Policy Notice

We appreciate your visit to the website ("Platform") of PB Pay Private Limited ("hereinafter referred to as PB Pay") and your interest in our services and products. At PB Pay, we value your privacy and aim to provide you a secure and comfortable experience while engaging with our Platform. This Privacy Notice explains how we collect, use, process, transfer and protect your personal information during and after your interactions with the Platform. It also outlines the purposes for which we process your data, how it may be shared, and the rights available to you in relation to your personal information. We encourage you to read this notice carefully to understand how we handle your data and our commitment to protecting your privacy.

The terms "we," "our," and "us" refer to PB Pay, and the terms "you," "your," and "User" refer to you as a user of PB Pay. The term "Personal Information" means information that you provide to us that personally identifies you, such as your name, phone number, email address, and any other data linked to such information.

Please note that this Privacy Notice applies solely to information collected through your use of the Platform. It does not apply to any websites controlled by third parties that are not affiliated with PB Pay, which may be linked from the PB Pay Website ("Third Party Sites"). Please review the privacy policies of Third Party Sites, as PB Pay is not responsible for and has no control over the content or privacy practices of Third Party Sites. Personal information that you provide to those sites are not our property.

The terms outlined in this Privacy Notice are intended to complement, and not replace, any other agreements or privacy statements you may have entered into with PB Pay, and remain subject to applicable mandatory laws and regulatory requirements.

Business User: Any entity or individual that utilizes PB Pay Platform to accept payments for goods or services from their end-customers via different payment instruments. Business Users typically include sellers, vendors, or businesses offering goods or services for sale (also referred to as Merchants).

Note: We do not onboard children under the age of 18 as Business Users.

End-Customer:An individual who purchases goods or services from Business Users using different payment instruments facilitated by PB Pay's payment processing Platforms.

Personal Data: Any information that relates to an identified or identifiable individual, including but not limited to name, address, email address, financial details, and any other information capable of identifying You.

The subsections below describe sources, categories, purposes, legal bases, and other matters regarding personal information we process.

We will not retain your personal data for longer than is necessary and we will hold it only for the purposes for which it was obtained and in accordance with the applicable laws. Our retention periods are based on business needs and statutory requirements.

Where permitted by applicable law or regulation, you have the right to:

• Access Information About Personal Data: You can request a summary of your personal data we process, details of our processing activities, and information about any third parties with whom your data is shared.
• Correction and Erasure of Personal Data: You may ask us to correct, complete, update, or erase your personal data if it's inaccurate, incomplete, outdated, or no longer needed, subject to legal retention requirements.
• Grievance Redressal: You have access to our grievance redressal process to address concerns about your personal data or your rights, with the option to escalate unresolved issues to the Data Protection Board.
• Nominate: You can nominate someone to exercise your data rights on your behalf in case of your death or incapacity, as per the prescribed process.

To exercise these rights, contact us at dataprivacy@pbpay.com.

Your personal information is collected, processed, and stored securely within India. All our systems, including cloud infrastructure and trusted service providers, are hosted in India and operate in compliance with applicable data protection and regulatory requirements. We take appropriate technical and organizational measures to ensure your data always remains protected.

PB Pay is a PCI DSS compliant organization. We have deployed appropriate technical and organizational security measures at all times to protect the information we collect from you. We use multiple electronic, procedural, and physical security measures to protect against unauthorized or unlawful use or alteration of information, and against any accidental loss, destruction, or damage to information.

Further, you are responsible for maintaining the confidentiality and security of your login id and password, and may not provide these credentials to any third party.

In the event of a personal data breach that compromises the confidentiality or integrity of your personal data, we will notify you and the Data Protection Board as required by the Digital Personal Data Protection Act 2023. This notification will be provided within 72 hours of becoming aware of the breach, outlining:

• The nature of the breach.
• The likely consequences of the breach.
• The measures we have taken to address the breach.
• The steps you can take to mitigate potential risks.

PB Pay reserves the right to revise this Privacy Notice from time to time as per organization needs or to abide by new regulations, by posting notice of the amendment as appropriate. To the extent permitted by applicable law, such changes will be applicable from the time they are posted.

We are committed to protecting your personal data and addressing your privacy concerns in full compliance with applicable data protection and cybersecurity laws. In case you have any grievances in accordance with applicable law, the name and contact details of the Grievance Officer are provided below: