At Tabadul Electronic Payment and Financial Technology Company ("Tabadul", "we", "the Company"), registered in Baghdad and licensed by the Central Bank of Iraq (CBI) as a Payment Service Provider (PSP), we are committed to protecting the privacy and security of our customers' data. This privacy policy explains how we collect, use, and protect your personal information when you use our website, applications (such as the Tabadul app and Tabadul Verify app), or our payment and card services.
Information We Collect
To deliver our premium financial services, we collect different types of data depending on the service you use:
- Personal Information: Such as full name, phone number, address, and identity information required for registration and KYC verification for card issuance.
- Financial Information: Includes details of banking cards (prepaid or debit), financial transaction records, balance, and payment invoices.
- Biometric Data: When using the "Tabadul Verify" app, we may request access to biometric authentication features (fingerprint or facial recognition) for secure login and digital identity verification.
- Device & Location Data: We may collect information about your geographic location to help you find the nearest agent via the interactive map in the app, or for security and fraud prevention purposes.
How We Use Your Information
We use the data we collect for the following purposes:
- Service Delivery: Issuing and managing cards (Visa, Mastercard), processing payments, and transferring funds between cards.
- Security & Protection: Using fraud detection systems and 3D Secure protection to secure your financial transactions and prevent unauthorized use.
- Legal Compliance: Compliance with Central Bank of Iraq (CBI) directives and anti-money laundering requirements.
- Experience Improvement: Analyzing data through the "Merchant Portal" to help businesses improve their operations and understand consumer behavior.
Data Sharing & Disclosure
We maintain the confidentiality of your data and only share it with the following parties when necessary:
- Regulatory Authorities: The Central Bank of Iraq (CBI) for compliance with laws and regulations.
- Global Payment Networks: Such as Visa and Mastercard for processing international and domestic transactions.
- Technology Partners: Such as banking system companies (BPC, S2M) to ensure efficient service operation.
Data Protection & Information Security
We apply the highest global security standards to protect your data:
- We are certified for compliance with Payment Card Industry Data Security Standards (PCI DSS) issued by the PCI Security Standards Council.
- Sensitive data is encrypted and stored on secure servers within Iraq with a three-layer infrastructure.
- We use strong authentication technologies (OTP) and one-time passwords to verify transactions.
User Rights
Under applicable laws, you have the right to:
- Access your personal data and review your transaction history through the app.
- Request correction of inaccurate information.
- Immediately freeze your card in case of loss or theft through the app to ensure the safety of your funds.
Contact Us
For any inquiries about our privacy policy or to exercise your rights, you can contact us via: