In accordance with Da Afghanistan Bank’s Consumer Rights Protection Regulation in the Financial Sector Article Nine Chapter Two (Consumer Data Privacy Protection) Star Pay is committed to protecting the privacy of its customers and handling personal information responsibly. This Privacy Policy explains how we collect use share and Protect your information when you use our products, services, website and mobile application. Star Pay complies with all applicable laws and Da Afghanistan Bank regulations.
This Policy aims to:
(a) Safeguard personal information entrusted to Star Pay;
(b) Provide transparent explanations of our data practices;
(c) Give customers meaningful choices and control over their information; and
(d) Ensure compliance with applicable laws and industry best practices.
This Policy is based on the requirements of Da Afghanistan Bank and Star Pay’s internal policies and procedures.
This Policy shall come into effect only after approval by Star Pay’s Board of Supervisors to ensure governance transparency.
This Policy applies to all products and services offered by Star Pay, whether provided through Star Pay branches, agents or third parties acting on Star Pay’s behalf. It applies to all customers and to all Star Pay employees processing personal information. This Policy should be read together with any operational guidelines, terms and conditions and notices that we may issue from time to time.
Depending on applicable law you may have the following rights with respect to your personal information: (a) access and obtain a copy (b) request correction or update (c) request deletion or anonymization where permitted (d) object to or restrict certain processing (e) withdraw consent where processing is based on consent (f) lodge a complaint with a competent authority. OR
Customers may also lodge complaints with the Da Afghanistan Bank Consumer Protection Department if they believe their rights have been violated.
By accepting this Privacy Policy during registration or when using our services, you consent to the collection, use, storage and disclosure of your personal information as described in this Policy. Certain processing is necessary to provide services to you comply with the law or pursue our legitimate interests (such as fraud prevention and security). If you withdraw consent we may not be able to continue providing some services.
We collect the information you provide and information generated when you use our services including:
• Identity information: full name; father’s name; National ID (Tazkira) number; current and permanent address; contact numbers; occupation, email address; business and municipal licenses; for foreign customers, passport and visa details (including validity dates).
• Financial information: transaction details; monthly income; source of funds; financial supporter (if any).
• Usage information: details about how you use our products and services (transaction type, date, time, location, counterparty) and other service related data.
• Technical information: device and browser information, IP address, and usage patterns.
• Verification information: information used to verify identity or address. For address verification a utility bill is preferred. If a utility bill is not available an official Estilam issued by the relevant Electronic Money Service Provider to the Wakil Guzar may be used provided that the Wakil Guzar is first verified by the service provider and subsequently confirmed by the relevant municipality district.
• Biometric information: where permitted and necessary thumbprint and signature images for identity verification.
• Biometric information is collected only with explicit written or digital consent from the customer.
• Other information: official work address; parent/guardian information where legally required; information from partner companies (demographic or navigation data).
We may store information on Star Pay or authorized service providers’ systems in locations where Star Pay operates. We do not collect more information than is necessary for the stated purposes.
We do not sell your personal information. We may combine information we collect with information from other sources to improve our services. We use personal information to:
• Operate, maintain and improve our website app and services
• Process requests and transactions and provide customer support
• Resolve disputes secure payments and troubleshoot issues
• Personalize your experience and communicate with you about your account
• Prevent, detect and investigate fraud abuse and illegal activities and enforce our Terms & Conditions;
• Comply with legal and regulatory requirements
• Provide marketing communications about products, services and promotions with your consent (you can opt out at any time).
We may share personal information as follows:
• With service providers and partners under contract who support our operations (payment gateways, banks, IT and data processing, bill collection)
• With internal/external auditors and consultants for compliance and business purposes
• With business partners, banks and financial institutions to provide services, detect fraud and make business decisions
• With third parties when you ask us to or when you have provided your consent
• With law enforcement, regulators or government authorities to comply with legal requirements or in response to lawful requests related to suspected illegal activity
• With another business entity in connection with a merger acquisition or reorganization (the receiving entity will be bound by this Policy);
• As otherwise required or permitted by applicable law. When we share information we require recipients to protect it appropriately.
If you choose to post comments ratings or feedback on our website or app that information may be visible to others. Do not share sensitive personal information in public areas.
Your account security depends on keeping your credentials confidential. Choose a strong unique PIN or password and do not share them with anyone. You are responsible for actions taken using your account. If you believe your credentials have been compromised contact the Star Pay helpline immediately.
We implement administrative technical and physical Privacy Protection designed to protect personal information against unauthorized access, loss misuse or alteration. Information is stored securely in Afghanistan and (where applicable on trusted service providers’ systems). We regularly review and update our security practices.
We retain personal information for as long as necessary to provide services to you comply with legal obligations resolve disputes and enforce our agreements. Transaction records are retained for 5 years to comply with financial regulations. Account and KYC information is retained while your account is active unless a longer period is required by law. We securely delete or anonymize information when it is no longer required.
Your PIN and password (if applicable) authenticate transactions. Do not store them on your device or share them with anyone. Transactions authorized with your valid credentials will be treated as legitimate unless and until you notify us of unauthorized access.
We may update this Privacy Policy from time to time. We will post the updated version on our website and where changes are material notify you through the app, website or SMS. Your continued use of our services after notice of changes means you accept the updated Policy.
We do not knowingly collect or process personal information of individuals under 18 years of age. If we learn that we have collected such information we will take steps to delete it unless retention is required by law.
Biometric information (such as thumbprints and signatures) is collected only where necessary and permitted by law stored in encrypted form and access is strictly limited and audited. Biometric data is retained only for as long as necessary to verify identity fulfill legal obligations or resolve disputes after which it is securely deleted or anonymized.
You may withdraw your consent to processing at any time via the app (where available) or by contacting us at [email protected] or +93 (0) 79 222 2222. We will process your request promptly. Withdrawing consent will not affect processing that is necessary to deliver requested services or that we are legally required to perform.
Star Pay Customer Care: +93 (0) 79 222 2222, Email: [email protected], Website: www.starpay.com
You may also contact us at Star Pay’s registered office or visit an authorized agent for assistance with privacy requests.
This Policy is reviewed periodically amendments may be recommended by the Management Board and shall take effect after approval by the Supervisory Board.
