Anti-Money Laundering

(AML) Policy

1. General Definitions

   For the purposes of this Manual, and unless the context otherwise requires:
   Act means the Proceeds of Crime Act, 2013;
   AML/CFT Compliance Officer means the person appointed by Cryspex as its AML/CFT compliance officer under the Regulations;
   AML/CFT Reporting Officer means the person appointed byCryspex as its AML/CFT reporting officer under the Regulations;
   Beneficial Owner means

   1. an individual who is an ultimate beneficial owner of the Legal Person, partnership or legal arrangement, whether or not the individual is the only beneficial owner; and
   2. an individual who exercises ultimate control over the management of the Legal Person, partnership or legal arrangement, whether alone or jointly with any other person or persons, regardless of whether the ultimate ownership or control is direct or indirect. For the avoidance of doubt, an individual is not deemed to be the Beneficial Owner of a company, the securities of which are listed on a recognized exchange;
   Business Relationship means a business, professional or commercial relationship between Cryspex and a customer which is expected by Cryspex, at the time when contact is established, to have an element of duration;
   Customer Due Diligence Information means Identification Information and Relationship Information;
   Customer Due Diligence Measures means

   1. the measures for:
      1. identifying a customer;
      2. determining whether the customer is acting for a Third Party and, if so, identifying the Third Party;
      3. verifying the identity of the customer and any Third Party for whom the customer is acting;
      4. identifying each Beneficial Owner of the customer and Third Party, where either the customer or Third Party, or both are not individuals;
      5. taking reasonable measures, on a risk-sensitive basis, to verify the identity of each Beneficial Owner of the customer and Third Party so that Cryspex is satisfied that it knows who each Beneficial Owner is, including, in the case of a Legal Person, partnership, Foundation, trust or similar arrangement, taking reasonable measures to understand the ownership and control structure of the Legal Person, partnership, Foundation, trust or similar arrangement; and
      6. obtaining information on the purpose and intended nature of the Business Relationship or Occasional Transaction. Such measures include where the customer is not an individual, measures for verifying that any person purporting to act on behalf of the customer is authorized to do so, identifying that person and verifying the identity of that person.
   2. Where Cryspex is required to verify the identity of a person, it shall verify that person's identity using documents, data or information obtained from a reliable and independent source.
   Director in relation to a Legal Person means a person appointed to direct the affairs of the Legal Person and includes a person who is a member of the governing body of the Legal Person and a person who, in relation to the Legal Person, occupies the position of director by whatever name called;
   Domestic Politically Exposed Person means a person who is or has been entrusted with a prominent public function by the State;
   FATF means the international body known as the Financial Action Task Force or such other international body as may succeed it;
   FATF Recommendations means the FATF Recommendations, Interpretive Notes and Glossary issued by the FATF in February 2012, incorporating such amendments as may from time to time be made to the Recommendations or such document or documents issued by the FATF as may supersede those Recommendations;
   Foreign Politically Exposed Person means a person who is, or has been entrusted with a prominent function by an international organization;
   Foundation means a foundation, wherever established;
   Identification Information means a person who has or seeks to establish a Business Relationship or to carry out an Occasional Transaction on behalf of his or her customer with Cryspex, so that Intermediary becomes a customer of Cryspex;
   Introducer means a person who has a Business Relationship with a customer and who introduces that customer to Cryspex with the intention that the customer will form a Business Relationship or conduct an Occasional Transaction with Cryspex so that the Introducer's customer also becomes a customer of Cryspex;
   Legal Person includes a company, a partnership, whether limited or general, an association or any unincorporated body of persons, but does not include a trust;
   Occasional Transaction means a transaction that is carried out otherwise than as part of a Business Relationship, and is carried out as:

   1. a single transaction; or
   2. two or more linked transactions where it appears at the outset to any person handling any of the transactions that the transactions are linked or at any later stage it comes to the attention of the person handling any of those transactions that the transactions are linked, that amount to $2,500 where it is a transaction or linked transaction carried out on the course of a money services business or $10,000 in the case of any other transaction or linked transaction;
   Ongoing Monitoring means with regards to a Business Relationship:

