- CRA-4.5 CRA-4.5 Client Protection
- Segregation and Handling of Clients' Assets
- CRA-4.5.1- Licensees undertaking- regulated crypto-asset service and authorised to hold- clients’ assets must apply the same standards and comply with the requirements of segregation and handling of- clients’ assets Rules set out in this Section.Amended: April 2023
 Added: April 2019
- CRA-4.5.1A- For the purpose of this Module, “clients assets” means - crypto-assets , money and other assets received or held on behalf of a client by the- licensee and any- crypto-assets , money or other assets accruing therefrom.Added: April 2023
- CRA-4.5.2- For purposes of safeguarding client's rights in relation to - crypto-assets and- client money which are held or controlled by the- licensee , a- licensee must hold clients' money and/or to- crypto-assets in specially created and segregated accounts. These accounts must be identified separately from any other accounts used to hold money and/or to- crypto-assets belonging to the- licensee .Amended: April 2023
 Added: February 2019
- CRA-4.5.3- A - licensee must obtain a written declaration from the entities with whom the- licensee has deposited- client assets that the said entity renounces and will not attempt to enforce or execute, any charge, right of set-off or other claim against the account.Amended: April 2023
 Added: April 2019
- Client Money Client Money
- CRA-4.5.4- A - licensee must properly handle and safeguard- client money . The arrangement to handle and safeguard- client money , must include, but not be limited to the following:(a) Establishing one or more client bank accounts with a retail bank licensed in the Kingdom of Bahrain for safekeeping of- client money ;(b)- Client money must not be paid out of a client bank account other than for:(i) Paying the client on whose behalf it is being held;(ii) Meeting the client’s settlement obligations in respect of dealings in- crypto-assets carried out by the- licensee for the client, being the client on whose behalf it is being held;(iii) Paying money that the client owes to the- licensee in respect of the conduct of- regulated crypto-asset services ; or(iv) Paying in accordance with the client’s written instructions, including standing authorities or one-off directions; and(c) Not used for licensee’s own use or given as collateral for any purpose to a third party or be subject to any restrictions.Amended: April 2023
 Added: April 2019
- CRA-4.5.5- Client money must be received by the- licensee directly into a client bank account.Added: April 2019
- CRA-4.5.5A- A - licensee must match any unidentified receipts in its client bank accounts with all relevant information in order to establish the nature of any payment and the identity of the person who has made it. Where the receipt is not- client money , within one business day of becoming so aware, that amount of money should be paid out of the client bank account.Added: April 2023
- Reconciliation of Clients' Money
- CRA-4.5.6- Licensees must reconcile, at least on a monthly basis, the balance on each client's money account as recorded by the- licensee with the balance on that account as set out in the statement issued by the entity with whom the- licensee has deposited clients' money.Added: April 2019
- CRA-4.5.7- Licensees must also reconcile, at least on a monthly basis, the total of the balances on all clients' money accounts as recorded by the- licensee with the total of the corresponding credit balances in respect of each of its clients as recorded by the- license .Added: April 2019
- CRA-4.5.7A- Licensees must ensure that the- client money reconciliations referred to in Paragraphs CRA-4.5.6 and CRA-4.5.7 are completed within 10 business days from the end of the months. Any differences, shortfalls and excess balances must be investigated, and corrective measures taken to restore correct client asset balance.Added: April 2023
- Risk Disclosure to Clients
- CRA-4.5.8- As part of establishing a relationship with a - client , and prior to entering into an initial transaction with such client,- licensee must disclose in clear, conspicuous, and legible writing in both Arabic and English languages, all material risks associated with- crypto-asset products and services including at a minimum, the following:(a) A- crypto-asset is not a legal tender and is not backed by the government;(b) legislative and regulatory changes or actions at national level or international level may adversely affect the use, transfer, exchange, and value of- crypto-assets ;(c) transactions in- crypto-assets may be irreversible, and, accordingly, losses due to fraudulent or accidental transactions may not be recoverable;(d) some- crypto-asset transactions may be deemed to be made when recorded on a public ledger, which is not necessarily the date or time that the- client initiates the transaction;(e) the value of- crypto-assets may be derived from the continued willingness of market participants to exchange- fiat currency for- crypto-asset , which may result in the potential for permanent and total loss of value of a particular- crypto-asset should the market for that- crypto-asset disappear;(f) the volatility and unpredictability of the price of- crypto-assets relative to- fiat currency may result in significant loss over a short period of time;(g) [This Subparagraph was deleted in April 2023];(h) the nature of- crypto-assets means that any technological difficulties experienced by the- licensee may prevent the access or use of a client's- crypto-assets ; and(i) any investor protection mechanism.Amended: April 2023
