Per CBK DCP Regulations 2022 §4(3), all six policy documents must be submitted to CBK as part of the licence application. Submission of the package before data testing can accelerate licensing.
5
Board approved
1
Under review
6
Required (§4(3))
✗
CBK package ready
AML/CFT Policies and ProceduresBoard approvedv3.1
CBK DCP Regs §4(3)(a)
Anti-money laundering and combating financing of terrorism — customer due diligence, transaction monitoring, STR/CTR filing, OFAC/UN screening.
Approved by Board of Directors · 2026-03-15Next review: 2027-03-15
Data processing lawful basis, purpose limitation, data subject rights, breach notification within 72h, DSAR handling, retention and deletion schedules.
Approved by DPO & Board · 2026-04-01Next review: 2027-04-01