This Privacy Policy explains how WikiPay ("WikiPay", "we", "us" or "our") collects, uses, discloses, and safeguards personal data when you access our website, mobile application, digital wallet, virtual credit cards, and related services (collectively, the "Services"). Please read this policy carefully. By using the Services you acknowledge that you have read and understood the practices described here.
1. Who We Are
WikiPay operates a digital wallet and virtual credit card platform that enables individuals and businesses to store, send, receive and spend money across borders. The provision of regulated payment, e-money, and card-issuing functions may be delivered in cooperation with our licensed financial partners.
2. Information We Collect
2.1 Information You Provide
- Identity data: full legal name, date of birth, nationality, gender, photograph, government-issued identification documents, tax identification numbers, and other information required to comply with Know-Your-Customer (KYC), Anti-Money-Laundering (AML) and Counter-Terrorism-Financing (CTF) obligations.
- Contact data: residential and billing address, email address, and phone number.
- Financial data: external bank account numbers, card details, transaction history within your wallet, source of funds information, and wallet or card usage patterns.
- Account credentials: username, password, PIN, biometric templates (if you enable biometric login on your device), and security question responses.
- Support communications: the content of messages you send to our support team, including attachments and call recordings where applicable.
2.2 Information Collected Automatically
- Device and technical data: IP address, device identifiers, operating system, browser type, language settings, mobile network information, and diagnostic data.
- Usage data: pages viewed, features used, time spent, and interactions with our Services.
- Location data: approximate location derived from IP address and, where you grant explicit permission, precise geolocation for fraud prevention and regulatory purposes.
- Cookies and similar technologies: as described in Section 8 below.
2.3 Information from Third Parties
- Identity verification and credit-referencing providers used to confirm your identity and screen for financial crime.
- Payment networks, card schemes, and banking partners that provide transaction settlement data.
- Publicly available sources such as sanctions and politically-exposed-persons ("PEP") lists.
- Business partners who refer you to us or provide integrations you choose to enable.
3. How We Use Your Information
We process personal data only where we have a lawful basis to do so. Our principal purposes are:
- To create and administer your WikiPay account, digital wallet balances, and virtual credit cards.
- To authorise, process, clear, settle, and reconcile your payments, transfers, and card transactions.
- To comply with our legal obligations, including KYC, AML/CTF, sanctions screening, fraud prevention, tax reporting, and regulatory record-keeping.
- To detect, prevent, investigate, and respond to fraud, unauthorised access, and other security incidents.
- To provide customer support, respond to enquiries, and manage disputes and chargebacks.
- To improve, personalise, and develop the Services, including product research and analytics.
- To send you service messages, notifications, and — where you have opted in — marketing communications.
- To enforce our User Agreement and protect our legal rights.
4. Legal Bases for Processing
Depending on the activity, our lawful bases include: performance of our contract with you; compliance with legal and regulatory obligations; our legitimate interests in operating a secure and effective service; and your consent, where required. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
5. Sharing and Disclosure
We do not sell your personal data. We share it only where necessary and with appropriate safeguards:
- Service providers: cloud hosting, identity verification, communications, analytics, and customer-support vendors acting under written data processing agreements.
- Financial and card-issuing partners: banks, e-money institutions, card networks (such as Visa and Mastercard) and processors required to deliver the Services.
- Regulators and authorities: tax, financial-crime and law-enforcement authorities where disclosure is required by law or reasonably necessary to protect the Services and their users.
- Corporate transactions: parties involved in a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.
- With your direction: other parties you explicitly ask us to share data with (for example, when connecting third-party apps to your wallet).
6. International Transfers
Because WikiPay operates globally, your personal data may be transferred to, stored in, or processed in countries other than your own. When we transfer data across borders we use recognised safeguards such as Standard Contractual Clauses, adequacy decisions, or comparable mechanisms recognised by applicable law.
7. Data Retention
We retain personal data for as long as necessary to provide the Services and to comply with our legal obligations. Financial and transactional records are typically retained for a minimum of five (5) to seven (7) years after the closure of your account, in line with applicable AML and record-keeping laws. When retention is no longer required we securely delete or irreversibly anonymise your data.
8. Cookies and Similar Technologies
We use cookies, pixels, SDKs and similar technologies to keep you logged in, remember your preferences, measure the performance of our Services, and combat fraud. Some cookies are strictly necessary; others are used with your consent. You can manage non-essential cookies through your browser or our in-product cookie preferences.
9. Your Rights
Subject to applicable law, you may have the right to:
- Access the personal data we hold about you and request a copy in a portable format.
- Request correction of inaccurate or incomplete data.
- Request deletion of personal data, subject to our record-keeping obligations.
- Object to, or request restriction of, certain processing activities.
- Withdraw consent where our processing is based on consent.
- Lodge a complaint with your local data protection authority.
Because most of the data we hold is used to run a regulated financial service, some rights may be limited or subject to legal exceptions. To exercise your rights, contact privacy@wikipay.co.
10. Security
WikiPay maintains administrative, technical, and physical safeguards designed to protect personal data. These include encryption in transit and at rest, strict access controls, continuous fraud monitoring, and regular independent security testing. No system can be guaranteed to be 100% secure; you play an essential role by keeping your credentials confidential and reporting any suspicious activity promptly.
11. Children
The Services are intended for individuals aged 18 or older. We do not knowingly collect personal data from anyone under this age. If we learn we have collected data from a minor without valid consent, we will delete it.
12. Automated Decision-Making
To detect fraud and meet regulatory requirements we may use automated systems that score risk on transactions, sign-ins, or account activity. Where such decisions produce a legal or similarly significant effect on you, you may request human review, express your point of view, and contest the decision.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Services or by email at least 30 days before they take effect, unless a shorter period is required by law or by urgent security or regulatory considerations.
14. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact:
- Email: privacy@wikipay.co
- Support: support@wikipay.co
- Postal address: WikiPay Data Protection Office, Level 20, Global Finance Center, Singapore.