   1. scrutinizing transactions undertaken throughout the course of the relationship, including where necessary the source of funds to ensure that the transactions are consistent with Cryspex's knowledge of the customer and the customer's business and risk profile; and
   2. keeping the documents, data or information obtained for the purpose of applying Customer Due Diligence measures up-to-date and relevant by undertaking reviews of existing records.
   Politically Exposed Person means a Foreign Politically Exposed Person, a Domestic Politically Exposed Person or a person who is, or has been entrusted with a prominent function by an international organisation;
   Regulations means the Anti-Money Laundering and Terrorist Financing Regulations of 2014, as amended from time to time, of St Vincent And The Grenadines;
   Relationship Information means information concerning the Business Relationship or proposed Business Relationship between a Cryspex and its customer;
   Relevant Business means a business which, if carried on by a person, would result int hat person being a Cryspex;
   Terrorism, Terrorist Financing, Terrorist Financing Disclosure are as defined in the Anti-Terrorist Financing and Proliferation Act, 2014.
   Third Party means a person for whom a customer is acting.

2. Customer Due Diligence

   1. Cryspex shell:
      1. obtain Customer Due Diligence Information on every customer, Third Party and Beneficial Owner; and
      2. verify the identity of the customer and any Third Party and take reasonable measures on a risk sensitive basis, to verify the identity of each Beneficial Owner in accordance with this Manual.
   2. Customer Due Diligence Measures shall be applied:
      1. before Cryspex establishes a Business Relationship or carries out an Occasional Transaction;
      2. where Cryspex suspects money laundering or terrorist financing or doubts the veracity or adequacy of documents, data or information previously obtained under its Customer Due Diligence Measures or when conducting Ongoing Monitoring; and
      3. for existing customers at other appropriate times as determined on a risk- sensitive basis and at least once every five-year period.
   3. Customer Due Diligence Information shall be obtained where:
      1. there is a change in the Identification Information of a customer;
      2. there is a change in the Beneficial Ownership of a customer; or
      3. when there is a change in the Third Parties or the Beneficial Ownership of Third Parties.
   4. Cryspex may complete the verification of the identity of the customer, Third Party or Beneficial Owner after the establishment of a Business Relationship if:
      1. it is necessary not to interrupt the normal conduct of business;
      2. there is little risk of money laundering or terrorist financing occurring as a result; and
      3. verification of identity is completed as soon as reasonably practicable after contact with the customer is first established. Where it cannot be completed, Cryspex shall terminate the Business Relationship with the customer.
   5. Cryspex shall conduct Ongoing Monitoring of a Business Relationship and where unable to do so, it shall terminate the Business Relationship.
   6. Where Cryspex is unable to apply Customer Due Diligence Measures before the establishment of a Business Relationship or before the carrying out of an Occasional Transaction in accordance with this Manual, Cryspex shall not establish the Business Relationship or carry out the Occasional Transaction.
   7. Where Cryspex is unable to apply the measures, verify the identity or undertake Ongoing Monitoring, it shall consider whether it is required to make a money laundering disclosure or terrorist financing disclosure.

