Privacy Policy

1. INTRODUCTION

1.1. eZeePay (“eZeePay”, the “Company”, “we”, “our”, or “us”) is committed to protecting and respecting your privacy and ensuring that your Personal Data is processed in compliance with applicable laws of the United Arab Emirates (“UAE”).

1.2. This Privacy Policy (“Policy”) applies to:

• Visitors to our website www.eZeePay.me;
• Users of our mobile applications (Android and iOS);
• Individuals applying for or using services facilitated through the eZeePay platform (“Services”);
• Authorized representatives, directors, beneficial owners, and employees of business customers.

1.3. eZeePay facilitates digital wallet, payment, payroll (WPS), remittance, and related financial technology services in collaboration with duly licensed financial institutions and regulated entities in the UAE. eZeePay itself does not hold independent licenses from the Central Bank of the UAE (“CBUAE”), and Services are provided pursuant to arrangements with licensed partners including, but not limited to:

• Retail Payment Services and Card Schemes license holders;
• Stored Value Facility (SVF) license holders;
• Wage Protection System (WPS) agents;
• Cross-Border Money Transfer license holders;
• Regulated BIN sponsors and payment processors.

1.4. In certain circumstances, licensed partners may act as independent data controllers in accordance with their own privacy policies and regulatory obligations.

2. LEGAL AND REGULATORY FRAMEWORK

2.1. This Policy is prepared in accordance with:

• Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL);
• Applicable provisions of the Retail Payment Services and Card Schemes Regulation;
• Stored Value Facilities Regulation;
• Consumer Protection Regulation and Consumer Protection Standards issued by CBUAE;
• Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT) laws;
• Any other applicable UAE federal or local regulations.

2.2. Where Services are provided through licensed partners, such partners remain subject to CBUAE supervision and applicable regulatory obligations.

3. DEFINITIONS

“Personal Data” means any data relating to an identified or identifiable natural person.

“Processing” means any operation performed on Personal Data including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, transfer, or erasure.

“Platform” means www.eZeePay.me, mobile applications, and related digital interfaces.

4. LAWFUL BASIS FOR PROCESSING

We process Personal Data on the following legal bases:

• Performance of a contract with you;
• Compliance with legal and regulatory obligations (including AML/KYC requirements);
• Legitimate business interests;
• Your consent (where required under PDPL).

Failure to provide required Personal Data may prevent us from providing Services.

5. PERSONAL DATA WE COLLECT

We may collect the following categories of Personal Data:

6. PURPOSES OF PROCESSING

We process Personal Data to:

• Onboard and verify customers (KYC/AML compliance);
• Facilitate wallet, card, payroll, and remittance transactions;
• Prevent fraud and financial crime;
• Comply with CBUAE and other regulatory requirements;
• Provide customer support;
• Improve our Platform and Services;
• Maintain security and system integrity;
• Establish, exercise, or defend legal claims.

7. DISCLOSURE OF PERSONAL DATA

7.1. We may share Personal Data with:

• Licensed financial institutions and BIN sponsors;
• Payment processors and card schemes;
• WPS agents;
• Cross-border remittance partners;
• AML/KYC verification service providers;
• Government and regulatory authorities (including CBUAE);
• Law enforcement agencies;
• Auditors and professional advisors.

7.2. All third parties are contractually bound to maintain confidentiality and comply with applicable data protection laws.

8. INTERNATIONAL DATA TRANSFERS

8.1. Personal Data may be transferred outside the UAE where necessary to facilitate cross-border transactions or use international processors.

8.2. Where transferred outside the UAE, appropriate safeguards shall be implemented in accordance with PDPL, including:

• Adequacy decisions;
• Standard contractual clauses;
• Binding corporate rules;
• Explicit consent where required.

9. DATA RETENTION

9.1. Personal Data shall be retained only for as long as necessary to fulfill:

• Contractual obligations;
• Regulatory requirements;
• AML/CFT compliance;
• Legal record-keeping requirements.

9.2. In accordance with CBUAE Consumer Protection Standards and AML regulations, certain records may be retained for a minimum of five (5) years following termination of the customer relationship, or longer where legally required.

10. DATA SECURITY

10.1. We implement appropriate technical and organizational measures including:

• Encryption of sensitive data;
• Secure server environments;
• Access control restrictions;
• Network security monitoring;
• Regular vulnerability assessments.

10.2. While we take reasonable measures to protect Personal Data, no method of transmission over the internet is completely secure.

10.3. In the event of a Personal Data breach that may affect your rights, we shall notify affected individuals and competent authorities in accordance with PDPL and applicable regulatory obligations.

11. YOUR RIGHTS UNDER PDPL

Subject to applicable law, you have the right to:

• Access your Personal Data;
• Request rectification;
• Request erasure;
• Restrict processing;
• Object to processing;
• Data portability;
• Withdraw consent;
• Lodge a complaint with the UAE Data Office or the Consumer Protection Department at CBUAE.

Requests may be submitted to: Hello@eZeePay.me

We may request identity verification prior to responding.

12. COOKIES AND TRACKING

Our Platform uses cookies for authentication, performance analytics, fraud prevention, and user experience optimization. You may manage cookie preferences via browser settings.

13. THIRD-PARTY LINKS

Our Platform may contain links to third-party websites governed by their own privacy policies. eZeePay is not responsible for their data practices.

14. PROCESSING WITHOUT CONSENT

We may process Personal Data without consent where:

• Required by law;
• Required by court order;
• Necessary for AML/CFT compliance;
• Required for public interest or regulatory enforcement.

15. CONTACT DETAILS

For privacy-related inquiries, requests, or complaints:

eZeePay

Email: Hello@eZeePay.me