All rights reserved by K.M. Global P2P Finance Pvt. Ltd.

KYC POLICY

Issued by: Compliance Department

OF

K. M. GLOBAL P2P FINANCE PRIVATE LIMITED

CIN: U65990MH2020PTC339970

PREAMBLE

The “Know your Customer” guidelines were issued by Reserve Bank of India (RBI) in the context of the recommendations made by the Financial Action Task Force (FATF) on Anti Money Laundering - (AML) standards and on Combating Financing of Terrorism ( CFT) .These Standards have become the international benchmark for framing Anti Money Laundering and combating financing of terrorism policies by the regulatory authorities. In view of above, K. M. GLOBAL P2P FINANCE PRIVATE LIMITED - (The Company) has adopted the said KYC guidelines with suitable modifications depending upon the activities undertaken by the Company. The Company has ensured that an appropriate policy frame work on KYC and AML measures are formulated in line with the prescribed Reserve bank of India Guidelines and duly approved by the Board of Directors of the Company.

OBJECTIVE, SCOPE AND APPLICATION OF THE POLICY

The objective of KYC guidelines is to prevent the Company for being used by all sorts of anti-social or criminal forces or individuals whether intentionally or unintentionally for Money Laundering Activities or for any terrorist financing activities. The KYC Norms shall enable the Company to know and understand its Customers and its financial dealings in detail which in turn shall help the Company to manage the risks more judiciously and prudently. It is in this context the KYC Policy has been framed by the Company for the following purposes:

DEFINITION OF CUSTOMER & PERSON

“Customer” means a person who is engaged in the financial transaction or activity with the Company and includes the person who is engaged in the transaction or activity, is acting and as defined under the “Know your Customer Guidelines” issued by Reserve Bank of India (includes any amendments issued from time to time by RBI). The following are the salient features of the Customer

“Person” as defined under the KYC Policy of Reserve Bank of India shall mean any of the following:

KEY ELEMENTS

Customer Acceptance Policy( CAP):

1. The Customer Acceptance Policy of the Company lays down the criteria for acceptance of Customers. The guideline in respect of Customer relationship with the Company broadly includes the following:

2. The Company shall prepare a profile for each New Customer during the credit appraisal based on the risk categorization and as mentioned in this policy in Annexure –I. The Customer profile shall contain the information relating to the Customer’s identity, social and financial Status and nature of employment or business activities. The nature of due diligence shall depend upon the risk perceived by the Company. At the time of credit appraisal of the Customer, the details are recorded along with his profile based on the documents provided by the Customer and verified by Company either by itself or through the third party(ies). The documents collected will be as per the product norms as may be in practice. The Company while preparing the Customer profile will seek only such information from the Customer that are relevant to the risk category. All other information shall be sought from the Customer with his or her consent only after opening the Registered Account. The Customer’s documents shall be kept confidential and the details shall not be divulged for cross selling or for any other purposes.

3. As per the KYC policy, in order to accept and identify the Customers, they shall be categorised based on the perceived risk broadly into three types – A , B and C. Category A includes High Risk Customers, Category B includes Medium Risk Customers and Category C includes Low Risk Customers. None of the above categories of Customers shall be exempted from Company’s KYC procedures, irrespective of the Status and relationship with the Company or its Promoters. The above requirements may be moderated according to the risk perception as explained in Annexure –I.

4.

1. High Risk Category –A

High Risk Customers include the following:

2.Medium Risk Category –B

Medium Risk Customers will include the following:

3.Low Risk Category –C

Low Risk Customers will include the following:

Further, Low Risk Customers will also include the following Persons:

Customer Identification Procedures (CIP):

1. Customer Identification means identifying the Customer and verifying his/her identity by using reliable, independent source documents, data or information. Company shall obtain sufficient information necessary to verify the identity of each new customer along with brief details of its promoters and management, wherever applicable, whether regular or occasional and the purpose of intended nature of business relationship as specified in Annexure I and Annexure II. The requirement as mentioned herein may be moderated according to the risk perception for e.g. in the case of public listed Company it may not be necessary to identify all the shareholders.

