Privacy Policy

This Privacy Policy applies to all individuals, registered retail agents, shop operators, franchisees, and commercial merchants across Pakistan who download, register, access, or transact through the Paylix application, web terminal, or related digital services provided by Paylix Technologies (Pvt.) Ltd..

The platform is built to facilitate digital payments, utility bill collections, mobile loads, and agent commission settlements. This policy outlines how your business data and the transactional information of end-customers you serve are processed in accordance with applicable Pakistani privacy standards, the Prevention of Electronic Crimes Act 2016 (“PECA”), and relevant digital payments regulations.

To provide a secure and reliable digital payment infrastructure, Paylix collects information necessary to register accounts, verify agent identities, execute financial transactions, and maintain ledger audits:

2.1 Account & Identity Information

When you register as a Paylix agent, merchant, or user, we may collect:

• Full legal name and business or trade name.
• Pakistani National Identity Card (CNIC / SNIC) number and verification images where required for KYC onboarding.
• Active Pakistani mobile phone number (used for primary login, OTP verification, and account alerts).
• Physical shop, store, or registered business address and city in Pakistan.
• Email address for account recovery, invoices, and administrative correspondence.

2.2 Transactional & Ledger Data

Whenever you initiate a service or execute a transaction through Paylix, our systems record:

• Service category (Mobile Load, Utility Bill Payment, Cash In/Cash Out, QR Payment, Bulk Disbursement).
• Transaction amount, applied convenience charges, and earned agent commission.
• Destination reference details (e.g., recipient mobile number, utility consumer account number, bill reference ID).
• Unique System Transaction Identifier (TxID), timestamp, and gateway processing status (Success, Pending, Failed, Reversed).
• Segregated wallet movements between your Main Balance and Commission Balance.

2.3 Technical & Device Telemetry

• Device make, model, operating system version, and unique device identifier.
• Internet Protocol (IP) address, approximate network location, and connection type.
• Application version, crash reports, and system performance diagnostic metrics.
• Session authentication tokens and audit logs of sign-in events and PIN confirmation attempts.

Paylix uses collected information strictly for legitimate commercial, operational, and security purposes:

• Service Execution: Routing and dispatching mobile recharges, bill payments, and transfers through partner telecom gateways and utility clearing networks.
• Dual-Balance Ledgering: Accurately calculating commission earnings, updating your Commission Balance, and executing verified transfers to your Main Balance.
• Receipt Generation: Generating shareable and downloadable digital receipts that provide immutable proof of transaction completion for agents and consumers.
• Fraud Prevention & Account Security: Detecting suspicious transaction velocity, abnormal login attempts, unauthorized device switches, and protecting wallet funds.
• Regulatory & Legal Compliance: Complying with statutory accounting records, Anti-Money Laundering (AML) monitoring, and law enforcement requests under applicable laws.
• Customer Support & Dispute Resolution: Investigating delayed transactions, failed bill payments, or gateway timeouts reported to our support desk.

We do not sell, barter, or distribute your private personal or financial information to third-party telemarketers or advertisers. We only share transaction-specific data under the following strict conditions:

All third-party integration partners are bound by confidentiality agreements and are permitted to process information solely to execute designated service operations.

Paylix employs multi-tiered physical, technical, and managerial safeguards designed to protect stored information from unauthorized access, accidental alteration, disclosure, or destruction:

• Data in Transit: All communication between the Paylix mobile application, web terminal, and backend servers is encrypted using Transport Layer Security (TLS/SSL).
• Dual-Factor Authorization: Account login is tied to mobile OTP authentication, and financial actions require a private Transaction PIN.
• Role-Based Administrative Access: Paylix administrative systems strictly enforce least-privilege role segregation. Only authorized operations personnel may view ledger logs for customer support.
• Tamper-Resistant Logging: Administrative changes to commission rates, user balances, and system settings are recorded in immutable audit logs.

A core architectural principle of Paylix is the separation of your Main Balance and Commission Balance.

Our database maintains separate ledgers for working capital and commission earnings. Your commission rates, agent tier incentives, and daily or monthly earnings are kept confidential and are visible only through your authenticated agent dashboard and authorized internal Paylix administrative reporting.

When you execute a self-serve commission transfer into your Main Balance, an encrypted ledger record is logged, and a digital transfer receipt is generated for your records.

We retain your identity, profile, and ledger data for as long as your Paylix agent or user account remains active.

Following account deactivation or closure, financial transaction logs, receipts, and KYC verification records are retained for a statutory minimum period as required by applicable tax, financial reporting, and electronic crimes laws in Pakistan (typically between 5 to 10 years). Once the mandatory statutory retention window expires, data is securely purged or irreversibly anonymized.

As a registered user or agent of Paylix, you possess specific rights regarding your personal and business data:

• Access & Review: You can view your account profile, transaction history, daily summaries, and commission ledgers anytime through the Paylix application.
• Receipt Download & Sharing: You have the right to download and export digital receipts for every completed transaction.
• Rectification: If your registered business name, shop address, or contact details change, you may submit updated documentation to support for profile correction.
• Account Deactivation: You may request account closure by contacting our support desk, subject to settlement of all outstanding balances and completion of pending transactions.

Our public landing page (paylix.pk) uses minimal, essential cookies and local storage tokens to ensure secure browsing, maintain session continuity, and analyze general website visitor performance.

We do not deploy invasive third-party cross-site behavioral tracking cookies for behavioral ad re-targeting. You can disable cookies through your browser settings, though doing so may affect certain website features.

Paylix Technologies (Pvt.) Ltd. reserves the right to revise or update this Privacy Policy from time to time to reflect modifications in our services, system enhancements, or statutory regulatory directives.

When material updates are implemented, we will update the “Last Updated” date at the top of this document and publish an in-app alert or website notice. Continued use of Paylix following the publication of changes signifies your acknowledgment and acceptance of the revised terms.

If you have inquiries, concerns, or complaints regarding this Privacy Policy, or if you suspect an unauthorized data event, please contact our dedicated compliance and support desk: