Privacy Policy

Opay (“we”) operates opay.com.hk and related merchant clearing, collection, and Visa Business Card services. This policy explains how we handle personal data for merchants, authorized users, and website visitors.

By using our services you acknowledge this policy. If you do not agree, please do not use the services.

Merchant onboarding & KYC: business name, contacts, email, business type, country/region, and compliance review data.

Transactions & ledger: payments, refunds, chargebacks, clearing balances, card authorization records, and API audit logs.

Technical data: IP address, browser type, cookies, device identifiers, and security audit records.

To provide collection, clearing, risk tiers, Visa Business Card issuing and authorization, merchant portal, and developer APIs.

To meet AML, fraud prevention, chargeback handling, and regulatory compliance obligations.

To improve the product, provide support, and send essential service notices (you may opt out of non-essential marketing).

We share data with payment, clearing, issuing, and KYC partners (e.g. Stripe, Airwallex) as needed to deliver the service, under contractual confidentiality.

We may disclose data to authorities or professional advisers when required by law, to protect rights, or to investigate fraud or security incidents.

We do not sell your personal data.

We retain data as required for compliance, accounting, and dispute resolution; we delete or anonymize when no longer needed.

We use encryption, access controls, signature verification, and auditing; however, no internet transmission is completely secure.

Where applicable law allows, you may request access, correction, deletion, or restriction of processing, or object to certain uses.

Contact Support@opay.com.hk for privacy requests.

We may update this policy from time to time; material changes will be posted on the site. Continued use constitutes acceptance of the updated policy.