintains a continuous monitoring regime designed to detect anomalies by comparing real-time transaction data against established customer profiles, operating through a rigorous triple-layer defense framework: • First Layer: The platform exclusively partners with trusted Payment Service Providers (PSPs) maintaining effective AML filters to block suspicious deposits before internal KYC begins.
• Second Layer: Internal operational due diligence reviews every customer interaction regarding financial transactions, utilizing a dual-review process where an automated system performs the initial assessment followed by a manual cross-check by specialized compliance staff.
• Third Layer: The Company performs exhaustive manual audits on all accounts flagged as suspicious or high-risk to fully neutralize money laundering risks.
27. Transactions that lack a clear, justifiable link to lawful activities or a transparent origin of funds are rapidly reclassified as atypical based on a subjective assessment of the customer's known financial behavior; all staff members are strictly mandated to inform the AML division of any such activities.
28. Reports of atypical transactions are analyzed within the AML team using a precise internal methodology to determine whether it is necessary to file a formal report with the Financial Intelligence Unit (FIU) in accordance with the Law of 18 September 2017, or to immediately terminate the business relationship and inform legal authorities.
Risk Maintenance & Adaptation
29.kikibet.co.uk maintains a continuous monitoring cycle to evaluate policy effectiveness, implementing immediate updates upon discovering any internal vulnerabilities and conducting regular risk evaluations to ensure controls remain resilient against the global threat landscape.
30. Based on the findings of these ongoing risk assessments, our AML and KYC policies are promptly refined to neutralize newly identified threats, and the AML Compliance team performs active, real-time monitoring of transaction flows to detect emerging, sophisticated financial threat patterns.
31. To maximize risk mitigation, a collaborative framework ensures that all relevant stakeholders—from frontline employees to executive management—are actively involved in the policy update process, fully integrating a culture of compliance across all organizational levels.
Legal Notes & Contacts
32. This Anti-Money Laundering and Know Your Customer Policy may be published in multiple languages for informational purposes; however, in the event of any conflict, discrepancy, or inconsistency between a translated version and the English version, the English text shall remain the sole legally binding version.
33. If you require clarification regarding any aspect of our AML/KYC protocols, or if you wish to file a formal complaint regarding this policy, specific checks, or the handling of your personal data, please contact us directly at support@Kikibet for review by our compliance department.