 Added: April 2019
- Disclosure of General Terms and Conditions
- CRA-4.5.9- When registering a new - client , and prior to entering into transactions with such- client , a- licensee must disclose in clear, conspicuous, and legible writing in both Arabic and English languages, all relevant terms and conditions associated with its products and services including at a minimum, the following:(a) the- client's liability for unauthorized- crypto-asset transactions;(b) the- client's right to stop payment of a preauthorized- crypto-asset transfer and the procedure to initiate such a stop-payment order;(c) under what circumstances the- licensee will disclose information concerning the client's account to third parties;(d) the- client's right to receive periodic account statements from the- licensee ;(e) the- client's right to receive a confirmation note or other evidence of a transaction;(f) the- client's right to prior notice of a change in the- licensee's rules or policies or terms and conditions; and(g) [This Subparagraph was deleted in April 2023].(h) cybersecurity risks associated with- crypto-assets including the risk of partial or full loss of- crypto-assets in the event of a cyber-attack, and measures that have been put in place to mitigate the cyber security risks.Amended: April 2023
 Added: April 2019
- CRA-4.5.9A- In addition to the disclosure requirements stipulated in Paragraph CRA-4.5.9, Category-1, Category-2 and Category-3 - crypto-asset licensees must disclose, in writing, the following information to clients:(a) How they execute and route- client’s order and source liquidity (e.g. whether they pass or route orders to an exchange to execute). Where the- licensee routes- client orders to one or more crypto-asset exchanges for execution, it must disclose details of all the crypto-asset exchanges;(b) Whether it may carry trading in- crypto-assets as principal, and if so, whether, it may trade against client’s position; and(c) How it determines the prices of the- crypto-assets it quotes to clients.Added: April 2023
- Disclosure of the Terms of Transactions
- CRA-4.5.10- Prior to each transaction in a - crypto-asset with a- client , a- licensee must furnish to the- client a written disclosure in clear, conspicuous, and legible writing in both Arabic or English languages, containing the terms and conditions of the transaction, which must include, at a minimum, to the extent applicable:(a) the amount of the transaction;(b) any fees, expenses, and charges borne by the client, including applicable exchange rates;(c) the type and nature of the- crypto-asset transaction;(d) a warning that once executed the transaction may not be undone; and(e) such other disclosures as are customarily given in connection with a transaction of this nature.Amended: April 2023
 Added: April 2019
- Acknowledgement of Disclosure
- CRA-4.5.11- A - licensee must ensure that all disclosures required in this Section are acknowledged as received by clients.Added: April 2019
- Confirmation Note
- CRA-4.5.12- Upon completion of any transaction, a - licensee must provide to the client a confirmation note containing the following information:(a) the type, value, date, and precise time of the transaction;(b) the fee charged;(c) the exchange rate, if applicable;(d) the name and contact information of the- licensee , including a telephone number established by the- licensee to answer questions and register complaints;Added: April 2019
- CRA-4.5.12A- Where a - client undertakes more than one transaction, the- licensee may prepare a single confirmation note which:(a) Records all of those transactions; and(b) In respect of each of those transactions includes all of the information which would have been required to be included in the confirmation note.Added: April 2023
- CRA-4.5.12B- Licensees must provide the confirmation note to the client no later than the end of the business day on which the transaction was undertaken.Added: April 2023
- CRA-4.5.13- [This Paragraph was deleted in April 2023]. Deleted: April 2023
 Added: April 2019
- Prevention of Fraud
- CRA-4.5.14- Licensees must take reasonable steps to detect and prevent fraud, including by establishing and maintaining a written anti-fraud policy. The anti-fraud policy must, at a minimum, include:(a) the identification and assessment of fraud-related risk areas;(b) procedures and controls to protect against identified risks;(c) allocation of responsibility for monitoring risks and establish real-time/near real-time fraud risk monitoring and surveillance system; and(d) procedures for the periodic evaluation and revision of the anti-fraud procedures, controls, and monitoring mechanisms.Amended: April 2023
 Added: April 2019
- CRA-4.5.14A- A - client account must be considered dormant if the- client does not trade for a period of 12 (twelve) continuous months. All the accounts designated as dormant need to be monitored carefully in order to avoid unauthorized transactions in the account.Added: April 2023
