Privacy Policy
Last updated: July 2026
OKOPAY and its affiliates ("we", "us") take your privacy seriously. This Privacy Policy explains how we collect, use, share and protect personal information when you visit the OKOPAY website and use our payment services, and the rights you hold.
1. Scope
This Policy applies to the OKOPAY website and the payment services we provide to merchants. Where we process end-customer transaction data as a service provider to a merchant, that processing is additionally governed by our agreement with the merchant.
2. Information We Collect
The information we collect includes: (a) merchant registration information such as company name, registration documents and identity details of legal representatives and beneficial owners; (b) contact details such as name, email and phone number; (c) transaction information such as payer details, amount, currency, payment method and time; (d) technical information such as IP address, device and browser type, and access logs; and (e) any other information you choose to provide when communicating with us.
3. How We Use Information
We use the information to: provide, maintain and improve the payment services; meet legal compliance obligations, including anti-money-laundering (AML) checks, identity verification (KYC/KYB) and sanctions screening; perform transaction risk control and fraud analysis; send you service notices and necessary business communications; send product news where you have consented; and produce statistics that help us improve the product experience.
4. How We Share Information
We share information only as necessary: with card schemes, banks, clearing networks and licensed partner institutions to process transactions; with vendors that support us with hosting, risk control or customer service (bound by confidentiality obligations); with regulators and law enforcement upon lawful request; and in a merger, acquisition or asset transfer as required by law. We do not sell your personal information.
5. Cookies and Similar Technologies
Our website uses strictly necessary cookies to keep the site working (for example, remembering your language preference) and may use analytics cookies to understand how the site is used and improve the experience. You can manage or delete cookies in your browser settings; disabling necessary cookies may affect parts of the site.
6. Data Retention
We retain personal information only for as long as needed for the purposes described in this Policy, subject to minimum retention periods required by law. For example, anti-money-laundering regulations typically require us to keep identity verification records and transaction records for five years or longer after the business relationship ends. After the retention period we delete or anonymize the information.
7. Data Security
We apply industry-standard technical and organizational measures to protect personal information, including encryption in transit and at rest, least-privilege access controls, security audits and staff confidentiality training. Card data handling follows the PCI DSS standard. No internet transmission is completely secure; if a security incident is likely to affect your rights, we will notify you and the competent authorities as required by law.
8. International Transfers
As a cross-border payment provider we may transfer information to countries or regions outside your jurisdiction for processing. Where we do so, we apply safeguards required by applicable law, such as standard contractual clauses or transfers to recipients offering an adequate level of protection.
9. Your Rights
Subject to applicable law, you have the right to access, correct and delete your personal information, to restrict or object to certain processing, to withdraw consent (without affecting processing carried out before withdrawal), and to obtain a copy of your information or have it transferred. You can exercise these rights using the contact details at the end of this Policy, and we will respond within the statutory period. You also have the right to lodge a complaint with your local supervisory authority.
10. Children
Our services are directed at business customers and not at minors. We do not knowingly collect personal information from minors; if we learn that we have done so, we will delete it promptly.
11. Updates to This Policy
We may update this Policy from time to time. Updated versions will be published on this page with a new "Last updated" date, and material changes will be notified in a reasonable manner, such as a site notice or email.
12. Contact Us
If you have any questions, comments or complaints about this Policy or our handling of personal information, please contact us at privacy@okopay.com. We will handle and respond to your request as soon as possible.