Privacy Policy

Last updated 6 October 2026

1. About this policy and who we are

Account Suite 360 is operated by Digital Biz Systems Pty Ltd (ABN 33 700 675 850) ("we", "us", "our"), which provides practice management and AML/CTF compliance software to accounting, taxation and related professional service firms ("Subscribers").

We are committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and all applicable Australian laws. This policy explains how we collect, use, hold, disclose and protect personal information in connection with our platform and website at accountsuite360.com.

By using our service, you acknowledge that you have read this policy. Capitalised terms not defined here have the meaning given in our Terms & Conditions.

2. Information we collect

(a) Subscriber account information: firm name, contact person's name, email address, phone number, business role, number of users and billing/payment information.

(b) User information: when a Subscriber adds staff, we collect their name, work email address and role within the practice.

(c) Client data processed on behalf of Subscribers: Subscribers upload and process information about their own clients, which may include names, dates of birth, addresses, contact details, identification document details, tax file numbers, ABNs, financial records and correspondence. We process this data on behalf of Subscribers as their service provider.

(d) Identity verification information: where a Subscriber uses identity verification, the person being verified submits images of an accepted identity document and a photograph of their own face. Our verification provider reads the document electronically, examines it for signs of tampering, tests that the facial image is of a live person present at the time, and compares it with the photograph on the document. We process the data read from the document — name, date of birth, document type, number and expiry — together with those images and the result of each check. This includes biometric information: see section 6. No government database is queried and no copy of any government record is obtained.

(e) Website usage information: IP address, browser type, device information, pages visited and time spent, through cookies and analytics tools. See section 13.

(f) Communications: the content of emails and form submissions, and your contact details.

3. How we collect personal information

• Directly from you when you register, complete forms or contact us;
• From Subscribers who add users or upload client data;
• From third-party identity verification services when a check is initiated;
• Automatically through cookies, analytics and server logs;
• From publicly available sources (such as ASIC, ABR) where we retrieve business registry information on your behalf.

4. Why we collect, hold, use and disclose personal information

• Providing, operating and improving the Account Suite 360 platform;
• Authenticating users and securing accounts;
• Processing subscription payments and managing billing;
• Providing customer support and responding to enquiries;
• Sending service notifications and material updates to our Terms or policies;
• Conducting identity verification checks on behalf of Subscribers to help them satisfy AML/CTF CDD obligations;
• Helping Subscribers meet their obligations under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and related Rules;
• Meeting our own legal and regulatory obligations;
• Preventing fraud, misuse and unlawful activity on our platform.

We will not use your personal information for marketing without your consent, and we do not sell personal information to third parties.

5. Our role as a data processor

In relation to a Subscriber's own clients' personal information ("Client Data"), Account Suite 360 acts as a data processor — we hold and process that information on the Subscriber's instructions. The Subscriber is responsible for those clients' information, for obtaining any required consents, and for meeting its own obligations under the Privacy Act, AML/CTF Act and other applicable laws.

If you are a client of a practice using Account Suite 360 and have a privacy question about how that practice has handled your information, please contact the practice directly. For questions about how Account Suite 360 itself handles your information, contact us using the details in section 17.

6. Identity verification services

Account Suite 360 offers electronic identity verification to help Subscribers meet CDD obligations: an accepted identity document is authenticated electronically, and biometric checks confirm that the person presenting it is its holder.

What happens when a check is run:

• The Subscriber sends the person being verified a secure link;
• The person is informed of the check and their consent is obtained;
• They submit images of an accepted identity document and a photograph of their face;
• Our verification provider reads the document, examines it for tampering, confirms the facial image is of a live person, and compares it with the document photograph;
• We receive the data read from the document, the images, and the outcome of each check;
• No government database is queried. The Australian Document Verification Service is not enabled on this platform, so the outcome is evidence about the document and the person presenting it — not confirmation from the issuing authority;
• The result is recorded in the Subscriber’s account as part of their CDD audit trail.

Consent: Subscribers are required by our Terms to ensure valid consent is obtained before initiating a check.

Biometric information: this check does collect biometric information. Your facial image, and the biometric signals derived from it by the liveness and facial-comparison checks, are sensitive information under the Privacy Act 1988 (Cth). We collect them only with your consent and use them for one purpose — confirming that you are the holder of the document you presented. We do not use them to identify you in any other context. They are processed by our verification provider; disclosure beyond that is limited to the recipients listed in section 8, which includes disclosures required or authorised by law. Section 11 sets out the retention periods that apply to our own records.

