ONE64 VERIFY
KYC Check KYB Check

Contents

  1. Terms of Use
  2. Privacy Policy
  3. Collection Policy
  4. Didit Third-Party Provider Notice
  5. Single Check Terms
  6. Refund & Cancellation Policy
  7. Acceptable Use Policy
  8. Security & Data Processing Statement

Terms, privacy, and notices for ONE64 VERIFY identity and business screening checks. Use the menu to jump to a policy, or scroll through the documents below.

Terms of Use

General website and service terms for ONE64 VERIFY, including single checks.

ONE64 VERIFY

TERMS OF USE

Last Updated: 29 August 2026

ONE64 GROUP PTY LTD trading as ONE64 VERIFY
ABN 16 693 997 821

1. INTRODUCTION

These Terms of Use ("Terms") govern your access to and use of the ONE64 VERIFY website, platform, applications, software, verification services, KYC services, screening services, Single Checks and related services ("Services").

The Services are provided by ONE64 GROUP PTY LTD trading as ONE64 VERIFY ("ONE64", "we", "us" or "our").

By registering an account, purchasing a Service, accessing the platform or using the Services, you agree to be bound by these Terms.

If you do not agree to these Terms, you must not use the Services.

2. DEFINITIONS

Account means an account created to access the Services.

Customer means the business or organisation purchasing or using the Services.

Individual means a person whose identity is being verified or screened.

Single Check means an individual verification or screening transaction purchased separately from a subscription.

Verification Data means information submitted or generated during an identity verification process, including identity document information, document images, selfie information, facial verification information and associated metadata.

3. THE SERVICES

ONE64 provides technology and information services designed to assist businesses with:

  • identity verification;
  • KYC processes;
  • customer due diligence;
  • identity document verification;
  • selfie and facial verification;
  • PEP screening;
  • sanctions screening;
  • watchlist screening;
  • verification links sent by Email;
  • verification results;
  • Single Checks.

ONE64 may add, modify, suspend or discontinue features from time to time.

4. REGULATORY POSITION

ONE64 provides technology and services designed to assist businesses with identity verification, KYC, customer due diligence, screening and related compliance workflows.

ONE64 does not provide legal, financial or regulatory advice.

The Services are designed to assist Customers with their own processes. Use of the Services does not, by itself, establish that a Customer has complied with any particular legal or regulatory obligation.

Each Customer is responsible for determining which laws, regulations and regulatory obligations apply to its business and for implementing appropriate policies, procedures, controls and governance.

Nothing on the ONE64 website, platform, in these Terms or in any marketing material should be interpreted as a representation that use of ONE64 VERIFY constitutes AML/CTF compliance, regulatory approval, certification or endorsement by AUSTRAC or any other regulator.

ONE64 does not represent that AUSTRAC or any other regulator has approved, endorsed, certified or accredited the ONE64 VERIFY Services.

Customers should obtain independent professional advice where appropriate.

5. BUSINESS ACCOUNT ELIGIBILITY

The Services are primarily intended for businesses and organisations.

You must:

  • provide accurate and complete information;
  • provide a valid ABN where requested;
  • provide a business email address where required;
  • have authority to enter into these Terms;
  • maintain accurate account information; and
  • use the Services lawfully.

ONE64 may request additional information to verify a business or authorised representative.

6. BUSINESS VERIFICATION

ONE64 may verify Customer information using publicly available information, business registers and third-party services.

Information may include:

  • ABN;
  • ACN;
  • legal name;
  • trading name;
  • registered address;
  • business email;
  • authorised representative;
  • directors;
  • ownership information; and
  • other information reasonably required to establish the Customer's identity or authority.

7. ACCOUNT SECURITY

Customers are responsible for maintaining the security of their accounts.

Customers must:

  • protect passwords;
  • protect authentication credentials;
  • restrict account access to authorised users;
  • maintain appropriate user permissions;
  • promptly remove former users; and
  • notify ONE64 of suspected unauthorised access.

8. IDENTITY VERIFICATION

Depending on the Service, an Individual may receive a secure verification link by Email.

The Individual may be asked to provide:

  • an Australian driver's licence;
  • an Australian passport;
  • full name;
  • date of birth;
  • residential address;
  • an identity document image;
  • a selfie; and
  • information required for facial comparison and fraud prevention.

ONE64 does not request or collect Medicare cards as part of its standard verification process.

9. BIOMETRIC INFORMATION

The verification process may involve facial comparison and the processing of biometric information.

