SNS IDProof is a registered Business Trading Name of SD Finance Group Pty. Ltd (ABN 99 162 701 206).
Effective Date: 1 June 2026
Last Updated: 1 June 2026
1. Introduction
This Identity Verification Consent Statement explains how SD Finance Group Pty. Ltd, trading as SNS IDProof ("SNS IDProof", "we", "our", or "us"), collects, uses, discloses, and protects your personal information when verifying your identity online.
Identity verification may be required so that we can confirm who you are, prevent fraud, protect our services, comply with legal and regulatory obligations, and complete customer onboarding. This may include Know Your Customer (KYC), Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF), fraud prevention, risk management, and other compliance checks.
Before we begin the verification process, we require your consent to collect and use your identity information and, where necessary, disclose that information to authorised identity verification service providers, gateway providers, and government verification systems, including the Australian Government Document Verification Service (DVS).
This Consent Statement should be read together with our Privacy Policy, Terms and Conditions, and any other notice or consent presented to you during onboarding or verification.
By proceeding with identity verification, you confirm that you have read and understood this Consent Statement and voluntarily agree to the collection, use, and disclosure of your personal information as described below.
2. Definitions
For the purpose of this Consent Statement:
- Identity Verification means the process of confirming that you are who you claim to be by checking your personal information and identity documents against reliable and independent data sources.
- Document Verification Service or DVS means the Australian Government service, operated through IDMatch, that allows authorised organisations to check whether details from identity documents match government records.
- Identity Service Provider means an organisation that provides identity verification, document verification, fraud prevention, biometric verification, or related digital identity services.
- Gateway Provider means an authorised provider that connects approved organisations to the DVS and securely transmits verification requests and responses.
- Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
- Identity Document means a government-issued or official document used to verify your identity, such as a driver licence, passport, Medicare card, visa document, proof of age card, or other recognised identification document.
- Biometric Information means information generated from your physical or behavioural characteristics, such as a facial image, selfie, video recording, liveness check, or facial matching result, where biometric verification is used.
3. Information We May Collect
Depending on the verification required, we may collect personal information from you, from our clients, or from authorised verification providers.
3.1 Personal and Contact Details
- Full legal name
- Date of birth
- Residential address
- Email address
- Phone number
- Customer reference number or account details, where applicable
3.2 Government-Issued Identity Information
- Australian driver licence details
- Australian passport details
- Medicare card details
- Visa or immigration information
- Proof of age card details
- Other government-issued identity documents accepted for verification
3.3 Identity Document Images
- Images or scans of identity documents
- Front and back images of cards or licences
- Document numbers, expiry dates, and issuing authority details
- Information extracted from identity documents
3.4 Technical and Verification Metadata
- IP address
- Device information
- Browser information
- Time and date of verification
- Verification session identifiers
- Security logs
- Fraud prevention signals
- Verification result records
3.5 Biometric Information
Where facial matching, selfie verification, or liveness detection is used, we may collect:
- Facial images
- Selfie images
- Short video recordings
- Liveness check results
- Facial comparison outcomes
- Biometric templates or mathematical representations, where applicable
Biometric verification will only be used where it is reasonably necessary and where you have provided express consent, unless otherwise permitted by law.
4. Purpose of Collection
We collect and use your personal information for identity verification and related compliance purposes, including:
- Confirming your identity
- Verifying identity documents
- Completing customer onboarding
- Meeting KYC requirements
- Supporting AML/CTF compliance
- Preventing fraud, identity theft, and misuse of services
- Detecting suspicious, unlawful, or unauthorised activity
- Managing risk
- Protecting the security and integrity of our systems
- Complying with legal, regulatory, audit, and reporting obligations
- Maintaining records required by law or contractual obligations
We will not use your identity information for unrelated purposes unless permitted by law, required by regulation, or authorised by you.
5. How Identity Verification Works
The verification process generally works as follows:
- You provide your personal information and identity document details through our website, platform, application, or onboarding form.
- Your information is securely transmitted to us or to our authorised identity verification service provider.
- Where DVS verification is required, your identity document details may be securely transmitted through an authorised gateway provider to the Australian Government Document Verification Service via IDMatch.
- The DVS checks whether the information you provided matches the relevant government record.
- The DVS returns a verification response, such as a match, no match, or verification outcome.
- We or our authorised provider use the verification response to help confirm your identity and complete the required compliance checks.
Government records themselves are not disclosed to us. The DVS does not provide us with full government records. We receive verification results only.
6. Your Consent
By proceeding with identity verification, you expressly authorise and consent to SNS IDProof and its authorised service providers collecting, using, processing, and disclosing your personal information for identity verification and compliance purposes.
You expressly consent to:
- The collection of your personal information and identity document details
- The collection of images or scans of your identity documents, where required
- The collection and processing of biometric information, where facial matching or liveness detection is used
- The use of your information to verify your identity
- The disclosure of your identity information to authorised identity verification service providers
- The disclosure of your identity information to authorised gateway providers
- The submission of your identity document details to the Australian Government Document Verification Service
- The receipt and use of verification results
- The use of verification outcomes for KYC, AML/CTF, fraud prevention, onboarding, compliance, and risk management purposes
You confirm that the information and documents you provide are true, accurate, current, and belong to you.
7. Third-Party Service Providers
We may use trusted third-party providers to assist with identity verification, security, hosting, and compliance.
