Skip to main content

Privacy Policy

Effective date 15/02/2026

This Privacy Policy highlights the new services and features introduced in the updated version of the Msarfey Plus mobile application, including a redesigned interface and an enhanced user-friendly experience. It also describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service, and explains your privacy rights and how the law protects you.

We provide Palm Pay for use with Msarfey Pay, ensuring a high level of security and full compliance with Libyan regulations. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Application refers to Msarfey Plus mobile application, the software program provided by the Company.
  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to Masarat for IT and financial services, Tripoli, Libya.
  • Country refers to: Libya
  • Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the Application.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Add friend refers to a feature allowing users to scan QR code to add a beneficiary to preform money transfer transactions to Jumhouria bank account holders and to other bank account holders in Libya.
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
  • LYPay / OnePay: Legal payment services launched by the Central Bank of Libya for bank transfers using IBAN & enables you to make purchases using electronic payment methods.
  • Open New Account from Guest Area: a service used to open a new account online by verifying your identity through advanced authentication technology that compares your live photo with your passport.
  • Update KYC: a service used to update the personal information.
  • Voice Assistant: An AI model trained to understand dialects, helping customers do things like check their balance or get prepaid cards.
  • Masrufy: a service that enables customers to allocate and manage expenses for their relatives or friends. Activation of electronic services is required to access this feature.
  • Installments: a service that allows customers to pay for their purchases in installments, subject to specific conditions.
  • QR push mode: a service that allows user to generate QR code for push payment.
  • Palm Pay: refers to a biometric payment service that allows users to authorize payments using their palm.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Information Collected while Using the Application

While using Our Application, in order to provide features of Our Application, We may collect, with Your prior permission:

  • Location access permission per session only.
  • WebView Integration.
  • Camera Access (payment via QR, Mobile Check Deposit and Open New Account from Guest Area)
  • Photos / Media (Read Images & Videos)
  • Microphone (Record Audio)
  • Read Audio Files
  • NFC
  • Network Access
  • SMS Autofill

We use this information to provide features of Our Service, to improve and customize Our Service. The information may be uploaded to the Company’s servers and/or a Service Provider’s server or it may be simply stored on Your device.

You can enable or disable access to this information at any time, through Your Device settings.

By using this secure process, we can verify your identity while safeguarding your privacy.

Money Transfer Service using IBAN to other banks

This section of the privacy policy explains how we collect, use, and disclose information related to our money transfer service using IBAN for bank account holders other than Jumhouria bank.

Information We Collect:

  • Personal Information: In order to facilitate money transfers, we collect some personal information including:
    • Your name, address, phone number, and email address.
    • The recipient’s name and IBAN.
    • Transaction details such as amount, currency, and reference (if provided).
  • Identification Verification: To comply with regulations and prevent fraud, we may in the future collect identification documents (verified ID).
  • Device Information: We may collect basic device information (device type, operating system) to ensure secure transactions and improve service functionality.

How We Use Your Information:

  • Process Money Transfers: We use your information to process your money transfer requests accurately and efficiently.
  • Verify Identity and Prevent Fraud: We use your information to verify your identity and prevent fraudulent activity on our platform.
  • Customer Support: We may use your information to respond to your inquiries and provide customer support.
  • Compliance with Law: We may disclose your information if required by law or regulation, or in response to a valid legal request.

Information Sharing:

  • Third-Party Service Providers: We may share your information with third-party service providers who assist us in operating the money transfer service (e.g., payment processors, fraud screening services).
  • Regulatory Authorities: We may share your information with regulatory authorities if necessary to comply with anti-money laundering (AML) and know-your-customer (KYC) laws.

Data Security:

We take data security seriously and implement various safeguards to protect your information, including encryption, access controls, and regular security audits.

Disclaimer:

  • No Data Misuse: We strictly prohibit the use of your personal information for any purpose other than facilitating your money transfers, verifying your identity, preventing fraud, complying with the law, and providing customer support.
  • No External Storage: Your money transfer data is never stored on servers outside our secure infrastructure controlled by us.

Permissions and access control:

Features and Permissions

Msarfey plus app offers a variety of features to make managing your finances easier. To provide these features, we may request certain permissions from you.

  • Find Nearby ATMs/Branches: Enable location services to see ATMs and branches conveniently displayed within the app.
  • Secure Login and Performance: We may store some limited information on your device with your permission. This information is securely encrypted.
  • Send/Request Money: Easily send or request money directly through the app.
  • Stay Informed: We can send you alerts about your account activity. You can choose to enable or disable notifications at any time.
  • Photos / Media (Read Images & Video): Used to read the selfie or document images you submit for identity verification.
  • Microphone (Record Audio): Used exclusively for the voice assistant feature. Audio is not stored or shared.
  • Audio (Read Audio Files): Used only to support accessibility and ensure the proper functioning of the voice assistant.
  • NFC: If your device supports Near Field Communication (NFC), we may use it for contactless payments.
  • Camera Access: This permission is solely for features that allow you to take pictures within the app, such as QR code payments, Mobile Check Deposit, and Open New Account from Guest Area.

Privacy Commitment

The App only accesses permissions you approve and only for the features you choose to use. No data is stored, used for tracking, or shared with third parties except as required for identity verification and regulatory compliance.

Granting Camera Permission

Certain features may be unavailable without camera access. You can manage camera permissions for our app through your device settings.

Use of Your Personal Data

We may use Personal Data for the following purposes:

  • To provide and maintain our Service.
  • To manage Your Account.
  • For the performance of a contract.
  • To contact You (Email, phone, SMS, push notifications).
  • To provide You with news and special offers.
  • To manage Your requests.
  • For business transfers.
  • For other purposes (Data analysis, usage trends).

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company’s operating offices. Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

Security of Your Personal Data

We implement robust security measures to protect your personal data, including:

  • Encryption in transit and at rest.
  • Access Controls for authorized personnel only.
  • Regular Security Audits.

Children’s Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

Your Rights

You may have certain rights regarding your personal data:

  • Right to Access
  • Right to Rectification
  • Right to Restrict Processing
  • Right to Data Portability
  • Right to Object

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. We have no control over and assume no responsibility for the content or privacy policies of any third party sites.

OnePay Service

This is a unified payment service officially supported by the Central Bank of Libya. Through this service, you can:

  • Make electronic purchases using supported payment providers.
  • Pay across banks and providers seamlessly.
  • Transfer money between participating banks quickly and easily.

Privacy and Data Protection: We do not store your card or bank account details within the app. All operations are processed through encrypted channels following PCI DSS and ISO 27001 standards.

Palm Pay Service

Palm Pay service offers secure biometric authentication for Msarfey Pay to authorize payments without need for QR codes. No palm images or media related to the palm recognition are stored. All biometric and transaction data are processed securely using encryption both in transit and at rest.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the date at the top.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By email: support@masarat.ly
  • By phone number: 0900300900

Used By Dorcas Theme