Identity verification

Identity verification on Asterune means confirming who you are using a government-issued ID document. This page explains when it may be required, how the process works, what data is collected, and which jurisdictions legally require us to carry it out.

Identity verification is not required to use Asterune#

Creating an account, playing games, joining communities, and using the vast majority of Asterune's features does not require identity verification. We ask for your date of birth at registration and use automated signals to infer age, but we do not require you to prove your identity with a government-issued document as a condition of using the platform.

We will not use identity verification as a general prerequisite for account creation or routine platform access, except where the law of your jurisdiction specifically requires it (see Legally required jurisdictions below).

When identity verification may be requested#

There are specific circumstances in which Asterune may request identity verification. These fall into two categories: cases where verification is triggered by platform signals, and cases where you opt into a program that requires it.

Fraud and account security#

If our automated systems or moderation team detect activity that suggests fraud, identity theft, account takeover, or coordinated abuse, we may request identity verification before restoring or continuing access to the affected account. This is a protective measure for the account holder as much as for the platform. Specific triggers include:

• Payment fraud signals — unusual purchase patterns, use of payment methods associated with fraud, or disputed transactions where account ownership is in question
• Suspected account compromise — signs that your account may have been accessed by someone other than you, particularly if recovery options have been changed
• Chargeback or billing disputes — in cases where the identity of the account holder is disputed as part of a payment investigation
• Coordinated abuse — accounts suspected of participating in large-scale fraud, economy manipulation, or multi-accounting schemes

Being asked to verify your identity in these cases does not imply wrongdoing. It is a security step and, once completed, typically results in a quick resolution.

Spam and automated behaviour#

If your account is flagged for behaviour consistent with bot activity, spam, or automated abuse — such as mass-messaging, coordinated account creation, or high-frequency interactions inconsistent with normal use — we may request identity verification to confirm a real person is behind the account. This helps us protect users from spam and maintain the quality of the platform for everyone.

Content or conduct investigations#

In serious moderation cases — particularly those involving potential illegal content, confirmed threats, or conduct that may require referral to authorities — we may be legally obligated or operationally required to verify the identity of the account holder before proceeding.

Developer Exchange (KYC requirement)#

The Developer Exchange is Asterune's program allowing creators to convert Runes earned through their games and content into real-world currency. Because this involves the transfer of real money, it is subject to Know Your Customer (KYC) and anti-money laundering (AML) requirements under financial regulations.

To participate in the Developer Exchange, you must complete identity verification. This is a firm requirement with no exceptions, regardless of your jurisdiction. It applies to:

• All new Developer Exchange applicants, before their first payout
• Existing participants whose identity has not been previously verified

The KYC process for the Developer Exchange is more thorough than a standard identity check. In addition to a government-issued ID document, you may be asked to provide supplementary information such as proof of address or tax identification. The full requirements are set out in the Developer Exchange documentation.

Legally required jurisdictions#

In certain jurisdictions, applicable law requires online platforms to verify the age or identity of users, either at registration or before allowing access to certain features. Where such requirements apply to Asterune, we will request identity verification from users in those jurisdictions as necessary to comply.

The following is an overview of jurisdictions where legal requirements currently in effect or imminently effective may apply to Asterune. This list reflects our understanding as of the date this page was last updated. Laws in this area are evolving rapidly; we will update this page as requirements change.

We only collect what each law specifically requires. In jurisdictions that permit age assurance rather than full identity verification — such as facial age estimation or device-based checks — we will use the least invasive method that satisfies the legal obligation.

Australia#

Australia's Online Safety Amendment Act (effective December 2025) requires platforms providing social or interactive services to take reasonable steps to prevent users under 16 from creating or maintaining accounts. As of March 2026, these obligations extend to platforms with gaming or interactive content components. Asterune users in Australia may be required to complete age verification.

United Kingdom#

The Online Safety Act 2023 (codes effective July 2025) requires all "user-to-user" platforms operating in the UK to take steps to prevent children from accessing harmful content and, in higher-risk categories, to implement age verification. As a platform with social interaction features, Asterune must comply with these obligations for users in the UK.

