1STOPCRYPTO AML & COMPLIANCE DISCLOSURE

Version 1.0

Effective Date: July 5, 2026

Last Updated: July 5, 2026

INTRODUCTION

This Anti-Money Laundering & Compliance Disclosure ("Disclosure") explains the compliance principles followed by 1StopCrypto ("1StopCrypto," "Company," "we," "our," or "us") in connection with the operation of its non-custodial cryptocurrency software platform.

This Disclosure forms part of the Company's Terms of Service and should be read together with the:

Privacy Policy;
Risk Disclosure;
Restricted Jurisdictions Policy;
Third-Party Provider Disclosure; and
other legal policies published by the Company.

This Disclosure is intended to explain how the Company approaches regulatory compliance, sanctions compliance, fraud prevention, and cooperation with lawful requests while operating a non-custodial platform.

Nothing in this Disclosure should be interpreted as creating contractual rights beyond those contained in the Terms of Service or as a representation that the Company performs regulatory functions assigned by law to independent regulated financial institutions.

1. NON-CUSTODIAL BUSINESS MODEL

1StopCrypto operates as a non-custodial software platform.

Accordingly:

we do not hold customer Digital Assets;
we do not hold customer fiat currency;
we do not possess users' Private Keys;
we do not possess users' Recovery Phrases;
we do not execute blockchain transactions on behalf of users;
we do not maintain omnibus cryptocurrency accounts for users;
we do not provide custody services unless expressly disclosed in writing.

Users retain exclusive control over their wallets and Digital Assets.

Blockchain transactions are authorized directly by Users through their own Connected Wallets.

The Company's role is limited to providing software that facilitates interaction with supported blockchain networks and independent third-party providers.

2. COMPLIANCE PHILOSOPHY

The Company is committed to operating responsibly and in accordance with applicable laws and regulations governing its activities.

Our compliance objectives include:

protecting users;
reducing fraud;
preventing misuse of the Platform;
supporting the integrity of blockchain ecosystems;
complying with applicable legal obligations;
maintaining appropriate internal controls;
cooperating with lawful governmental requests where required.

Because blockchain regulation continues to evolve, the Company continuously reviews its compliance practices and may modify Platform functionality to reflect changes in applicable law, regulatory guidance, or operational risk.

3. THIRD-PARTY REGULATED SERVICES

Certain services available through the Platform are provided entirely by independent third-party providers.

These services may include:

cryptocurrency purchases;
fiat-to-crypto conversion;
crypto-to-fiat conversion;
payment processing;
identity verification;
sanctions screening;
transaction monitoring;
fraud detection;
anti-money laundering compliance.

Such providers operate under their own:

licenses;
regulatory obligations;
compliance programs;
terms of service;
privacy policies;
customer identification procedures.

Users entering into transactions with these providers do so directly with the applicable provider.

The Company is not a party to those agreements unless expressly stated otherwise.

4. KNOW YOUR CUSTOMER (KYC)

Certain services accessible through the Platform may require identity verification.

Identity verification requirements are determined by the applicable third-party provider and by applicable law.

Depending upon the service requested, Users may be required to provide information including:

legal name;
residential address;
date of birth;
government-issued identification;
proof of address;
selfie or biometric verification;
tax identification information where required;
source of funds documentation;
source of wealth information;
additional information required by applicable law.

The Company does not determine the outcome of identity verification performed by independent providers.

Verification decisions remain within the discretion of those providers, subject to applicable law.

5. CUSTOMER DUE DILIGENCE

Independent regulated providers may conduct Customer Due Diligence ("CDD") or Enhanced Due Diligence ("EDD") where required by law.

Such procedures may include:

identity verification;
sanctions screening;
politically exposed person ("PEP") screening;
adverse media screening;
source-of-funds review;
source-of-wealth review;
transaction risk assessment;
enhanced documentation requests.

The Company does not control the specific compliance procedures implemented by independent providers.

6. SANCTIONS COMPLIANCE

The Company is committed to complying with applicable economic sanctions laws.

The Company may implement reasonable measures designed to prevent the Platform from being used in violation of applicable sanctions laws.