2. Besides risk perception, the nature of information /documents required would also depend on the type of Customer (individual, corporate etc). For Customers who are natural persons, Company shall obtain sufficient identification data to verify the identity of the Customer, his address/ location and also his recent photograph.

If the Customer is a Legal person or entity the Company shall:

3. To understand the ownership and control structure of the Customer and determine who the natural persons are who ultimately control the legal person. The Customer identification requirements as mentioned in Annexure –I & Annexure –II may be relied upon for Customer Identification. The Company will frame internal rules and guidelines based on the experience of dealing with such persons or entities by applying normal prudence and as per legal requirements.

4. The company will formulate and implement a Customer identification Program to determine the true identity of its Customers keeping in view of the above. The Policy shall also cover the identification procedures to be carried out at different stages: i.e. while establishing a relationship; carrying out a financial transaction or when there is a doubt about the authenticity / veracity or the adequacy of previously obtained Customer Identification Data.

Note: The Company shall periodically update Customer Identification Data after the transaction is entered. The periodicity of updating the Customer Identification data shall be once in ten years in case of Low Risk Category Customers and once in two years in case of High Risk Customer and once in 8 Years of Medium Risk Customers.

Monitoring Of Transactions:

On-going monitoring is an essential element of effective KYC procedures. The extent of Monitoring of transactions will depend upon taking into consideration the risk profile and risk sensitivity of the account. The Company shall make endeavours to understand the normal and reasonable activity of the Customer so that the transactions that fall outside the regular pattern of activities can be identified, special attention shall be paid to all complex, unusual large transactions and all unusual patterns, which have no apparent economic or visible lawful purpose. The Company may prescribe threshold limits for a particular category of accounts and pay particular attention to the transactions which exceed these limits. The Transactions that involve large amounts of cash inconsistent with the normal and expected activity of the customer should particularly attract the attention of the Company. Higher risk accounts shall be subjected to intense monitoring. The Company shall set key indicators for such accounts based on the background of the Customer, country of origin, source of funds, the type of transactions involved and other risk factors which shall determine the extent of monitoring. The Company shall carry out the periodic review of risk categorization of transactions/ customer’s accounts and the need for applying enhanced due diligence measures at a periodicity of not less than once in six months. The Company shall explore the possibility of validating the new account opening applications with various watch lists available in public domain, including RBI watch list

Risk Management:

The management of the Company under the supervision of the Board of Directors and the Loan and Risk Committee shall ensure that an effective KYC programme is put in place by establishing appropriate procedures and ensuring their effective implementations. It will cover proper management oversight, systems and controls, segregation of duties, training and other related matters. Responsibility will be explicitly allocated within the Company for ensuing that the policies and procedures as applicable to Company are implemented effectively. The Company shall devise procedures for creating Risk profiles of their existing and new customers and apply various Anti Money Laundering measures keeping in view the risks involved in a transaction, account or business relationship.

Training Program:

The Company shall have on going employee training programs from time to time so that the members of the Staff are adequately trained in KYC/AML./CFT procedures. Training requirements shall have different focuses for front line staff, compliance staff and officer/ staff dealing with new Customers so that all those concerned fully understand the rationale behind the KYC policies and implementation of them consistently.

Internal Control System:

The Company’s Internal Audit and Compliance functions will evaluate and ensure adherence to the KYC policies and procedures. As a general rule, the Compliance function will provide an independent evaluation of the Company’s own policies and procedures, including legal and regulatory requirements. The Management of the Company under the supervision of the Committee shall ensure that the audit function is staffed adequately with skilled individuals. Internal Auditors will specifically check and verify the application of KYC procedures at the branches and comment on the lapses observed in this regard. The compliance in this regard shall be put up before the Committee along with their normal reporting frequency. Further , the Company shall have an adequate screening mechanism in place as in integral part of their recruitment/hiring process of personnel so as to ensure that person of criminal nature/ background do not get an access, to misuse the financial channel.