Retention: identity check results are retained for at least the period required by the AML/CTF Act and Rules — generally 7 years from the end of the customer relationship or the last designated service, the same trigger as section 11 (Data retention) uses.

7. Sensitive information

• Tax File Numbers: handled in accordance with the Privacy (Tax File Number) Rule 2015. TFNs are masked in the interface and accessible only as necessary for the purpose provided.
• Health and other sensitive information: not deliberately collected. If incidentally included in uploaded documents, it is treated with the same care and not used for any secondary purpose.

8. Disclosure of personal information

• Identity verification providers — for checks as described in section 6;
• Cloud hosting providers — Australian-based infrastructure; primary hosting is in Australia;
• Payment processors — for billing;
• Email and communication providers — for transactional notifications and support;
• Analytics and monitoring tools — for performance and security;
• Professional advisers — under obligations of confidentiality;
• Government and regulatory bodies — where required or authorised by law, including AUSTRAC, the OAIC and law enforcement;
• Successors — in a merger, acquisition or sale of our business (we will notify you).

We do not sell personal information or share it with third parties for their own marketing.

9. Overseas disclosure

Our primary servers are in Australia. Some providers (email delivery, analytics) may process data outside Australia — including the United States and EEA jurisdictions. Where this occurs we take reasonable steps under APP 8 to ensure recipients handle information consistently with the APPs.

Identity verification is processed in Australia only. The identity documents, facial images and biometric signals described in section 6 are held and processed within Australia and are not disclosed overseas.

10. Data security

• TLS encryption for all data in transit;
• Encryption of sensitive fields at rest;
• Role-based access controls and least privilege;
• Multi-factor authentication;
• Regular encrypted automated backups;
• Audit logging of significant actions;
• Penetration testing and security reviews.

No internet-based service is completely secure. If a notifiable data breach occurs, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme.

11. Data retention

These are minimum periods, set by the obligations that apply to the records. We do not currently guarantee deletion at the end of a period, so records may be held for longer; where you want data removed, see section 12.

• Subscriber account data: at least the duration of the subscription plus 7 years after termination;
• AML/CTF CDD records (including identity verification results): at least 7 years from the end of the customer relationship or last designated service;
• Identity document details submitted for checks: at least the period required by the AML/CTF Act;
• Website usage logs: at least 90 days;
• Security audit events: 396 days, after which they are deleted automatically.

12. Access, correction and deletion

You may request access to, or correction of, the personal information we hold about you by contacting our Privacy Officer (section 17). We respond within 30 days and may ask you to verify your identity. Some information is subject to mandatory retention (e.g. under the AML/CTF Act) and cannot be deleted until the retention period expires.

13. Cookies and analytics

Our website uses cookies and similar technologies. See our Cookie Policy for details. You can control cookies through browser settings; some features may not function if cookies are disabled.

14. Children's privacy

Our service is not directed to children under 18 and we do not knowingly collect their personal information. If we become aware we have, we delete it as soon as practicable.

15. Privacy complaints

Contact us first so we can attempt to resolve the matter. We acknowledge complaints within 5 business days and aim to respond substantively within 30 days. If unsatisfied, you may refer your complaint to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

16. Changes to this policy

Where changes are material, we notify Subscribers by email or through the platform at least 14 days before they take effect. The current version is always available at accountsuite360.com.

17. Contact us

Privacy Officer, Digital Biz Systems Pty Ltd (Account Suite 360)
Email: info@accountsuite360.com
Phone: 02 9740 0295

Terms & Conditions

Last updated 6 October 2026

1. Agreement to terms

These Terms & Conditions ("Terms") form a binding agreement between Digital Biz Systems Pty Ltd (ABN 33 700 675 850), the operator of Account Suite 360 ("we", "us", "our"), and the entity or individual using the Account Suite 360 platform ("you", "Subscriber"). By creating an account, clicking "I agree" or using the Service, you confirm you have read, understood and agree to these Terms.

If you accept on behalf of an organisation, you represent that you have authority to bind it. If you do not agree, do not use the Service.

2. Definitions

"AML/CTF Act" means the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and related Rules and instruments. "Client Data" means personal information and business records relating to your clients that you upload to or generate within the Service. "CDD" means Customer Due Diligence as required by the AML/CTF Act. "Reporting Entity" has the meaning given in the AML/CTF Act. "Service" means the Account Suite 360 platform, including all modules, features, updates and support. "Subscriber Content" means all data, documents and content you upload to or create within the Service, including Client Data.