These providers may include:
- Identity verification service providers
- DVS gateway providers
- Biometric verification providers
- Fraud prevention providers
- Sanctions and PEP screening providers
- Cloud hosting providers
- Cybersecurity and monitoring providers
- Payment or onboarding technology providers
- Professional advisers
- Regulators, courts, or law enforcement agencies where legally required
We take reasonable steps to ensure that service providers handle personal information securely and only for authorised purposes. Where appropriate, providers are required to protect personal information through contractual obligations, confidentiality requirements, access controls, and security measures.
We do not authorise service providers to use your personal information for their own unrelated purposes.
8. Storage and Security
We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, unauthorised modification, and unauthorised disclosure.
Security measures may include:
- Encryption of information in transit
- Encryption of stored information where appropriate
- Secure hosting environments
- Access controls and authentication requirements
- Role-based permissions
- Audit logging
- Monitoring of verification activity
- Secure document handling procedures
- Staff training and confidentiality obligations
- Secure destruction or de-identification when information is no longer required
Although we take reasonable steps to protect your information, no online transmission or electronic storage system can be guaranteed to be completely secure.
9. Retention of Information
We retain personal information only for as long as reasonably necessary for the purposes described in this Consent Statement, our Privacy Policy, our legal obligations, regulatory requirements, audit requirements, fraud prevention, and dispute management.
Where identity verification is performed for AML/CTF or other regulatory purposes, some records may need to be retained for a minimum period required by law, including seven (7) years where applicable.
When personal information is no longer required, we will take reasonable steps to securely delete, destroy, archive, or de-identify it, unless we are required or permitted by law to retain it.
10. Biometric Verification
This section applies only where biometric verification, facial matching, selfie verification, or liveness detection is used.
To verify that you are the person shown in your identity document, we may ask you to provide a selfie, facial image, or short video. This may be used to:
- Compare your face against the image on your identity document
- Confirm that you are physically present during verification
- Detect fraud, spoofing, deepfakes, or presentation attacks
- Support secure onboarding and account protection
Biometric information may include facial images, liveness check results, facial comparison results, or biometric templates.
We will only collect and process biometric information where:
- It is reasonably necessary for identity verification or fraud prevention
- You have provided express consent
- The collection is required or permitted by law
Biometric information is treated as sensitive information and is protected using enhanced security controls.
Where biometric templates are created, they will only be used for identity verification, security, and fraud prevention purposes, unless otherwise permitted by law or expressly agreed by you.
We will retain biometric information only for as long as reasonably necessary for the relevant verification, compliance, fraud prevention, or legal purpose.
11. Your Rights
Subject to applicable laws, you may have rights in relation to your personal information, including the right to:
- Request access to personal information we hold about you
- Request correction of inaccurate, incomplete, or outdated information
- Withdraw consent where processing is based on consent and withdrawal is legally possible
- Request information about how your personal information has been handled
- Make a privacy complaint
In some circumstances, we may not be able to provide access, correction, deletion, or withdrawal of consent where we are required or permitted to retain information by law, including for AML/CTF, fraud prevention, audit, legal, or regulatory purposes.
12. Consequences of Refusing Consent
Identity verification cannot proceed unless you provide the required consent.
If you do not provide consent:
- We may be unable to verify your identity
- We may be unable to complete onboarding
- Services requiring verified identity may not be available to you
- We may be unable to meet legal, regulatory, or compliance obligations
- Your access to certain products, services, or features may be refused, limited, or suspended
You should not proceed with identity verification if you do not agree to the collection, use, or disclosure of your personal information as described in this Consent Statement.
13. Privacy Policy
Your personal information will be handled in accordance with our Privacy Policy.
Our Privacy Policy explains:
- What personal information we collect
- How we use and disclose personal information
- How we store and protect personal information
- How long we retain information
- How you may access or correct your information
- How you may make a privacy complaint
You should read our Privacy Policy before continuing with identity verification.
14. Privacy Complaints
If you believe we have mishandled your personal information or breached applicable privacy laws, you may contact us using the details below.
We will review your complaint and respond within a reasonable timeframe.
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or another relevant regulator.
15. Consent Checkbox Wording
The following wording may be used before identity verification begins:
Identity Verification Consent
I acknowledge that I have read and understood this Identity Verification Consent Statement. I voluntarily consent to the collection, use, and disclosure of my personal information for identity verification, KYC, AML/CTF, fraud prevention, and compliance purposes. I authorise SNS IDProof and its authorised identity verification service provider to submit my identity information to the Australian Government Document Verification Service through an authorised gateway provider for verification.
Optional Biometric Consent
I expressly consent to the collection and processing of my biometric information, including facial images, selfie images, video recordings, liveness detection data, and facial matching results, for identity verification, fraud prevention, and security purposes.
16. Short Form Consent Notice
Before proceeding, we need your consent to verify your identity.
We may collect your personal information, identity document details, and, where required, biometric information. We may disclose this information to our authorised identity verification provider and to the Australian Government Document Verification Service through an authorised gateway provider to confirm whether your identity document details match official records.
The DVS does not provide us with full government records. We receive verification results only.
By continuing, you consent to the collection, use, and disclosure of your information for identity verification, KYC, AML/CTF, fraud prevention, onboarding, and compliance purposes.
17. Disclaimer
This Consent Statement provides general information about SNS IDProof identity verification processes and should be reviewed periodically to ensure it reflects applicable laws, regulatory obligations, contractual requirements, and our current verification processes.
18. Contact Us
SNS IDProof
A registered Business Trading Name of SD Finance Group Pty. Ltd
ABN: 99 162 701 206
Email: info@snsidproof.com.au
Address: 301 Castlereagh Street, Haymarket NSW 2000, Australia