Biometric information may constitute sensitive information under Australian privacy law.

Appropriate consent will be obtained through the verification process where required.

10. DIDIT

ONE64 uses Didit as a third-party identity verification provider.

Didit provides technology for identity document verification, selfie verification, facial comparison, liveness and related fraud-prevention functionality.

The Individual will be provided with applicable Didit information before commencing verification.

11. DATA DELETION

ONE64 has implemented an automated deletion workflow designed to minimise the retention of raw Verification Data within Didit.

After ONE64 receives the verification outcome through the Didit API/webhook, ONE64's system initiates deletion of the associated verification data from Didit.

ONE64 does not intend to rely on Didit's default unlimited retention period for the normal ONE64 verification workflow.

Deletion may be subject to technical processing time and separate backup, disaster-recovery or security-log retention.

ONE64 may retain verification outcomes and limited audit information where reasonably necessary.

12. SCREENING SERVICES

Depending on the Service, ONE64 may provide screening against:

  • PEP information;
  • sanctions information;
  • watchlists;
  • regulatory lists;
  • fraud information; and
  • other risk information.

A potential match is not necessarily a confirmed match.

Customers remain responsible for assessing results and determining appropriate action.

13. CUSTOMER RESPONSIBILITIES

The Customer is responsible for:

  • determining applicable laws;
  • obtaining appropriate consent and authority;
  • conducting required customer due diligence;
  • identifying beneficial owners where required;
  • determining risk;
  • conducting enhanced due diligence where required;
  • assessing screening results;
  • determining reporting obligations;
  • maintaining required records; and
  • making final customer acceptance decisions.

14. AUTOMATED RESULTS

The Services may use automated systems.

Automated results may contain errors, false positives, false negatives or incomplete information.

Customers must apply appropriate human review where required.

15. CUSTOMER DATA

Customers retain rights in information they lawfully submit.

Customers grant ONE64 the rights reasonably required to provide, secure, maintain and improve the Services.

16. ACCEPTABLE USE

Customers must not use the Services for:

  • unlawful surveillance;
  • harassment;
  • unlawful discrimination;
  • fraud;
  • impersonation;
  • sanctions evasion;
  • unlawful financial activity;
  • unlawful collection of personal information;
  • platform attacks;
  • reverse engineering;
  • scraping;
  • malicious code; or
  • any unlawful purpose.

17. INTELLECTUAL PROPERTY

ONE64 and its licensors retain all intellectual property rights in the platform, software, website, workflows, interfaces, documentation, branding and related technology.

No intellectual property rights are transferred except for the limited right to use the Services under these Terms.

18. FEES

Fees are displayed at purchase or specified in the applicable Customer agreement.

Fees may include:

  • subscription fees;
  • Single Check fees;
  • additional user fees;
  • additional feature fees; and
  • applicable taxes.

19. REFUNDS

Except where required by law, consumed Services are non-refundable.

Where a technical failure attributable to ONE64 prevents a purchased Service from being completed, ONE64 may provide a replacement, credit or refund.

Nothing excludes rights that cannot lawfully be excluded.

20. SERVICE AVAILABILITY

ONE64 aims to provide reliable Services but does not guarantee uninterrupted availability.

Services may be interrupted for maintenance, security, upgrades, third-party outages or circumstances outside ONE64's reasonable control.

21. THIRD-PARTY SERVICES

The Services depend on third-party providers.

ONE64 is not responsible for failures caused solely by a third-party provider outside ONE64's reasonable control.

22. WARRANTIES

To the maximum extent permitted by law, ONE64 does not warrant that:

  • every identity will be correctly verified;
  • every fraud attempt will be detected;
  • every PEP will be identified;
  • every sanctions match will be identified;
  • every watchlist match will be identified;
  • third-party information will be complete or accurate; or
  • the Services will meet every Customer's regulatory requirements.

23. AUSTRALIAN CONSUMER LAW

Nothing in these Terms excludes or limits rights, guarantees or remedies that cannot lawfully be excluded under the Australian Consumer Law.

24. LIMITATION OF LIABILITY

To the maximum extent permitted by law, ONE64 will not be liable for indirect or consequential loss, loss of profits, loss of business opportunity or losses arising from Customer decisions based on verification or screening results.

Subject to liability that cannot lawfully be limited, ONE64's aggregate liability will not exceed the fees paid by the Customer to ONE64 during the twelve months preceding the event giving rise to the claim.

