That combination seems not unreasonable - basically saying that you should have no expectation that they've performed a background check [and incurred costs] but that they reserve the right to perform them on any user at their own discretion should they decide to incur those costs.