Kyrrex Law Enforcement Request Guide

1. Introduction

As part of its regulatory, AML, CFT, and sanctions-compliance obligations, Kyrrex may provide information to competent authorities, regulators and law-enforcement agencies where this is required or permitted by applicable law and under its Privacy Notice and Terms of Business. This guide explains how government and law-enforcement agencies can submit lawful requests to Kyrrex relating to users, accounts or transactions. It is not intended for private individuals, victims of crime, or civil litigants.

If you are an individual victim of a scam or other offence, please file a report with your local law-enforcement authority. Kyrrex does not disclose user information directly to private individuals and will only assist competent authorities in accordance with applicable law and this guide.

1.1 Point of contact

All law-enforcement requests should be submitted through the dedicated Kyrrex law-enforcement channel:

• Email: law-enforcement@kyrrex.mt
• Subject line: "Law Enforcement Request – Country / Agency – Case reference"

1.2 Who we can respond to

Kyrrex will only process law-enforcement requests that:

• Originate from an official government / law-enforcement domain or official channel; and
• Include sufficient proof of authority (for example, an official letter on agency letterhead and/or proof of identity/authority of the requesting officer).

Requests from generic email addresses (e.g. free webmail domains) or private individuals will not receive confidential user-data disclosures.

2. Required information

To enable Kyrrex to identify relevant records and respond efficiently, every request should include the information below (where applicable):

a. Specific action(s) requested

Clearly state what you are asking Kyrrex to do, for example:

Production of:

• Subscriber / account registration information
• KYC / onboarding information
• Transaction history
• IP logs / access logs (where available)

Operational measures:

• Account freeze / restriction
• Temporary data preservation

Please specify the legal basis for each action (article, section, and type of legal process — e.g. court order, production order, search warrant).

b. Legal process

Attach a signed copy of the relevant legal instrument, such as:

• Court order, search warrant, or production order
• Mutual Legal Assistance request or other cross-border request
• Any supporting documents, including case file or annexes

The document should indicate:

• Issuing authority and jurisdiction
• Date of issuance and expiry (if any)
• Statutory provisions relied upon

c. Details of the investigating authority

Please include:

• Full name of the agency, unit and country
• Name, title and badge/ID number (if applicable) of the requesting officer(s)
• Official contact details:
  • Work email address
  • Direct phone number with country code
  • Postal / office address
• Internal case/complaint reference number

d. Case background and investigation summary

Provide a brief but clear explanation of the case, including:

• Nature of the suspected offence(s) (e.g. investment fraud, account takeover, money laundering)
• Relevant legal provisions (articles/sections, if available)
• Short chronology of events and key facts
• How Kyrrex is believed to be involved (e.g. suspect received funds via a Kyrrex account; victim's coins were sent to an address that later deposited to Kyrrex)

e. Kyrrex-related identifiers

The more identifiers you can provide, the faster we can locate the relevant account(s). Where available, please include:

Known Kyrrex account identifiers:

• Email address used on Kyrrex
• Registered mobile number
• Full name and date of birth
• Username / user ID or customer number

On-platform references:

• Deposit/withdrawal IDs
• Order IDs or trade references
• Support ticket numbers

If you are unsure, provide all information you have.

f. Blockchain and transaction details

For cases involving on-chain transfers, please provide as much detail as possible, starting from the first transaction reported and continuing with all subsequent transactions showing how the funds are traced to Kyrrex, including:

• All relevant wallet addresses (sending and receiving)
• All known transaction hashes (TXIDs)
• The blockchain / network for each transaction (e.g. BTC, ETH, TRON, etc.)
• Token symbol and amount for each transfer
• Approximate timestamps or time ranges

For complex cases, also provide:

• An overview of the flow of funds (e.g. simple diagram or narrative)
• Total value involved (in crypto and approximate fiat equivalent at time of transactions)

Addresses and TXIDs should be supplied in a copyable format (e.g. Word, Excel, or text-based PDF).

g. Victim information (if applicable)

Where your investigation involves one or more victims, please include:

• Full name and nationality of each known victim
• Contact details (if permitted to share under your local law)
• A short explanation of how the victim(s) were induced to transfer funds (e.g. romance scam, fake investment platform, impersonation of a legitimate company)

h. Urgency and deadlines

If your request is subject to a legal deadline or relates to an emergency:

• Clearly indicate any legal or court-ordered deadline; and
• Explain why expedited handling is required (e.g. risk of asset dissipation).

Kyrrex will try to prioritize urgent matters where justified and legally permitted.

i. Language and format requirements

• Requests and key supporting documents should be in English, or accompanied by an official English translation.
• Documents must be legible scans or electronic originals; avoid photos where possible.
• Where large datasets are involved, we recommend structured formats (e.g. CSV, XLSX, TXT, or searchable PDF).

3. Cross-border cooperation

Certain disclosures may need to be routed through international cooperation mechanisms (e.g. mutual legal assistance, letters of request, assistance via a central authority).

Where your request seeks data held outside your jurisdiction or where local law requires mutual legal assistance, Kyrrex may ask that you:

• Submit your request through the relevant central authority; or
• Provide evidence that mutual legal assistance or equivalent requirements have been satisfied or are in progress.

4. Privacy, limitations and scope of assistance

Kyrrex will only disclose personal data or take account measures where this is:

• Required or permitted by applicable law;
• Consistent with Kyrrex's Terms of Business; and
• In line with the Privacy Notice and internal policies.

Accordingly:

• Overly broad, vague or legally deficient requests may be narrowed, challenged or declined.
• Kyrrex does not provide confidential user data, account details or transaction tracing directly to private individuals, journalists, or civil litigants. Such parties should work through their competent authorities.

Kyrrex may, where permitted by law, assist with:

• Identifying accounts linked to specified identifiers;
• Providing KYC / transactional data;
• Freezing or restricting accounts; and
• Preserving data pending service of further process.

All such actions remain subject to legal requirements, technical feasibility, and Kyrrex's risk and compliance framework.

5. Data retention and preservation

Kyrrex maintains user and transaction records for periods required under AML, CFT, and any other applicable regulations in the jurisdiction where it operates. Where permitted by law, Kyrrex may temporarily preserve relevant data upon receipt of a valid preservation request from a competent authority. Preservation requests should:

• Identify clearly which account(s), transactions or time periods are to be preserved; and
• Specify the legal basis and requested duration of preservation (if governed by law or court order).

6. Disclaimer

This guide is provided for information only and does not constitute legal advice or a binding commitment by Kyrrex to respond in a specific way to any particular request. Kyrrex reserves the right to:

• Update or amend this guide at any time; and
• Assess each law-enforcement request individually, in light of applicable law, regulatory obligations and internal policies.