Aml Policy

Introduction

This Anti‑Money Laundering Policy (the Policy) establishes Ffbet's mandatory controls to identify and mitigate risks of money laundering and the financing of terrorism in connection with any activity conducted on or through the Ffbet platform. It forms part of Ffbet's internal risk management framework and operates in conjunction with the applicable Terms and Conditions, Privacy Policy, and KYC guidance.

Scope and Governing Law

The Policy applies to all customers, employees, contractors, service providers, and any agents acting on behalf of Ffbet, across all jurisdictions where Ffbet operates. It governs onboarding, ongoing monitoring, and all transactions conducted on the platform. The Policy is interpreted in accordance with applicable anti‑money laundering and countering the financing of terrorism laws and regulations, as well as international standards such as the FATF Recommendations and relevant data protection rules.

Risk‑Based Approach

Ffbet employs a risk‑based approach to AML/CFT controls. Risk is assessed at onboarding and reviewed periodically. The primary risk categories are:

  • Geographic risk: customer residence or domicile and jurisdictional risk profiles.
  • Customer risk: identity authenticity, sanctions status, politically exposed persons (PEPs), and known adverse indicators.
  • Transaction risk: size, frequency, velocity, and complexity of activities and funding patterns.

Higher risk levels trigger enhanced due diligence, heightened monitoring, and more frequent review by the Compliance function.

Customer Due Diligence and Verification

Onboarding and ongoing eligibility depend on appropriate due diligence and verification. Standard Verification is triggered when any of the following occur: a) total cumulative transactions through the customer’s account reach or exceed USD 1000; b) the risk assessment identifies significant money laundering or terrorist financing risk; c) suspicious behaviour indicators are present; d) management or Compliance determines verification is necessary.

Required documentation and information include:

  • A clear, government‑issued photo identity document for the customer (e.g., passport or national ID).
  • A recent document proving the customer’s residential address (e.g., utility bill, bank statement).
  • Evidence of source of funds and/or source of wealth consistent with the customer’s stated activity and jurisdiction.
  • For payment instruments used to deposit, documentation authorising use of the instrument; card payments require the cardholder name to match the customer account name; CVV and card number should be submitted with all digits except the first six and last four masked, and the cardholder name must not be obscured.
  • A live photograph or video capture of the customer presenting the required documents when requested by Compliance, and any additional data reasonably required to verify identity.

Ffbet may also request supporting information such as bank statements, tax documents, or official correspondence if required by local law or risk considerations. Where applicable, onboarding may be conducted using a secure live verification workflow or through secure communications with the Compliance team.

Enhanced Due Diligence for PEPs and High‑Risk Jurisdictions

Additional verification steps apply if the customer is a Politically Exposed Person (PEP) or a family member of a PEP, or if the customer resides in, or has ties to, a high‑risk or non‑cooperative jurisdiction. In such cases, Ffbet requires:

  • Independent confirmation of the source of wealth and the funding path for all substantial transactions.
  • Additional identity verification measures and, where necessary, enhanced monitoring flags reviewed by senior management.
  • Senior management approval of the account given the elevated risk profile.

Ffbet reserves the right to request any documents or data required to comply with applicable laws, and to take additional steps as directed by regulators or as the risk profile dictates.

Ongoing Monitoring and Suspicious Activity Reporting

All activity on the customer’s account is subject to ongoing monitoring to detect suspicious or unusual patterns. Indicators of suspicious activity include, but are not limited to:

  • Unusual depositing activity or rapid changes in funding methods.
  • Use of multiple devices, payment methods, or IP addresses within tight timeframes.
  • Discrepancies between geolocation data, residency, or account information.
  • Reluctance to undergo verification, or inconsistent documentation.
  • Matching device identifiers across seemingly unrelated accounts.

When suspicious activity is detected, the activity is escalated to the Compliance and Anti‑Fraud teams for review and potential escalation to regulatory authorities where required by law.

Transactions Monitoring and Controls

Ffbet enforces controls over deposits and withdrawals to ensure funds originate from and are remitted to the customer. Key rules include:

  • Deposits made with payment cards must be in the name of the account holder; third‑party card use is prohibited.
  • Electronic wallets linked to the customer account must bear the same registered email as the account on registration.
  • If a deposit is made from an instrument that cannot be reliably traced to the customer, withdrawals shall be redirected to a verifiable instrument owned by the customer, in accordance with legal and regulatory requirements.
  • Ffbet does not accept funds from anonymous payment instruments and does not remit funds to anonymous or unverified instruments.
  • All withdrawals should be made to an instrument that can be reliably linked to the customer; cross‑customer transfers are not permitted.

Where necessary, Ffbet may require additional verification or impose withdrawal limits to manage risk and comply with applicable laws.

Record Keeping and Data Protection

Documents and data collected under this Policy, including identity verification data, transaction records, and supporting evidence, are stored and processed in accordance with applicable data protection laws and regulations. Ffbet maintains records for a minimum period of five (5) years after account closure or the last transaction, whichever occurs later, in a secure, access‑controlled environment. Personal data is processed in accordance with the Privacy Policy and applicable data protection law (including GDPR where relevant). Access to records is restricted to authorized personnel and competent regulatory authorities as required by law.

Policy Governance, Training and Reporting

Ffbet assigns responsibility for AML/CFT compliance to the designated Compliance function. The team conducts ongoing staff training on identity verification, AML indicators, suspicious activity reporting, and regulatory requirements. Internal reporting channels exist for staff to escalate concerns, and the Compliance function maintains an auditable trail of actions taken in response to risk indicators.

Ffbet also monitors regulatory developments and revises this Policy and related procedures as needed. Any material changes shall be communicated to registered users in accordance with internal procedures; continued use after notification constitutes acceptance of the updated Policy.

Amendments and Communication

Ffbet reserves the right to modify this Policy at any time. Material changes will be communicated to affected users in a timely manner. Ongoing use of the platform after notice of changes will be deemed acceptance of the updated terms and controls.

Contact and Compliance Information

Requests for information, reporting of suspicious activity, or inquiries regarding this Policy should be directed to Ffbet’s Compliance team through the official support channels. The Compliance function is responsible for enforcing this Policy and coordinating with regulatory authorities as required by law.