25. INDEMNITY

To the extent permitted by law, the Customer indemnifies ONE64 against claims and losses arising from:

  • unlawful use;
  • Customer breach of these Terms;
  • failure to obtain required consent;
  • misuse of verification information;
  • Customer privacy breaches; or
  • Customer regulatory obligations.

26. SUSPENSION

ONE64 may suspend access where reasonably necessary to:

  • protect security;
  • investigate fraud;
  • prevent misuse;
  • comply with law;
  • address non-payment; or
  • protect the platform or another Customer.

27. TERMINATION

ONE64 may terminate an account where the Customer materially breaches these Terms, engages in fraud, uses the Services unlawfully or creates material security or regulatory risk.

28. PRIVACY

Personal information is handled in accordance with the ONE64 VERIFY Privacy Policy.

29. CHANGES

ONE64 may update these Terms from time to time.

Material changes will be communicated where reasonably appropriate.

30. GOVERNING LAW

These Terms are governed by the laws of New South Wales, Australia.

The parties submit to the courts of New South Wales and courts entitled to hear appeals from them.

31. CONTACT

ONE64 GROUP PTY LTD trading as ONE64 VERIFY
ABN 16 693 997 821

Email: contact@one64group.com.au
Privacy: privacy@one64group.com.au
Address: Unit 5, 7 Eden Park Dr, Macquarie Park NSW 2113

Privacy Policy

How ONE64 GROUP handles personal information under the Privacy Act 1988 (Cth).

ONE64 VERIFY

PRIVACY POLICY

Last Updated: 29 August 2026

ONE64 GROUP PTY LTD trading as ONE64 VERIFY
ABN 16 693 997 821

1. PURPOSE OF THIS POLICY

This Privacy Policy explains how ONE64 GROUP PTY LTD trading as ONE64 VERIFY ("ONE64", "we", "us" or "our") collects, uses, discloses, stores and protects personal information.

It applies to:

  • our website;
  • ONE64 VERIFY accounts;
  • the ONE64 platform;
  • KYC services;
  • identity verification;
  • Single Checks;
  • Email verification invitations;
  • PEP screening;
  • sanctions screening;
  • watchlist screening;
  • customer support; and
  • related services.

Where applicable, ONE64 handles personal information in accordance with the Privacy Act 1988 (Cth) and Australian Privacy Principles.

2. WHO WE ARE

ONE64 GROUP PTY LTD trading as ONE64 VERIFY
ABN 16 693 997 821

ONE64 provides technology designed to assist businesses with identity verification, KYC, screening and customer due diligence.

ONE64 does not provide legal or regulatory advice.

3. WHOSE INFORMATION WE HANDLE

We may handle information about:

  • business customers;
  • account users;
  • directors;
  • beneficial owners;
  • authorised representatives;
  • employees;
  • contractors;
  • customers of our business customers;
  • persons completing identity verification;
  • persons subject to screening; and
  • persons communicating with us.

4. BUSINESS INFORMATION

For business customers we may collect:

  • legal name;
  • trading name;
  • ABN;
  • ACN;
  • address;
  • business email;
  • telephone number;
  • authorised representative details;
  • account information;
  • subscription information;
  • billing information; and
  • verification information.

5. INDIVIDUAL VERIFICATION INFORMATION

Depending on the selected Service, an individual may be asked to provide:

  • full name;
  • date of birth;
  • residential address;
  • Australian driver's licence;
  • Australian passport;
  • identity document image;
  • selfie;
  • facial information;
  • information generated through facial comparison;
  • device information;
  • IP information; and
  • verification metadata.

ONE64 does not request or collect Medicare cards as part of its standard verification process.

6. BIOMETRIC INFORMATION

A verification may involve automated facial comparison.

Biometric information used for automated biometric verification is sensitive information under Australian privacy law.

Where required, ONE64 relies on express consent obtained through the verification process before sensitive biometric information is collected or processed.

The verification consent screen explains the nature and purpose of the biometric processing.

ONE64 does not use verification biometric information for unrelated advertising.

7. DIDIT

ONE64 uses Didit as its third-party identity verification provider.

Didit may process:

  • identity documents;
  • document images;
  • selfies;
  • facial information;
  • biometric information;
  • liveness information;
  • device information;
  • IP information;
  • fraud indicators;
  • verification metadata; and
  • verification outcomes.

The applicable Didit privacy documentation is made available through the verification process.

8. VERIFICATION DATA DELETION

ONE64 has implemented an automated data deletion workflow.

After the verification is completed and ONE64 receives the verification outcome through the Didit API/webhook, ONE64's system initiates deletion of the associated verification data from Didit.

