Alseraj Mobile is a mobile banking application developed by Masarat IT & Financial Services Company to provide secure and efficient banking services for Seraj Islamic Bank. The app enables customers to manage their accounts, perform transactions, and access integrated services such as LYPay and OnePay while ensuring high security and compliance with Libyan banking regulations.

This Privacy Policy explains how we collects, uses, and discloses your information when you use the Service. It also outlines your privacy rights and how the law protects your data. By using the Service, you consent to the collection and use of information in accordance with this Privacy Policy.

Interpretation
Capitalized words have meanings defined here. Singular or plural forms retain the same meaning.

Definitions
For the purposes of this Privacy Policy:

• Account: A unique account created for You to access our Service or parts of our Service.
• Affiliate: An entity that controls, is controlled by, or is under common control with a party. Control is ownership of 50% or more of shares or equity with voting rights.
• Application: Refers to Alseraj Mobile, the software program provided by the Company.
• Company: Refers to Masarat IT & Financial Services Company, Tripoli, Libya.
• Country: Libya
• Device: Any device that can access the Service such as a computer, cellphone, or tablet.
• Personal Data: Any information relating to an identified or identifiable individual.
• Service: Refers to the Application.
• Service Provider: Any natural or legal person processing data on behalf of us. Includes third-party companies or individuals employed to facilitate the Service.
• Usage Data: Data collected automatically from the Service, such as page visit duration.
• Add friend: Feature to scan a QR code to add a beneficiary for money transfers within Seraj Islamic Bank or to other Libyan bank accounts.
• You: The individual or entity accessing or using the Service.
• LYPay / OnePay: Legal payment services launched by the Central Bank of Libya for bank transfers using IBAN & enables you to make purchases using electronic payment methods.

Types of Data Collected

Personal Data
We may request personally identifiable information, including but not limited to:

• Full name
• Email address
• Phone number
• Usage Data

Usage Data
Automatically collected data may include:

• Device IP address
• Browser type and version
• Pages visited, date/time, and duration of visit
• Device type and operating system
• Mobile browser type and unique identifiers

Information Collected while Using the App
The App may request your permission to access:

• Location
• NFC
• Internet access
• Vibration control

We use this information to provide features of our Service, and to improve and customize the Service. The information may be uploaded to our servers and/or a Service Provider’s server, or it may be simply stored on Your device. You can enable or disable access to this information at any time, through Your Device settings. By using this secure process, we can verify your identity while safeguarding your privacy.

Money Transfer Service (IBAN to other banks)

This section of the Privacy Policy explains how we collects, uses, and discloses information related to our money transfer service using IBAN for bank account holders other than Seraj Islamic Bank.

Information The company Collect:

• Personal Information: In order to facilitate money transfers, we collect some personal information including:
  • Your name, address, phone number, and email address.
  • The recipient’s name and IBAN.
  • Transaction details such as amount, currency, and reference (if provided).
• Identification Verification: To comply with regulations and prevent fraud, we may in the future collect identification documents (verified ID).
• Device Information: We may collect basic device information (device type, operating system) to ensure secure transactions and improve service functionality.

How The company Use Your Information:

• Process Money Transfers: We use your information to process your money transfer requests accurately and efficiently.
• Verify Identity and Prevent Fraud: We use your information to verify your identity and prevent fraudulent activity on our platform.
• Customer Support: We may use your information to respond to your inquiries and provide customer support.
• Compliance with Law: We may disclose your information if required by law or regulation, or in response to a valid legal request.

Information Sharing:

• Third-Party Service Providers: We may share your information with third-party service providers who assist us in operating the money transfer service (e.g., payment processors, fraud screening services). These providers are obligated to handle your information securely and in accordance with our privacy standards.
• Regulatory Authorities: We may share your information with regulatory authorities if necessary to comply with anti-money laundering (AML) and know-your-customer (KYC) laws.

Data Security:

• We take data security seriously and implement various safeguards to protect your information, including encryption, access controls, and regular security audits.

Disclaimer:
We are committed to protecting your privacy and using your information responsibly. Here’s how we ensure your trust:

• No Data Misuse: we strictly prohibit the use of your personal information for any purpose other than facilitating your money transfers, verifying your identity, preventing fraud, complying with the law, and providing customer support.
• No External Storage: Your money transfer data, including IBANs, transaction details, and identification documents, is never stored on servers outside our secure infrastructure controlled by ours.

We adheres to ISO 27001:2022 and the Libyan NISSA Information Security Manual to ensure the confidentiality, integrity, and availability of information. our security framework includes:

• Risk Management: Continuous risk assessment to identify security threats.
• Data Encryption: Advanced encryption techniques for securing transactions.
• Incident Handling: Procedures for rapid detection and response to security breaches.
• Compliance Monitoring: Regular audits to ensure adherence to Libyan financial regulations and global security standards.

In the event of a security incident, we will promptly notify affected users and relevant authorities, as per regulatory requirements.

our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided us with Personal Data, please contact us. If we become aware that it has collected Personal Data from anyone under the age of 18 without verification of parental consent, steps will be taken to remove that information from Our servers.

If consent from a parent is required by law, we may require parental consent before collecting and using that information.

we respect your control over your personal data. Depending on your location and applicable data protection laws, you may have certain rights regarding your personal data. These rights may include:

• Right to Access: You have the right to request a copy of the personal data we hold about you. This will allow you to know what data has been collected, why it has been collected, and with whom it is shared.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data held about you.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data. This means your data can be stored but not used further.
• Right to Data Portability: You have the right to request that we transfer your personal data to another organization, or to you, in a machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data for certain purposes, such as direct marketing.

If you wish to exercise any of these rights, please contact us using the information provided in the “Contact Us” section below. we will respond to your request within a reasonable timeframe.

our Service may contain links to other the websites that are not operated by us. If You click on a third-party link, you will be directed to that third party’s site. we strongly advise You to review the Privacy Policy of every site You visit.

we have no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

With OnePay – one payment for everything, and transfers to anyone!
This is a unified payment service officially supported by the Central Bank of Libya, designed to make your payments and money transfers simple and secure. Through this service, you can:

• Make electronic purchases using any of the supported payment providers such as: Masrefy Pay, Yussor Pay, Sahara Pay.
• Pay across banks and providers seamlessly, regardless of your primary payment app.
• Transfer money between participating banks quickly and easily.

• We do not store your card or bank account details within the app.
• All payment and transfer operations are processed through encrypted channels, following PCI DSS and ISO 27001 standards, and in compliance with applicable data protection regulations.
• The app only shares the minimum required information with OnePay and the authorized payment providers to complete the transaction. Your data is never used for marketing or any unauthorized purpose.
• We are committed to transparency in notifying you whenever your data is shared with third parties, in line with App Store and Google Play payment and consumer protection policies.

By using the OnePay service within the app, you consent to the processing of your financial data solely to complete your requested transactions, in accordance with the Central Bank of Libya regulations and applicable data protection laws.

We may update this Privacy Policy. Users will be notified via the App or email. Review periodically for updates.

• Email: support@masarat.ly
• Phone: 0900300900