This AML Policy (hereinafter — the Policy) regulates Rexex's activities regarding the fight against money laundering and the financing of terrorist activities. Rexex Service warns users against attempts to use the service for the legalization of funds obtained by criminal means, the financing of terrorism, illegal actions of any kind, as well as from using the service to purchase prohibited goods and services. The Rexex Service Administration has developed a set of measures to comply with national legislation and the requirements of the intergovernmental organization FATF (Financial Action Task Force). Rexex Service adheres to the following rules: 1. Not to enter into business relationships with known criminals and/or terrorists; 2. Not to process transactions that are the result of known criminal and/or terrorist activity; 3. Not to facilitate any transactions related to known criminal and/or terrorist activity; 4. Has the right to restrict or prohibit the use of all or part of the services, not to work with services that are directly or indirectly related to the countries: Afghanistan, Bosnia and Herzegovina, USA, Democratic People's Republic of Korea, Democratic Republic of the Congo, Eritrea, Ethiopia, Guyana, Iran, Iraq, Lao People's Democratic Republic, Libya, Somalia, South Sudan, Sri Lanka, Sudan, Syria, Trinidad and Tobago, Tunisia, Uganda, Vanuatu, Ukraine, etc. 5. The service does not work with funds related to: BeriBit, HODLHODL, SkyBtcBanker, Black Sprut, Wasabi Wallet, Bitzlato, Hydra, Tornado Cash, OMG!OMG!, MEGA DARKNET MARKET, FreeBitcoin, casinos, gambling, 1xBet, Lazarus, OneCoin, Mirror Trading International (MTI), Bitconnect, PlusToken, Bitcoin Fog, Samourai Wallet, Silk Road, AlphaBay, Sheep Marketplace, Fake ICOs, Cloud mining without a license, Pump-and-dump communities, Phishing sites and cryptocurrency clone wallets, etc. Measures within the framework of AML Policy compliance 1. Application of the KYC (Know Your Customer) policy To prevent illegal transactions, the Service sets certain requirements for all Applications created by the User and processed within the Service: • The sender and recipient of the Payment for the Application must be the same person. Using the Service's services for transfers to third parties is strictly prohibited. • All contact details entered by the User into the Application, as well as other personal data provided by the User to the Service, must be current and completely reliable. • It is strictly prohibited for a User to create Applications using anonymous proxy servers or any other anonymous Internet connections. • The Service reserves the right not to disclose information about the methods and results of the inspection. The list of necessary documents for verification is determined individually for each specific case. If a transaction is blocked by an exchange due to high AML risk and the sender refuses to provide the necessary documents for verification, the Rexex service is not responsible for the sender's funds. 2. Verification of the source of funds The Service Administration may request: • A bank statement for fiat money. • A video with wallet transaction details for cryptocurrencies. • Provide complete information about the origin of fiat funds or cryptocurrency assets. 3. Actions regarding suspicious transactions The Service Administration has the right to: • Monitor transactions and report suspicious operations to law enforcement agencies. • Request additional documents from the User. • Suspend or terminate the account if illegal activity is suspected. 4. Blocking transactions with high AML risk Rexex blocks transactions with an AML risk level above 10%, as determined by the BitOK service check, AML-bot, on the website bestchange in the address check section or by any other analytical services for identifying asset risk categories. 5. KYT (Know Your Transaction) Policy The KYT policy is aimed at identifying the client of a transaction if there is suspicion of misuse of Rexex (e.g., money laundering of digital currency or criminal origin of funds). The Service has the right to: • Request information about the origin of the digital currency. • Block the account and transfer data to law enforcement agencies. • Request documents confirming identity and solvency. • Refuse to withdraw funds to third-party accounts. • Withhold funds until the investigation is completed. • Monitor the transaction chain. • Refuse service if the legality of the asset origin is suspected. 6. Responsible for AML Policy Compliance The duties of the Responsible Officer for AML Policy Compliance include ensuring compliance with the AML policy, namely: • Collecting Users' identification information and transferring it to the responsible agent for personal data processing; • Creating and updating internal policies and procedures for writing, reviewing, providing, and storing all reports required by existing laws and regulations; • Monitoring transactions and analyzing any significant deviations from the normal activity of Users; • Implementing a records management system for storing and retrieving documents, files, forms, and logs; • Regularly updating the risk assessment. • The Responsible Officer for AML Policy Compliance has the right to interact with law enforcement agencies involved in preventing money laundering, terrorist financing, and other illegal activities. 7. Additional measures • Authenticity verification: The Administration verifies the authenticity of documents through secondary sources. • Data monitoring: Constant monitoring of User activity, especially when changing identification information or suspicious activity. • Transaction monitoring: Control of all applications on the site, prohibition of transactions from third parties through the User's account. • Appointment of a responsible person for AML policy compliance: A person controlling the implementation of the Policy. • Risk-Based Approach (RBA): Different levels of verification depending on the volume of transactions. • Staff training: Training the team to comply with the Policy requirements. • Interaction with authorities: Providing data upon request from law enforcement agencies or payment systems. • Software security: Improving the IT department to protect against unauthorized access. 8. Risk assessment The above list is not exhaustive. The Responsible Officer for AML Policy Compliance monitors Users' transactions daily to determine whether they should be reported and considered suspicious. In accordance with international requirements, the Rexex Service applies a risk-based approach to combat money laundering and terrorist financing. Thus, measures to prevent money laundering and terrorist financing are commensurate with the identified risks.

Password recovery