Anti-Money Laundering (AML) and Know Your Customer (KYC) Policy
1. Introduction
Ventures Lab Limited Malta maintains a Board-approved Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF) framework forming part of its overall governance and risk management structure. The Company is committed to full compliance with Maltese AML/CTF legislation and the regulatory requirements applicable to Malta Gaming Authority licensees.
This Policy sets out the governance principles, internal controls, and oversight mechanisms established to prevent the misuse of the Company’s services for unlawful purposes. The Company applies a risk-based approach to AML/CTF compliance and implements procedures designed to identify, assess, and mitigate financial crime risks associated with its services.
2. Identity Verification
The Company maintains documented Customer Due Diligence (CDD) procedures overseen by its compliance function. Customers must submit valid identification and address documentation sufficient to establish their identity and legal eligibility to use the services.
Identity verification may be required during account registration, prior to withdrawals, where risk indicators arise, or where required to comply with applicable regulatory obligations.
Verification processes are subject to internal review and periodic testing to ensure effectiveness and regulatory compliance. Customers identified as presenting elevated risk may be subject to Enhanced Due Diligence procedures, including additional documentation requirements and increased scrutiny in accordance with the Company’s risk management framework.
3. Source of Funds and Screening
The Company maintains structured procedures for verifying the origin of customer funds where risk indicators are present. Such procedures may include documentary verification and compliance review to ensure that funds used on the platform originate from legitimate sources.
Screening against sanctions lists, politically exposed person (PEP) databases, and other relevant risk databases is conducted as part of the Company’s internal control environment.
Where elevated risk is identified, additional source-of-funds verification measures may be applied in line with Enhanced Due Diligence procedures.
Oversight of source-of-funds controls forms part of compliance reporting to senior management.
4. Ongoing Monitoring
Ongoing monitoring forms part of the Company’s internal control framework and is subject to documented review processes.
Monitoring activities may include the use of transaction monitoring systems, behavioural analytics, and automated alerts designed to identify patterns of activity inconsistent with a customer’s risk profile.
Monitoring outputs are assessed by the compliance function, and material matters are escalated in accordance with established governance protocols. The effectiveness of monitoring systems and procedures is periodically evaluated through internal audit and risk review mechanisms.
5. Cooperation with Regulatory Authorities
Regulatory engagement forms part of the Company’s governance responsibilities.
Where suspicious activity is identified, reporting obligations may arise in accordance with Maltese AML/CTF legislation. The compliance function is responsible for submitting required reports to the Financial Intelligence Analysis Unit and maintaining transparent communication with the Malta Gaming Authority and other competent authorities where appropriate.
6. Risk-Based Assessment and Reporting
The Company maintains a Board-approved risk assessment framework governing customer classification and monitoring.
Risk factors, including geographic exposure, transaction patterns, behavioural indicators, and other relevant criteria, are formally documented within the Company’s AML/CTF Risk Assessment.
Customers assessed as presenting higher levels of risk may be subject to Enhanced Due Diligence procedures, including additional identity verification, source-of-funds checks, and increased monitoring.
Risk classifications and monitoring controls are reviewed periodically to ensure continued alignment with evolving regulatory expectations and the Company’s risk management framework. Periodic compliance and risk reports are prepared for senior management oversight and regulatory transparency purposes.
7. Customer Obligations
The Company requires full cooperation from customers in fulfilling AML/KYC obligations.
Users must ensure the accuracy and completeness of the information provided and must comply with requests for documentation necessary to satisfy regulatory requirements. Customers may also be required to provide updated documentation where previously submitted information is no longer valid or where additional verification is required.
Failure to meet these obligations may lead to proportionate measures, including temporary account restrictions, suspension of withdrawals, or account termination in accordance with the Company’s compliance framework.
8. Data Privacy
Data protection forms part of the Company’s internal control and compliance framework.
AML/KYC information is processed lawfully, proportionately, and in accordance with applicable data protection legislation. Access to sensitive information is restricted to authorised personnel and is subject to documented oversight procedures and internal access controls.
Records obtained for AML/CTF purposes are retained for a minimum period of five (5) years following the end of the customer relationship, consistent with statutory AML/CTF record-keeping obligations.
9. Staff Training and Internal Controls
AML/CTF training forms part of the Company’s governance framework and is overseen by senior management.
Training programmes are delivered periodically and may include mandatory AML/CTF awareness training for relevant personnel. These programmes are designed to ensure staff understand risk indicators, escalation procedures, and regulatory obligations.
Internal controls, independent review mechanisms, and audit processes are established to support ongoing regulatory compliance and control assurance.
10. Policy Updates
This Policy is subject to periodic review as part of the Company’s governance and compliance cycle.
Amendments may be approved by senior management to ensure continued alignment with regulatory developments, operational requirements, and the Company’s evolving risk profile.
The most recent version of this Policy will be made available to users where required and will supersede any previous versions.
