AML Policy
Last updated: July 23, 2026
Lootbox, owned and operated by LOOTBOX LTD (HE 466358), registered at 25 Voukourestiou Street, Neptune House, 1st Floor, Suite 11, Limassol, 3045, Cyprus, is committed to the highest standards of integrity. Lootbox maintains a robust Anti-Money Laundering (AML) regime to prevent its platform from being exploited for money laundering or other illicit activity, and to keep every activity on the platform transparent, lawful, and secure.
Purpose & Scope
This policy establishes a fortified safeguard within Lootbox to combat money laundering and other financial crimes. It applies to all stakeholders, including employees, customers, and partners, and is designed in alignment with EU Directive 2015/849, EU Regulation 2015/847, the Belgian Law of 18 September 2017 on measures aimed at curbing money laundering and the use of cash, and applicable EU sanctions regimes. Oversight is led by a dedicated AML Compliance Officer (AMLCO), who reports directly to senior management and ensures continuous review through management oversight and internal audits.
Customer Due Diligence (KYC)
Lootbox partners with Sumsub, an industry-leading identity verification provider, to authenticate every customer. Verification includes checking official government-issued documents (passport, national ID, or driving licence), a real-time liveness check, and, where required, proof of address via a utility bill or bank statement issued within the last three months.
Ongoing Monitoring
Customer data is monitored on an ongoing basis, with enhanced attention for accounts identified as higher risk, so that changes in behaviour or circumstances are identified promptly. Transactions are continuously screened using dedicated monitoring tools, including AMLBot, with a risk-based approach that applies extra scrutiny to high-value or atypical activity — such as unusual volume or frequency, high-risk payment methods or locations, complex or unstructured transactions, structuring or layering techniques, and unverified third-party payments. Transactions above certain thresholds receive intensified review; these thresholds are kept confidential to prevent circumvention.
Reporting Suspicious Activity
Any transaction flagged by our monitoring systems or personnel is escalated to the AML team for in-depth review. Where the AML team determines a transaction poses a genuine risk, it is reported to the Financial Intelligence Unit (FIU) for further investigation.
Record Keeping
Lootbox retains customer identification and transaction records for a minimum of 10 years. Records are stored securely and are accessible only to authorised personnel. Regular internal audits evaluate the effectiveness of the AML framework, including the performance of tools such as Sumsub and AMLBot.
Sanctions Compliance
Transactions are screened for links to terrorist financing, proliferation of weapons of mass destruction, and individuals or entities sanctioned by the EU, UN, or OFAC, as well as connections to organised crime, human trafficking, or drug smuggling, and to high-risk industries or embargoed regions. Lootbox does not permit tainted or problematic funds linked to criminal activity to enter or circulate within its coin pools; transactions that fail this check are flagged and subjected to further scrutiny.
Employee Training
All employees complete AML training, with an emphasis on recognising suspicious behaviour and using monitoring tools such as AMLBot effectively. Training is ongoing, keeping staff current with evolving regulatory requirements and best practice.
Policy Review
This policy is reviewed on an ongoing basis by senior management and the AMLCO, supported by regular internal audits, to ensure it remains effective and consistent with applicable laws and regulatory expectations.
Contact Us
For further inquiries or to report suspicious activity, please contact legal@lootbox.com.