End User Terms

Last Updated: 4th August 2026

How Identity Verification Works

BNDRY provides identity verification on behalf of the organisation you're dealing with (the Customer), in one of two ways:

• by checking the details of a document you provide, such as a driver licence or passport, against official government records; or
• by connecting to ConnectID, a digital identity network that lets you reuse an identity check you've already completed with an organisation you have an existing relationship with, instead of providing your documents again.

Which method applies depends on how the Customer has set up its use of BNDRY, and you'll always be told which one you're using at the time.

Purpose and Legal Basis

The Customer uses this service to meet its regulatory and compliance obligations, including under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth) and related legislation, and, where the ConnectID Identity Service is used, in accordance with the rules of the ConnectID digital identity network.

Information collected through either method is used exclusively for identity verification and the purposes described on this page. It is never used to build a profile of you or track your behaviour, to offer, advertise or promote goods or services (including by enabling someone else to do so), or for market research.

Third-Party Involvement

Technology service providers assist BNDRY in securely transmitting identification information to and from official record holders, and operate as agents bound by contractual and legal obligations regarding data handling.

Where you use the ConnectID Identity Service, your Identity Data passes directly from your chosen Identity Provider to BNDRY, and then to the Customer. ConnectID Pty Ltd (the ConnectID Operator) operates the network that connects BNDRY and Identity Providers, but does not access or hold your Identity Data at any point.

Document Checks

BNDRY allows the Customer to confirm your identity by checking the details of a document you provide against official records held by the relevant document issuer or government body. Your details are submitted electronically, and the result only indicates whether the information you provided matches official records — it does not share the underlying record itself, and this check may involve third-party systems (see Third-Party Involvement, above).

Where a check like this also involves a biometric step, such as matching a photo of you against your document, any facial image collected from you is used only to complete that check and is not kept any longer than needed to do so, or used for any other purpose.

This check is always optional. If you don't consent, or would rather not proceed, the Customer will offer you another way to provide your information or verify your identity.

Before any check is initiated, you must provide explicit, separate consent with the statement:

"I confirm that I am authorised to provide the personal details presented and I consent to my information being checked with the document issuer."

If you have a complaint about how this check was carried out, see Complaints, below. For general information about how Australia's government document-checking system is administered, contact BNDRY or the Customer using those same details.

ConnectID Identity Service

BNDRY participates in ConnectID, Australia's digital identity network. Where the Customer has enabled it, you can use ConnectID as an alternative way to verify your identity, instead of providing documents directly.

How It Works

ConnectID lets you ask an organisation you already have a verified relationship with (an Identity Provider, such as your bank) to share your identity and attribute information, or simply a verification or assertion of your identity (together, Identity Data), with BNDRY. BNDRY then provides this Identity Data to the Customer, or otherwise uses it to confirm your details with them. Depending on how the Customer has set up its use of BNDRY, you may complete this step directly within the Customer's own website or app, or through a secure form or portal operated by BNDRY on the Customer's behalf. Identity Data may include information such as your name, phone number, email, date of birth or address, or a verification or assertion of your identity, such as confirmation that you are over 18.

The ConnectID Identity Service is only available where you meet the eligibility requirements below, where it has been enabled for the product or service you're using, and where your chosen Identity Provider holds valid accreditation as part of ConnectID.

Identity Data is transferred on a bilateral basis between BNDRY and your Identity Provider (a Digital Identity Transaction). The ConnectID Operator does not access or hold your Identity Data at any point — it passes directly from your Identity Provider to BNDRY, and BNDRY then transfers it to the Customer or otherwise uses it to confirm your information with them.

Every Digital Identity Transaction happens at your request and by your choice, using an Identity Provider you select, and only with your express consent given to that Identity Provider. If you don't consent, the transaction won't proceed, and the Customer will offer you another way to provide your information or verify your identity.

Each Digital Identity Transaction is a one-off transfer. If you want to share your Identity Data again, including asking the same Identity Provider for the same information, you'll need to give your consent again as a new transaction.

Eligibility

You will only be able to complete a Digital Identity Transaction if:

1. you have a digital account with your chosen Identity Provider, and you verified your identity and certain core Identity Data (such as your name, phone number, email and date of birth) with them within the last 5 years; and
2. you meet the minimum age requirements set out in your Identity Provider's own terms of service for ConnectID.

Your Acknowledgments

By using the ConnectID Identity Service, you acknowledge and agree that:

