KYC Policy

“KYC” means know your customer. We verify who you are before money or cards leave the platform, so that funds reach their rightful owner and RIPVault is not used for fraud or money laundering.

When verification is required

• Before your first withdrawal.
• Before your first shipment of cards.
• At any time when we see unusual activity, duplicate-account signals, or are required to by law.

Opening packs, selling back cards and keeping funds in your Balance do not require verification.

What we check

• Phone: a verified mobile number — needed for every withdrawal and every shipment.
• Identity and age: your MyKad (front and back), or your passport with your date of birth. You must be 18 or older. The name must match your account and bank account.
• Liveness: a selfie holding your ID, to confirm the document belongs to you.
• Bank account: the account you want payouts sent to, in your own name. We do not pay out to third-party accounts.

How it works

1. Submit the documents from Wallet → Withdraw or when you start your first shipment.
2. A team member reviews them — our target is within 24 hours. We may ask for a clearer photo or an additional document.
3. You are notified of the result in the app. Once approved, you don't need to verify again unless something changes.

Protecting your documents

• Documents are encrypted before they are stored and decrypted only for the reviewer.
• Your full IC number never appears in our activity logs; we keep only a one-way fingerprint to detect the same identity being used for more than one account.
• We keep identity records for the period required by Malaysian anti-money-laundering and record-keeping law, then delete them. See the Privacy Policy.

If verification fails

We will tell you why (for example, blurred photo, name mismatch, or under 18) and you may resubmit. Where the same identity is already verified on another account, both accounts are reviewed and withdrawals are paused until it is resolved.