KYC and AML Policy

1. Introduction

This policy explains the Know Your Customer (KYC) and Anti-Money-Laundering and Counter-Terrorist Financing (AML / CFT) procedures that apply to Neo Valor users. The aim of these procedures is to make sure our services are not used for unlawful activity, and that every account really belongs to the person who is registered.

By creating an account and using our services, you agree to the checks described on this page. They apply equally to all users.

2. What is KYC

KYC is the process of knowing who uses the service: confirming that the name, date of birth and address you provide match official documents, and that the data belongs to you. It is carried out when the account is created or before certain features, such as withdrawals, can be used.

The KYC result is stored as part of the account record and updated when important data changes.

3. What is AML / CFT

AML / CFT is a set of steps to stop proceeds of crime being disguised as legitimate funds, and to stop funds being used to finance terrorism. The steps include assessing user risk, monitoring transactions and reporting suspicious activity to the competent authorities.

In Indonesia the framework rests on the law on the prevention and eradication of money laundering and its implementing rules, with PPATK as the body that receives suspicious transaction reports.

4. Why identity verification is required

Verification prevents fraud and accounts being opened in someone else's name, protects your account from takeover, and meets the requirements of the regulations that apply. It also lowers financial risk for all users, because unknown accounts are the main target of financial crime.

We ask only for the data needed for these purposes, and its use is limited as described in the Privacy Policy.

5. Documents required

The documents we use are only the following:

• Proof of identity: an e-KTP, or a valid passport, with a clear photo that is fully legible.
• Proof of address (if requested): a recent electricity or water bill, or a bank statement showing your name and address.
• Selfie with a liveness check: a short photo or video to match your face with the photo on the identity document.

We do not ask for documents outside this list for initial verification. If an additional check is needed, you will be told what is required and why.

6. Verification process

1. Registration: you create an account and your personal manager contacts you.
2. Data and document submission: you fill in identity data and upload documents through the dashboard.
3. Automatic check: the system matches the data and checks the authenticity of the documents.
4. Manual check: a compliance officer reviews cases that cannot be decided automatically.
5. Result confirmation: you receive a notice that verification is approved, or an explanation if a correction is needed.

7. Additional checks

For accounts with a higher risk profile, for example large deposits, unusual transaction patterns or links with high-risk regions, we may apply Enhanced Due Diligence (EDD). At this stage we may ask for an explanation of the source of funds, your occupation and the purpose of the account.

Supporting documents that may be requested include payslips, business evidence or bank records showing where funds came from. This request is not an accusation but an obligation that we apply to many accounts.

8. Review times

How long verification takes depends on several things: how clear the document photos are, whether the data matches the documents, the size of the review queue, and whether a manual or additional check is needed. Verification with clear documents usually finishes faster than one that needs repeated corrections.

We do not promise a fixed duration for every case. If the process takes longer than expected, your personal manager will let you know its status.

9. Reasons for rejection or suspension

Verification can be rejected or suspended, among other reasons, because:

• documents are invalid, expired, blurry or cropped;
• data in the form does not match the documents;
• forgery is suspected or documents belonging to someone else are used;
• requested information is not provided within a reasonable time;
• other grounds related to compliance obligations that apply.

Where possible, we give the reason for rejection so you can correct it. In certain cases required by law, the details of the reason cannot be disclosed.

10. Transaction monitoring

We monitor account activity for unusual patterns, such as repeated deposits and withdrawals without trading activity, or splitting transactions into small amounts. Each alert is assessed according to its risk level.

If suspicious activity is found, we may restrict certain features, for instance holding a withdrawal temporarily, while awaiting clarification. We may also be required to report that activity to the authorities without informing you.

11. User responsibility

You must provide accurate, current and genuine data and documents, and tell us if anything changes, such as a new address or a replaced identity document. You may only open an account in your own name.

Providing false information can lead to rejection or closure of the account, holding of funds as required by law, and reporting to the competent authorities.

12. Data storage and protection

KYC data is stored in encrypted systems with access limited to compliance officers. It is kept for the period required by regulations, including after the account is closed, and then deleted or anonymised.

The full description of how personal data is processed, including your rights, is in the Privacy Policy, and this section should be read together with it.

13. Data sharing

To carry out verification, data may be shared with KYC service providers, IT providers who help operate the platform, affiliated companies, and regulators and government agencies when required by law. Sharing is limited to what is necessary and is done under confidentiality agreements.

We do not sell your KYC data to anyone.

14. Compliance with regulations

These procedures are drawn up with regard to the rules in force in Indonesia, including regulations on preventing money laundering and terrorist financing, OJK rules on digital financial assets and the Personal Data Protection Law. Details of the supervisory framework are on the Licensing and regulation page.

The policy may be updated when regulations change, and the latest version applies from the moment it is published on this page.

If you have questions about how a particular rule applies to your situation, your personal manager can point you to the relevant section before you submit any documents.

15. Contact and support

Questions about KYC and AML can be sent to [email protected] with the subject “Identity verification”. The Client Support & Compliance team replies, usually within one business hour.

Do not send identity documents by ordinary email. Use only the secure upload feature in your account dashboard.