Privacy Policy

Last Updated: 21 Aug 2026

PaySurfer, a payment platform provided by MineSec Pte. Ltd. (“PaySurfer”, “MineSec”, “we”, “us”, or “our”), is committed to protecting your privacy and handling your personal data in an open, transparent, and secure manner.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you:

  • Visit or interact with the PaySurfer website;
  • Register for or use PaySurfer services;
  • Use the PaySurfer Merchant Portal or Partner Portal;
  • Use PaySurfer APIs, SDKs, or other technology interfaces;
  • Use payment acceptance, payment gateway, SoftPOS, or related payment services provided through PaySurfer;
  • Communicate with us by email, phone, online forms, or other digital channels; or
  • Otherwise interact with us in connection with our products and services.

Depending on the service and the circumstances in which personal data is processed, PaySurfer may act as a data controller, data processor, or technology service provider on behalf of our customers and partners.

Where PaySurfer processes personal data on behalf of a merchant, payment service provider, partner, or other customer, the relevant customer generally determines the purposes and means of processing. In such circumstances, PaySurfer processes personal data in accordance with the customer’s instructions and applicable contractual arrangements, including a Data Processing Agreement where required.

We process personal data in accordance with applicable data protection and privacy laws, including the EU General Data Protection Regulation (GDPR) where applicable.

1. Who we are

Legal Entity: MineSec Pte. Ltd.
Brand / Platform: PaySurfer
Address: 10 Anson Road, #03-27 International Plaza, Singapore 079903
Email: support@minesecsoftpos.com

2. What Personal Data We Collect

The personal data we collect depends on how you interact with PaySurfer and which services you use.

A. Business and Account Users
If you register for or use PaySurfer services, we may collect:

  • Full name;
  • Business email address;
  • Telephone number;
  • Job title or role;
  • Company name and business details;
  • Business registration or tax identification information;
  • Account login credentials and authentication information;
  • Information relating to your use of PaySurfer services;
  • Communications and correspondence with us; and
  • Other information necessary to provide and manage your account.

This may include merchants, payment service providers, payment facilitators, acquirers, ISVs, technology partners, system integrators, developers, and other business users of PaySurfer.

B. Merchant and Partner Information
Where applicable, we may collect information relating to merchants and business partners using PaySurfer, including:

  • Merchant or business identifiers;
  • Store or outlet information;
  • Business registration information;
  • Settlement-related information;
  • Payment configuration and routing information;
  • Merchant account and onboarding information;
  • Information relating to payment acceptance devices or applications; and
  • Other information required for account management, onboarding, compliance, or service delivery.

C. Payment and Transaction Data
When PaySurfer is used to facilitate payment transactions, we may process transaction-related information such as:

  • Transaction amount and currency;
  • Transaction date and time;
  • Merchant and transaction identifiers;
  • Payment method information;
  • Payment authorization status;
  • Transaction response codes;
  • Payment routing information;
  • Tokenized or masked payment references;
  • Device or application information associated with the transaction; and
  • Other information necessary to process, route, authenticate, reconcile, or monitor transactions.

Where PaySurfer processes payment information on behalf of a merchant, payment service provider, or other customer, PaySurfer generally acts as a data processor and processes such information according to the customer’s instructions and applicable agreements.

PaySurfer does not seek to collect or store full payment card details unless specifically required for a particular service and appropriately protected in accordance with applicable payment security requirements.

D. Customer / Cardholder Data
Where PaySurfer processes payment transactions on behalf of our customers, we may process personal data relating to their customers or cardholders, including, where applicable:

  • Masked or tokenized card information;
  • Card brand or payment method;
  • Transaction amount and time;
  • Transaction location, where enabled;
  • Payment authorization and response information;
  • Tokenized payment references; and
  • Other transaction-related information required to complete or support the payment.

The relevant merchant, payment service provider, or other customer is generally responsible for determining the purposes for which such customer data is processed.

