Acceptable Use Policy / Prohibited Activities Policy

This Acceptable Use Policy / Prohibited Activities Policy (the "Policy") sets out the rules governing acceptable and prohibited use of TRAPAY's website, software, services, APIs, dashboards, integrations, payment pages, analytics tools, fraud-prevention tools, technical support channels, and related technology solutions (together, the "Service").

The purpose of this Policy is to:

• protect TRAPAY's systems, infrastructure, and business reputation;
• reduce legal, fraud, compliance, and operational risks;
• ensure that the Service is used only for lawful and acceptable business purposes;
• support compliance with third-party provider, acquirer, banking, and scheme requirements.

This Policy forms part of TRAPAY's Terms of Use and applies to every user, merchant, customer, integrator, partner, or other person using or attempting to use the Service.

TRAPAY LTD ("TRAPAY", "we", "us", "our") provides:

• payment software;
• technical integrations;
• routing and automation tools;
• analytics and reporting;
• fraud-prevention tooling;
• technical support and maintenance;
• related technology services.

TRAPAY is not:

• a bank;
• a payment institution;
• an electronic money institution;
• an acquiring bank;
• a payment service provider;
• a money remittance provider.

TRAPAY does not itself:

• process payments;
• settle funds;
• receive payer funds in its own name;
• hold or transfer end-customer funds.

Payment processing and settlement are carried out by third-party providers, processors, acquirers, banks, or financial partners integrated through or connected to the Service.

This Policy applies to:

• all merchants and business customers;
• all users of the website, dashboard, API, hosted pages, documentation, demo, sandbox, and support channels;
• all persons acting on behalf of merchants or customers;
• all technical and commercial use of the Service.

Use of the Service is permitted only for lawful, transparent, and acceptable purposes consistent with this Policy, TRAPAY's Terms of Use, applicable law, and any relevant provider or partner requirements.

You may not use the Service:

• for any unlawful, fraudulent, deceptive, abusive, or harmful purpose;
• in any way that creates unacceptable fraud, sanctions, legal, chargeback, operational, or reputational risk;
• in violation of applicable laws, regulations, provider requirements, or payment scheme rules;
• in connection with any business, activity, product, service, or transaction type prohibited under this Policy.

TRAPAY may, at its sole discretion, determine whether a use case is inconsistent with this Policy.

The following activities are strictly prohibited.

5.1 Fraud and Deception

You may not use the Service for or in connection with:

• fraud;
• scam activity;
• fake or deceptive online stores;
• fake offers or misleading checkout flows;
• fake subscriptions or misleading rebilling;
• impersonation fraud;
• social engineering;
• friendly-fraud abuse schemes;
• creation of artificial or deceptive transaction volume;
• any attempt to mislead payers, providers, banks, acquirers, or TRAPAY.

5.2 Card and Payment Abuse

You may not use the Service for:

• carding;
• testing stolen or compromised cards;
• unauthorized card use;
• stolen payment credentials;
• synthetic identity activity;
• credential stuffing;
• replay or abuse of payment flows;
• refund abuse;
• chargeback abuse;
• any unlawful or abusive payment behavior.

5.3 Illegal Goods and Illegal Services

You may not use the Service for goods, services, or activity that are unlawful in any applicable jurisdiction, including but not limited to:

• stolen goods;
• forged, falsified, or counterfeit items;
• forged documents or government IDs;
• illegal drugs or controlled substances where unlawful;
• prohibited hazardous materials;
• illegal services or unlawful facilitation services.

5.4 Credentials, Logs, and Compromised Data

You may not use the Service in connection with:

• sale or distribution of logs;
• hacked accounts;
• compromised credentials;
• stolen personal data;
• unlawfully obtained digital access;
• malware-linked monetization;
• phishing tools;
• credential resale.

5.5 Harmful, Violent, or Extremist Content

You may not use the Service in connection with:

• hate speech monetization;
• racist or extremist content;
• violent incitement;
• promotion of religious persecution;
• violent extremist or terrorist-related propaganda;
• content encouraging unlawful harm.

5.6 Intellectual Property Infringement

You may not use the Service for:

• copyright infringement;
• trademark infringement;
• counterfeit goods;
• pirated software;
• unlawful IPTV or content redistribution;
• infringing digital content services;
• cyberlockers or file-sharing services primarily facilitating unlawful infringement.

5.7 Weapons and Regulated Dangerous Items

You may not use the Service for:

• firearms;
• ammunition;
• prohibited weapon parts;
• unlawful self-defense equipment;
• military or dual-use goods where prohibited or restricted.

5.8 Political and Religious Funding

Unless expressly approved in writing by TRAPAY following internal review, You may not use the Service for:

• political party funding;
• political donation platforms;
• political campaigning payments;
• religious fundraising;
• religious donation collection.

5.9 Illegal or Unlicensed Financial Activity

You may not use the Service for:

• unlicensed investment services;
• unlawful securities activity;
• Ponzi-type structures;
• pyramid schemes;
• unlicensed lending;
• unlawful credit broking;
• deceptive wealth or return schemes;
• any financial service that requires authorization and is operated without it.

5.10 Prohibited Medical / Pharmaceutical Activity

You may not use the Service for:

• unauthorized pharmaceuticals;
• unlawful medical supplies or devices;
• health products sold in violation of law;
• deceptive medical or health-related claims;
• restricted healthcare products without authorization.

5.11 Sanctions Evasion

You may not use the Service to:

• evade or attempt to evade sanctions;
• facilitate dealings with sanctioned persons or entities;
• conceal prohibited jurisdictions, ownership, or destination of transactions;
• structure activity to bypass legal restrictions.

5.12 Unlawful or High-Abuse Digital Goods

You may not use the Service for:

• unlawful digital goods;
• deceptive software products;
• abusive scripts or tools;
• tools clearly intended for unlawful activity;
• products primarily associated with fraud or abuse.

Certain businesses or activities may be restricted, meaning that they are subject to enhanced review, additional controls, special approval, contractual limitations, technical restrictions, or rejection.

These may include:

• adult content;
• debt, loans, and credit-related services;
• crowdfunding and investment-adjacent activity;
• future delivery / pre-order businesses;
• IPTV and similar content distribution services;
• VOIP, airtime, and related digital utility products;
• gambling and gaming;
• forex and similar high-risk verticals;
• high-risk digital goods;
• other sectors considered sensitive by TRAPAY or its providers.

Being listed as restricted does not mean acceptance is guaranteed.

You may not:

• reverse engineer, decompile, or disassemble the Service;
• bypass security controls;
• scrape or systematically extract data;
• probe or test the Service for unauthorized vulnerabilities;
• misuse APIs, tokens, credentials, or access rights;
• use bots or automation against the Service without authorization;
• use the Service to build or support a competing product;
• resell or sublicense access without authorization;
• share access credentials with unauthorized third parties;
• manipulate analytics, fraud tools, routing, or reports.

Where payment links or hosted pages are used, the following principles apply:

• the payment link may only be opened by the cardholder or authorized payer;
• only the cardholder or authorized payer may enter payment details;
• any payment initiated through deception, impersonation, or misuse is prohibited.

Merchants and users are responsible for:

• ensuring that their business activity is lawful;
• ensuring that their products and services are accurately represented;
• obtaining all necessary licenses and approvals;
• ensuring compliance with applicable law;
• ensuring that customers are not misled;
• ensuring that use of the Service does not violate this Policy.

TRAPAY may request supporting documents, explanations, screenshots, websites, licenses, or other evidence to assess compliance.

TRAPAY may monitor use of the Service and investigate suspected breaches of this Policy.

Where TRAPAY identifies, suspects, or reasonably believes that this Policy has been or may be breached, TRAPAY may, at its sole discretion:

• restrict or suspend access;
• disable payment routing or integrations;
• limit dashboard functions;
• request additional documents or explanations;
• block or reject certain categories of use;
• terminate access to the Service;
• report information to providers, partners, or authorities where appropriate or required.

TRAPAY may take action immediately and without prior notice where risk is considered material.

If You are unsure whether a business model, transaction type, product, or activity is acceptable under this Policy, or if You wish to report a possible violation, please contact: info@trapay.uk

TRAPAY may update this Policy at any time to reflect:

• legal changes;
• provider requirements;
• changes in risk appetite;
• fraud trends;
• business or technical developments.

The latest version will apply upon publication unless otherwise stated.