AML & Financial Crime Policy

This policy describes the anti-fraud and financial-crime expectations for XtraKit services operated by CodeXtra Technologies Ltd. It applies particularly to payment collection, wallets, payouts, settlement, subscription purchases, SMS-credit purchases and other enabled transaction features. It also prohibits using our operational, storefront, messaging or social tools to support financial crime.

A business-software provider and its payment providers can have different legal obligations. This notice does not assert that every XtraKit app is a licensed financial institution, that CodeXtra has a particular regulatory authorization, or that every operational record is subject to continuous financial monitoring. Requirements depend on the service, jurisdiction and provider.

For relevant payment functions, we or the configured payment or verification provider may request information about the business, its authorized representatives, ownership, transaction purpose or source of funds. The information required depends on applicable law, provider rules and the risk of the activity. Provide accurate records and promptly report material changes.

Do not open accounts in false names, hide the actual business using a feature, allow an unauthorized person to operate your account or submit false verification documents. A failed or incomplete check may restrict the affected payment function while it is resolved.

You must not use our services to disguise unlawful proceeds, finance terrorism, evade applicable sanctions, commit fraud or bribery, process payments for unlawful goods or services, or move funds on behalf of an undisclosed or unauthorized party. Dividing transactions to avoid an applicable control is also prohibited.

You are responsible for identifying legal restrictions relevant to your own business. The presence of a payment option, business category, messaging feature or connected account does not constitute approval for a regulated activity.

Transaction records, verification information, provider responses and reports of misuse may be reviewed to investigate suspicious or inconsistent activity. We may request clarification, restrict a feature, pause an instruction where permitted, or refer the matter to the relevant payment provider. Providers apply their own screening, dispute and settlement controls.

Where a reporting obligation or lawful request applies, necessary information may be provided to the competent authority. We cooperate with relevant authorities and providers within the requirements that apply to us. We do not promise a particular automated detection system or claim that all transactions have been screened in real time.

Some investigations or reports cannot legally be disclosed to the person affected. A restriction is not itself a conclusion that a person committed an offence, and does not automatically give us ownership of legitimate funds.

Relevant records are retained for applicable legal, accounting, payment, dispute-resolution and security purposes. The required period depends on the record and governing obligation. Access is limited to authorized functions and necessary recipients. See the Privacy Policy for broader data practices and request-specific retention information.

We can restrict or end access where reasonably necessary to prevent misuse, comply with a legal direction or meet a provider requirement. Where disclosure is lawful and practical, contact support for the reason and available review process. Settlement or return of funds is subject to provider procedures, disputes and applicable legal restrictions.

Report suspected fraud, account compromise or misuse to info@xtrakit.com. Include the business identifier, relevant transaction reference and a clear description, and preserve the records you are authorized to retain. Do not send passwords, access tokens or unnecessary identity-document copies by ordinary email.

This policy is informed by Ghana's Anti-Money Laundering Act, 2020 (Act 1044), and applies alongside provider requirements and other laws relevant to the transaction. It is not a substitute for the compliance obligations that independently apply to your business. Our Terms of Use govern account access and disputes.