Users represent and warrant that they are not:

located in jurisdictions subject to comprehensive sanctions applicable to the Company;
identified on applicable sanctions lists;
acting on behalf of sanctioned persons;
owned or controlled by sanctioned persons;
using the Platform to evade sanctions.

The Company reserves the right to restrict access to the Platform where reasonably necessary to comply with applicable sanctions laws.

Nothing contained herein obligates the Company to disclose internal sanctions screening procedures.

7. PROHIBITED ACTIVITIES

The Platform may not be used for unlawful purposes.

Without limitation, prohibited activities include:

money laundering;
terrorist financing;
sanctions evasion;
fraud;
identity theft;
market manipulation;
ransomware payments;
financing criminal organizations;
trafficking in illicit goods or services;
operation of illegal marketplaces;
unauthorized access to computer systems;
distribution of malicious software;
intellectual property infringement;
financing unlawful activity;
tax evasion;
knowingly receiving proceeds of crime.

The Company reserves the right to investigate suspected violations of applicable law or these Terms.

8. FRAUD PREVENTION

The Company employs commercially reasonable measures designed to reduce fraud and abuse affecting the Platform.

Fraud prevention measures may include:

device analysis;
behavioral analysis;
IP analysis;
security monitoring;
abuse detection;
automated fraud detection tools;
suspicious activity review;
transaction risk analysis where applicable;
account integrity monitoring;
security logging.

The Company reserves the right to temporarily suspend or restrict access while investigating suspected fraudulent activity.

Such actions may be taken without prior notice where reasonably necessary to protect Users, the Company, or third parties.

9. COOPERATION WITH LAW ENFORCEMENT

The Company may cooperate with law enforcement agencies, regulators, and governmental authorities where required or permitted by applicable law.

Such cooperation may include responding to:

subpoenas;
court orders;
search warrants;
lawful regulatory requests;
lawful governmental inquiries;
preservation requests;
other legal process.

The Company evaluates requests for information in accordance with applicable law and may object to requests it believes are invalid, overly broad, or otherwise legally deficient.

Nothing in this Disclosure requires the Company to provide notice of governmental requests where prohibited by law or where doing so could compromise an investigation.

10. RECORDKEEPING

The Company maintains business records as reasonably necessary to:

operate the Platform;
maintain security;
investigate fraud;
comply with applicable law;
resolve disputes;
enforce contractual rights;
improve Platform functionality.

Retention periods vary depending on:

the type of information;
applicable legal requirements;
operational needs;
legitimate business purposes.

As a non-custodial platform, the Company does not maintain records of Private Keys or Recovery Phrases because it does not collect such information.

11. BLOCKCHAIN ANALYTICS

To help protect the integrity of the Platform, comply with applicable legal obligations, and mitigate fraud, the Company may use blockchain analytics tools or services provided by independent third-party providers.

Blockchain analytics may assist in identifying publicly observable patterns associated with blockchain activity.

Such tools may analyze publicly available blockchain information including:

wallet addresses;
transaction hashes;
token transfers;
smart contract interactions;
publicly visible transaction history;
blockchain timestamps;
network identifiers.

The Company does not claim that blockchain analytics are infallible.

Blockchain analytics are probabilistic in nature and may produce incomplete, inaccurate, or evolving results.

Accordingly:

analytics results are evaluated in context;
analytics may be supplemented by additional information where appropriate;
analytics alone may not determine whether activity is unlawful.

The Company reserves the right to rely upon blockchain analytics, together with other information reasonably available to it, when evaluating fraud, abuse, sanctions compliance, or security risks.

12. TRANSACTION MONITORING

Because 1StopCrypto is a non-custodial software platform, the Company generally does not monitor or approve individual blockchain transactions in the same manner as a custodial financial institution.

However, the Company may monitor Platform activity for purposes including:

protecting Platform security;
detecting abuse;
identifying fraud;
preventing unauthorized access;
investigating technical issues;
complying with applicable legal obligations;
protecting other users.

Monitoring may include:

wallet connection events;
authentication activity;
Platform usage patterns;
API usage;
security logs;
publicly available blockchain activity associated with Platform interactions.

The Company does not continuously monitor every blockchain transaction occurring between third parties outside the Platform.

Nothing in this Disclosure should be interpreted as a representation that unlawful activity will always be detected or prevented.