The purpose is to minimise retention of raw identity documents, selfies and related verification material.

ONE64 does not intend to use Didit's default unlimited retention period for normal ONE64 verification transactions.

Deletion may involve technical processing time.

Copies may temporarily remain within backup, disaster-recovery or security systems operated by the provider in accordance with their applicable retention controls.

9. INFORMATION RETAINED BY ONE64

ONE64 may retain information necessary to operate the Service, such as:

  • verification reference;
  • verification date and time;
  • verification outcome;
  • verification status;
  • name;
  • date of birth;
  • residential address;
  • PEP result;
  • sanctions result;
  • watchlist result;
  • risk indicators;
  • audit information;
  • customer account information; and
  • transaction records.

ONE64 seeks to avoid retaining raw identity document images and selfie images after they are no longer required.

10. SCREENING

Depending on the Service, information may be checked against:

  • PEP information;
  • sanctions lists;
  • watchlists;
  • regulatory lists;
  • publicly available information;
  • fraud databases; and
  • other screening sources.

Screening information may contain false positives.

A potential match is not necessarily a confirmed match.

11. PURPOSES FOR COLLECTION

We may use information to:

  • provide identity verification;
  • provide KYC services;
  • provide Single Checks;
  • conduct screening;
  • provide verification results;
  • maintain audit trails;
  • prevent fraud;
  • protect platform security;
  • provide customer support;
  • process payments;
  • improve our Services;
  • comply with law;
  • enforce our agreements; and
  • protect our rights.

12. DISCLOSURE

We may disclose information to:

  • our business customers;
  • Didit;
  • identity verification providers;
  • screening providers;
  • PEP and sanctions providers;
  • watchlist providers;
  • SMS providers;
  • hosting providers;
  • cloud service providers;
  • payment providers;
  • professional advisers;
  • insurers;
  • auditors;
  • regulators;
  • courts;
  • law enforcement agencies; and
  • other service providers reasonably required to operate the Services.

13. OVERSEAS PROCESSING

Some third-party providers may process information outside Australia.

The location of processing may vary by provider and service configuration.

Where required, ONE64 will take reasonable steps to address applicable Australian privacy requirements concerning overseas disclosures.

14. GOVERNMENT IDENTIFIERS

Identity documents may contain government-related identifiers.

ONE64 seeks to minimise collection and retention of government identifiers where they are not reasonably necessary.

ONE64 does not request Medicare cards as part of its standard verification service.

15. AUTOMATED PROCESSING

The Services may use automated systems for:

  • identity verification;
  • document authentication;
  • facial comparison;
  • fraud detection;
  • PEP screening;
  • sanctions screening; and
  • watchlist screening.

Automated results are intended to assist Customer decision-making.

ONE64 does not represent that an automated result is infallible.

Customers must consider whether additional review is appropriate.

16. DATA QUALITY

ONE64 takes reasonable steps to maintain accurate information.

Where information originates from a third-party provider, database or screening source, ONE64 may need to refer correction requests to the relevant source.

17. ACCESS

You may request access to personal information held by ONE64.

Requests should be made to:

privacy@one64group.com.au

We may need to verify your identity.

Some exceptions may apply under applicable law.

18. CORRECTION

You may request correction of inaccurate, incomplete, outdated or misleading information.

ONE64 will consider correction requests and take reasonable steps where appropriate.

19. SECURITY

ONE64 uses reasonable technical and organisational measures designed to protect personal information against:

  • unauthorised access;
  • misuse;
  • interference;
  • loss;
  • alteration; and
  • unauthorised disclosure.

No online system can guarantee absolute security.

20. DATA BREACHES

ONE64 maintains procedures for identifying and responding to data breaches.

Where the Notifiable Data Breaches scheme applies, ONE64 will comply with applicable notification obligations.

21. RETENTION

ONE64 retains information only for as long as reasonably necessary for:

  • the purpose for which it was collected;
  • providing the Services;
  • maintaining necessary audit records;
  • contractual purposes;
  • security;
  • dispute resolution; or
  • legal obligations.

Retention periods may differ between verification outcomes, audit records, account information and technical logs.

22. MARKETING

ONE64 may send service-related communications.

Where permitted, ONE64 may also send business marketing communications.

Verification information, biometric information and screening results will not be used for unrelated marketing.

23. COOKIES

ONE64 may use cookies and similar technologies for:

  • authentication;
  • security;
  • session management;
  • analytics;
  • performance; and
  • website functionality.