United States — specific states#

Several U.S. states have enacted laws requiring age verification for platforms with social media or interactive features. The following state laws are currently in effect and may require age verification for Asterune users in those states:

• Tennessee — social media age verification law in effect following a federal court ruling in June 2025
• Mississippi — HB 1126 in effect following the Fifth Circuit's ruling in July 2025
• Florida — social media age verification law effective January 1, 2025
• Louisiana — age verification requirement for interactive platforms, effective January 1, 2023
• Utah — age verification and parental consent requirements in effect
• Georgia — SB 351, age verification and parental consent for users under 16, effective July 1, 2025
• Virginia — age verification law effective January 1, 2026

Additional U.S. state laws are pending or subject to ongoing legal challenges. We continue to monitor developments and will update this list accordingly.

Brazil#

Brazil's digital child safety law — which includes age verification requirements and parental consent obligations for users under 16 — took effect in March 2026. Asterune users in Brazil may be required to complete age verification as part of compliance with this law.

France#

France's law requiring age verification for minors on social and interactive platforms, passed by the National Assembly in January 2026, is expected to take effect in late 2026. We are monitoring the implementation timeline and will update requirements for French users accordingly.

Malaysia#

Malaysia's Online Safety Act and accompanying under-16 platform restrictions require age verification via electronic KYC methods. These requirements are expected to take effect in Q2 2026. Asterune will implement age verification for Malaysian users ahead of or upon that date.

Other EU member states#

The European Union's regulatory direction under the Digital Services Act (DSA), combined with national-level initiatives in Denmark, Norway, Spain, and Italy, is moving toward harmonised age verification requirements for interactive platforms across the EU. We are monitoring developments at the EU level and will update this page as obligations are finalised.

How identity verification works#

Identity verification on Asterune is carried out entirely by Stripe Identity, a third-party verification service operated by Stripe. Stripe is a GDPR-compliant processor and a globally recognised provider of identity verification infrastructure.

The process typically works as follows:

1. You are prompted within the Asterune interface to complete identity verification.
2. You are directed to a Stripe-hosted verification flow. This flow is operated by Stripe, not Asterune.
3. Within the Stripe flow, you are asked to take a photo of a government-issued ID document (such as a passport, national ID card, or driver's licence) and, in most cases, a selfie or short video for liveness detection.
4. Stripe's systems verify the authenticity of the document, confirm that the selfie matches the ID photo, and return a verification result to Asterune.
5. Asterune receives only the outcome of that verification — whether you passed and, in age-verification contexts, whether you meet the applicable age threshold.

What Asterune does and does not receive#

Asterune receives a verification result from Stripe. We do not receive:

• Images of your ID document
• Your ID number, document expiry, or other document fields
• Your biometric data or selfie images
• Anything beyond the minimum necessary to act on the result

Stripe retains the data it collects during verification in accordance with its own Privacy Policy and applicable law. We encourage you to review Stripe's privacy documentation if you have questions about how your data is handled during the verification flow.

Accepted documents#

Stripe Identity accepts a wide range of government-issued documents. Accepted types vary by country and may include:

• Passports
• National identity cards
• Driver's licences
• Residence permits (in some jurisdictions)

The Stripe verification flow will indicate which document types are accepted in your country when you begin the process.

Refusing to verify#

If identity verification is requested for fraud prevention, spam, or security reasons, declining to complete it may result in limited account access or temporary suspension of affected features until the matter can be resolved. We will always try to work with you to find a resolution.

If verification is required by applicable law in your jurisdiction and you choose not to complete it, we may be legally unable to provide access to the relevant features or services in your region. We will communicate clearly what is and isn't available to you in that situation.

If you have concerns about completing identity verification — for example, if you do not have access to an accepted document — please contact us at Solarius support and we will do our best to help.

Your data rights#

Even though Asterune does not store your ID document or biometric images, you may still have rights relating to the data involved in identity verification. If you are an EU resident, these include rights under GDPR. Equivalent protections exist under applicable law in many other countries.

To exercise any rights relating to data processed during identity verification:

• Contact us at [email protected] for any data Asterune holds in connection with your account
• Contact Stripe directly at stripe.com/privacy for data processed by Stripe during the verification flow

For a full description of your rights and how we handle personal data on Asterune, see our Privacy Policy.

Appeals and concerns#

If your account was restricted pending identity verification and you believe this was in error, you can submit an appeal at Solarius support or by clicking the "Appeal" button on your account notice. Please include any relevant context — for example, if you were flagged for automated behaviour but believe your account was compromised and used without your knowledge.

For questions not covered by this page, or concerns about how identity verification has been applied to your account, you can also contact our safety team at [email protected].