HIBT KYC Policy

To strictly comply with global Anti-Money Laundering (AML) and Counter-Terrorism Financing (CFT) regulations and to safeguard the platform and user assets, HIBT has established this Know Your Customer (KYC) policy. This policy applies to users in all operating regions except Mainland China and the United Kingdom.

1. Basis of Policy

International Standards: In accordance with FATF recommendations, EU AMLD5, U.S. FinCEN, AUSTRAC (Australia), MAS (Singapore), SFC (Hong Kong), and other regulatory guidelines. Local Regulations: Complies with financial regulations and industry best practices in each operating region.

2. Scope of Application

Applies to all individual and institutional users who register on HIBT and use services including spot trading, margin, futures, and OTC.

3. Core Principles

Legal Compliance: KYC procedures comply with AML/CFT laws of respective jurisdictions. Risk-Based Approach: KYC depth dynamically adjusts based on user risk level. Automation First, Manual Review When Needed: Automated verification is preferred; manual review applies in flagged cases. Minimal Collection: Only information necessary for compliance is collected. Ongoing Monitoring: Continuous review of user identity, transactions, and fund flows.

4. KYC Process Framework

Information Submission Users provide basic ID information, contact details, and supporting documents. Automated Verification Uses OCR for ID recognition, facial liveness detection, and sanctions/PEP list screening. Risk Assessment System generates dynamic risk scores based on transaction patterns, region, and history. Manual Review Documents or video calls required for unresolved or flagged cases. Result Notification Approved users unlock relevant services; rejected users or those needing corrections will be notified via system message and email.

5. Data Protection

Encrypted Storage: KYC data stored with AES-256 encryption. Access Control: Only authorized compliance, risk, and audit staff have access. Data Retention: Stored for at least 5 years per local law, then securely destroyed or anonymized. Privacy Compliance: Follows GDPR, PDPA, and other privacy laws; data used only for compliance purposes.

6. Review and Updates

Periodic Review: Periodic KYC refresh for inactive or high-risk accounts. Regulatory Updates: Policy updated within 30 days of regulatory changes. Internal Audit: Biannual internal review and annual third-party compliance audit.

7. Appeals and Support

Users can request re-verification via in-app support or by emailing support@hibt.com. The compliance team will respond within 7 business days with guidance.

HIBT is committed to continuously enhancing and strictly enforcing this KYC policy to provide a secure, compliant, and efficient digital asset trading experience. Thank you for your cooperation and trust.