This KYC & Identity Verification Policy explains how XReelz verifies the identity and age of creators. It describes what information is collected, why verification is required, and how we protect your information. This Policy must be read together with our Terms of Service, Privacy Policy, and Community Guidelines.

1. INTRODUCTION AND PURPOSE OF THIS POLICY

Because XReelz allows creators to upload and monetise adult content, we are required to verify the identity, age, and eligibility of every creator. This protects creators, users, and the platform, and ensures compliance with legal and financial regulations.

We must carry out KYC checks to:

• confirm creators are at least 18 years old;
• prevent minors from uploading or appearing in content;
• comply with sanctions, AML, and financial laws;
• meet the requirements of our banking partners and payment processors;
• reduce fraud, impersonation, and misuse;
• keep the platform safe and legally compliant.

KYC is mandatory for every creator, without exception.

2. SCOPE OF THIS POLICY

This Policy applies only to creators who upload or monetise content on XReelz.

General users who view or purchase content do not need to complete KYC, unless a specific legal or fraud-related requirement applies.

Creators must complete KYC before they:

• upload adult content;
• monetise content;
• receive payouts;
• use creator tools.

3. LEGAL AND REGULATORY FRAMEWORK

We carry out KYC in line with:

• Dutch Anti-Money Laundering and Anti-Terrorist Financing Act (Wwft);
• EU AML directives;
• EU sanctions rules;
• GDPR;
• Visa and Mastercard requirements for adult-content transactions;
• payment processor and banking rules;
• fraud-prevention and age-verification obligations;
• internationally recognised identity-verification standards.

Although we operate outside the United States, some compliance requirements apply because adult content may be accessible in the U.S.

4. TYPES OF INFORMATION WE COLLECT FOR KYC

To complete KYC, creators must provide accurate, current information. This may include:

• full legal name;
• date of birth;
• nationality;
• residential address;
• government-issued ID (passport, national ID, or driver's licence);
• document number and expiry date;
• facial image and liveness verification;
• biometric data used to match the document to the person;
• sanctions, AML, and PEP screening results;
• risk and fraud-prevention indicators;
• verification history and outcomes.

We only collect what is necessary to verify identity, confirm age, and comply with regulations.

5. VERIFICATION PROVIDER (ONDATO)

We use Ondato as our third-party verification partner. Ondato carries out:

• document authentication;
• facial comparison;
• liveness checks;
• sanctions and PEP screening;
• AML and fraud scoring.

Ondato processes your information only for verification purposes and must follow strict privacy and security requirements. KYC data is never used for advertising or marketing.

6. VERIFICATION PROCESS

The KYC process includes the following steps:

1. Upload of Identity Document: A valid, readable government ID must be provided.
2. Facial and Liveness Verification: A live selfie and movement check confirm that you match the ID.
3. Document and Fraud Checks: Systems verify whether the document is genuine, unaltered, and belongs to you.
4. Sanctions and AML Screening: Your information is checked against global lists.
5. Manual Review (If Needed): If results are unclear, a human reviewer checks the information.
6. Verification Decision: You will be informed if you are approved, rejected, or must submit more information.
7. Retries: If the document cannot be verified, you may be asked to retry.

You cannot monetise or receive payouts until verification is successfully completed.

7. WHEN ADDITIONAL OR REPEAT VERIFICATION IS REQUIRED

You may need to complete verification again if:

• your ID expires;
• you update your legal name or details;
• we detect unusual activity or location changes;
• a fraud or chargeback investigation is opened;
• documents appear inconsistent or unclear;
• our banking partners request further checks;
• we suspect impersonation;
• your account was suspended and reinstatement is requested.

You must cooperate with any repeat verification request.

8. CREATOR RESPONSIBILITIES

Creators must:

• provide accurate and truthful information;
• ensure the person completing KYC is the same person operating the account;
• update expired documents promptly;
• comply with age restrictions;
• not attempt to bypass or manipulate verification;
• not use virtual cameras, AI-generated images, deepfakes, emulators, or altered documents;
• not upload content featuring unverified performers.

