| 1. | In addition to all other requirements in the Regulations and Rulebooks, VASPs providing Broker-Dealer Services shall establish, implement and enforce appropriate written internal policies and procedures relating to the following— |
| | a. | the prohibition, detection, prevention and/or deterrence of Market Offences and any other abusive practices within their business or using their services including, but not limited to, relevant internal rules, compliance programmes, sanctioning policies and powers; |
| | b. | execution and routing of client orders; |
| | c. | the ability of clients to have access to and withdraw their Virtual Assets including, but not limited to, during periods of high uncertainty and/or extreme volatility; and |
| | d. | such other policies and procedures as VARA may require from time to time. |
| 2. | VASPs providing Broker-Dealer Services shall assess and, in any case, at least yearly review the effectiveness of their policies and procedures and take appropriate measures to address any deficiencies.| |