AML / KYC Policy

1. Purpose & scope

Yocto Capitals is committed to preventing the use of the platform for money laundering, terrorist financing, fraud or sanctions evasion. This policy applies to every customer and to every deposit, return, commission and withdrawal recorded on the ledger.

2. Customer due diligence (KYC)

Access to deposits and withdrawals is gated on identity verification. Before the money surface unlocks, each applicant must complete customer due diligence:

• Submit government identity documents, proof of address, a selfie and structured personal details (legal name, date of birth, nationality and address).
• Pass review by an authorized compliance reviewer, who assesses the submission before approving the account.
• Personal data is encrypted at rest with AES-256-GCM the moment it is submitted; only an authorized reviewer can decrypt a profile, and only for review.

3. Ongoing monitoring

Verification is not a one-time event. We monitor account and transaction activity on a continuing basis for patterns inconsistent with a customer’s profile, and we may request updated information or documents (enhanced due diligence) where activity, risk or regulation requires it.

4. Transaction controls & limits

Money movement is layered with controls that make abuse expensive and reviewable:

• Per-tier rolling 24-hour withdrawal limits and configurable cool-down windows between requests.
• Server-authoritative caps on every deposit and withdrawal.
• Two-person approval on withdrawals at or above a configurable threshold, re-verified at settlement so a single operator cannot release funds alone.
• Idempotent financial operations, so a retry can never double-credit or double-spend.

5. Sanctions & PEP screening

We screen customers against applicable sanctions lists and assess exposure to politically exposed persons (PEPs). We do not knowingly establish or maintain relationships with sanctioned persons, and we may decline, freeze or unwind activity where required to comply with the law.

6. Record-keeping

Privileged actions are written to an append-only audit log and every balance is derived from an immutable double-entry ledger, so the full history of any account can be reconstructed and proven. Identity records and transaction history are retained for as long as the applicable law requires.

7. Reporting suspicious activity

Where we identify activity we reasonably suspect to involve money laundering or other financial crime, we may file reports with the relevant authorities and are generally prohibited by law from tipping off the customer concerned. We may suspend or close accounts and delay or decline transactions where necessary for compliance.

8. Your responsibilities

You must provide accurate, current information, keep your verification details up to date, and use the platform only for lawful purposes and only on your own behalf. Attempts to circumvent these controls may result in suspension or closure of your account.

9. Contact

Questions about this policy, or requests related to verification and compliance, can be sent to our compliance team at support@yoctocapitals.com.