Compliance

KYC Verification

Verification is open. Identity verification runs through E-Gates PassMe: one hosted pass — an ID document and a selfie, entered on the provider's own page — that grants Level 1 once the provider returns an approval. No identity document passes through this bot, through Telegram, or through our operators. Crypto never waits on any of this: the limits below apply to every account, verified or not.

In effect today

Crypto is never limited by verification

Depositing and withdrawing crypto do not require identity verification, at any level, ever. That is a deliberate design choice, not a consequence of verification status. The only ceilings that apply to crypto are technical, not identity-based, and they apply equally to every account:

Every account, unverified or not

No identity-based limit

Crypto deposit and withdrawal work fully with no documents and no waiting. Nothing about verification level ever changes whether a crypto withdrawal is admitted.

✓ No documents needed✓ Instant access✓ Crypto withdrawal amount is never gated by verification level✗ Larger or pattern-flagged withdrawals still go to operator review — see Security✗ Two operators must approve any withdrawal above $100✗ Withdrawal destinations screened against sanctions lists

What actually constrains you

Technical limits only

What limits you is technical, not who you are: per-transaction and per-account-daily withdrawal ceilings, applied identically to every account. They do not read your verification level, and verification does not raise them. The figures are published under Security.

✗ A ceiling on any single withdrawal, identical for every account✗ A rolling-daily ceiling on what one account can withdraw, identical for every account✓ Anti-abuse ceilings and review triggers are described under Security, not here
Verification levels

What verification unlocks

Verification does not unlock more crypto — it unlocks fiat rails when they arrive, account recovery, and less friction on the SAME crypto operations you already have. The first rung, Level 1, is granted when you complete the E-Gates PassMe pass and the provider approves it.

Level 1 — Identity document

Open

ID document and selfie, checked by E-Gates PassMe on the provider's own hosted page. Completing the pass and receiving the provider's approval grants Level 1; the outcome is binary, approved or declined, and nothing towards it is collected by us.

Level 2 — Email + 2FA

Our own rung

No provider counterpart: a verified email and TOTP 2FA. Account recovery if you lose access to Telegram, and less manual review on withdrawals you already make today.

Level 3 — Address + source of funds

In-house review

Our own rung, reviewed by our operators: address proof and a source-of-funds declaration. For large amounts and corporate clients — companies add incorporation and beneficial-ownership documents.

Data Protection

What happens to verification data

Your Documents Never Reach Us

Your ID document, your selfie, your name and your date of birth are entered on E-Gates PassMe's own hosted page and stay with the provider. They never pass through this bot, through Telegram, or through our operators' chats — there is nothing for us to hand over, because we never receive them. What we keep is a session token, the page's address, and the provider's verdict: approved or declined, and when. Level-3 address-proof and source-of-funds submissions are different — those do reach our operators, and fall under the retention and deletion rules in the Privacy Policy.

How What We Hold Is Stored

The verification data we hold is a provider session token, the provider's verdict, and level-3 address proof and source-of-funds submissions. We will encrypt it at rest and document the cipher on this page; we are not going to describe an encryption scheme in advance of building it. For reference, deposit-wallet private keys today are encrypted with Fernet, which is AES-128-CBC with HMAC-SHA256, under a PBKDF2-derived key.

Limited Access

Access to user records is restricted to operators, and custody actions are written to a SHA-256 hash-chained audit log that a verifier walks every hour, so tampering is detectable.

Your Rights

You may request access to, correction of, or deletion of your personal data. On a deletion request we erase the attributes we hold and restrict processing, but your account identifier and transaction records are retained where anti-money-laundering law requires it -- so records are de-identified, not anonymised, and we do not describe it as anonymisation. We cannot yet commit to a turnaround time. See the Privacy Policy for the full position.

Questions about your limits?

Verification starts from Settings → KYC in the bot. If a limit is blocking something you need to do, contact us through the bot and we will tell you honestly whether we can help.

Open Telegram BotRead AML PolicyPrivacy Policy