Compliance

1. Our Commitment to Compliance

At GoldeGet, regulatory compliance is foundational to our operations. We are committed to maintaining the highest standards of compliance with applicable laws and regulations governing cryptocurrency exchanges, financial services, and data protection.

We continuously monitor regulatory developments across jurisdictions and update our compliance framework accordingly to ensure that our platform operates within the bounds of the law and meets the expectations of our users and regulatory partners.

2. Anti-Money Laundering (AML)

GoldeGet maintains a robust Anti-Money Laundering program designed to prevent, detect, and report suspicious activities. Our AML program includes:

• Transaction Monitoring: Continuous automated monitoring of all transactions for unusual patterns, suspicious activity, and potential money laundering indicators.
• Risk Assessment: Regular assessment of money laundering and terrorist financing risks, with risk-based measures applied to high-risk customers and jurisdictions.
• Suspicious Activity Reporting: Timely filing of Suspicious Activity Reports (SARs) with relevant authorities when warranted.
• Record Keeping: Maintaining comprehensive records of all transactions, customer identification, and due diligence documentation.
• Employee Training: Regular training for all staff on AML obligations, red flags, and reporting procedures.

3. Know Your Customer (KYC)

Our KYC program is designed to verify the identity of our customers and assess the risk they may pose. Our verification process includes:

3.1 Customer Identification

• Collection and verification of government-issued photo identification
• Verification of residential address through utility bills or bank statements
• Biometric verification through selfie or liveness detection
• Screening against global sanctions lists and politically exposed persons (PEP) databases

3.2 Enhanced Due Diligence (EDD)

For higher-risk customers or transactions, we apply enhanced due diligence measures, which may include:

• Additional documentation requirements, including source of funds and source of wealth
• More frequent monitoring and review of account activity
• Senior management approval for establishing or continuing business relationships
• Ongoing monitoring of adverse media and changes in risk profile

3.3 Ongoing Monitoring

We conduct ongoing monitoring of customer relationships to ensure that transactions are consistent with our knowledge of the customer, their business activities, and their risk profile. Customer information is periodically reviewed and updated.

4. Sanctions Compliance

GoldeGet is committed to complying with all applicable economic and trade sanctions laws and regulations. We:

• Screen all customers and transactions against sanctions lists maintained by relevant authorities, including OFAC, EU, UN, and other applicable bodies.
• Block or reject transactions involving sanctioned individuals, entities, or jurisdictions.
• Maintain an up-to-date sanctions screening program with real-time list updates.
• Report any potential sanctions violations to the appropriate regulatory authorities.

5. Data Protection

We comply with applicable data protection laws and regulations, including the General Data Protection Regulation (GDPR) where applicable. Our data protection practices include:

• Data minimization — collecting only the information necessary for our services and compliance obligations.
• Encryption of sensitive data both in transit and at rest.
• Regular security audits and vulnerability assessments.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Incident response procedures for data breaches.

For more details, please see our Privacy Policy.

6. Security Measures

GoldeGet implements comprehensive security measures to protect our platform and your assets:

• Cold Storage: The majority of digital assets are stored in offline, air-gapped cold storage wallets.
• Multi-Signature: Withdrawals require multiple authorized signatures to process.
• Two-Factor Authentication: Mandatory 2FA for all user accounts to prevent unauthorized access.
• Penetration Testing: Regular third-party security assessments and penetration testing.
• DDoS Protection: Enterprise-grade DDoS mitigation and traffic management.
• Bug Bounty Program: Rewarding security researchers who identify vulnerabilities.

7. Prohibited Jurisdictions

GoldeGet does not provide services to residents of certain jurisdictions due to regulatory restrictions. Users are responsible for ensuring that their use of our Services complies with the laws and regulations of their jurisdiction.

If we determine that a user is accessing our Services from a prohibited jurisdiction, we may restrict or terminate their account in accordance with our Terms of Service.

8. Regulatory Cooperation

We cooperate fully with regulatory authorities, law enforcement agencies, and judicial processes. This includes responding to lawful requests for information, subpoenas, and court orders in a timely manner while respecting the privacy rights of our users.

9. Compliance Updates

Our compliance framework is regularly reviewed and updated to reflect changes in applicable laws, regulations, and industry best practices. We are committed to transparency and will notify users of any significant changes that may affect their use of our Services.

10. Contact Our Compliance Team

If you have any questions or concerns about our compliance practices, or wish to report suspicious activity, please contact us:

• Email: support@goldeget.com
• Website: goldeget.com