24. CHILDREN

The Services are primarily intended for business and identity verification purposes.

Customers must not knowingly use the Services inappropriately in relation to children.

25. COMPLAINTS

Privacy complaints should be sent to:

privacy@one64group.com.au

Please include sufficient information for us to investigate the complaint.

ONE64 will investigate and respond within a reasonable period.

If you remain dissatisfied, you may be able to contact the Office of the Australian Information Commissioner.

26. POLICY CHANGES

ONE64 may update this Privacy Policy to reflect:

  • changes to the Services;
  • changes in technology;
  • changes in third-party providers;
  • changes in law; or
  • changes to our information-handling practices.

The latest version will be published through our website.

27. CONTACT

ONE64 GROUP PTY LTD trading as ONE64 VERIFY
ABN 16 693 997 821

Privacy: privacy@one64group.com.au
General: contact@one64group.com.au
Website: one64group.com.au
Address: Unit 5, 7 Eden Park Dr, Macquarie Park NSW 2113

ONE64 VERIFY

IDENTITY VERIFICATION CONSENT & COLLECTION NOTICE

BEFORE YOU BEGIN

You have been asked by [CUSTOMER BUSINESS NAME] to complete an identity verification using ONE64 VERIFY.

ONE64 uses Didit as its third-party identity verification technology provider.

INFORMATION YOU MAY PROVIDE

You may be asked to provide:

  • an Australian driver's licence or Australian passport;
  • your full name;
  • date of birth;
  • residential address;
  • an image of your identity document;
  • a selfie; and
  • other information reasonably necessary to complete the verification.

ONE64 does not request Medicare cards as part of this verification process.

FACIAL VERIFICATION

Your selfie may be compared with information from your identity document using automated facial comparison technology.

This may involve the processing of biometric information.

Biometric information used for automated verification is sensitive information.

SCREENING

Depending on the verification requested, your information may also be checked against:

  • PEP information;
  • sanctions information;
  • watchlists; and
  • other risk or fraud information.

A potential match does not necessarily mean you are the person identified in the relevant record.

THIRD-PARTY PROCESSING

Didit performs the identity verification process on behalf of ONE64.

Didit may process identity documents, selfies, facial information, biometric information, device information, IP information and verification metadata.

DATA DELETION

ONE64 uses an automated workflow designed to initiate deletion of the verification information from Didit after ONE64 receives the verification outcome.

ONE64 therefore does not intend for the raw identity document and selfie information to remain in Didit's environment for the default unlimited retention period.

Technical processing and backup retention may mean deletion is not instantaneous from every system.

ONE64 may retain the verification outcome and limited audit information where reasonably necessary.

CONSENT

Before identity verification continues, you are shown a consent screen.

  • You must tick one consent checkbox. The on-screen wording confirms that you consent to the requesting business and ONE64 VERIFY collecting and verifying your identity information via the verification partner for the check, including sensitive biometric information, and refers you to the ONE64 VERIFY Privacy Policy and this Consent & Collection Notice.
  • The on-screen wording may name the requesting business.
  • You then select I CONSENT AND CONTINUE.
  • If you do not consent, do not continue. Contact the business that requested your verification.

Collection Policy

How identity checks collect and handle personal information for verification subjects.

ONE64 VERIFY

CONSENT & COLLECTION POLICY

Last Updated: 4 October 2026

ONE64 GROUP PTY LTD trading as ONE64 VERIFY · ABN 16 693 997 821

1. PURPOSE

This policy explains how ONE64 VERIFY collects and processes personal and sensitive information when an individual completes an identity verification (including Single Checks and workspace-initiated verification links).

It is intended to be read with the ONE64 VERIFY Privacy Policy and the Didit Third-Party Provider Notice.

2. WHO COLLECTS THE INFORMATION

ONE64 GROUP PTY LTD trading as ONE64 VERIFY (ONE64) collects and handles verification information for the purposes described in this policy.

A business that requests a verification (for example a customer purchasing a Single Check, or a workspace organisation sending a verification link) receives the verification result for its own lawful purposes.

3. WHY WE COLLECT INFORMATION

ONE64 collects information to:

• complete identity verification requested by a business;

• perform applicable document, selfie, facial comparison and fraud-prevention checks;

• provide the verification outcome to the requesting business;

• maintain necessary audit and security records; and

• operate, secure and improve the ONE64 VERIFY service.