Record Keeping:

1.Maintenance of Records of Transactions:

The Company shall maintain proper record of the transactions as required under Section 12 of the PMLA read with Rule 3 of the Prevention of Money Laundering Rules, 2005(PML Rules) as mentioned below:

2. Records to contain the specific information:

The Records referred to above as mentioned in Rule 3 of PML Rules to contain the following information:

3.Maintenance and preservation of records Section 12 of PML Act requires the Company to maintain records as under:

1. The Records of all transactions referred to in Clause (a) of sub –section (1) and Section 12 read with Rule 3 of the PML Rules is required to be maintained for a period of 10 ( Ten) years from the date of transaction between the Customers and Company.

2. The records of the identity of all Customers of the Company are required to be maintained for a period of 10 ( Ten) years from the date of cessation of transactions between the Customers and Company.

3. The Company shall take appropriate steps to evolve a system for proper maintenance and preservation of information in a manner (in hard and or soft copies) that allows data to be retrieved easily and quickly whenever required or as and when requested by the Competent Authorities.

Appointment Of Principal Officer, Compliance Officer And Designated Director :

The Company has a senior management officer to be designated as Compliance/Principal Officer. Compliance/Principal Officer shall be located at the head/corporate office of the Company and shall be responsible for monitoring and reporting of all transactions and sharing of information as required under the law. He shall maintain close liaison with enforcement agencies, banks and any other institution which are involved in the fight against money laundering and combating financing of terrorism. In terms of Section 14.2 of Prevention of Money-laundering (Amendment) Act, 2012, NBFC shall also designate a person as a 'Designated Director' to ensure overall compliance with the obligations imposed under chapter IV of the Act and the Rules.

Reporting To Financial Intelligence Unit – India :

The PO shall report relating to cash and Suspicious Transactions, if detected, to The Director, Financial Intelligence Unit- India ( FIU-INDIA) as advised in terms of the PML Rules in the prescribed formats as designed and circulated by RBI at the following address:

The Director
Financial Intelligence Unit – India
6 th Floor, Hotel Samrat
Chankayapuri, New Delhi 110021.

Combating Financing Of Terrorism

1. In terms of PMLA Rules, suspicious transaction shall include inter alia transactions which give rise to a reasonable ground of suspicion that these may involve financing of the activities relating to terrorism. The company, therefore, shall develop suitable mechanism through appropriate policy framework for enhanced monitoring of accounts suspected of having terrorist links and swift identification of the transactions and making suitable reports to the Financial Intelligence Unit – India (FIU-IND) on priority.

2. As and when list of individuals and entities, approved by Security Council Committee established pursuant to various United Nations' Security Council Resolutions (UNSCRs), is circulated by Reserve Bank, the company shall ensure to update the consolidated list of individuals and entities as circulated by Reserve Bank. Further, the updated list of such individuals/entities shall be accessed in the United Nations website at http://www.un.org/sc/committees/1267/consolist.shtml. The company shall before opening any new account, ensure that the name/s of the proposed customer does not appear in the list. Further, the company shall scan all existing accounts to ensure that no account is held by or linked to any of the entities or individuals included in the list. Full details of accounts bearing resemblance with any of the individuals/entities in the list shall be immediately be intimated to RBI and FIU-IND. KYC norms/AML standards/CFT measures have been prescribed to ensure that criminals are not allowed to misuse the financial channels. Adequate screening mechanism shall be put in place by the company as an integral part of recruitment/hiring process of personnel.

The company shall take into account risks arising from the deficiencies in AML/CFT regime of countries of Iran, Angola, Democratic People's Republic of Korea (DPRK), Ecuador, Ethiopia, Pakistan, Turkmenistan and SaoTome and Principe and list of countries circulated by RBI from time to time.

General:

1. Confidentiality of Customer Information: The employees of Company shall maintain strict confidentiality of the fact of furnishing/reporting details of suspicious transactions.

