Compliance

1. Regulatory Compliance

Dune Payments Limited ("Dune Payments"), the operator of Payvora, is committed to maintaining the highest standards of regulatory compliance. We adhere to all applicable financial regulations and best practices in the countries and jurisdictions where we operate. Our compliance framework is designed to protect our customers, our partners, and the integrity of the global financial system.

Dune Payments operates Payvora as a financial technology platform, not a bank. Regulated account, payment, transfer, card, mobile-money, and related services are enabled through approved third-party financial infrastructure providers where applicable. Product availability is subject to provider approval, customer eligibility, jurisdiction, and applicable provider terms.

2. Anti-Money Laundering (AML)

We implement robust anti-money laundering procedures to detect and prevent illicit financial activities. Our AML programme includes automated transaction monitoring, risk-based screening, and suspicious activity reporting. All accounts are subject to identity verification and ongoing monitoring throughout the customer relationship.

Where required by applicable law or provider obligations, suspicious activity may be escalated to the relevant regulated provider or competent authority. Payvora cooperates with its financial infrastructure providers on compliance reviews and lawful information requests.

3. Know Your Customer (KYC)

To comply with KYC requirements, we collect and verify identification information from all users before granting access to the full range of Payvora services. This includes:

• Full legal name, date of birth, and nationality
• Government-issued identification documents
• Proof of residential address
• Business verification (KYB) for business customers, including beneficial ownership and director details
• Source of funds and wealth verification where required

KYC verification helps us maintain a secure, trustworthy platform and comply with our regulatory obligations. We may request additional information or documentation at any time during your relationship with Payvora.

4. Counter-Terrorism Financing (CTF)

Payvora applies risk-based controls intended to prevent terrorist financing and sanctions violations. Screening and monitoring may be performed by Payvora, its verification vendors, and its regulated financial infrastructure providers using applicable sanctions and watch lists. Potential matches may be restricted, reviewed, escalated, or reported where required.

5. Data Protection Regulations

We handle personal data in accordance with applicable privacy and data-protection requirements. Depending on the customer and jurisdiction, relevant frameworks may include:

• General Data Protection Regulation (GDPR) — European Union and United Kingdom
• California Consumer Privacy Act (CCPA) — United States
• Other applicable data protection and privacy laws in the jurisdictions we serve

For details on how we handle your personal data, please see our Privacy Policy.

6. Payment Card Industry (PCI DSS)

Card services, where enabled, are processed through approved card and payment infrastructure providers. Payvora is designed to minimize its handling of sensitive card data and to rely on provider tokenisation and security controls where available. Any PCI DSS status or obligation is determined by the applicable card-data flow and provider arrangement.

7. Sanctions Screening

Customers and beneficiaries may be subject to sanctions, politically exposed person (PEP), adverse-media, and other risk screening as appropriate. Screening may be performed directly or through specialist verification and regulated provider systems, with potential matches held for review before affected services are made available or transactions are completed.

8. Internal Controls & Audit

We maintain comprehensive internal controls, segregation of duties, and audit procedures to ensure ongoing compliance with all applicable regulations and policies. Our compliance programme is reviewed regularly and updated to reflect changes in the regulatory landscape.

9. Tax Reporting

Dune Payments and its regulated providers comply with tax-reporting obligations that apply to their respective roles and jurisdictions. Customers remain responsible for their own tax obligations. Account or transaction information may be reported to competent authorities where required by applicable law.

10. Report a Concern

If you have concerns about compliance or suspect suspicious activity on the Payvora platform, please contact our compliance team immediately. All reports are treated with strict confidentiality.