3. Risk Based Approach

   1. In accordance with the provisions contained in this Section 3 and in Schedule 1, Cryspex shall at all times apply a risk-sensitive approach to determining the extent and nature of:
      1. the Customer Due Diligence Measures to be applied to a customer and to any Third Party or Beneficial Owner; and
      2. its Ongoing Monitoring of a Business Relationship.
   2. In doing so, it shall:
      1. assess the risk that any Business Relationship or Occasional Transaction involves, or will involve, money laundering or terrorist financing, depending upon the type of customer, Business Relationship, product or transaction and consider on a risk-sensitive basis, whether further identification or Relationship Information is required;
      2. on the basis of the Customer Due Diligence information obtained and the information obtained under paragraph (a) prepare and record a risk assessment with respect to the customer;
      3. periodically update the Customer Due Diligence information that it holds and adjust the risk assessment it has made accordingly.
   3. In preparing a risk assessment with respect to a customer, Cryspex shall take account of all relevant risks and shall consider, in particular, the relevance of the following risks:
      1. customer risk;
      2. product risk;
      3. delivery risk; and
      4. country risk.
   4. Cryspex shall be able to demonstrate at all times that:
      1. the extent of the Customer Due Diligence Measures applied in any case is appropriate having regard to the circumstances of the case, including the risks of money laundering and terrorist financing; and
      2. it has obtained appropriate information to carry out the risk assessments required.
   5. Cryspex shall, on a risk-sensitive basis, apply enhanced due diligence measures and undertake enhanced Ongoing Monitoring:
      1. where the customer has not been physically present for identification purposes;
      2. where Cryspex has, or proposes to have, a Business Relationship with, or proposes to carry out an Occasional Transaction with, a person connected with a country that does not apply, or insufficiently applies the FATF Recommendations;
      3. where Cryspex has or proposes to have a Business Relationship with, or to carry out an Occasional Transaction with, a Foreign Politically Exposed Person or a family member or close associate of a Foreign Politically Exposed Person;
      4. where any of the following is a Foreign Politically Exposed Person or a family member or close associate of a Foreign Politically Exposed Person:
         1. a Beneficial Owner of the customer;
         2. a Third Party for whom a customer is acting;
         3. a Beneficial Owner of a Third Party for whom a customer is acting;
         4. a person acting, or purporting to act on behalf of the customer;
      5. where a customer, transaction or Business Relationship involves:
         1. private banking, Legal Persons or arrangements, including trusts, that are personal asset holding vehicles; or
         2. companies that have nominee shareholders or shares in bearer form; and
      6. in any other situation which by its nature can present a higher risk of money laundering or terrorist financing.
   6. Cryspex shall apply the following additional measures when it is applying due diligence measures to non-face-to-face customers:
      1. perform at least one additional check designed to mitigate the risk of identity fraud; and
      2. apply such additional enhanced Customer Due Diligence Measures or undertake enhanced Ongoing Monitoring as it considers appropriate.
   7. Cryspex is not required to apply Customer Due Diligence Measures before establishing a Business Relationship or carrying out an Occasional Transaction where it has reasonable grounds to believe that the customer is a service provider, foreign regulated person, public authority in the State or a company the securities of which are listed on a recognized exchange.
   8. Cryspex shall not set up or maintain a numbered account, an anonymous account or an account in a name which it knows or has reasonable grounds to suspect, is fictitious.

4. Introducers and Intermediaries

   1. Cryspex may rely on an Introducer or an Intermediary to apply Customer Due Diligence Measures with respect to a customer, Third Party or Beneficial Owner if:
      1. the Introducer or Intermediary is a regulated person or a foreign regulated person; and
      2. the Introducer or Intermediary consents to being relied on, and shall immediately obtain the Customer Due Diligence Information from the Introducer or Intermediary.
   2. Before relying on the Introducer or Intermediary, Cryspex shall obtain adequate assurance in writing from the Intermediary or Introducer that they:
      1. have applied the Customer Due Diligence Measures for which Cryspex intends to rely on;
      2. are required to keep and do keep a record of the evidence of identification relating to each of the customers of the Intermediary or Introducer;
      3. will without delay provide the information in that record to Cryspex or any supervisory authority if so required.
   3. Before relying on the Introducer or Intermediary, Cryspex shall:
      1. satisfy itself that the Intermediary or Introducer is a regulated person or a foreign regulated person and has all the procedures in place to undertake Customer Due Diligence Measures.
      2. assess the risk of relying on the Intermediary or Introducer with a view to determining:
         1. whether it is appropriate to rely on the Intermediary or Introducer; and
         2. if it considers it is so appropriate, whether it should take any additional measures to manage the risk.
      3. obtain in writing from the Introducer:
         1. confirmation that each introduced customer is an established customer of the Introducer; and
         2. sufficient information about each introduced customer to enable it to assess the risk of money laundering and terrorist financing involving that customer.
      4. obtain in writing from the Intermediary sufficient information about the customer for whom the Intermediary is acting to enable the service provider to assess the risk of money laundering and terrorist financing involving that customer.
   4. Cryspex shall:
      1. make and retain records detailing the risk assessment carried out and any additional risk mitigation measures it considers appropriate; and
      2. retain in its records the assurances and confirmations it has obtained and the information it has sought and obtained.

