Privacy Policy

1. Scope

This Privacy Policy applies to all personal information collected by GANI Pay in relation to our Services provided in Australia, including personal information collected via:

• Our website(s), applications, and any other platforms we operate (collectively referred to as our “Platform”),
• Email, telephone, or other means of communication,
• Any online or offline interactions with us relating to our Services.

2. Types of Personal Information We Collect

We may collect the following types of personal information (without limitation):

• Identification Information: Name, date of birth, gender, postal address, email address, telephone number(s), and any other information you provide to verify your identity.
• Financial Information: Bank account details, credit or debit card details, transaction records, and payment history.
• Usage Information: Information about how you interact with our Platform (e.g., device data, pages visited, links clicked, IP address, cookie data, and browser type).
• Business Information: If you are a merchant or business customer, this may include your ABN, ACN, business trading name, bank details, and other relevant documentation.
• Other Information: Any other personal information that you voluntarily provide to us, such as feedback, survey responses, or communication preferences.

We will generally only collect sensitive information (e.g., health information, biometric data, or information about your race, religion, or political opinions) if it is necessary for our business functions or activities and you have expressly consented, or the collection is otherwise permitted under Australian law.

3. How We Collect Personal Information

We collect personal information directly from you when:

• You sign up to use our Services,
• You submit your details through our Platform or via email, phone, or other communication methods,
• You participate in our promotions, surveys, or other marketing activities,
• You provide feedback or otherwise engage with us.

Where practicable, we will collect personal information only from you. However, we may also collect personal information about you from third parties where it is unreasonable or impracticable to collect it directly from you. These third parties may include financial institutions, payment processors, credit reporting bodies, identity verification service providers, publicly accessible databases, or other individuals or entities.

4. Purposes for Collecting, Using, and Disclosing Personal Information

We collect, hold, use, and disclose your personal information for the following purposes:

1. To Provide Our Services: We use your personal information to process payments, settle funds, verify accounts, and otherwise facilitate payment transactions.
2. Identity Verification: We may use your personal information to verify your identity, reduce fraud, and comply with anti-money laundering and counter-terrorism financing obligations.
3. Customer Service and Support: We use your contact details and records of communications to respond to inquiries, provide assistance, handle complaints, and improve our customer support.
4. Service Improvements: We analyse usage data, feedback, and other information to improve our Services, develop new features, and enhance user experience.
5. Marketing and Promotions: We may use your contact details to send you information about our products, services, promotions, or updates. You can opt out of marketing communications at any time.
6. Legal and Regulatory Compliance: We will disclose personal information if we are required to do so by law, or if such disclosure is reasonably necessary to comply with legal processes or regulatory requirements (e.g., under the Anti-Money Laundering and Counter-Terrorism Financing Act 2006 (Cth)).
7. Business Operations: We may use and disclose personal information for internal business and administrative purposes, such as auditing, data analysis, and research to maintain and improve our Services.

5. Disclosure of Personal Information

We may disclose personal information to the following recipients (in Australia and overseas) for the purposes listed in this Privacy Policy:

• Our related entities, affiliates, and subsidiaries,
• Service providers and partners who assist in providing our Services (e.g., cloud hosting services, payment gateways, fraud prevention providers, identity verification services),
• Professional advisers, such as accountants, lawyers, auditors, and insurers,
• Regulatory authorities, law enforcement agencies, courts, or other third parties when required by law or to protect our rights, property, or safety (or those of others),
• Any other party, where you have expressly consented or directed us to do so.

If we transfer personal information overseas, we will take reasonable steps to ensure recipients handle the information in a manner consistent with the Privacy Act and this Privacy Policy, including where relevant by ensuring that appropriate contractual arrangements are in place.

6. Cookies and Analytics

We use cookies and similar tracking technologies on our Platform to:

• Remember your preferences and settings,
• Improve site functionality and user experience,
• Analyse site usage and user traffic patterns,
• Deliver targeted and relevant advertising.

You can adjust your browser settings to refuse cookies or alert you when cookies are being used. Please note, however, that if you disable cookies, some features of our Platform may not function properly.

7. Data Security and Storage

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:

• Using secure servers and data encryption in transit (e.g., SSL/TLS protocols),
• Storing personal information in controlled environments with restricted access,
• Regularly reviewing and updating our data security measures.

We retain personal information for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as otherwise required or authorised by law. We securely destroy or de-identify personal information when it is no longer needed.

8. Access and Correction of Personal Information

You have the right to access and correct your personal information held by GANI Pay. If you believe your personal information is inaccurate, incomplete, or out-of-date, please contact us using the details provided below. We will respond to such requests within a reasonable time and, where feasible, provide you with access to the information or correct it as requested.

9. Opting Out of Marketing Communications

You may opt out of receiving marketing communications from us at any time by:

• Clicking the “unsubscribe” link in any email or SMS we send,
• Adjusting your preferences in your account settings (if available),
• Contacting us using the details provided in this Privacy Policy.

Please note you may still receive administrative or transactional communications from us (e.g., confirmations of transactions or important updates related to your account).

10. Third-Party Websites and Services

Our Platform may contain links to third-party websites, plug-ins, or applications that are not operated by GANI Pay. This Privacy Policy does not apply to those third-party sites and services. We are not responsible for the privacy practices or content of such third parties, and we encourage you to review their privacy policies independently.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory requirements, or to address operational needs. Any revised policy will be posted on our Platform with an updated “Last Updated” date. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of our Services following any changes to this Privacy Policy constitutes your acceptance of those changes.

12. Contact Us

If you have any questions, concerns, or complaints regarding our handling of personal information or this Privacy Policy, please contact us at:

We will take your inquiry or complaint seriously and respond within a reasonable period. If you are not satisfied with how we handle your complaint, you may contact the Office of the Australian Information Commissioner.