3. The Service — our platform role

Account Suite 360 is a practice management and compliance workflow platform. We are not your compliance officer, AML/CTF officer, legal adviser or financial adviser. Nothing in the Service constitutes legal, financial, accounting or compliance advice. The Service helps you organise and document your own decisions and obligations — it does not discharge them.

Subject to these Terms and payment of fees, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service during your subscription term for your internal business purposes.

4. Reporting entity obligations — your responsibilities

If you are (or may be) a Reporting Entity, you are solely responsible for: determining your status and enrolling with AUSTRAC; designing, implementing and maintaining a compliant AML/CTF Program; conducting CDD in accordance with the Act and Rules; identifying and reporting suspicious matters, threshold transactions and annual compliance reports to AUSTRAC; training staff; the accuracy and completeness of CDD records; and holding appropriate authorisations to use identity verification features, including consent requirements.

We provide a platform and tools. Your practice bears all regulatory obligations and liability arising from them.

5. Identity verification services

• You must obtain valid consent from the individual before initiating any check, or otherwise satisfy the applicable legal basis;
• Use identity verification only for CDD and identity verification purposes;
• Results are provided "as is" by our third-party verification provider — we do not warrant their accuracy;
• A match result does not conclusively prove identity — you remain responsible for your overall assessment;
• Keep verification records for the period required by the AML/CTF Act (generally 7 years);
• Do not misuse identity verification features.

6. Your data — Subscriber Content

You retain ownership of all Subscriber Content. You grant us the limited rights necessary to host, process, back up and display it to provide the Service. We access Subscriber Content only to provide the Service, for security or technical purposes, or as required by law. You are responsible for ensuring you have the right to collect, use and store your clients' personal information, with appropriate consents and disclosures.

7. Data processing agreement

To the extent we process personal information on your behalf, we agree to: (a) process it only on your documented instructions; (b) implement appropriate security measures; (c) assist you in meeting Privacy Act obligations; (d) not engage sub-processors without appropriate contractual protections; (e) notify you of any actual or suspected data breach within legally required timeframes; and (f) make Client Data available for export on termination, and retain it thereafter, as set out in clause 14.

8. Acceptable use

You agree not to: use the Service unlawfully; attempt unauthorised access; introduce malware; scrape or reverse engineer the Service; store infringing material; use identity verification without valid consent or for impermissible purposes; permit unauthorised users on your credentials; or resell or sublicence the Service without written consent. We may suspend or terminate access for breach.

9. Fees and payment

Fees, billing cycles and applicable taxes (including GST) are as set out in your subscription plan. All fees are in Australian dollars and payable in advance. We may vary fees on at least 30 days' written notice. Fees are non-refundable except as required by the Australian Consumer Law. If payment is overdue we may suspend access after reasonable notice.

10. Intellectual property

All intellectual property rights in the Service are owned by or licensed to us. Nothing in these Terms transfers IP rights to you. Feedback you provide may be used by us under a perpetual, irrevocable, royalty-free licence.

11. Availability and changes to the Service

We aim to provide a reliable service but do not guarantee uninterrupted or error-free availability. We may carry out maintenance with reasonable notice and may modify, add to or discontinue features with reasonable notice of material changes.

12. Professional advice disclaimer

The Service, including AI-assisted research ("Bre") and AML/CTF workflow tools, does not constitute accounting, taxation, financial, legal or compliance advice. AI outputs may be incomplete or contain errors and must be independently verified by a qualified professional before being acted upon or disclosed to clients.

13. Consumer guarantees and limitation of liability

Nothing in these Terms excludes rights under the Australian Consumer Law. Subject to the ACL and to the maximum extent permitted by law: our total aggregate liability is limited to fees paid by you in the 12 months before the claim arose; we exclude liability for indirect, incidental, special, punitive or consequential loss; and we exclude liability for loss arising from your failure to maintain a compliant AML/CTF Program, from AUSTRAC enforcement action, or from regulatory penalties imposed on your practice.

14. Term and termination

Your subscription continues until cancelled. On cancellation, access continues to the end of the current paid billing period. We may terminate immediately with written notice if you materially breach these Terms and fail to remedy within 14 days, become insolvent, or if continued access creates legal, regulatory or security risk. On termination, Subscriber Content is retained for at least 90 days to allow export. Retention after that is governed by our Privacy Policy and by any period the law requires.