5. Policies, Procedures, Systems, Controls, Record Keeping and Training

   1. Cryspex shall establish, maintain and implement appropriate risk-sensitive policies, procedures, systems and controls to prevent and detect money laundering and terrorist financing, including policies, systems and controls relating to:
      1. Customer Due Diligence Measures and Ongoing Monitoring;
      2. the reporting of disclosures;
      3. record keeping;
      4. the screening of employees;
      5. internal controls;
      6. risk assessment and management; and
      7. monitoring and management of compliance with, and the internal communication of, its policies, systems and controls to prevent and detect money laundering and terrorist financing, including those specified above.
   2. The policies, systems and controls must provide for:
      1. the identification and scrutiny of:
         1. complex or unusually large transactions;
         2. unusual patterns of transactions which have no apparent economic or visible lawful purpose; and
         3. any other activity which Cryspex regards as particularly likely by its nature to be related to the risk of money laundering or terrorist financing.
      2. The taking of additional measures, where appropriate, to prevent the use for money laundering or terrorist financing of products and transactions which are susceptible to anonymity; and
      3. determining whether:
         1. a customer, any Third Party for whom the customer is acting and any Beneficial Owner of the customer or Third Party, is a politically exposed person or a family member or close associate of a politically exposed person;
         2. a Business Relationship or transaction or proposed Business Relationship or transaction is with a person connected with a country that does not apply or insufficiently applies the FATF Recommendations;
         3. a Business Relationship or transaction or proposed Business Relationship or transaction is with a person connected with a country that is subject to measures for purposes connected with the prevention and detection of money laundering or terrorist financing, imposed by one or more countries or sanctioned by the European Union or the United Nations.
   3. Cryspex shall maintain adequate procedures for monitoring and testing the effectiveness of the policies and procedures maintained in this Section 5 and the training provided as required herein.
   4. Cryspex shall keep all records in a form that enables them to be made available on a timely basis when lawfully required, to any supervisory authority or regulatory body as may be required.
   5. The records required to be kept include:
      1. a copy of the evidence of identity obtained pursuant to the application of Customer Due Diligence Measures or Ongoing Monitoring or information that enables a copy of such evidence to be obtained;
      2. the supporting documents, data or information obtained in respect of a Business Relationship or Occasional Transaction which is the subject of Customer Due Diligence Measures or Ongoing Monitoring;
      3. a record containing details relating to each transaction carried out by Cryspex in the course of any Business Relationship or Occasional Transaction with sufficient information to enable the reconstruction of individual transactions;
      4. all account files;
      5. all business correspondence relating to a Business Relationship or an Occasional Transaction.
6. Records shall be kept in such manner that:
   1. facilitates Ongoing Monitoring and periodic updating;
   2. ensures that they are readily accessible to Cryspex;
   3. enables the supervisory authority, internal and external auditors and other competent authorities to assess the effectiveness of systems and controls that are maintained by Cryspex to prevent and detect money laundering and terrorist financing.
7. The AML/CFT compliance officer and other appropriate employees shall have timely access to all customer Identification Information records, other Customer Due Diligence information, transaction records and other relevant information and records necessary for them to perform their functions.
8. Cryspex shall take appropriate measures for the purposes of making employees whose duties relate to the provision of relevant business aware of:
   1. the anti-money laundering and counter-terrorist financing policies, procedures, systems and controls maintained byCryspex; and
   2. the relevant laws relating to money laundering and terrorist financing offences, and, shall provide them with training in the recognition and handling of:
      1. transactions carried out by or on behalf of any person who is or appears to be engaged in money laundering or terrorist financing; and
      2. other conduct that indicates that a person is or appears to be engaged in money laundering or terrorist financing.