2. Customer education : The Company shall educate the Customers on the objectives of the KYC program so that the Customer understands & appreciates the motive and purpose of collection such information. The Company shall prepare literature/ pamphlets and terms and conditions etc., so as to educate the customers about the objectives of the KYC. The Front office staff too shall be specifically trained to handle such situation while dealing with Customers.

3. Introduction of New Technologies: The Company shall pay special attention to any money laundering threats that may arise from new or developed technologies including online transactions that may favour anonymity and take measures if needed, to prevent their use in money laundering. The Company shall ensure that any remittance of funds by way of demand drafts, mile transfers or any other mode for any amount is affected by Cheque(s) and not against cash Payments.

4. Applicability to Branches and subsidiaries outside India: The employees of Company shall maintain strict confidentiality of the fact of furnishing/reporting details of suspicious transactions.

5. Closure of Accounts/ Termination of Financing/ Business Relationship : 5.Company is unable to apply the KYC measures due to non- furnishing of information and /or non-operation by the Customer, Company shall terminate Financing/ Business Relationship after issuing due notice to the Customer explaining the reason for taking such a decision. Such decision shall be taken with the approval of the Director or Key Managerial Persons Authorization for the purpose.

6. KYC for existing Accounts: While the KYC will apply to all new Customers, the same would be applied to the existing Customers too on the basis of materiality and risk. However, transactions with the existing Customers would be continuously monitored for any unusual pattern in the operations of the accounts.

7. Updating in KYC Policy of Company: The Principal Officer ( PO) after taking the due approval from the Board of Directors or the committee if any constituted by the Board, make the necessary amendments / modifications in the KYC/AML/CFT Policy or such other statutory authority’s requirements/ updates/ amendments from time to time.

8. Suspicion of money laundering/terrorist financing With a view to preventing NBFCs from being used, intentionally or unintentionally, by criminal elements for money laundering or terrorist financing, it was clarified that whenever there is suspicion of money laundering or terrorist financing or when other factors give rise to a belief that the customer does not, in fact, pose a low risk, The Company will carry out full scale customer due diligence (CDD) before opening an account.

9. Filing of Suspicious Transaction Report (STR) The Company shall not open an account (or shall consider closing an existing account) when it is unable to apply appropriate CDD measures. In the circumstances when The Company believes that it would no longer be satisfied that it knows the true identity of the account holder, The Company shall also file an STR with FIU-IND.

The Company shall abide by all guidelines, directives, instructions and advices of Reserve Bank of India / SEBI as shall be in force from time to time. The contents in this document shall be read in conjunction with these guidelines, directives, instructions and advices. The company shall apply better practice so long as such practice does not conflict with or violate Reserve Bank of India / SEBI regulations.

This document is the property of the Company. It contains information that is internal to the company and is of competitive value and sensitive in nature. All employees must treat its contents as confidential and keep it secure.

Annexure –I

CUSTOMER IDENTIFICATION REQUIRMENTS – (INDICATIVE GUIDELINES)

Accounts Of Politically Exposed Persons( PEPs) Resident Outside India:

“Politically Exposed Persons” are individuals who are or have been entrusted with prominent public functions in a foreign Country e.g. Head of States or of Governments, Senior Politicians, Senior Government /Judicial military officers, Senior executives of state-owned Corporate , important political party officials etc. Branch /office shall gather sufficient information on any Person/ Customer of this category intending to establish a relationship and check all the information available on the Person in the Public domain. Branch/ office shall verify the identity of the Person and seek information about the sources of funds before accepting the PEP as a Customer. The decision to provide financial services to an account for PEP shall be taken at a senior level and shall be subjected to monitoring on an on-going basis. The above norms may also be applied to the accounts of the family members or close relatives of PEPs.

