The regulator said it had concerns Aylo "may not have conducted sufficient due diligence" over verifying the age of its users.