Acceptable Use Policy
This Acceptable Use Policy (“AUP”) governs use of KYC.me.co.bw and forms part of the Terms of Service. It exists to protect respondents, clients and the public from unlawful or harmful use of identity-verification tooling.
1. Lawful collection only
You may use the Platform only to collect personal data for which you have a lawful basis under the Botswana Data Protection Act, 2024 and other applicable law. Before running a campaign you must:
- have a genuine, disclosed KYC/compliance purpose;
- obtain valid consent from respondents, or rely on another valid legal basis;
- collect only the data that is adequate and relevant for that purpose.
2. Prohibited uses
You must not use the Platform to:
- create fake or misleading campaigns, or collect data under false pretences or another organisation’s identity;
- harvest personal data for marketing lists, resale, profiling or any purpose not disclosed to the respondent;
- collect data about individuals without their knowledge or consent where consent is required;
- impersonate any person or business, or facilitate identity fraud, phishing or social engineering;
- send unsolicited SMS or spam, or abuse the OTP system to harass phone numbers;
- upload unlawful, defamatory or malicious content, malware, or documents you have no right to possess;
- scrape, probe, scan or test the Platform for vulnerabilities without written permission, or attempt to access another client’s data;
- interfere with the Platform’s operation, including by circumventing rate limits or access controls;
- use exported data for any purpose incompatible with the purpose for which it was collected.
3. Content standards
Campaigns must accurately identify your business as the party collecting the data. Uploaded documents and requested fields must relate to your declared KYC purpose. Campaigns targeting children require our prior written approval and appropriate safeguards.
4. Enforcement
We may investigate suspected violations and may, proportionately and where lawful:
- remove offending content or campaigns;
- suspend or terminate accounts, without refund where the violation is material;
- report unlawful activity to the Botswana Police Service, the Information and Data Protection Commission (IDPC), the Financial Intelligence Agency or other competent authorities, and preserve related records for investigation.
We may act immediately and without notice where necessary to protect respondents or the Platform.
5. Reporting abuse
If you believe a campaign misuses your data or this Platform, report it to [email protected] with the campaign code and details.