This Privacy Policy explains how Zurva Premier Solutions (SMC-Private) Limited ("ZurvaPay", "we", "us") collects, uses, stores and discloses information when you use our payment gateway, merchant dashboard, agent portal, website and related services (together, the "Services").
1. Information We Collect
We collect the information needed to open and operate an account, process payments, and meet our legal and regulatory obligations as a payment service provider in Pakistan:
- Identity and KYC information — your name, CNIC, father's/next-of-kin details, business name, NTN, business address, and supporting documents (CNIC images, shop or business photos, bank statements) submitted during merchant, sub-merchant or agent registration and KYC verification.
- Account and contact information — email address, mobile number, login credentials, and API keys.
- Transaction data — amounts, order references, payment method (JazzCash, Easypaisa, Raast QR, bank transfer), timestamps, status, and settlement details for every payment processed through your account.
- Technical data — IP address, device and browser information, and system logs generated when you or your customers use our checkout, dashboard or API.
- Communications — messages you send us through support tickets, the contact form, email or WhatsApp.
2. How We Use Your Information
- To create and verify merchant, sub-merchant and agent accounts (KYC/AML checks).
- To process payments and payouts through JazzCash, Easypaisa, Raast QR and bank-transfer rails.
- To detect, investigate and prevent fraud, account takeover, chargeback abuse and other misuse of the Services.
- To provide support, send transaction and account notifications, and respond to enquiries.
- To comply with applicable law, regulatory directives, and requests from competent authorities.
3. Who We Share Information With
We share the minimum information necessary with:
- Payment partners and banks (JazzCash, Easypaisa, Raast/DQRC and settlement banks) strictly to process and settle your transactions.
- Service providers who help us run the platform (hosting, email/SMS delivery, fraud screening) under confidentiality obligations.
- Regulators and law enforcement, as described in Section 4 below.
We do not sell your personal or transaction data to third parties for marketing purposes.
4. Disclosure to Government and Law Enforcement Authorities
ZurvaPay operates a financial service, and unfortunately some individuals attempt to use payment platforms to defraud others — for example, by sending fake invoices or payment requests to deceive people into paying for goods or services that do not exist. To protect our genuine users and to meet our obligations as a regulated payment service provider in Pakistan, ZurvaPay will disclose relevant account, KYC, and transaction data to a government authority, regulator, court, or law-enforcement agency (including but not limited to the State Bank of Pakistan, the Federal Investigation Agency, or a court of competent jurisdiction) when we receive a valid legal request, court order, subpoena, or regulatory directive requiring us to do so. We do not disclose user data to such authorities outside of a valid legal process, and where legally permitted we may notify the affected user that such a request was received.
5. Data Retention
We retain KYC records and transaction data for as long as your account is active and for the period required by applicable financial regulations and record-keeping laws after an account is closed, whichever is longer.
6. Data Security
We use encryption in transit, access controls, and masked storage for sensitive fields (such as API keys and card/account identifiers) to protect your data from unauthorised access. No system is completely immune to risk, and you are responsible for keeping your account credentials and API keys confidential.
7. Your Rights
You may request a copy of the personal information we hold about you, ask us to correct inaccurate information, or ask us to close your account, subject to our legal and regulatory record-keeping obligations. Contact us using the details below to make a request.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date.
9. Contact Us
For any privacy-related question or request, please reach out through our Contact page.