Anti-Fraud AML and KYC Policy

Effective Date: October 28, 2026

This Anti-Fraud, Anti-Money Laundering (AML) and Know Your Customer (KYC) Policy (the “Policy”) applies to users of dodopin.com (the “Website”, “Platform” or “Service”).

The Service is operated jointly by:

VELCORE TECHNOLOGY LIMITED
A private company limited by shares incorporated in Hong Kong
Business Registration Number (BRN): 80005054
Registered address:
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong

and

FUTURE ONE TECHNOLOGY LTD
A company incorporated in the United Kingdom
Company number: 17083222
Registered address:
71-75 Shelton Street, Covent Garden
London, United Kingdom
WC2H 9JQ

These companies operate the Website together. That does not make both of them the seller of every order, and it does not authorise one company to collect the other’s customer payments.

Platform operators. VELCORE TECHNOLOGY LIMITED and FUTURE ONE TECHNOLOGY LTD together operate the Website, the Dodopin brand and the shared support channels. A notice to legal@dodopin.com is a notice to both platform operators.

Seller of an order. The seller is the company that sells the product to you, issues the invoice and is responsible for that sale, including a statutory refund of that order:

• PayOp: the seller is FUTURE ONE TECHNOLOGY LTD, a company incorporated in the United Kingdom. PayOp collects that payment for FUTURE ONE TECHNOLOGY LTD.
• Stripe: the seller is VELCORE TECHNOLOGY LIMITED, a company incorporated in Hong Kong. Stripe collects that payment for VELCORE TECHNOLOGY LIMITED.

“Dodopin”, “we”, “us” and “our” mean the seller of the order when the sentence is about a purchase, payment, delivery, refund or invoice. When the sentence is about the Website, the brand or shared support, those words mean the platform operators.

By using the Service you agree to this Policy, together with our Terms and Conditions and Privacy Policy.

1. Purpose

This Policy is designed to:

• prevent fraud and unauthorised transactions;
• reduce money-laundering and terrorist-financing risk;
• support compliance with applicable financial, sanctions and payment-partner requirements; and
• protect the Service, its users, suppliers and payment partners.

We apply a risk-based approach. The checks we require may differ by user, product, amount, payment method, country and behaviour.

2. Anti-fraud monitoring

We may use automated and manual controls, including:

• IP, device and session analysis;
• velocity checks (repeated or rapid attempts);
• geographic or language inconsistencies;
• payment-risk scoring and issuer responses;
• comparison of account, billing and delivery details; and
• review of support messages and refund or chargeback history.

3. Suspicious activity

The following may be treated as suspicious, depending on the circumstances:

• multiple failed payment attempts;
• use of stolen, unauthorised or third-party payment methods;
• mismatch between identity, account and payment data;
• high-risk access patterns, including concealment of location;
• abnormal purchasing, refund or account-creation behaviour;
• use of the Service on behalf of another person without authorisation; or
• any attempt to evade security, KYC or payment controls.

4. Actions we may take

Where we reasonably suspect fraud, abuse or elevated risk, we may:

• delay, hold, review, refuse or cancel a customer order;
• delay or refuse a settlement payable to a game publisher or supplier (a payout), which is separate from a customer’s product order;
• request additional information or verification;
• restrict, suspend or close an account;
• refuse future orders; and
• share limited information with payment providers, card schemes, publishers or competent authorities where the law allows or requires it.

We tell you by email, or on the order page, when a customer order is held. The message includes the reason in general terms and what we need next. We are not obliged to deliver the product while that review is open. If the check cannot be completed, an undelivered order is cancelled and the price you paid is refunded under the Cancellation and Refund Policy, unless the payment itself was unauthorised or abusive.

5. Anti-money laundering

Users must not use the Service to launder money, finance terrorism, evade sanctions or conceal the origin of funds.

Users must not:

• transact on behalf of an undisclosed third party;
• structure purchases to avoid monitoring;
• use stolen identities or payment instruments; or
• abuse VPNs, proxies or similar tools to conceal identity or location for an unlawful purpose.

We may monitor transactions, investigate unusual patterns and, where required, file reports with competent authorities. We may be legally unable to tell you that a report has been made.

6. Sanctions

We may restrict or refuse service to persons, entities or locations that are subject to applicable sanctions, or where providing the Service would breach sanctions, export or payment-partner rules.

You represent that you are not a sanctioned person and are not acting for one.

7. Know Your Customer

We may require identity verification, including where:

• a transaction or account presents higher value or higher risk;
• activity is unusual or inconsistent;
• a payment provider, acquirer or law requires it; or
• we otherwise have reasonable grounds to verify who you are.

7.1 Documents we may request

• a government-issued identity document (passport, national ID or driving licence);
• proof of address (for example a utility bill or bank statement);
• a selfie or live liveness check; and/or
• proof of the payment method (for example a masked card image or bank confirmation).

The seller of the order asks for the check when the risk of that order requires it. Documents must be valid, readable and match the account.

Identity images and face-verification files are stored by Dodopin with the order, on Dodopin’s own systems. They are not kept only in your browser. If a specialist provider also processes a check, that provider’s notice applies to its own processing. The copy Dodopin keeps is the file stored for the order.

7.2 If you do not verify

The request email explains that the order is on hold and contains a link. That link is valid for 48 hours unless the email states a different time. If you do not finish the check in that time, the product is not delivered. A paid order that cannot be delivered is cancelled and refunded under the Cancellation and Refund Policy, unless the payment was unauthorised or abusive.

We do not have to accept documents that we reasonably believe are altered, incomplete or unrelated to you. We email you if a face verification must be repeated.

8. Data handling

The seller of the order is responsible for requesting the check. Verification images are stored by Dodopin as described above and are handled under the Privacy Policy.

We keep identity and face-verification files while the order can still be disputed, charged back, or reviewed by a payment partner or authority, and while the law requires us to keep them. When that reason has ended, we delete the files or irreversibly anonymise them. We do not keep them merely because an account remains open.

9. Chargebacks and disputes

Where fraud or abuse is suspected, we may:

• contest chargebacks with supporting evidence;
• recover amounts obtained through abuse, to the extent permitted by law; and
• blacklist accounts or payment instruments associated with confirmed abuse.

10. Changes

We may update this Policy from time to time. The updated version takes effect when published on the Website, unless a different date is stated. The Effective Date at the top is the date of the current version.

11. Contact

For compliance questions, contact us through the official channels on dodopin.com, or email legal@dodopin.com.

VELCORE TECHNOLOGY LIMITED
Unit 1603, 16th Floor, The L. Plaza
367–375 Queen’s Road Central
Sheung Wan, Hong Kong

FUTURE ONE TECHNOLOGY LTD
Company number: 17083222
71-75 Shelton Street, Covent Garden
London, United Kingdom
WC2H 9JQ