PAYZON

Defines customer verification, KYC, AML/CFT, risk-based due diligence, monitoring, escalation and compliance controls applicable to the Company's role and services.

Provides continuity and recovery arrangements for critical processes, technology, backups, restoration, vendors, cyber incidents and emergency operations.

Governs customer complaints, disputes, chargebacks, unauthorised transactions, investigation, escalation, resolution, refunds and customer communication.

Defines cyber incident detection, classification, containment, investigation, evidence preservation, cyber-fraud response, escalation and recovery.

Controls personal and confidential data, privacy, lawful processing, access, security, retention, record integrity, legal holds and secure disposal.

Covers fraud-risk assessment, transaction monitoring, suspicious patterns, alerts, investigation, blocking or review, escalation and fraud reporting.

Sets the customer-facing framework for gift card and voucher purchase, activation, validity, redemption, restrictions, misuse, refunds and applicable terms.

Establishes information-security and cyber-security governance covering access, systems, applications, APIs, endpoints, vulnerabilities, monitoring and awareness.

Governs refunds, cancellations, reversals, customer transactions, approvals, settlement impact, fulfilment and customer communication.

Governs vendor due diligence, risk classification, onboarding, contracts, security and privacy requirements, monitoring, incidents, continuity and exit controls.

Defines transaction limits, velocity controls, exposure management, risk-based restrictions, overrides, monitoring and escalation mechanisms.