Winshark Cyber Reload — Weekend Cashback up to 50%

Purpose and Scope

Winshark implements this KYC Policy to identify, verify, monitor, and manage customer risk in compliance with applicable AML/CFT obligations. This Policy applies to all applicants and customers accessing Winshark services and governs onboarding, ongoing activity, and escalation procedures related to customer due diligence.

Regulatory Framework, Governance, and Responsibilities

Winshark operates as a remote gaming entity regulated by the competent supervisory authority and is subject to anti-money laundering and countering the financing of terrorism requirements. Ultimate responsibility for the AML policy rests with the Director. The Compliance Function maintains, reviews, and updates the policies, procedures, and controls. The Board receives regular reporting on risk, compliance effectiveness, and the status of controls.

Key Concepts and Definitions

Customer Due Diligence (CDD) refers to the processes for identifying and verifying customers and assessing risk. Enhanced Due Diligence (EDD) applies in higher‑risk scenarios in accordance with the risk assessment. Ongoing monitoring means continuous review of customer activity against verified information. Non-face-to-face onboarding is subject to the same verification standards as in-person onboarding.

Onboarding and Customer Due Diligence (CDD)

CDD is conducted before accepting a customer relationship. On onboarding, Winshark collects information sufficient to establish identity and risk context and to determine the appropriate level of due diligence:

  • Full legal name and date of birth
  • Residential address and nationality
  • Contact details and, where appropriate, a photograph
  • Source of funds and expected nature of activity
  • Purpose of the business relationship and anticipated product usage
  • Documentation supporting identity (e.g., government-issued ID) and address verification; third-party verification where permissible

Verification must be satisfactory prior to acceptance of the customer as a client. Where non-documentary verification is used, the methods must be reliable and independently verifiable.

Risk-Based Approach and Enhanced Due Diligence (EDD)

Winshark applies a risk-based approach to CDD and ongoing monitoring. The level of due diligence and monitoring is commensurate with identified risk. Enhanced due diligence is applied for higher‑risk profiles, including circumstances identified by the risk assessment such as elevated geographic or activity risk or unusual transaction patterns, subject to additional verification steps as determined by the risk evaluation.

Ongoing Monitoring, Refresh, and Change Management

Customer information and risk profiles are reviewed on an ongoing basis. An initial due diligence baseline is maintained and refreshed at intervals defined by risk category and in response to material changes in the customer’s profile or activity. Winshark may request supplementary documentation when risk factors change or transactions deviate from expected patterns.

Records, Data Retention, and Reporting

Winshark maintains records of all identity verification, risk assessments, due diligence, and transaction monitoring for the period required by applicable law and regulatory guidance. Records must be readily retrievable for audit or regulatory inspection. Suspicious activity or transactions discovered or suspected must be reported through the internal escalation process and, where required by law, reported to the competent authorities in a timely manner.

Training and Awareness

All personnel must complete AML/CFT training appropriate to their role upon recruitment and at least annually thereafter. Training covers recognition of red flags, customer risk indicators, and escalation procedures.

Non-Face-to-Face Onboarding

For onboarding conducted without physical presence, Winshark conducts identity verification using reliable, independent sources and retains evidence of verification. The same standard of due diligence applies as for in-person onboarding, including ongoing monitoring and document retention obligations.

Self-Exclusion and Responsible Gaming

Winshark maintains a responsible gaming program and honors valid self-exclusion requests. Self-exclusion applies across all products and services and is integrated with the customer verification and account-restriction workflows.