- CRA-4.5.14B- If a - client wishes to make his/her account active after 12 continuous months or thereafter, the- licensee must ensure that the client submits a request to reactivate his/her account. In case there is any change in the information such as; address, contact details, email ID, bank account, financial disclosure provided in KYC at the time of registration as- client , the same must be submitted along with the request. After verification of the updated / revised details and approval from the compliance officer or money laundering reporting officer (MLRO), the account can be made active and transactions can take place.Added: April 2023
- Client Agreements and Statements
- CRA-4.5.15- Licensees must not provide a- regulated crypto-asset service to a client as mentioned unless there is a client agreement entered into between the- licensee and the- client containing the key information specified in Rule CRA-4.5.16.Amended: April 2023
 Added: April 2019
- CRA-4.5.16- The client agreement referred to in Rule CRA-4.5.15 must include: (a) the name and address of the- licensee ;(b) the regulatory status of the- licensee ;(c) when and how the client agreement is to come into force and how the agreement may be amended or terminated;(d) details of fees, costs and other charges and the basis upon which the- licensee will impose those fees, costs and other charges;(e) sufficient details of the service that the- licensee will provide, including where relevant, information about any product or other restrictions applying to the- licensee in the provision of its services and how such restrictions impact on the service offered by the- licensee ; or if there are no such restrictions, a statement to that effect;(f) details of any conflicts of interests;(g) any soft dollar arrangements;(h) key particulars of the- licensee's complaints handling procedures or dispute resolution procedure; and(i) the- crypto-asset risk disclosure referred to in Rule CRA-4.5.8 and disclosure of general terms and conditions referred to in Rule CRA-4.5.9.Amended: April 2023
 Added: April 2019
- CRA-4.5.16A- Licensees must provide periodic statements i.e. confirmation note, monthly statement of account and annual statement of account to their clients.- Licensees may provide to their clients the periodic statement information through their website and/or application. Where a- licensee provides the periodic statement through its website and application, the licensee is not required to send the periodic statement to their clients separately.Added: April 2023
- Monthly Statement of Account
- CRA-4.5.17- A - licensee must prepare and provide a monthly statement of account to the client no later than 7 business days following the month where any of the following circumstances apply:(a) During a month, the- licensee has provided a confirmation note (refer CRA-4.5.12) or has received funds from the client;(b) At any time during a month, the client has an account balance (funds) that is not nil; or(c) At any time during a month,- crypto-assets are held for the account of the client.Added: April 2023
- CRA-4.5.18- The monthly statement of account referred to in Paragraph CRA-4.5.17 must include the following information: (a) The name and address of the- licensee ;(b) The name, address and account number of the client;(c) The date on which the statement of account is issued;(d) The outstanding balance of that account as at the beginning and as at the end of the month;(e) Details of all transactions undertaken by the client during the month;(f) Inward and outward transfer of- crypto-assets during the month;(g) The quantity, and, in so far as readily ascertainable, the market price and total value of each- crypto-asset held at the end of the month;(h) Details of all funds credited to and fees and charges levied during the month; and(i) Details of any restrictions, such as blocks pursuant to an order by a court or other competent authority.Added: April 2023
- Duty to Provide Statement of Account on Request
- CRA-4.5.19- Where a - licensee receives a request from a client for a statement of account it must provide the client, as soon as practicable after the date of the request but no later than 5 working days from the date of the request, such statement of account which must include the information required as per Paragraph CRA-4.5.18 for the period specified by the client.Added: April 2023
- CRA-4.5.20- Where a - licensee provides the statement of account at the request of the client (refer to CRA-4.5.19), it may impose a reasonable charge on the client for providing the statement of account.Added: April 2023
- CRA-4.5.21- A - licensee must prepare and provide a statement of account to the client, on an annual basis, no later than the end of the seventh business day after the end of the financial year except under following circumstances:(a) There are no transactions;(b) The account balance (funds) is nil; and(c) The balance of- crypto-assets held on behalf of the client is nil.Added: April 2023
- No Restriction on Withdrawal of Client Assets
- CRA-4.5.22- Where a - client requests for withdrawal of- client assets , a- licensee , unless the restriction is pursuant to a freeze or block order from a court or due to factors related to money laundering and terror financing (suspicious transactions), must not impose restriction on withdrawal of the- client assets held under its control.Added: April 2023