4. WHAT WE COLLECT

Depending on the verification, information may include:

• name, date of birth and other identity particulars;

• identity document images and document data;

• residential address and proof-of-address information where required;

• selfie images and facial/biometric information;

• device, IP and verification metadata;

• fraud, liveness and authenticity indicators; and

• the verification outcome and related audit information.

5. DIDIT

ONE64 uses Didit as its third-party identity verification provider. Didit processes information on behalf of ONE64 to perform identity document checks, selfie capture, automated facial comparison, liveness and related fraud-prevention functions.

Individuals should also review any Didit terms presented during the verification interface.

6. HOW VERIFICATION WORKS

The normal identity verification process operates broadly as follows:

1. A business initiates verification.

2. ONE64 generates a verification session.

3. A verification link is delivered to the individual, generally by email.

4. The individual provides the requested identity document and selfie through the Didit verification interface.

5. Didit performs the applicable verification and facial comparison processes.

6. Didit returns the verification outcome to ONE64 through the applicable API/webhook.

7. ONE64 records the necessary verification outcome.

8. ONE64's automated workflow initiates deletion of the associated verification data from Didit.

This architecture is designed to minimise unnecessary retention of raw identity documents and selfie information.

7. SENSITIVE AND BIOMETRIC INFORMATION

Biometric information used for automated biometric verification is sensitive information under Australian privacy law.

Where required, ONE64 relies on agreement obtained through the verification screen before sensitive biometric information is collected or processed.

ONE64 does not use verification biometric information for unrelated advertising.

8. OVERSEAS PROCESSING

Didit and other service providers may process information outside Australia. The applicable processing location may depend on the service and configuration.

9. DISCLOSURE TO THE REQUESTING BUSINESS

The verification result (and related status information necessary for the requesting business to rely on the check) may be provided to the business that requested the verification.

10. RETENTION

ONE64 seeks to minimise retention of raw identity verification information. Where reasonably possible, ONE64 retains the verification outcome and necessary audit information rather than continuing to retain raw identity documents or selfie images.

Single Check result retention periods are described in the applicable Single Check Terms and product messaging at the time of purchase.

11. YOUR CHOICES

If you do not agree, do not continue with verification. Contact the business that requested your verification if you wish to discuss the reason for the verification or whether an alternative process is available.

12. AGREEMENT

Before identity verification continues, you are shown a short agreement screen.

You must tick one checkbox. The on-screen wording confirms that you agree to the requesting business and ONE64 VERIFY collecting and verifying your identity information.

The on-screen wording may name the requesting business.

A link to this Consent & Collection Policy is available in the page footer with the Privacy Policy and other legal documents.

You then select Continue.

If you do not agree, do not continue. Contact the business that requested your verification.

13. CONTACT

Questions about this policy may be directed to ONE64 VERIFY via the contact details published on the ONE64 VERIFY website, or to the business that requested your verification.

Didit Third-Party Provider Notice

How Didit provides electronic identity verification services.

ONE64 VERIFY

DIDIT THIRD-PARTY PROVIDER NOTICE

Last Updated: 29 August 2026

1. WHY DIDIT IS USED

ONE64 VERIFY uses Didit as a third-party technology provider to perform identity verification and related fraud-prevention functions.

Didit may provide technology for:

  • identity document verification;
  • document authenticity checks;
  • selfie capture;
  • facial comparison;
  • liveness detection;
  • fraud detection; and
  • related verification functions.

2. INFORMATION PROCESSED

Depending on the verification service, Didit may process:

  • identity document images;
  • identity document information;
  • name;
  • date of birth;
  • residential address;
  • selfie images;
  • facial information;
  • biometric information;
  • device information;
  • IP information;
  • verification metadata;
  • fraud indicators; and
  • verification results.

3. DIDIT TERMS

Individuals completing verification should review the applicable Didit privacy and verification terms presented during the verification process.

ONE64 does not reproduce or replace Didit's own legal documentation.

4. INTERNATIONAL PROCESSING

Didit may process information outside Australia.

The applicable processing location may depend on the service and configuration.

5. DATA DELETION

ONE64 has implemented an automated workflow designed to initiate deletion of verification information from Didit after ONE64 receives the verification outcome.

The deletion workflow is intended to minimise unnecessary retention of identity documents, selfies and associated verification information.

Technical processing, backups or other systems may mean deletion is not instantaneous from every system.

6. ONE64'S RESPONSIBILITY

ONE64 remains responsible for its handling of information within the ONE64 environment.

The Customer remains responsible for its own use of verification results and compliance obligations.

