BarakatPay Privacy Policy
Last Updated: February 28, 2025
1. Introduction & Scope
Welcome to Electronic Money Transfer Services - Barakat Pay a digital payments platform available via our website https://barakatpay.com/ and mobile application ("App").
This Privacy Policy (“Policy”) explains how we collect, use, store, and protect user data. By using our services, you agree to the practices outlined in this Policy.
Electronic Money Transfer Services - Barakat Pay is registered under:
- Business License (Registration No.: 169494, License No.: 93383), issued by the Ministry of Industry and Commerce, Afghanistan.
- Tax Registration Certificate (TIN: 9025876385), issued by the Ministry of Finance, Afghanistan.
Note: Failure to read or understand this Policy does not absolve users from their obligations.
2. Information We Collect
We collect both personal and technical information to provide and improve our services.
Registration Information
- Phone Number: Required for account creation and essential service access.
Permissions & Device Access
- Phonebook Contacts (if permitted): Identifies Barakat Pay users for simplified transactions.
- SMS (if permitted): Used for OTP authentication and transaction alerts.
- Camera & Storage (if permitted): For QR code scanning and receipt uploads.
- Users can modify permissions anytime via device settings.
Transaction Details
- Financial Data: Bank name, account numbers, transaction amounts, and history.
- Business & Tax Information: Business name, address, TIN, and employee details.
Technical & Device Information
- Device Identifiers: Includes IP address, MAC address, IMEI, OS/browser type, and ISP.
- Location Data: Collected when location services are enabled.
3. Purpose of Collecting Information
We collect user data to:
- Enable Services: Money transfers, salary deposits, and bill payments.
- Enhance User Experience: Improve usability, security, and personalization.
- Identity Verification & Compliance: Ensure KYC adherence.
- Fraud Prevention & Security: Detect and prevent unauthorized activities.
- Notifications: Provide transaction status updates.
- Customer Support: Assist with queries, disputes, and technical issues.
4. Sharing Information with Third Parties
We do not sell or rent user data. However, data may be shared under these conditions:
Legal & Regulatory Compliance
- When required by law, court orders, or legal processes.
- To comply with Da Afghanistan Bank (DAB) regulations.
Corporate Affiliates
- Shared within our parent, sister, or subsidiary companies under confidentiality agreements.
Contracted Third-Party Providers
- Service providers for payment processing and infrastructure must follow strict confidentiality agreements.
5. User Control & Data Access
Managing Personal Information
- Users can update their details (phone number, email, etc.) via the Barakat Pay App or website.
Modifying Permissions
- Users may adjust or revoke permissions (e.g., phonebook, SMS, camera, storage) via device settings.
Accuracy & Responsibility
- Users must provide and maintain accurate information.
6. Data Security
Infrastructure Safeguards
- Advanced security protocols, including AES-256 encryption and TLS, protect user data.
Access Controls
- Physical access to data centers is strictly regulated.
PCI-DSS Certification
- We comply with PCI-DSS standards for secure payment transactions.
Encrypted Transactions
- All transactions are end-to-end encrypted.
Final Notes
Electronic Money Transfer Services - Barakat Pay is committed to protecting user data while ensuring compliance with Afghanistan’s financial regulations.
For queries or complaints, contact us:
- Email: compliance@barakatpay.com
- Helpline: +93 706000899
- Head Office: Kabul Afghanistan, District# 02 Hamid Business Center, Office No# LG-49