15. Third-party services and integrations

The Service may integrate with third-party services including identity verification providers, ASIC, ATO and payment providers, subject to their own terms. We are not responsible for their availability, accuracy or conduct.

16. Governing law and disputes

These Terms are governed by the laws of New South Wales, Australia. The parties submit to the non-exclusive jurisdiction of the courts of New South Wales and, where applicable, the Federal Court of Australia. Please contact us first to resolve any dispute informally.

17. General

Entire agreement: these Terms, our Privacy Policy, Cookie Policy, Acceptable Use Policy and any subscription confirmation constitute the entire agreement. Severability: unenforceable provisions do not affect the remainder. No waiver: failure to enforce is not a waiver. Notices: to your account email; to us at info@accountsuite360.com. Changes: at least 14 days' notice of material changes; continued use constitutes acceptance.

AML/CTF Platform Notice

Last updated 6 October 2026

1. Purpose of this notice

This notice explains how Account Suite 360 operates as a technology platform for reporting entities under Australian AML/CTF law. It is addressed to accounting practices, tax agents, bookkeepers and other professional service firms ("Subscribers") who use our platform to manage their own AML/CTF obligations.

2. Legislative framework

• Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)
• Anti-Money Laundering and Counter-Terrorism Financing Rules Instrument 2007 (No. 1)
• Anti-Money Laundering and Counter-Terrorism Financing Amendment Act 2024 (Cth) (Tranche 2)
• Privacy Act 1988 (Cth)

3. Our role — platform for reporting entities

We are not a reporting entity in relation to the services you provide to your clients. Your practice is (or may be) the reporting entity, and all obligations under the AML/CTF Act sit with you. We provide tools to help you design and document your program, conduct structured onboarding and CDD, collect and store customer identification, perform electronic identity verification, screen against PEP and sanctions lists, map beneficial ownership, maintain ongoing monitoring, and generate an audit-ready record of CDD activity. Our tools assist with compliance — they do not replace your obligations, your program or your professional judgement.

4. Tranche 2 — new reporting entity categories

From 1 July 2026 (unless amended by legislation), accounting and tax practitioners, lawyers and conveyancers, real estate agents, dealers in precious metals and stones, and trust and company service providers may be reporting entities where they provide "designated services" — including formation of companies or trusts, acting as trustee, nominee shareholder or director, and managing client funds. Obtain legal advice to confirm which of your services are designated services.

5. Core obligations for reporting entities

• Enrol with AUSTRAC before providing designated services;
• Establish an AML/CTF Program (Part A risk management, Part B CDD procedures);
• Conduct CDD before providing designated services and ongoing CDD throughout the relationship;
• Collect and verify customer identification in accordance with the Rules;
• Identify beneficial owners of companies, trusts and other structures;
• Apply Enhanced CDD to high-risk customers, including PEPs;
• Report Suspicious Matters to AUSTRAC as soon as practicable;
• Lodge Threshold Transaction Reports for cash transactions of $10,000 or more;
• Submit Annual Compliance Reports;
• Maintain records for 7 years;
• Train staff.

AUSTRAC reporting (SMRs, TTRs, annual compliance reports) must be submitted directly to AUSTRAC and cannot be submitted through our platform.

6. Identity verification and electronic CDD

Our platform enables electronic verification of passports and Australian driver licences. No other document type is accepted: anything else is flagged rather than passed, so a customer holding neither must be verified by other means. The check reads the document, examines it for signs of tampering, and confirms through liveness detection and facial comparison that the person presenting it is its holder. It does not query the issuing agency's records — the Australian Document Verification Service is not enabled on this platform — so a pass is evidence about the document and the person presenting it, not confirmation from the issuer. It is one component of identity verification, not proof of identity in itself. You must still assess the overall plausibility of the identification information, take further steps where a check fails or is referred, and obtain the individual's consent before any check.

7. PEP and sanctions screening

Screening results are based on the data sources integrated into our platform. Do not rely solely on our screening as your complete sanctions compliance program; maintain your own understanding of applicable regimes (Australian, UN, OFAC); document your review of alerts and any false-positive decisions; and apply Enhanced CDD to confirmed PEPs and their associates.

8. Record-keeping

The platform timestamps and records CDD activities, verification results, screening events and compliance-officer decisions, providing an audit trail. You remain responsible for ensuring your record-keeping meets all requirements of the AML/CTF Act.

