— (ABN —)
What we collect and why: We collect your personal information including your name, date of birth, address, contact details, citizenship, occupation, and information about the source of your funds and wealth. This information is collected for the purposes of Customer Due Diligence under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth).
Who sees your information: Your information is accessed only by the designated compliance officer and other authorised personnel involved in AML/CTF compliance administration on a need-to-know basis. It is not shared with other staff, displayed publicly, or used for marketing purposes.
Identity verification: Your identity will be verified electronically using the Australian Government’s Document Verification Service (DVS), facilitated by our identity verification provider. You may also be asked to complete a biometric identity check. Consent for biometric verification will be obtained separately at that stage. We do not retain copies of your identity documents. Only the information necessary to record the type of document, the outcome of verification, and related identifiers is kept.
Data protection: Your information is transmitted using TLS 1.2+ encryption and stored using AES-256 encryption on secure servers located in Sydney, Australia (AWS ap-southeast-2). Access is restricted to authorised personnel only.
Retention: Your records are retained for a minimum of 7 years after the end of the relationship or transaction, as required by section 107 of the AML/CTF Act 2006.
Disclosure: Your information may be disclosed to AUSTRAC where required by law, and to our identity verification provider for the purpose of electronically verifying your identity.
If you do not provide the requested information: We may not be able to verify your identity and the agency may not be able to provide you with the services you have requested.
Your rights: Under Australian Privacy Principles 12 and 13, you have the right to access and request correction of your personal information. To do so, please contact —. If you are unsatisfied with how your complaint is handled, you may escalate to the Office of the Australian Information Commissioner (OAIC).
Pre-registration data: If you are not the successful purchaser, your details will be deleted within 72 hours of the event concluding.