KNOW YOUR CUSTOMER (KYC) POLICY

This Know Your Customer (KYC) Policy describes how Xotic Tech OÜ (operating as Xotic AI, "we", "us") identifies and verifies the customers of xotic.ai, confirms that they are adults, and monitors accounts and payments for fraud and misuse. It applies to every account and every purchase on the platform.

1. PURPOSE AND SCOPE

The purpose of this policy is to:

• ensure that only adults (18 years or older) can access and pay for the platform;
• ensure that every payment is made by a verified cardholder through a licensed payment provider;
• prevent fraud, chargeback abuse, money laundering and other misuse of the platform;
• meet our obligations to our payment partners and under applicable law.

2. ACCOUNT REGISTRATION

Every customer must create an account before using paid features. Accounts are registered with an email address and password, or through a third-party login provider (Google or Discord). Each account is tied to one login identity, and customers agree to our Terms of Service and Privacy Policy when they register. Customers must provide accurate information and may not open accounts on behalf of another person.

3. AGE ASSURANCE

Xotic AI is strictly for adults. We apply the following age checks:

• All customers confirm that they are 18 or older, through our 18+ age gate and by accepting our Terms of Service, which require every customer to be an adult.
• United Kingdom: visitors from the UK must pass age verification through our third-party provider, Facia, before they can access the platform. Verification is by facial age estimation, with identity-document verification (an ID document and a selfie) as a fallback when the estimate is not conclusive. We keep the verification result, method and provider reference; the images are processed by the provider for the check.
• Payment: every purchase is made with a payment card through our payment provider, which provides a further check that the customer is an adult cardholder.

Any account where we find evidence that the user is under 18 is closed immediately, as described in our Underage Policy.

4. PAYMENT VERIFICATION

All payments are processed by our licensed payment provider on its own hosted checkout page. We never collect, see or store full card numbers or card security codes. The payment provider verifies the cardholder and the card and screens each transaction for fraud before it is approved.

We keep a record of each customer's subscriptions and purchases (product, amount, currency, date and the provider's transaction reference) so that every payment can be matched to an account.

5. RISK MONITORING

We monitor accounts and payments on an ongoing basis. This includes:

• reviewing fraud alerts, refunds and chargebacks reported by our payment provider;
• suspending or terminating accounts involved in fraud or chargeback abuse;
• blocking sign-ups and purchases that come from sources we have identified as fraudulent, including fraudulent marketing or referral traffic;
• moderating content and activity on the platform in line with our Content Moderation Policy.

6. RECORD KEEPING AND DATA PROTECTION

We keep account, age verification and transaction records for as long as needed to provide the service, meet our legal, accounting and payment-partner obligations, and resolve disputes. All personal data is handled in accordance with our Privacy Policy and applicable data protection law, including the GDPR.

7. COOPERATION WITH AUTHORITIES AND PARTNERS

We cooperate with our payment partners and with law enforcement, and provide information when legally required or reasonably requested in connection with fraud or illegal activity.

8. REVIEW

This policy is reviewed at least once a year, and whenever our payment providers, verification providers or legal obligations change.

9. CONTACT