Privacy Policy

Last Updated: September 1, 2025

Introduction

Welcome to MellatPay. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our financial services application.

MellatPay is a digital payment platform that provides secure financial services in Afghanistan. As a financial institution, we are required to comply with strict regulatory requirements including Know Your Customer (KYC) and Know Your Business (KYB) verification processes.

By using our services, you consent to the collection and use of your information as described in this policy. Please read this policy carefully to understand our practices regarding your personal data.

Information We Collect

Personal Information

We collect personal information that you provide directly to us during account registration and verification processes:

  • Full name and date of birth
  • National identification number or passport details
  • Contact information (phone number, email address, physical address)
  • Employment information and income details
  • Bank account information for linking services

Identity Verification Documents

For regulatory compliance and fraud prevention, we collect identity verification documents including:

  • Government-issued photo identification (passport, national ID card, driver's license)
  • Proof of address documents (utility bills, bank statements)
  • Business registration documents (for business accounts)
  • Tax identification numbers and related documentation

Transaction Information

We collect information about your financial transactions and account activity:

  • Payment history and transaction details
  • Account balances and financial activity
  • Merchant and recipient information
  • Device and location information for security purposes

Camera Access and Photo Capture

Our application requires access to your device's camera to capture photos of identity documents and perform facial verification. This camera access is mandatory for account verification and ongoing security measures.

Camera access is used exclusively for identity verification purposes and is essential for compliance with financial regulations including Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) requirements.

Camera access is used for:

  • Capturing clear photos of government-issued identification documents
  • Taking selfie photos for facial recognition and identity verification
  • Scanning QR codes for secure payment transactions
  • Documenting proof of address and other required verification documents
  • Performing liveness detection to prevent fraud and identity theft
  • Re-verification processes as required by regulatory compliance

How We Use Your Information

  • Account creation and identity verification (KYC/KYB compliance)
  • Processing financial transactions and maintaining account security
  • Fraud prevention and risk assessment
  • Regulatory compliance and reporting to financial authorities
  • Customer support and service improvement
  • Marketing communications (with your consent)
  • Legal compliance and law enforcement cooperation when required

Data Security and Protection

We implement industry-leading security measures to protect your personal and financial information. Your data is encrypted both in transit and at rest using advanced encryption standards.

Our security infrastructure includes multiple layers of protection designed specifically for financial services:

  • End-to-end encryption for all data transmission
  • Secure data centers with 24/7 monitoring
  • Multi-factor authentication and biometric security
  • Regular security audits and penetration testing
  • Employee background checks and security training
  • Compliance with international financial security standards

Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your information only in the following circumstances:

With regulatory authorities and government agencies as required by law for financial compliance, anti-money laundering, and counter-terrorism financing purposes.

With trusted service providers who assist us in operating our platform, subject to strict confidentiality agreements.

In response to legal processes, court orders, or to protect our rights and the safety of our users.

Your Privacy Rights

  • Access: You can request access to your personal information we hold
  • Correction: You can request correction of inaccurate or incomplete information
  • Deletion: You can request deletion of your data, subject to legal and regulatory requirements
  • Portability: You can request a copy of your data in a structured format
  • Objection: You can object to certain processing of your personal information
  • Withdrawal of consent: You can withdraw consent for non-essential processing

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

Phone: +93 (0) 20 123 4567

Address: Kabul, Afghanistan

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and through our mobile application.

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.