7. CONTACT

Questions concerning the ONE64 verification process may be directed to:

privacy@one64group.com.au

Single Check Terms

Pay-as-you-go single checks for person identity (/check) and business registry (/business).

ONE64 VERIFY

SINGLE CHECK TERMS

Last Updated: 27 September 2026

1. SINGLE CHECK

A Single Check is a one-off verification or screening purchase made separately from any ONE64 VERIFY subscription or workspace plan. Single Checks are available as:

• Person identity checks at /check (KYC); and

• Business registry checks at /business (KYB).

These Terms apply to both products unless a clause states that it applies only to one product.

2. CHECK TYPES

Depending on the product purchased, a Single Check may include:

• identity verification;

• identity document verification;

• facial verification;

• PEP, sanctions or watchlist screening;

• Australian company registry lookup (including officers and ownership where published);

• company-level AML screening; or

• another verification or screening service identified at purchase.

The exact scope is the scope displayed at the time of purchase.

3. HOW A CHECK WORKS

Person identity check (/check)

After payment, a secure verification link is sent to the person being checked (generally by email; SMS may be used as a notice only). That person completes verification using the applicable third-party verification interface.

Business registry check (/business)

After payment, ONE64 retrieves company registry and related screening data for the Australian company confirmed before purchase (for example via ABR and third-party registry/AML services). No personal identity verification link is sent to officers or shareholders as part of a business Single Check unless a separate person check is purchased.

4. CHECK CONSUMPTION

A Single Check may be considered consumed when the relevant third-party service is initiated, or when a verification, registry or screening result is generated.

5. FAILED OR UNAVAILABLE CHECKS

A check may fail or be unavailable because of:

• poor document quality;

• incorrect information;

• facial mismatch, liveness failure or fraud indicators;

• inability to verify information;

• no matching or incomplete registry data;

• technical problems; or

• third-party limitations (including provider credit or service outages).

Where a paid check cannot be performed due to a technical failure attributable to ONE64 or its verification providers, ONE64 may issue a refund, replacement check or credit.

6. INCONCLUSIVE RESULTS

An inconclusive person-check result does not necessarily mean that the individual has failed to establish their identity. Registry and screening results for a business check may be incomplete where source registers do not publish full ownership or officer data.

The Customer remains responsible for deciding whether another check, further review or alternative due diligence is appropriate.

7. TECHNICAL FAILURE

Where a check cannot be performed due to a technical failure attributable to ONE64, ONE64 may provide a replacement check, credit or refund.

8. REFUNDS

Except where required by law, consumed checks are non-refundable. Nothing in these Terms excludes rights that cannot lawfully be excluded. Refunds for technical failure may also be handled under ONE64’s Refund & Cancellation Policy.

9. RESULTS

Results are provided for the Customer’s legitimate business purposes. Online results may be available for a limited period as stated at purchase or on the order page; Customers should download any available certificate or record while the online result remains available.

Customers remain responsible for interpreting and acting on results. A business registry check does not mean that listed officers or shareholders have completed personal identity verification.

10. SCREENING RESULTS

PEP, sanctions, watchlist and company AML results may contain false positives or incomplete information. A potential match should be appropriately reviewed.

11. DATA

Verification and registry information is processed in accordance with the ONE64 Privacy Policy and applicable third-party provider terms.

Refund & Cancellation Policy

Refunds, cancellations, and subscription changes.

ONE64 VERIFY

REFUND & CANCELLATION POLICY

Last Updated: 29 August 2026

1. SINGLE CHECKS

Single Checks are generally non-refundable once consumed.

2. TECHNICAL FAILURE

Where a technical failure attributable to ONE64 prevents a purchased check from being performed, ONE64 may provide:

  • a replacement check;
  • account credit; or
  • a refund.

3. THIRD-PARTY FAILURE

Where a third-party provider experiences an outage or technical failure outside ONE64's reasonable control, ONE64 may provide a retry, replacement or credit depending on the circumstances.

4. DUPLICATE TRANSACTIONS

If a Customer is accidentally charged twice for the same transaction due to a confirmed ONE64 billing error, ONE64 will take reasonable steps to correct the duplicate charge.

5. AUSTRALIAN CONSUMER LAW

Nothing in this Policy excludes or limits rights that cannot legally be excluded under the Australian Consumer Law.

6. CONTACT

Refund and cancellation enquiries should be sent to:

contact@one64group.com.au

Acceptable Use Policy

Permitted and prohibited uses of the platform.

