Compliance statement
How we approach financial crime prevention, consumer protection and operational security across the products we build and operate.
Our position
Trevona Ltd builds and operates engagement and reward technology for digital commerce. Our banking and payment partners, and the consumers who use the products we power, need to rely on those products. We treat compliance as a design requirement from the start, not a review at the end.
Anti-money laundering and counter-terrorist financing
- Risk-based customer due diligence, with enhanced checks for higher-risk activity.
- Transaction monitoring, with escalation and reporting procedures for suspicious activity.
- Record keeping that meets applicable retention requirements.
- Regular staff awareness of financial-crime typologies relevant to digital commerce.
Sanctions
We screen against applicable sanctions lists, including those of the UN, UK, EU and US where relevant, and we do not knowingly do business with sanctioned persons or in restricted jurisdictions.
Know your customer and eligibility
Consumer products we support include age and eligibility controls suited to the product and the market. Where a product or jurisdiction requires it, identity verification is completed before the relevant activity is allowed.
Fair and transparent reward mechanics
- Probabilities, prize values and terms are published before purchase.
- Outcomes come from documented, tested logic, and every result is logged so it can be audited.
- Promotional claims match the published odds and inventory.
- Clear refund, exchange and complaints routes are available to consumers.
Responsible commerce
We design against harmful patterns. That means no misleading urgency and no hidden costs, and it means spending safeguards and the ability for consumers to pause or close their accounts. We do not market to minors.
Payments and chargebacks
We work within the rules of our acquiring and payment partners and of the card schemes. Fraud and chargeback controls are monitored continuously, with clear merchant descriptors and accurate transaction categorisation.
Information security and data protection
Systems are built with encryption in transit and at rest, least-privilege access and continuous monitoring. Personal data is handled in line with the Isle of Man’s GDPR framework. See our privacy policy.
Partner due diligence
We support our partners’ onboarding and periodic reviews and can provide documentation on request, subject to confidentiality. Contact [email protected].