Introduction

At YazzPay, the security of your personal and financial information is our top priority. This Security Policy outlines the measures we take to protect your data and ensure a secure environment for all transactions. By using our platform, you agree to the security practices described herein.

Data Encryption

1. Encryption in Transit: All data transmitted between your device and our servers is encrypted using Secure Socket Layer (SSL) technology. This ensures that your information is protected from interception during transmission.
2. Encryption at Rest: Sensitive information, including personal and financial data, is encrypted at rest using advanced encryption standards (AES-256). This ensures that even if data is accessed without authorization, it remains unreadable.

1. 
   

Authentication and Access Control

1. Two-Factor Authentication (2FA): We offer 2FA to add an extra layer of security to your account. This requires not only your password but also a second form of verification, such as a code sent to your mobile device.
2. Strong Password Requirements: Users are required to create strong passwords that meet our complexity requirements, reducing the risk of unauthorized access.
3. Account Access: Access to sensitive information is restricted to authorized personnel only. We implement role-based access controls to ensure that employees only have access to the information necessary for their job functions.

1. 
   

KYC Verification

1. Identity Verification: As part of our Know Your Customer (KYC) process, we collect and verify your CNIC and a selfie during registration. This helps prevent fraudulent activities and ensures that only legitimate users can access our services.
2. Secure Storage: All KYC data is stored securely and is accessible only to authorized personnel for verification and compliance purposes.
3. 
   

Monitoring and Auditing

1. Real-Time Monitoring: We continuously monitor our systems for suspicious activity and potential security threats. Our security team is alerted to unusual patterns and can respond promptly to any incidents.
2. Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security gaps. This includes both internal reviews and external audits by independent security experts.
3. 
   

Fraud Prevention

1. Transaction Monitoring: We use advanced algorithms and machine learning to monitor transactions for signs of fraud. Suspicious transactions are flagged for further review, and users may be contacted to verify their activity.
2. Account Alerts: Users receive notifications for significant account activities, such as large transactions or changes to account settings. This helps users stay informed and quickly identify unauthorized actions.

1. 
   

User Responsibilities

1. Protecting Credentials: Users are responsible for maintaining the confidentiality of their account credentials. We recommend using unique passwords and enabling two-factor authentication for added security.
2. Reporting Suspicious Activity: Users should immediately report any suspicious activity or unauthorized access to our support team. Prompt reporting helps us take swift action to secure accounts and investigate incidents.
3. 
   

Incident Response

1. Response Plan: We have a comprehensive incident response plan in place to address security breaches. This includes identifying the breach, containing it, eradicating the threat, and recovering affected systems.
2. User Notification: In the event of a security breach that affects your personal information, we will notify you promptly and provide information on the steps we are taking to mitigate the impact.

Contact Us

If you have any questions or concerns about our Security Policy, please contact us at [email protected]. We are committed to addressing your concerns and ensuring the highest level of security for your information.

By using YazzPay, you acknowledge that you have read and understood this Security Policy and agree to its terms.