Identity verification (KYC) and anti-money-laundering (AML) measures protect your account and keep our platform out of the wrong hands. This page explains the documents we need, the checking process, timelines, rejection reasons and your rights over your personal data.
This policy explains how Taman Yieldholm runs its KYC and AML programme for the technology and information services provided to Malaysian users. The procedures exist to prevent fraud, protect genuine account holders, and ensure the platform is never used as a channel for moving criminal proceeds or funding prohibited activities.
KYC (Know Your Customer) verifies that you are the person you claim to be: your legal name, date of birth, address and identification number are cross-checked against official documents. It happens once before trading features are activated, and briefly again whenever key details such as your address or phone number change.
AML (Anti-Money Laundering) is the wider prevention framework: customer risk assessment, continuous transaction monitoring and reporting of suspicious activity to the relevant authorities. Our system flags unusual patterns, such as rapid deposit-withdrawal cycles with no matching trading activity, for human review.
Verification stops someone else opening an account in your name, prevents fake accounts being used for fraud, makes account recovery straightforward when you lose access, and meets the Malaysian requirements applicable to our services. It also protects the community: a platform free of abuse stays safer for everyone.
For identity: MyKad, a Malaysian passport or a valid foreign ID, photographed clearly on both sides. For address: a bank statement or utility bill from the last three months showing your name and address. In specific cases we ask for a selfie holding the document and a short liveness check, to confirm the document is held by a living person rather than lifted from the internet.
First, you register with your name, email and phone. Second, you upload the documents listed above. Third, automated checks validate document authenticity and data matching within minutes. Fourth, where the automated result is inconclusive, a human reviewer double-checks by eye. Fifth, you receive the decision by email; if approved, trading features activate immediately.
Users with a higher-risk profile, for example deposits above certain thresholds, complex ownership structures or an unusual source of funds, fall under Enhanced Due Diligence. EDD may request proof of source of funds such as payslips, asset-sale statements or business documents, plus one short video call to confirm identity directly.
Most automated checks finish within one business hour. Manual reviews usually take one to two business days depending on application volume and document quality. EDD cases can take longer because each document is examined separately; we always tell you when a review needs extra time so you are never left waiting without news.
Blurry, cropped or glare-affected documents fail automatic checks, as do expired documents. Inconsistent data between the form and the document, signs of tampering, a name that differs from the payment account owner, or refusal to provide requested follow-up information also lead to rejection or suspension. In most cases you can simply upload better documents without starting a new application.
After verification, transactions are monitored continuously against your risk profile. Patterns such as amounts inconsistent with account history, unfamiliar payout addresses, or links to sanctioned parties raise a flag for review. In certain cases specific functions like withdrawals can be limited while a review completes; the reason and expected duration are explained by official email.
You are responsible for providing accurate, current and genuine data, and for ensuring that the funds you deposit come from lawful sources in your own name. False information can lead to account suspension, rejected withdrawal requests and, in fraud cases, reports to the relevant authorities. Holding an account on someone else's behalf breaches both our terms and this policy.
KYC documents live in separate encrypted storage with access limited to the compliance team. Retention follows the record-keeping requirements applicable to financial records; after that period documents are securely destroyed. Full details of data processing are in our Privacy Policy, which governs the entire lifecycle of your data.
To run verification, data may be shared with licensed KYC providers performing document and sanctions-list matching, IT providers operating secure infrastructure, affiliated companies within the group under data-processing agreements, and regulators or enforcement bodies where required by law. Every recipient is bound by equivalent confidentiality controls.
The programme runs alongside the Malaysian frameworks applicable to our services: investor-protection and identity-verification requirements within the Securities Commission's scope, and interactions with licensed banking and payment partners under the Bank Negara framework. We claim no registration that does not exist; our full position is stated on the Licensing and regulation page.
KYC and AML questions can be sent to [email protected], for the attention of the Client Support & Compliance department. We reply usually under one business hour during working hours Monday to Friday, 9:00–18:00 MYT (excluding public holidays). If your application is on hold and you want to add documents, quote the application reference from your confirmation email so your file is found immediately.
One final note on tone: these checks protect you as much as they protect us. A verified account is harder to steal, easier to recover and faster to pay out, because every party already knows exactly who owns it.