ACLayer

Privacy Policy

Last updated: September 2026

1. Introduction

ACLayer Pty Ltd (ACN 688 590 785) ("ACLayer", "we", "us" or "our") is committed to protecting the privacy of individuals who visit this website or use our services. This Privacy Policy explains how we collect, use, disclose and store personal information, and how you can access or correct your information or make a complaint.

We handle personal information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), and in accordance with our obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) as a registered provider of digital currency exchange services.

2. Information We Collect

Depending on how you interact with us, we may collect:

  • Identity information — such as your full name, date of birth, residential address, nationality, and government-issued identification documents.
  • Contact information — such as your email address and phone number.
  • Financial and transaction information — such as bank account details, payment records, and transaction history relating to services provided to you.
  • Verification and compliance information — including information collected to meet our identity verification and Know Your Customer (KYC) obligations, such as document checks and screening results.
  • Correspondence — records of communications between you and us, including emails and support enquiries.
  • Technical information — basic website usage data such as browser type and general location, collected when you visit this website.

3. How We Collect Your Information

We collect personal information:

  • directly from you, for example when you contact us or engage our services;
  • from specialist third-party identity verification and compliance service providers engaged to carry out Know Your Customer (KYC) and Customer Due Diligence (CDD) checks on our behalf; and
  • from the platforms we use to facilitate transactions, where relevant to the services provided to you.

4. Why We Collect and Use Your Information

We collect, hold, use and disclose personal information to:

  • verify your identity and carry out Customer Due Diligence in accordance with Australian anti-money laundering and counter-terrorism financing (AML/CTF) laws;
  • provide, manage and administer our digital asset exchange services;
  • detect, investigate and prevent fraud, money laundering, and other unlawful activity;
  • comply with our reporting and record-keeping obligations to AUSTRAC and other Australian regulators; and
  • respond to your enquiries and communicate with you about our services.

We do not use your personal information for direct marketing purposes without your consent.

5. Disclosure of Your Information

We may disclose personal information to:

  • our specialist third-party identity verification and compliance service providers, for the purpose of conducting KYC and CDD checks;
  • AUSTRAC and other Australian government and regulatory bodies, where required or authorised by law;
  • banks and payment service providers, to the extent necessary to process a transaction; and
  • our professional advisers (such as auditors, lawyers, or compliance consultants), where reasonably necessary for us to obtain their advice or services.

We do not sell your personal information to third parties.

6. Overseas Disclosure

Some of our identity verification and compliance service providers may store or process personal information outside Australia. Where this occurs, we take reasonable steps to ensure that any overseas recipient handles your personal information in a manner consistent with the Australian Privacy Principles.

7. Data Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure. This includes limiting access to personal information to authorised personnel, and relying on the security measures of our reputable third-party service providers.

8. Data Retention

We retain personal information for as long as necessary to provide our services and to comply with our legal and regulatory obligations, including the record-keeping requirements under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), which generally require certain records to be kept for at least seven years.

9. Access and Correction

You may request access to, or correction of, the personal information we hold about you by contacting us using the details below. We will respond to your request within a reasonable period. In some circumstances, access may be limited where permitted by law, for example where it would compromise our AML/CTF obligations.

10. Cookies and Website Usage Data

This website may use basic, non-identifying technical data (such as browser type and general location) to help us understand website usage. This website does not use cookies for advertising or profiling purposes.

11. Complaints

If you have a concern about how we have handled your personal information, please contact us using the details below. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated policy will be posted on this page with a revised "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us at .