Accounts Of Non-Face To Face Customers:

In case of Non-face to face Customers, i.e. All Customers of K. M. GLOBAL P2P FINANCE PRIVATE LIMITED apart from applying the usual Customer Identification procedures, there must be specific and adequate procedures to mitigate the higher risk involved. Certification of all the documents presented may be insisted upon and, if necessary, additional documents may be called for. In case of cross-border Customers, there is the additional difficulty of matching the Customer with the documentation and the NBFCs may have to rely on third party certification/ introduction. In such cases, it must be ensured that the third party is a regulated and supervised entity and has adequate KYC Systems in place.

Trust/Nominee Or Fiduciary Accounts:

Branch/ Offices shall determine whether the Customer is acting on behalf of another person as Trustee /Nominee or any other intermediary. If so, they shall insist on receipt of satisfactory evidence of the identity of the intermediaries and of the Persons on whose behalf they are reacting as also obtained details of the nature of the trust or other arrangements in place. The Company shall take reasonable precautions to verify the identity of the trustees and the settlers of trust (including any Person settling assets into the Trust), grantors, protectors, beneficiaries and signatories. Beneficiaries shall be identified when they are defined. In the case of a foundation, the Company shall take steps to verify the founder managers/ Directors and the beneficiaries, if defined. There exists the possibility that Trust/ nominee or fiduciary accounts can be used to circumvent the Customers Identification Procedures.

Accounts Of Companies And Firms:

Branch/Office need to be vigilant against business entities being used by individuals as a front for maintaining accounts with NBFCs. Branch/Office may examine the control structure of the entity, determine the source of funds and identify the natural persons who have a controlling interest and who comprise the management. These requirements may be moderated according to the risk perception e.g. in the case of a public Company it shall not be necessary to identify all the shareholders.

Customer Accounts Opened By Professional Intermediaries

When the branch/office has knowledge or reason to believe that the Customer account opened by a professional intermediary is on behalf of a single customer that Customer must be identified. Branch/Office may hold “Pooled” accounts managed by professional intermediaries on behalf of entities like mutual funds, pension funds or other types of funds. Branch/ Office also maintain “Pooled” accounts managed by lawyers/ Chartered Accountants for funds held “On deposit” for range of Customer. Where funds held by the intermediaries are not co-mingled at the branch/office and there are sub- accounts, each of them attributable to a beneficial owner, all the beneficial owners must be identified. Where such funds are co-mingled at the branch/office, the branch/office shall still look through to the beneficial owners. Where the branch/office rely on the “Customer Due Diligence (CDD) done by an intermediary, they should satisfy themselves that the intermediary is regulated and supervised and has adequate systems in place to comply with the KYC requirements. It should be understood that the ultimate responsibility for knowing the Customers lies with the Branch/Office.

If any of the above documents are in any language other than English, it shall be translated into English along with a certificate from translator /Notary public.

“Officially valid document” is defined to mean the passport , the driving license, the permanent account number card, the voter’s identity card issued by the Election Commissioner of India or any other document as may be required by the Company.

Annexure –III

Illustrative List Of Suspicious Transaction Pertaining To Financial Services

Broad Categories of reason for suspicious and examples of suspicious transactions for non – banking financial Companies are indicated as under:

1. Identity of Client:

2. Background of Client:

3. Multiple Accounts:

4. Signatory with no rationale:

5. Activity in accounts:

6. Nature of transaction

7. Value of Transaction :

8. Illustrative of suspicious Transactions:

Annexure –IV

An Indicative List of Suspicious Activities

Transactions Involving Large Amounts of Cash

Company transactions, that are denominated by unusually large amounts of cash, rather than normally associated with the normal commercial operations of the company, e.g. cheques,

Transactions that do not make Economic Sense

Transactions in which assets are withdrawn immediately after being deposited unless the business activities of the customer's furnishes a plausible reason for immediate withdrawal.

Activities not consistent with the Customer's Business

Accounts with large volume of credits whereas the nature of business does not justify such credits.

Attempts to avoid Reporting/Record-keeping Requirements

Unusual Activities

Customer who provides Insufficient or Suspicious Information

Certain NBFC Employees arousing Suspicion

Certain NBFC Employees arousing Suspicion

Some examples of suspicious activities/transactions to be monitored by the operating staff-