Privacy Policy
1. Operator
RazPay Inc., 4-3-11 Roppongi, Minato-ku, Tokyo, Japan (the “Company”). This policy explains how the Company handles personal information in the RazPay service (the “Service”) and on this website.
2. Information We Collect
- Merchant application information: company and store details, names, dates of birth, addresses, telephone numbers and email addresses of the representative and contact persons, and business details.
- Documents submitted for review: certificate of corporate registration, the representative’s identity document (e.g. driver’s license), financial statements and business licenses.
- The Bitcoin address registered for settlement.
- Transaction information: amounts, dates, status and related merchant of payments made through the Service. Credit card numbers are entered on the payment processor’s system; the Company does not store full card numbers.
- Access information: IP address, browser information and access times, recorded in server logs.
- Cookies used to maintain login sessions and security, and the language setting saved in your browser (localStorage) on this website.
3. Purposes of Use
- Reviewing applications and concluding and performing agreements.
- Providing the Service, processing payments and making settlements.
- Preventing fraud, complying with anti-money-laundering rules, card network rules and the requirements of the payment processor.
- Responding to inquiries and sending important notices.
- Complying with laws and regulations and responding to requests from authorities.
- Maintaining and improving the Service.
4. Provision to Third Parties
The Company does not provide personal information to third parties without the person’s consent, except where permitted by law. To provide the Service, the Company provides the necessary information to the payment processor, acquirers and card networks; this is explained and consented to at the time of application.
5. Outsourcing
The Company may outsource part of its operations (such as servers and system operation) and will supervise contractors appropriately.
6. Transfer to Foreign Countries
Payment processing is performed by a payment service provider (PSP) located in Malaysia. Information on the personal data protection system of that country: compliance with the regulations of Malaysia. Measures taken by the recipient: compliance with the regulations of Malaysia.
7. Blockchain
The Company does not record personal information on any blockchain. Note, however, that Bitcoin transactions, including settlement transfers, are publicly visible on the blockchain (addresses and amounts).
8. Security Measures
- Sensitive items such as dates of birth and addresses are stored in encrypted form.
- Access to the administration system is restricted by role and protected by two-factor authentication.
- Operations in the administration system are recorded in tamper-evident audit logs.
- Submitted documents are stored in a non-public area and can be viewed only by authorized staff.
9. Retention Period
Personal information is retained for three years.
10. Requests for Disclosure, Correction, Deletion, etc.
Requests for notification of purposes, disclosure, correction, addition, deletion, suspension of use or suspension of provision to third parties can be made to the contact below. The Company will verify your identity before responding.
11. Changes to this Policy
The Company may revise this policy. The revised policy takes effect when published on this website, unless otherwise stated.
12. Contact
Personal information inquiries: support@raz-pay.com