Your data,
handled with care.

okePay (“okePay”, “we”, “us”, “our”) is a payment orchestration platform operated by okePay Asia Ltd. (Hong Kong) and okePay Inc. (Money Services Business, State of Montana, USA), both subsidiaries of Readen Holding Corp. This policy explains what personal information we collect, why we collect it, and the choices you have.

1. Information we collect

We collect the following categories of personal information:

• Merchant onboarding (KYB) data — legal entity name, registration number, beneficial-owner identity documents, proof of address, business website, expected processing volume and industry vertical.
• Account data — the name, email, phone number and role of the individuals who administer a merchant account or partner account.
• Transaction data — payment amounts, currencies, timestamps, payment method, acquirer/PSP responses, IP address, device fingerprint and risk-scoring signals associated with each transaction we route.
• Cardholder / payer data — we are PCI-DSS aware and rely on tokenisation. Full PAN data is handled exclusively by our certified PSP partners; okePay stores only network tokens and last-4 references.
• Support data — correspondence you send us by email, contact form or live chat.

2. How we use your information

We use personal information to:

• Verify merchant identity, screen against sanctions / PEP lists and meet our KYC/KYB and AML obligations.
• Route, authorise, settle and reconcile payment transactions through our acquirer and PSP network.
• Monitor for fraud, chargebacks and card-scheme rule breaches, and to operate cascading retry logic.
• Provide merchant dashboards, partner reporting, settlement statements and tax documents.
• Send service announcements, security notifications and (with consent) product updates.

3. Legal bases (EEA / UK)

We rely on (a) performance of contract for account, transaction and settlement processing; (b) compliance with legal obligations for KYC/KYB, AML and tax reporting; (c) legitimate interests for fraud prevention, network security and platform analytics; and (d) consent for optional marketing communications, which you may withdraw at any time.

4. Sharing your information

We share personal information only as needed with:

• Acquiring banks, PSPs, card networks and alternative-payment-method providers required to execute the transactions you initiate.
• Identity verification, sanctions-screening and chargeback-alert vendors (e.g. Ethoca / Verifi) under written data-processing agreements.
• Cloud hosting, email, analytics and customer-support sub-processors operating under our instructions.
• Regulators, law-enforcement agencies and auditors when required by law or by card-scheme rules.
• Other Readen Holding Corp. group companies for shared risk and compliance tooling.

We do not sell personal information.

5. International transfers

Because we operate globally, personal information may be transferred to, stored in or accessed from jurisdictions outside your home country (including Hong Kong, the United States and the European Economic Area). Where required, we put in place Standard Contractual Clauses or equivalent safeguards.

6. Retention

We retain merchant onboarding records, transaction records and related compliance documentation for the longer of (a) the life of your account plus seven (7) years, or (b) any longer period required by applicable AML, tax or card-scheme rules. Marketing contact details are kept until you opt out.

7. Security

okePay uses encryption in transit (TLS 1.2+) and at rest, role-based access control, principle-of-least-privilege for engineers, hardware MFA on production systems, and continuous monitoring. Cardholder data flows are scoped to PCI-DSS certified partners.

8. Your rights

Subject to local law you may have the right to access, correct, delete, restrict or port your personal information, and to object to certain processing. To exercise any of these rights, contact us at privacy@okepay.biz. We will respond within the period required by applicable law.

9. Cookies & analytics

Our website uses strictly-necessary cookies to keep you signed in and, with consent, analytics cookies to understand how the site is used. You can control non-essential cookies through your browser or our consent banner.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified by email to account administrators or by an in-product banner. The “Last updated” date at the top of this page reflects the most recent revision.

11. Contact us

Questions about this policy or your personal information can be sent to privacy@okepay.biz, or by post to okePay Asia Ltd., 3303 Cable TV Tower, 9 Hoi Shing Road, Tsuen Wan, NT, Hong Kong.