Identity Verification Consent Statement

SNS IDProof is a registered Business Trading Name of SD Finance Group Pty. Ltd (ABN 99 162 701 206).

Effective Date: 1 June 2026
Last Updated: 1 June 2026

1. Introduction

This Identity Verification Consent Statement explains how SD Finance Group Pty. Ltd, trading as SNS IDProof ("SNS IDProof", "we", "our", or "us"), collects, uses, discloses, and protects your personal information when verifying your identity online.

Identity verification may be required so that we can confirm who you are, prevent fraud, protect our services, comply with legal and regulatory obligations, and complete customer onboarding. This may include Know Your Customer (KYC), Anti-Money Laundering and Counter-Terrorism Financing (AML/CTF), fraud prevention, risk management, and other compliance checks.

Before we begin the verification process, we require your consent to collect and use your identity information and, where necessary, disclose that information to authorised identity verification service providers, gateway providers, and government verification systems, including the Australian Government Document Verification Service (DVS).

This Consent Statement should be read together with our Privacy Policy, Terms and Conditions, and any other notice or consent presented to you during onboarding or verification.

By proceeding with identity verification, you confirm that you have read and understood this Consent Statement and voluntarily agree to the collection, use, and disclosure of your personal information as described below.

2. Definitions

For the purpose of this Consent Statement:

Identity Verification means the process of confirming that you are who you claim to be by checking your personal information and identity documents against reliable and independent data sources.
Document Verification Service or DVS means the Australian Government service, operated through IDMatch, that allows authorised organisations to check whether details from identity documents match government records.
Identity Service Provider means an organisation that provides identity verification, document verification, fraud prevention, biometric verification, or related digital identity services.
Gateway Provider means an authorised provider that connects approved organisations to the DVS and securely transmits verification requests and responses.
Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable.
Identity Document means a government-issued or official document used to verify your identity, such as a driver licence, passport, Medicare card, visa document, proof of age card, or other recognised identification document.
Biometric Information means information generated from your physical or behavioural characteristics, such as a facial image, selfie, video recording, liveness check, or facial matching result, where biometric verification is used.

3. Information We May Collect

Depending on the verification required, we may collect personal information from you, from our clients, or from authorised verification providers.

3.1 Personal and Contact Details

Full legal name
Date of birth
Residential address
Email address
Phone number
Customer reference number or account details, where applicable

3.2 Government-Issued Identity Information

Australian driver licence details
Australian passport details
Medicare card details
Visa or immigration information
Proof of age card details
Other government-issued identity documents accepted for verification

3.3 Identity Document Images

Images or scans of identity documents
Front and back images of cards or licences
Document numbers, expiry dates, and issuing authority details
Information extracted from identity documents

3.4 Technical and Verification Metadata

IP address
Device information
Browser information
Time and date of verification
Verification session identifiers
Security logs
Fraud prevention signals
Verification result records

3.5 Biometric Information

Where facial matching, selfie verification, or liveness detection is used, we may collect:

Facial images
Selfie images
Short video recordings
Liveness check results
Facial comparison outcomes
Biometric templates or mathematical representations, where applicable

Biometric verification will only be used where it is reasonably necessary and where you have provided express consent, unless otherwise permitted by law.

4. Purpose of Collection

We collect and use your personal information for identity verification and related compliance purposes, including:

Confirming your identity
Verifying identity documents
Completing customer onboarding
Meeting KYC requirements
Supporting AML/CTF compliance
Preventing fraud, identity theft, and misuse of services
Detecting suspicious, unlawful, or unauthorised activity
Managing risk
Protecting the security and integrity of our systems
Complying with legal, regulatory, audit, and reporting obligations
Maintaining records required by law or contractual obligations

We will not use your identity information for unrelated purposes unless permitted by law, required by regulation, or authorised by you.

5. How Identity Verification Works

The verification process generally works as follows:

You provide your personal information and identity document details through our website, platform, application, or onboarding form.
Your information is securely transmitted to us or to our authorised identity verification service provider.
Where DVS verification is required, your identity document details may be securely transmitted through an authorised gateway provider to the Australian Government Document Verification Service via IDMatch.
The DVS checks whether the information you provided matches the relevant government record.
The DVS returns a verification response, such as a match, no match, or verification outcome.
We or our authorised provider use the verification response to help confirm your identity and complete the required compliance checks.

Government records themselves are not disclosed to us. The DVS does not provide us with full government records. We receive verification results only.

6. Your Consent

By proceeding with identity verification, you expressly authorise and consent to SNS IDProof and its authorised service providers collecting, using, processing, and disclosing your personal information for identity verification and compliance purposes.

You expressly consent to:

The collection of your personal information and identity document details
The collection of images or scans of your identity documents, where required
The collection and processing of biometric information, where facial matching or liveness detection is used
The use of your information to verify your identity
The disclosure of your identity information to authorised identity verification service providers
The disclosure of your identity information to authorised gateway providers
The submission of your identity document details to the Australian Government Document Verification Service
The receipt and use of verification results
The use of verification outcomes for KYC, AML/CTF, fraud prevention, onboarding, compliance, and risk management purposes

You confirm that the information and documents you provide are true, accurate, current, and belong to you.

7. Third-Party Service Providers

We may use trusted third-party providers to assist with identity verification, security, hosting, and compliance.

These providers may include:

Identity verification service providers
DVS gateway providers
Biometric verification providers
Fraud prevention providers
Sanctions and PEP screening providers
Cloud hosting providers
Cybersecurity and monitoring providers
Payment or onboarding technology providers
Professional advisers
Regulators, courts, or law enforcement agencies where legally required

We take reasonable steps to ensure that service providers handle personal information securely and only for authorised purposes. Where appropriate, providers are required to protect personal information through contractual obligations, confidentiality requirements, access controls, and security measures.

We do not authorise service providers to use your personal information for their own unrelated purposes.

8. Storage and Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, unauthorised modification, and unauthorised disclosure.

Security measures may include:

Encryption of information in transit
Encryption of stored information where appropriate
Secure hosting environments
Access controls and authentication requirements
Role-based permissions
Audit logging
Monitoring of verification activity
Secure document handling procedures
Staff training and confidentiality obligations
Secure destruction or de-identification when information is no longer required

Although we take reasonable steps to protect your information, no online transmission or electronic storage system can be guaranteed to be completely secure.

9. Retention of Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Consent Statement, our Privacy Policy, our legal obligations, regulatory requirements, audit requirements, fraud prevention, and dispute management.

Where identity verification is performed for AML/CTF or other regulatory purposes, some records may need to be retained for a minimum period required by law, including seven (7) years where applicable.

When personal information is no longer required, we will take reasonable steps to securely delete, destroy, archive, or de-identify it, unless we are required or permitted by law to retain it.

10. Biometric Verification

This section applies only where biometric verification, facial matching, selfie verification, or liveness detection is used.

To verify that you are the person shown in your identity document, we may ask you to provide a selfie, facial image, or short video. This may be used to:

Compare your face against the image on your identity document
Confirm that you are physically present during verification
Detect fraud, spoofing, deepfakes, or presentation attacks
Support secure onboarding and account protection

Biometric information may include facial images, liveness check results, facial comparison results, or biometric templates.

We will only collect and process biometric information where:

It is reasonably necessary for identity verification or fraud prevention
You have provided express consent
The collection is required or permitted by law

Biometric information is treated as sensitive information and is protected using enhanced security controls.

Where biometric templates are created, they will only be used for identity verification, security, and fraud prevention purposes, unless otherwise permitted by law or expressly agreed by you.

We will retain biometric information only for as long as reasonably necessary for the relevant verification, compliance, fraud prevention, or legal purpose.

11. Your Rights

Subject to applicable laws, you may have rights in relation to your personal information, including the right to:

Request access to personal information we hold about you
Request correction of inaccurate, incomplete, or outdated information
Withdraw consent where processing is based on consent and withdrawal is legally possible
Request information about how your personal information has been handled
Make a privacy complaint

In some circumstances, we may not be able to provide access, correction, deletion, or withdrawal of consent where we are required or permitted to retain information by law, including for AML/CTF, fraud prevention, audit, legal, or regulatory purposes.

12. Consequences of Refusing Consent

Identity verification cannot proceed unless you provide the required consent.

If you do not provide consent:

We may be unable to verify your identity
We may be unable to complete onboarding
Services requiring verified identity may not be available to you
We may be unable to meet legal, regulatory, or compliance obligations
Your access to certain products, services, or features may be refused, limited, or suspended

You should not proceed with identity verification if you do not agree to the collection, use, or disclosure of your personal information as described in this Consent Statement.

13. Privacy Policy

Your personal information will be handled in accordance with our Privacy Policy.

Our Privacy Policy explains:

What personal information we collect
How we use and disclose personal information
How we store and protect personal information
How long we retain information
How you may access or correct your information
How you may make a privacy complaint

You should read our Privacy Policy before continuing with identity verification.

14. Privacy Complaints

If you believe we have mishandled your personal information or breached applicable privacy laws, you may contact us using the details below.

We will review your complaint and respond within a reasonable timeframe.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) or another relevant regulator.

15. Consent Checkbox Wording

The following wording may be used before identity verification begins:

Identity Verification Consent

I acknowledge that I have read and understood this Identity Verification Consent Statement. I voluntarily consent to the collection, use, and disclosure of my personal information for identity verification, KYC, AML/CTF, fraud prevention, and compliance purposes. I authorise SNS IDProof and its authorised identity verification service provider to submit my identity information to the Australian Government Document Verification Service through an authorised gateway provider for verification.

Optional Biometric Consent

I expressly consent to the collection and processing of my biometric information, including facial images, selfie images, video recordings, liveness detection data, and facial matching results, for identity verification, fraud prevention, and security purposes.

16. Short Form Consent Notice

Before proceeding, we need your consent to verify your identity.

We may collect your personal information, identity document details, and, where required, biometric information. We may disclose this information to our authorised identity verification provider and to the Australian Government Document Verification Service through an authorised gateway provider to confirm whether your identity document details match official records.

The DVS does not provide us with full government records. We receive verification results only.

By continuing, you consent to the collection, use, and disclosure of your information for identity verification, KYC, AML/CTF, fraud prevention, onboarding, and compliance purposes.

17. Disclaimer

This Consent Statement provides general information about SNS IDProof identity verification processes and should be reviewed periodically to ensure it reflects applicable laws, regulatory obligations, contractual requirements, and our current verification processes.

18. Contact Us

SNS IDProof
A registered Business Trading Name of SD Finance Group Pty. Ltd
ABN: 99 162 701 206

Email: info@snsidproof.com.au
Address: 301 Castlereagh Street, Haymarket NSW 2000, Australia