9. No relationship with AUSTRAC

Account Suite 360 has no agency relationship with AUSTRAC on behalf of Subscribers and does not submit reports on your behalf. References to AUSTRAC requirements are informational only.

10. Disclaimer

This notice and all information provided through the platform is general in nature and not legal or compliance advice. Seek independent legal advice to confirm your obligations. Digital Biz Systems Pty Ltd, the operator of Account Suite 360, accepts no liability for your regulatory compliance or for any penalty or enforcement action.

11. Contact

info@accountsuite360.com

General Disclaimer

Last updated 6 October 2026

1. General information only

All information on this website and through the Account Suite 360 platform is provided for general informational purposes only. It does not constitute accounting, taxation, financial, legal or compliance advice. Account Suite 360 is a software platform — not a registered tax agent, company auditor, liquidator, AFS licensee, legal practitioner or AML/CTF officer. All professional judgements remain the responsibility of the qualified professionals using our platform.

2. No professional relationship

Use of the platform does not create a professional, advisory or fiduciary relationship between Account Suite 360 and any client of a Subscriber. We are a technology provider to practices and have no obligations to their end clients.

3. AI-assisted research — Bre

• Bre generates research suggestions based on Australian taxation legislation, ATO guidance and related materials. It does not provide advice;
• AI outputs may be inaccurate, incomplete, outdated or inapplicable to a specific set of facts;
• All Bre outputs must be independently verified by a qualified tax professional before being acted upon or disclosed to any client;
• You are solely responsible for all professional advice you provide;
• Use of Bre does not satisfy due diligence or professional care obligations imposed by your professional body or applicable law.

4. Regulatory and legislative information

References to legislation, ATO guidance, AUSTRAC requirements and ASIC registers are kept current with care but not warranted complete or up to date. Verify the currency of any regulatory information before relying on it.

5. Third-party data and integrations

We do not control ASIC registers, the ABR, identity verification services or other third-party sources and cannot guarantee their availability, accuracy or completeness. Results retrieved on your behalf reflect the data held by the third party at the time of the query.

6. No warranty

The Service is provided "as is" and "as available". Subject to the Australian Consumer Law, we exclude all warranties, express or implied, including merchantability, fitness for purpose, accuracy and uninterrupted availability.

7. Limitation of liability

Subject to the Australian Consumer Law, Digital Biz Systems Pty Ltd, the operator of Account Suite 360, is not liable for any direct, indirect, incidental, special, consequential or punitive damages arising from use of or reliance on the Service — including regulatory penalties, professional disciplinary action, client claims or data loss.

8. External links

Links to third-party websites (including AUSTRAC, ASIC and the ATO) are provided for convenience only. We do not endorse or accept responsibility for their content.

9. Contact

info@accountsuite360.com

Cookie Policy

Last updated 12 September 2026

1. What are cookies?

Cookies are small text files placed on your device by websites you visit. We also use similar technologies such as web beacons, local storage and session storage, collectively referred to as "cookies" in this policy.

2. Cookies we use

Strictly necessary: session authentication, CSRF protection and privacy-preference cookies. You cannot opt out without affecting the platform.

Functional: remember preferences and settings such as display options or recently accessed records. You can disable these in your browser.

Analytics: aggregated, anonymous usage information on our public website only. We do not use analytics cookies inside the logged-in platform.

We do not use advertising or tracking cookies and do not share cookie data with advertising networks.

3. Third-party cookies

Our website uses Google Fonts, configured with privacy-preserving settings where possible. No other third-party advertising or social media cookies are placed.

4. How to control cookies

Most browsers let you view and delete cookies, block all cookies (this will prevent login) or block third-party cookies only. See your browser's support pages: Chrome, Firefox, Safari, Edge.

5. Contact

info@accountsuite360.com

Acceptable Use Policy

Last updated 12 September 2026

1. Purpose

This Acceptable Use Policy applies to all Subscribers, their staff and anyone authorised to access the platform under a Subscriber's account. It forms part of our Terms & Conditions.

2. Permitted use

• Managing your accounting or professional services practice — client records, jobs, documents and communications;
• Conducting AML/CTF CDD and compliance workflows;
• Verifying client identity for AML/CTF CDD;
• Preparing documents and e-signing arrangements with clients;
• Business registration and ASIC-related workflows;
• Using Bre to assist with professional research.

