RizzBees S.R.O. Anti-Money Laundering (AML) and Countering the Financing of Terrorism (CFT) Policy

To ensure compliance with MiCA and other applicable regulations, RizzBees S.R.O. has established a comprehensive AML/CFT Compliance Framework, including the following key components:

 

2.1 Customer Due Diligence (CDD) and Know Your Customer (KYC) Procedures

 

The Company adheres to MiCA’s requirements for identifying and verifying customers as part of its onboarding process:

- Basic CDD: All clients must provide valid government-issued identification (e.g., passport, national ID), proof of address (e.g., utility bill or bank statement not older than 3 months), and, where applicable, information on the source of funds or wealth prior to account activation.

- Enhanced Due Diligence (EDD): For high-risk clients, such as those from high-risk third countries (as per FATF lists) or those involved in complex or unusually large transactions, additional verification steps are applied, including detailed source-of-funds documentation. However, per Company policy, RizzBees S.R.O. does not service Politically Exposed Persons (PEPs). If a client is identified as a PEP during the onboarding or monitoring process, their application will be declined or their account terminated, as applicable.

- Ongoing Monitoring: Client profiles and transactions are continuously monitored to ensure consistency with the client’s risk profile and to detect any unusual activity.

- Onboarding Process: All KYC and AML processes are fully digital and outsourced to Sumsub, a third-party provider specializing in identity verification and compliance solutions. Clients complete a secure digital onboarding form via Sumsub’s platform, which conducts automated verification checks (e.g., document authenticity, facial recognition). Accounts remain inactive until Sumsub confirms that KYC/CDD requirements are fully satisfied.

 

2.2 Transaction Monitoring and Reporting

 

- The Company employs real-time transaction monitoring systems to identify unusual patterns, such as high-frequency trades, large crypto-to-fiat conversions, or transfers to/from high-risk jurisdictions.

- Suspicious transactions are flagged, investigated, and, if necessary, reported to the Slovak FIU within the statutory timeframe (typically 5 working days) as per Slovak law and MiCA obligations.

- Crypto-specific risks, such as the use of mixers/tumblers or privacy coins, are closely scrutinized.

 

2.3 Prohibited Transactions and Restrictions

 

- RizzBees S.R.O. prohibits cash deposits or withdrawals in line with MiCA’s focus on traceable electronic transactions.

- Transactions involving sanctioned individuals, entities, or jurisdictions (as per EU and FATF lists) are strictly forbidden.

 

2.4 Record Keeping and Data Security

 

- In accordance with MiCA and Slovak law, client identification records, transaction data, and risk assessments are retained for a minimum of five (5) years following the end of the business relationship or transaction.

- Data is stored securely in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, with encryption and access controls to protect client information.

 

2.5 Employee Training and Internal Controls

 

- All employees receive mandatory annual AML/CFT training, covering MiCA requirements, Slovak regulations, and crypto-specific risks (e.g., wallet screening, blockchain analysis).

- An AML/CFT Compliance Officer is appointed to oversee the program, ensure regulatory adherence, and liaise with authorities.