ONE64 VERIFY

ACCEPTABLE USE POLICY

Last Updated: 29 August 2026

1. PURPOSE

This Acceptable Use Policy establishes requirements for lawful and responsible use of ONE64 VERIFY.

2. LAWFUL USE

Customers must use the Services only for legitimate business purposes and in accordance with applicable law.

3. PROHIBITED USE

Customers must not use ONE64 to:

  • commit or facilitate fraud;
  • impersonate another person;
  • conduct unlawful surveillance;
  • unlawfully monitor individuals;
  • harass or intimidate individuals;
  • unlawfully discriminate;
  • circumvent sanctions;
  • facilitate money laundering;
  • facilitate terrorist financing;
  • obtain information without legitimate purpose;
  • unlawfully collect sensitive information;
  • unlawfully profile individuals;
  • compromise platform security;
  • gain unauthorised access;
  • scrape the platform;
  • reverse engineer the Services;
  • interfere with the Services;
  • upload malicious code; or
  • violate another person's rights.

4. VERIFICATION REQUESTS

Customers must only request verification where they have a legitimate business purpose and appropriate authority.

5. PERSONAL INFORMATION

Customers must not use verification information for purposes unrelated to the legitimate purpose for which it was collected unless otherwise permitted by law.

6. AUTOMATED DECISIONS

Customers should not treat automated screening or verification results as infallible.

Appropriate review should be undertaken where necessary.

7. SECURITY

Customers must maintain reasonable security controls around:

  • passwords;
  • API credentials;
  • user accounts;
  • exported information;
  • verification results; and
  • Customer data.

8. ENFORCEMENT

ONE64 may suspend or terminate access where it reasonably believes the Services are being misused or used unlawfully.

Security & Data Processing Statement

Security controls and data processing overview.

ONE64 VERIFY

SECURITY & DATA PROCESSING STATEMENT

Last Updated: 29 August 2026

1. PURPOSE

This Statement explains the general security and data-processing approach used by ONE64 VERIFY.

It is intended to provide Customers with transparency without disclosing information that could compromise system security.

2. IDENTITY VERIFICATION FLOW

The normal verification process operates broadly as follows:

1. Customer initiates verification.

2. ONE64 creates the applicable verification session.

3. A secure verification link is sent to the Individual, generally by email.

4. The Individual provides the requested identity document and selfie through the Didit verification environment.

5. Didit performs the applicable identity, facial and fraud-prevention checks.

6. Didit returns the verification outcome to ONE64 through the applicable API/webhook.

7. ONE64 records the necessary verification outcome.

8. ONE64's automated workflow initiates deletion of the associated verification information from Didit.

3. DATA MINIMISATION

ONE64 seeks to minimise retention of raw identity verification information.

Where reasonably possible, ONE64 retains the verification outcome and necessary audit information rather than continuing to retain raw identity documents or selfie images.

4. ACCESS CONTROLS

ONE64 uses access controls designed to restrict information to authorised systems and personnel.

5. ENCRYPTION

ONE64 uses appropriate encryption and secure communications technologies for relevant systems and data.

6. API SECURITY

ONE64 uses authentication and security controls for API and webhook communications.

7. LOGGING

Relevant systems may maintain security and audit logs for:

  • authentication;
  • system activity;
  • verification events;
  • webhook activity;
  • administrative actions; and
  • security events.

8. THIRD-PARTY PROVIDERS

ONE64 uses third-party providers where reasonably necessary to operate the Services.

These may include providers for:

  • identity verification;
  • screening;
  • Email;
  • hosting;
  • cloud infrastructure;
  • payment processing; and
  • security.

9. DIDIT

Didit provides the identity verification technology used by ONE64.

ONE64's workflow is designed to initiate deletion from Didit after receipt of the verification outcome.

10. BACKUPS

Deletion from an operational system does not necessarily mean immediate physical deletion from every backup or disaster-recovery system.

Where information remains in backup systems, appropriate controls may restrict its use until deletion or overwriting occurs under the relevant lifecycle.

11. INCIDENT MANAGEMENT

ONE64 maintains processes for responding to security incidents and assessing whether notification or other action is required.

12. CUSTOMER RESPONSIBILITIES

Customers are responsible for protecting information once it has been provided to them or exported from the ONE64 platform.

Customers should maintain appropriate internal security controls.

13. SECURITY LIMITATION

No online system can guarantee absolute security.

ONE64 continuously reviews and improves its security practices.

ONE64 GROUP PTY LTD · ABN 16 693 997 821 · Legal · Contact