User Registration Service Agreement

I. Parties to the Agreement and Scope of Application

This Service Agreement (hereinafter referred to as this “Agreement”) applies to user registration, login, account opening, identity verification, use of deposits, withdrawals, digital asset trading, fiat services, wallet address binding, customer support, risk review, and other digital asset-related services provided by ATT Exchange.

By clicking register, checking the consent box, logging in, accessing, or continuing to use the platform services, the user indicates that the user has read, understood, and agreed to be bound by this Agreement, platform rules, the Privacy Policy, KYC authorization documents, risk disclosures, and other applicable rules.

II. Registration Eligibility, Jurisdiction Restrictions, and Account Opening

The user shall have full civil capacity required to enter into and perform this Agreement, and shall have reached the minimum age required by applicable law. Minors or persons without full legal capacity shall not register for or use the platform services.

The platform may, based on applicable laws, sanctions provisions, regulatory requirements, jurisdiction restrictions, product restrictions, or internal risk policies, restrict or refuse the registration and use of platform services by specific countries, regions, entities, or individuals.

The user undertakes not to open an account on behalf of others, not to borrow, rent, sell, transfer, or control an account for others, and not to circumvent platform rules, regulatory requirements, sanctions screening, or risk controls through multiple accounts, agents, nominee holding, false identities, or other means.

III. Registration Information, KYC, and Ongoing Due Diligence

The user shall submit true, accurate, complete, and valid registration information, contact details, identity information, document materials, risk information, and other materials reasonably required by the platform.

The platform requires users to complete Standard Verification before they may use basic functions such as deposits, withdrawals, trading, and fiat deposits and withdrawals. The platform may require the user to complete Additional Verification when triggered by specific risks, abnormal transactions, manual spot checks, or regulatory requirements. Additional Verification is not a function that the user actively upgrades to, nor does it mean that the user obtains higher privileges.

The user understands and agrees that the platform may continuously update and review the user’s information, document validity, place of residence, risk level, source of funds, transaction purpose, transaction patterns, and on-chain risk status. The user shall promptly update relevant information when material changes occur.

IV. Scope of Platform Services and Service Restrictions

The platform may provide account management, identity verification, digital asset deposits, withdrawals, trading, fiat services, wallet address management, risk control, customer support, compliance review, and other related services based on its business scope. The specific available services are subject to the platform’s actual launch, the user’s jurisdiction, the user’s KYC status, risk rating, product rules, and regulatory requirements.

The platform has the right to suspend, restrict, adjust, or terminate part or all of the services based on applicable laws, regulatory requirements, risk control, system maintenance, liquidity, network congestion, security incidents, unavailability of third-party services, or other reasonable grounds.

The user’s completion of registration or identity verification does not automatically guarantee the platform’s continuous provision of all services. The platform may restrict, suspend, or terminate account functions based on risk rating, jurisdiction restrictions, product restrictions, sanctions screening, AML/CFT requirements, or regulatory requirements.

V. Account Security and User Responsibility

The user shall properly keep the account, password, verification codes, two-factor authentication tools, devices, email address, mobile phone number, wallet addresses, and other authentication credentials. Losses caused by the user’s improper safekeeping, disclosure, authorization of third-party use, phishing attacks, or other causes not attributable to the platform shall be borne by the user, unless otherwise provided by applicable law.

If the user discovers abnormal account login, unauthorized operations, abnormal funds, device loss, or leakage of security credentials, the user shall immediately notify the platform through the channels published by the platform. The platform may suspend relevant account functions for security reasons, but does not guarantee that completed transactions or on-chain transfers can be recovered or reversed.

VI. Prohibited Conduct

The user shall not use the platform to engage in or assist any illegal, non-compliant, fraudulent, infringing, market-disrupting, or regulatory-evasive conduct, including but not limited to:

Money laundering, terrorist financing, proliferation financing, sanctions evasion, fraud, theft, extortion, darknet transactions, mixing, or other illegal fund activities;

Impersonation, submission of false materials, forging or tampering with documents, opening accounts on behalf of others, or controlling others’ accounts;

Market manipulation, false trading, wash trading, insider trading, fraudulent trading, or other market abuse;

Circumventing KYC, KYT, sanctions screening, transaction monitoring, limits, jurisdiction restrictions, or platform risk controls;

Attacking, interfering with, reverse engineering, or accessing without authorization the platform systems, APIs, data, or security mechanisms;

Other conduct that violates the laws, regulatory requirements, or platform rules of El Salvador or other applicable jurisdictions.

VII. Digital Asset Risk Disclosure

Digital assets involve risks such as significant price volatility, uncertain liquidity, technical complexity, regulatory changes, network congestion, smart contract vulnerabilities, irreversibility of on-chain transactions, and inability to recover from private key or address errors. The user shall use the platform services prudently based on the user’s own risk tolerance.

The platform does not guarantee the price, returns, liquidity, tradability, future value, or any investment outcome of digital assets. The user shall bear the risks and losses arising from market volatility, operational errors, on-chain transfers, third-party services, regulatory changes, or force majeure, unless otherwise provided by applicable law.

VIII. Rules for Deposits, Withdrawals, Trading, and Wallet Address Processing

Before making deposits, withdrawals, trades, fiat deposits and withdrawals, or binding wallet addresses, the user shall ensure that the account status, KYC status, Additional Verification status, risk rating, and product permissions meet the platform’s requirements. The platform has the right to restrict relevant services for accounts that have not completed verification, show abnormal risk, match sanctions, or trigger suspicious activity.