13. GEOGRAPHIC RESTRICTIONS

Availability of the Platform and certain Platform features may vary depending upon jurisdiction.

The Company may restrict or prohibit access from certain jurisdictions due to:

applicable law;
sanctions;
licensing considerations;
fraud risk;
operational considerations;
third-party provider restrictions;
cybersecurity concerns.

Users remain solely responsible for ensuring that their use of the Platform complies with the laws applicable to them.

Additional information regarding geographic restrictions is provided in the Company's Restricted Jurisdictions Policy.

14. USER COMPLIANCE RESPONSIBILITIES

Each User is responsible for ensuring that their own activities comply with applicable law.

Without limitation, Users are responsible for:

complying with sanctions laws;
complying with anti-money laundering laws applicable to them;
complying with tax laws;
complying with securities laws where applicable;
complying with consumer protection laws;
complying with reporting obligations;
maintaining accurate information provided to third-party service providers;
responding truthfully during identity verification processes.

Users shall not use the Platform:

to conceal unlawful proceeds;
to evade regulatory obligations;
to facilitate unlawful activity;
to provide false or misleading information;
to impersonate another individual;
to assist another person in violating applicable law.

Users acknowledge that they remain solely responsible for determining the legality of their own activities.

15. COMPLIANCE WITH REGULATORY CHANGES

The legal framework governing Digital Assets continues to evolve rapidly.

Accordingly, the Company reserves the right to:

introduce new compliance measures;
modify existing procedures;
suspend particular Platform features;
discontinue services in particular jurisdictions;
require additional information from Users where appropriate;
implement additional security controls;
update internal compliance procedures.

Such actions may be taken without prior notice where reasonably necessary to comply with applicable law or to reduce material legal or operational risk.

Nothing in this Disclosure shall be interpreted as creating a continuing obligation to provide any specific Platform feature in every jurisdiction.

16. NO GUARANTEE OF REGULATORY STATUS

Digital Assets and blockchain technologies remain subject to differing legal interpretations across jurisdictions.

The Company does not represent or warrant that:

any Digital Asset is lawful in every jurisdiction;
any blockchain protocol complies with all applicable laws;
any third-party provider possesses every license that may become required in the future;
any Digital Asset will retain its present regulatory treatment.

Users remain responsible for understanding the legal treatment of Digital Assets applicable to their own circumstances.

17. COMPLIANCE REPORTING

Where required by applicable law, the Company may:

retain appropriate business records;
respond to lawful governmental requests;
preserve information relevant to investigations;
cooperate with regulators;
comply with court orders;
comply with legally binding reporting obligations.

Nothing contained herein requires the Company to notify Users regarding compliance activities where such notice is prohibited by law.

The Company reserves all legal rights to challenge requests it believes are unlawful, overbroad, or otherwise inconsistent with applicable law.

18. CHANGES TO THIS DISCLOSURE

The Company may revise this AML & Compliance Disclosure from time to time to reflect:

changes in applicable law;
changes in regulatory guidance;
evolving industry standards;
new Platform functionality;
changes in third-party service providers;
improvements to compliance procedures;
operational developments.

Material revisions will be reflected by updating the Last Updated date at the beginning of this Disclosure.

Continued use of the Platform after revised terms become effective constitutes acknowledgment of the updated Disclosure.

19. CONTACT INFORMATION

Questions regarding this AML & Compliance Disclosure may be directed to:

1StopCrypto

Legal Entity: BLUE SOFT LLC

Business Address: 10200 S Roberts Rd Unit #4235 Palos Hills, IL 60465

Compliance Email: [Compliance Email Address]

Legal Email: [email protected]

Support Email: [email protected]

Website: https://1stopcrypto.com

20. USER ACKNOWLEDGEMENT

By using the Platform, you acknowledge and agree that:

1StopCrypto operates as a non-custodial software platform;
you retain sole control over your Digital Assets and Connected Wallets;
certain services available through the Platform are provided by independent regulated third parties;
those third parties may conduct identity verification, sanctions screening, fraud prevention, or other compliance activities as required by applicable law;
the Company may implement reasonable compliance measures to protect the Platform, its users, and to satisfy applicable legal obligations;

you are solely responsible for ensuring that your own use of the Platform complies with applicable laws and regulations.