Creators are fully responsible for ensuring that all performers in their content are adults and have given lawful consent.

9. DISTINCTION BETWEEN CREATORS AND PERFORMERS

XReelz verifies only the identity of the creator/uploader.

We do not verify or record the identities or ages of other performers appearing in the creator's content. Creators must independently verify that all performers appearing in their content are:

• at least 18 years old;
• consenting;
• legally permitted to appear in adult content.

Uploading content with an unverified performer is strictly prohibited.

10. CONSEQUENCES OF FAILED OR INCOMPLETE VERIFICATION

If verification cannot be completed or fails:

• creators cannot monetise content;
• payouts will not be processed;
• content may remain hidden;
• the account may be restricted or suspended;
• fraudulent attempts result in permanent bans.

We may withhold payouts if we suspect fraud, impersonation, sanctions issues, or AML concerns.

11. SANCTIONS, AML, AND FRAUD SCREENING

We must screen creators against:

• global sanctions lists;
• PEP lists;
• AML indicators;
• risk and fraud scoring systems;
• device fingerprinting;
• IP and location analysis.

If you appear on a sanctions list or present a high-risk profile, we may reject verification, restrict the account, or take steps required by law or our banking partners.

We may refuse verification from high-risk or prohibited regions.

12. AGE VERIFICATION REQUIREMENTS

Creators must be at least 18 years old. If a creator appears visually younger than 21, we may request additional documentation or perform enhanced age verification.

Any suspicion of a minor results in immediate suspension and removal of content.

13. PAYOUT ELIGIBILITY AND HOLDS

Creators can only receive payouts after:

• successful KYC;
• AML and sanctions clearance;
• passing fraud checks;
• no chargeback or risk holds;
• meeting banking partner requirements.

If we believe fraud, impersonation, sanctions issues, or AML concerns exist, payouts may be temporarily held until the investigation is complete.

14. DATA RETENTION AND STORAGE

KYC data is retained only as long as necessary to meet legal and regulatory requirements, typically up to five (5) years after the creator's relationship with the platform ends. If a creator deletes their account, we still must retain KYC records for the required retention period. After this period ends, the data is securely deleted or anonymised.

15. DATA SHARING FOR KYC PURPOSES

We may share KYC data only with:

• Ondato (verification provider);
• payment processors and payout partners;
• banking partners;
• fraud-prevention and sanctions-screening providers;
• regulators and law enforcement where required by law;
• internal compliance and security teams.

We do not share KYC information with advertisers or for marketing.

16. SECURITY MEASURES

We use strong security measures to protect KYC information, including:

• encrypted storage and transmission;
• secure servers;
• strict access controls;
• audit logs;
• regular security checks;
• enhanced protection for biometric data;
• fraud-detection systems.

Only authorised personnel may access KYC data.

17. PROHIBITED ACTIONS

Creators must not:

• use forged, stolen, modified, or AI-generated documents;
• impersonate another person;
• submit verification while using a VPN, proxy, emulator, or anonymized device;
• attempt to bypass or manipulate KYC;
• upload content involving unverified performers;
• create agency-managed accounts unless approved through a separate process.

Violation may result in permanent account termination.

18. RECORD KEEPING AND AUDIT LOGS

We maintain logs of:

• verification attempts;
• reasons for approval or rejection;
• sanctions and AML screening results;
• manual review notes;
• device and IP information;
• account restriction decisions.

These logs help us meet legal, banking, and audit requirements.

19. CHANGES TO THIS POLICY

We may update this KYC Policy when required by law, safety concerns, payment processor changes, or operational needs. Significant changes may be communicated through the platform or by email. Your continued use of creator features means you accept the updated policy.

20. CONTACT INFORMATION

For questions or assistance regarding KYC, you may contact:

Last updated on January 15, 2026