1. in respect of each Digital Identity Transaction:
   1. any Digital Identity Transaction you request through the ConnectID Identity Service is governed by this page;
   2. your Identity Provider will ask you to review the Identity Data before it's transferred to BNDRY, to confirm it's accurate and to give your express consent to that transfer;
   3. where you consent to that transfer:
      1. you consent to BNDRY providing that Identity Data to its Customer as described above;
      2. the Customer may collect, use and disclose the Identity Data as you've consented to as part of the Identity Service described above, and for any further purpose you separately consent to or that's otherwise permitted by applicable privacy law, the Customer's own terms with you, and its privacy policy;
      3. BNDRY may collect, use and disclose the Identity Data as you've consented to as part of the Digital Identity Transaction and the Identity Service described above, to provide the service to its Customer, for audit or compliance purposes, and for any further purpose you separately consent to or that's otherwise permitted by applicable privacy law, BNDRY's terms with you, and BNDRY's Privacy Policy;
      4. once your Identity Provider has transferred your Identity Data to BNDRY and its Customer, the Identity Provider no longer controls, and is not responsible for, its security or handling — this page and each party's own privacy policy govern how BNDRY and its Customer handle it from that point, not your terms or privacy policy with the Identity Provider; and
      5. if BNDRY or its Customer experiences a security or data incident affecting your Identity Data, you consent to BNDRY collecting information about the incident from its Customer, and to BNDRY providing your Identity Provider with information about the incident, including your Personal Information and the affected Identity Data, so that the Identity Provider can act to prevent or respond to cyber security incidents, fraud, scams or identity theft;
   4. neither BNDRY, its Customer nor the ConnectID Operator endorses or makes any representation about the suitability of an Identity Provider's own security or privacy practices; and
   5. BNDRY, its Customer and the ConnectID Operator exclude all liability to you to the maximum extent the law allows, in connection with any act or omission of an Identity Provider.
2. these exclusions are held on trust by BNDRY for the ConnectID Operator — although the ConnectID Operator isn't a party to this page, it can rely on your acknowledgment of and agreement to them; and
3. Digital Identity Transactions operate separately to the Consumer Data Right scheme. If you'd like to access the Consumer Data Right scheme, contact the Customer directly to find out whether that option is available to you.

Withholding or Suspending the Service

BNDRY and/or its Customer may withdraw or suspend the ConnectID Identity Service at any time. BNDRY, its Customer, or your Identity Provider may also be unable to make the service available, or to process a Digital Identity Transaction relating to you, for reasons including that:

1. the underlying transaction you're conducting isn't one the service can be used for;
2. you don't meet the eligibility requirements above, or your Identity Provider isn't able to supply the requested Identity Data;
3. there are reasonable grounds to suspect fraud (including identity fraud) or a security incident connected to you, the transaction, or your Identity Provider;
4. BNDRY's or its Customer's participation in the ConnectID network has been suspended or terminated; or
5. there are grounds to believe the transaction needs closer attention, for example because it relates to you as a vulnerable person.

Fees

Neither BNDRY nor its Customer will charge you any fee for a Digital Identity Transaction performed with ConnectID.

Access to and Updates of Your Identity Data

1. You can request access to, or correction of, your Personal Information held by BNDRY or its Customer by contacting the relevant party in line with its privacy policy.
2. Updating your details with BNDRY or its Customer doesn't update your record with your Identity Provider — you'll need to contact them separately to update the information they hold.
3. If you suspect fraud connected to your identity, your account, or a Digital Identity Transaction or Identity Service that you didn't authorise, notify BNDRY or its Customer as soon as possible.

Compliance Framework

BNDRY operates under the Privacy Act 1988 (Cth) and adheres to the Australian Privacy Principles (APPs). We collect information to satisfy the Customer's identity verification requirements under applicable Australian legislation and, where relevant, the rules of the ConnectID network.

Your Rights

You may:

• Access the personal information BNDRY holds about you
• Request correction of inaccurate data
• Lodge a complaint regarding how your information has been handled

To exercise these rights in relation to information BNDRY holds, contact [email protected] or write to C/- Boardroom Pty Limited, Level 8, 210 George Street, Sydney NSW 2000. We aim to respond within 30 days. If your request relates to information held by the Customer, contact them directly using the details in their own privacy policy.

Complaints

If you have a complaint about identity verification carried out on the Customer's behalf, contact BNDRY at [email protected] or its Customer directly, using the details in its own privacy policy.

Where your complaint relates to the ConnectID Identity Service and concerns the conduct of an Identity Provider you asked to share your Identity Data, BNDRY or its Customer may direct you to raise that complaint directly with the Identity Provider.

Unresolved complaints may be escalated to the Office of the Australian Information Commissioner.

Definitions

BNDRY means BNDRY Pty Ltd ABN 49 678 808 449, acting as a Representative under the ConnectID Network Rules.

ConnectID Operator means ConnectID Pty Ltd ABN 80 648 970 101, or its related bodies corporate.

Customer means the organisation whose product or service you are using, that has engaged BNDRY to provide the identity verification described on this page in connection with your relationship with that organisation. Also referred to as a Beneficiary under the ConnectID Network Rules.

Digital Identity Transaction means a single transfer of Identity Data between BNDRY and an Identity Provider, as described under ConnectID Identity Service above.

Identity Data means identity and attribute information, or a verification or assertion of your identity, provided by an Identity Provider as described under ConnectID Identity Service above.

Identity Provider means an organisation you have an existing relationship with that is accredited to provide Identity Data to BNDRY as part of the ConnectID network.

Personal Information has the meaning given in the Privacy Act 1988 (Cth).

Privacy Policy means, in respect of BNDRY, the Identitii Privacy Policy available at identitii.com/legal/governance, and, in respect of the Customer, its own privacy policy.

You means the individual whose identity is being verified under this page, being the Customer's customer, member, client or other service recipient.