On-chain transfers of digital assets may be delayed, fail, or become unrecoverable due to blockchain network congestion, miner fees, node delays, smart contracts, incorrect addresses, missing tags/Memos, or third-party wallet issues. The user shall independently verify the address, network, asset type, amount, and additional information.

The platform may, based on AML/CFT, KYT, sanctions screening, on-chain risk, regulatory requirements, or manual review, delay, manually review, reject, freeze, or report deposits, withdrawals, trades, or fiat deposits and withdrawals.

IX. Fees, Taxes, and Records

Use of platform services by the user may incur trading fees, deposit or withdrawal fees, network fees, fiat channel fees, third-party service fees, or other fees. Specific fees shall be subject to the platform page, product rules, or official announcements.

The user shall be responsible for tax filings, payments, or recordkeeping obligations arising from registration, trading, holding, transfer, income, conversion, or use of digital assets. The platform may retain transaction and account records as required by applicable law and provide necessary information to competent authorities.

X. Account Restrictions, Suspension, Freezing, and Termination

Under any of the following circumstances, the platform may restrict, suspend, freeze, refuse, close, or terminate the user’s account or related services:

The user has not completed KYC, Additional Verification, or compliance materials required by the platform;

The materials submitted by the user are false, incomplete, expired, inconsistent, or unverifiable;

The user matches sanctions lists, PEP, high-risk countries/regions, adverse media, or other risk rules;

The account activity involves money laundering, terrorist financing, fraud, market abuse, account takeover, or other suspicious circumstances;

A regulator, law enforcement authority, court, CNAD, UIF, or other competent authority requires it, or it is required by law;

The user violates this Agreement, platform rules, product restrictions, or applicable law;

Other circumstances that the platform considers necessary to maintain system security, user asset security, business continuity, or compliance requirements.

For matters subject to confidentiality or no-tipping-off requirements under law, the platform may be unable to disclose to the user the specific risk rules, report contents, regulatory communications, or reasons for restrictions.

XI. AML/CFT, Sanctions Compliance, and Regulatory Assistance

The platform may conduct customer due diligence, enhanced due diligence, transaction monitoring, on-chain address risk identification, sanctions screening, PEP screening, adverse media screening, suspicious activity handling, recordkeeping, and regulatory reporting based on the risk-based approach.

The user agrees that the platform may, where permitted or required by applicable law, provide necessary records, materials, reports, or assistance to the National Commission of Digital Assets of El Salvador (CNAD), the Financial Investigation Unit (UIF), courts, law enforcement authorities, regulators, government departments, or authorized third-party service providers.

If the platform determines, based on internal rules, third-party service provider results, regulatory requirements, or manual judgment, that user activity is suspicious, the platform may take necessary measures in accordance with the law and submit suspicious activity, suspicious transaction, or other regulatory reports without further notice to the user.

XII. Intellectual Property, System Security, and Platform Content

The platform website, applications, page designs, trademarks, logos, text, graphics, software, databases, interfaces, risk control models, technical documents, and other platform content are protected by intellectual property laws. Without authorization from the platform, the user shall not copy, modify, disseminate, sell, reverse engineer, scrape, abuse, or commercially exploit them.

The user shall not interfere in any way with the normal operation of the platform, bypass access controls, or access, scan, attack, copy, or scrape platform systems, accounts, data, or services without authorization.

XIII. Limitation of Liability and User Indemnification

To the extent permitted by applicable law, the platform shall not be liable for indirect losses, loss of profits, loss of goodwill, data loss, or loss of opportunity caused by market volatility, user operational errors, user devices or network issues, third-party services, blockchain networks, force majeure, regulatory changes, or the user’s breach of this Agreement.

If the user breaches this Agreement, submits false information, engages in prohibited conduct, infringes third-party rights, violates applicable law, or causes the platform to be subject to claims, penalties, investigations, or losses, the user shall bear corresponding responsibility and compensate the platform for losses to the extent permitted by applicable law.

XIV. Amendments to the Agreement and Notices

The platform may update this Agreement based on laws, regulatory requirements, business adjustments, product changes, or risk control needs. The platform will notify users by page prompts, in-platform messages, email, announcements, or other reasonable means. If the user continues to use the platform services after the update, the user will be deemed to have accepted the updated Agreement, unless applicable law requires separate explicit consent.

XV. El Salvador Applicable Law, Jurisdiction, and Dispute Resolution

Unless mandatory applicable law provides otherwise, this Agreement and disputes arising from user registration, account use, identity verification, platform services, transaction processing, compliance review, account restrictions, or data processing shall, in principle, be governed by the laws of the Republic of El Salvador.

When a dispute arises between the user and the platform, both parties shall first communicate and resolve it through the customer support, complaint, or compliance contact channels published by the platform. The platform shall accept and handle user complaints within a reasonable period.

If the dispute cannot be resolved through consultation, and applicable law does not provide otherwise on a mandatory basis, the relevant dispute may be submitted to the courts or competent authorities of the Republic of El Salvador that have jurisdiction. This clause does not restrict the user from filing complaints, reports, or rights requests with competent regulators, consumer protection authorities, personal data protection authorities, or other competent authorities in accordance with the law.