3. Prohibited use

• Uploading unlawful, defamatory, obscene or infringing content;
• Impersonating any person or entity;
• Attempting unauthorised access, vulnerability probing or introducing malware;
• Using bots or scrapers to extract data (outside authorised APIs);
• Using identity verification without valid consent, without a legitimate AML/CTF purpose, or for any other purpose;
• Processing personal information inconsistently with the Privacy Act or AML/CTF Rules;
• Using the platform or its AI features to generate misleading, fraudulent or deceptive content;
• Sharing credentials with unauthorised persons;
• Reselling or commercially exploiting the platform without written consent.

4. Identity verification — specific restrictions

You must not initiate a check on any person without their knowledge and consent; use results for any purpose other than AML/CTF CDD; verify a person outside a genuine designated-service relationship; retain or share results inconsistently with the AML/CTF Act or Privacy Act; or share access credentials or API keys with third parties without our approval.

5. AI assistant — Bre

Do not present unverified Bre outputs to clients as professional advice; do not use Bre to deceive clients or regulators; and do not input client personal or confidential information beyond what is necessary to obtain a research result.

6. Security responsibilities

Use strong, unique passwords and enable multi-factor authentication; do not share logins between staff; promptly notify us at info@accountsuite360.com of suspected unauthorised access; and keep devices protected with current security software.

7. Enforcement

We may investigate potential breaches and, in our reasonable discretion, issue a warning, suspend or terminate access, or report to relevant authorities (including AUSTRAC, the OAIC or law enforcement). We generally give notice and an opportunity to remedy unless the breach is serious.

8. Contact

info@accountsuite360.com

Identity Verification Notice

Last updated 6 October 2026

1. About this notice

This notice is for individuals whose identity documents are being verified through Account Suite 360, and fulfils our notification obligations under the Privacy Act 1988 (Cth) and the AML/CTF Rules. If a professional services firm has asked you to submit identity documents as part of AML/CTF onboarding, this explains what happens with your information.

2. Who is conducting the check?

The firm that sent you the onboarding link (the "Requesting Firm") is the reporting entity under the AML/CTF Act and is responsible for conducting Customer Due Diligence on you. Account Suite 360 is the technology platform used by the Requesting Firm and connects to a specialist identity verification provider on its behalf.

3. What is the identity verification service?

Your document is read electronically and examined for signs of tampering or alteration. You are also asked to photograph your face, which is used to confirm that a live person is present and that you are the person pictured on the document. No government database is queried and no copy of any government record is obtained — the checks are made on what you submit.

4. What information is used?

The data read from your document — full name, date of birth, document type, document number and expiry date, and for an Australian driver licence the card number — together with the images you submit of the document and of your face, and the outcome of the tampering, liveness and facial-comparison checks. The facial image and the signals derived from it are biometric information, which is sensitive information under the Privacy Act 1988 (Cth).

5. Which documents can be verified?

• Australian and foreign passports
• Australian driver licences (all states and territories)

These two are the only documents accepted here. Others that an identity verification service can check — Medicare cards, birth or citizenship certificates, ImmiCards and visa records — are not accepted, and neither is the alternative route of two non-photo documents. If you hold neither a passport nor an Australian driver licence, tell the Requesting Firm: it will need to verify your identity another way.

6. Why is this check being conducted?

The Requesting Firm is required, as a reporting entity under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth), to verify your identity as part of its CDD program. This is a legal requirement.

7. Consent

By submitting your identity document details through the platform, you consent to Account Suite 360 verifying them on behalf of the Requesting Firm, and to the Requesting Firm retaining the result as part of its AML/CTF records. If you do not consent, inform the Requesting Firm — note that it may be unable to provide services without verifying your identity.

8. Who can see my information?

The Requesting Firm sees the information you submitted and the outcome of each check; Account Suite 360 sees the same for the purpose of providing the service; our verification provider processes your document and facial images in order to perform the checks. Your details are not shared with any other party except as required by law.

9. How long is my information kept?

AML/CTF legislation requires the Requesting Firm to retain CDD records, including verification results, for 7 years from the last transaction or end of the customer relationship. Account Suite 360 retains this information on the firm's behalf for at least that period.

10. Your privacy rights

You may request access to or correction of your personal information. For information held by the Requesting Firm, contact the firm directly. For information held by Digital Biz Systems Pty Ltd as operator of Account Suite 360, contact info@accountsuite360.com. See our Privacy Policy for more.

11. Contact

info@accountsuite360.com