9. Policies, Procedures, Systems, Controls, Record Keeping and Training

   1. The principal functions of the AML/CFT reporting officer are to:
      1. receive and consider internal money laundering and terrorist financing disclosures;
      2. consider whether a suspicious activity report should be made to any regulatory authorities and if so, submit such report.
   2. The principal function of the AML/CFT compliance officer is to oversee and monitor Cryspex's compliance with all relevant legislation for the time being in force concerning money laundering and terrorist financing.
   3. The AML/CFT reporting officer and the AML/CFT compliance officer shall:
      1. be an employee of Cryspex or of a company in the same group as Cryspex;
      2. have the appropriate sills and experience and otherwise be fit and proper to act as Cryspex’s AML/CFT reporting officer and AML/CFT compliance officer;
      3. possess sufficient independence to perform his or her role objectively;
      4. have sufficient seniority in the organizational structure of Cryspex to undertake his or her responsibilities effectively and in particular, to ensure that his or her requests, where appropriate, are acted upon by Cryspex and its staff and his or her recommendations properly considered by the board;
      5. report regularly and directly to the board and have regular contact with the board;
      6. have sufficient resources, including time, to perform the functions of AML/CFT compliance officer and AML/CFT reporting officer effectively;
      7. have unfettered access to all business lines, support departments and information necessary to perform the functions of AML/CFT reporting officer and AML/CFT compliance officer effectively; and
      8. have timely access to all records that are necessary or expedient for the purpose of performing his or her functions as AML/CFT reporting officer or AML/CFT compliance officer.

Schedule 1 Risk Based Approach for KYC & AML

In this review of the current procedures for new client acquisition, Cryspex, has used information provided through the FATF website www.fatf-gafi.org

Cryspex, relies on the various publications of the FATF and its regional bodies (FSRBs) and updates itself on any changes during the course of the year. There are 38 members of FATF. Residents of the United Kingdom along with residents of jurisdictions who are members of the EEA and FATF are considered “Low Risk”.

In addition, the nine FSRBs have an essential role in promoting the effective implementation of the FATF Recommendations by their membership and in providing expertise and input in FATF policy-making. Over 190 jurisdictions around the world have committed to the FATF Recommendations through the global network of FSRBs and FATF memberships.

Cryspex, considers these jurisdictions as “Medium Risk” and requires a level of “Heightened Due Diligence”. “High Risk” and other monitored jurisdictions will be evaluated on a case by case nature as to ensure fair play in a non-prejudicial style. Cryspex, will NOT deal with Sanctioned jurisdictions.

Due diligence requirements for individual clients or company representative (Table 1 )

Cryspex has assessed its current client base and has identified that there are various levels of risks when engaging with new clients:

1. Low and Medium risk – where clients originate from Low and Medium Risk jurisdictions it will carry the required Due Diligence and rely on Credit Safe to validate the Client's passport and check it against the Credit Safe sanction lists.
2. High risk – Where clients originate from a High Risk Jurisdiction, it will carry Third Party checks and Enhanced Due Diligence on all new clients, requesting that all documents should be certified by a competent person.
3. Sanction List and Very High risk – Where individuals are from countries that are in the Sanction list or have been identified as VERY high risk, Cryspex will not carry any business with those individuals ( See list 1 Below). Compliance maintains a FATF Country Watch List and updates it periodically.

The Account Representative prospecting the new client familiarize themselves with the various risk levels and obtain the necessary information from the client.

Due diligence requirements for Corporate clients (Table 2 )

• As with Individuals, the Due Diligence for companies is guided by the same principles of risk and are described in Table 2
• Offshore Jurisdictions (Mauritius, Seychelles, Belize, BVI etc.) will be treated as High Risk.

Appendix A

Residents of the following countries are categorized as Low Risk, Medium Risk, High Risk and Do Not Deal.