Privacy Policy

This Privacy Policy outlines how Masarat IT & Financial Services Company (“Masarat”), on behalf of Waha Bank, collects, uses, protects, and discloses information in connection with your use of the Waha pay mobile application (“App”).

Overview of Services

Waha pay is a digital payment platform offering a secure, convenient, and user-friendly experience. The App enables a variety of financial services, including:

• Cross-bank payment transactions within Libyan banks
• NFC-enabled contactless payment services
• QR code generation and scanning for seamless transactions

Masarat and Waha Bank are committed to protecting your privacy and handling your data in accordance with ISO/IEC 27001:2022, PCI DSS, applicable Libyan data protection laws, and guidelines issued by the Central Bank of Libya.

1. Information We Collect and How We Use It

We collect information strictly necessary to provide and improve the App’s performance and ensure security and regulatory compliance.

1. Location Information (Optional)

With your explicit consent, the App may access your device’s location for the following purposes:

• Displaying nearby Waha Bank branches and ATMs
• Enhancing fraud prevention and transaction security

Permissions Requested:

• ACCESS_COARSE_LOCATION
• ACCESS_FINE_LOCATION

You may revoke location permissions at any time via your device settings. Denying location access will not affect core App functionality.

1. Device Information

To ensure compatibility and optimal functionality, the App collects:

• Device model and operating system version
• Unique device identifiers (e.g., Android ID, Device ID)

1. App Usage Data

For performance analysis and troubleshooting, we may automatically collect:

• IP address
• Date and time of access
• Screens or features accessed and time spent
• App version
• Diagnostic and crash logs

This data helps us identify usage patterns and improve the App experience.

1. External Storage Access

When you generate documents such as receipts or account statements (e.g., PDFs), the App may request permission to read/write to external storage.

Important:

• We do not access, read, or store any personal files unrelated to Waha pay.
• We do not misuse or transmit your data for unauthorized purposes.

1. Sensitive Personal Information

The App does not store or retain the following:

• Account passwords
• Full debit or credit card details
• National identification numbers

All sensitive information is securely processed through encrypted channels and never stored locally.

2. Required App Permissions and Their Purpose

You may control these permissions in your device settings at any time. Disabling optional permissions will limit related features but will not impact the core payment and transfer functionality of Waha pay.

3. Information Sharing

We share information only with Waha Bank and other authorized entities for the following reasons:

• To process your payment and transfer transactions securely
• To comply with legal, regulatory, and security obligations as mandated by the Central Bank of Libya
• To enable OnePay unified payment services (see Section 5)

We do not share your data with third-party advertisers or for marketing purposes.

4. Security and Data Protection

Masarat and Waha Bank implement advanced security controls to protect your information:

• End-to-end encryption of data in transit and at rest
• Use of secure protocols (HTTPS/TLS) for communication
• Device-level authentication and access restrictions
• Regular penetration testing, security assessments, and ISO/IEC 27001-compliant audits

5. OnePay Unified Payment Service

OnePay is an interoperable service endorsed by the Central Bank of Libya that allows seamless payment and transfer across supported providers, including:

• Masrefy Pay
• Yussor Pay
• Sahara Pay
• Daman Pay
• Alseraj Pay

With OnePay, you can:

• Make purchases using any supported provider
• Transfer funds between participating banks, regardless of the app used

Privacy Notice: The App shares only minimal required data with OnePay and authorized financial institutions. Your data is never used for marketing or disclosed to third parties without your explicit consent.

6. Your Rights and Controls

You may, at any time:

• Manage or revoke app permissions via your device settings
• Request access to or deletion of your data, subject to legal retention requirements
• Disable optional features such as location services or push notifications

7. Children’s Privacy

Waha pay is not intended for use by individuals under the age of 18. We do not knowingly collect or retain personal information of minors. If you believe such data has been collected, please contact us immediately so we can delete it.

8. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect:

• New features or service enhancements
• Updates to security measures
• Changes in legal or regulatory requirements

In case of material changes, users will be notified via an in-app notice.

9. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@masarat.ly
• Phone: 0900300900

Your Consent

By using Waha pay, including the OnePay feature, you confirm that you have read and understood this Privacy Policy, and you consent to the collection, use, and disclosure of your information in accordance with:

• This Privacy Policy
• Applicable Libyan data protection laws
• Regulations issued by the Central Bank of Libya