E. API, SDK and Developer Users
If you use PaySurfer APIs, SDKs, developer tools, or related technical services, we may collect:

  • Name and contact information;
  • Account and login information;
  • Developer or organization information;
  • API credentials and authentication information;
  • API usage information;
  • Technical logs;
  • Device and application information; and
  • Communications relating to technical support.

API credentials, authentication information, and other security-sensitive information are handled using appropriate security measures.

F. Website Visitors
When you visit the PaySurfer website, our servers may automatically collect certain technical information, including:

  • IP address;
  • Browser type and version;
  • Operating system;
  • Device information;
  • Pages visited;
  • Date and time of access;
  • Time spent on pages;
  • Referring website or source; and
  • Other technical or usage information.

We may use analytics and similar technologies to understand how visitors use our website and to improve its functionality and content.

G. Cookies and Similar Technologies
We use cookies and similar technologies on our website.
Please refer to Section 10 – Cookies and Web Tracking for more information.

3. Legal Basis for Processing

Where applicable under the GDPR or similar laws, we process personal data on one or more of the following legal bases:

Performance of a contract
We may process personal data where it is necessary to provide PaySurfer services, manage accounts, process transactions, provide support, or fulfill our contractual obligations.

Legal obligations
We may process personal data where necessary to comply with applicable laws, regulations, regulatory requirements, court orders, or other legal obligations.

Legitimate interests
We may process personal data where necessary for our legitimate business interests, such as maintaining and securing our services, preventing fraud, improving our products, managing business relationships, and protecting our rights, provided that such interests are not overridden by your rights and interests.

Consent
Where required, we may process personal data based on your consent. You may withdraw your consent at any time, although this will not affect processing that took place before the withdrawal.

Other lawful bases
We may process personal data on other lawful bases where permitted by applicable law.

4. How We Use Your Personal Data

We may use personal data for the following purposes:

  • To provide, operate, and maintain PaySurfer services;
  • To facilitate and support payment acceptance and payment processing;
  • To manage merchant, partner, customer, and user accounts;
  • To process onboarding and account verification;
  • To provide technical and customer support;
  • To authenticate users and protect accounts;
  • To monitor and secure our platform and infrastructure;
  • To detect, prevent, and investigate fraud, abuse, and security incidents;
  • To comply with legal, regulatory, and contractual obligations;
  • To process transactions, reconciliation, reporting, and settlement-related activities where applicable;
  • To monitor and improve the performance and functionality of our services;
  • To develop and improve our products and technologies;
  • To communicate with you about service updates, technical matters, security matters, and account-related information;
  • To send marketing communications where permitted by applicable law and, where required, with your consent;
  • To understand how visitors use our website and improve our content and user experience; and
  • To protect our legal rights, property, users, and business.

5. Data Sharing and Third Parties

We may disclose or make personal data available to trusted third parties where necessary to provide our services, fulfill contractual obligations, comply with legal requirements, or support our legitimate business activities.

These parties may include:

  • Payment processors and payment service providers;
  • Acquiring banks and financial institutions;
  • Card schemes and payment networks, such as Visa and Mastercard;
  • Merchants, payment facilitators, or other customers where necessary to provide the requested service;
  • Cloud hosting and infrastructure providers;
  • Security, fraud prevention, and risk management providers;
  • Customer support and communication platforms;
  • Identity verification and compliance service providers;
  • Professional advisors, auditors, and legal service providers;
  • Analytics and website technology providers;
  • Regulators, government authorities, law enforcement agencies, or courts where required; and
  • Other service providers acting on our behalf.

We require relevant third-party service providers to implement appropriate confidentiality, security, and data protection measures.

Where a third party processes personal data on our behalf, we take appropriate steps to ensure that the processing is governed by appropriate contractual and data protection obligations.

We do not sell personal data to third parties.

6. International Data Transfers

PaySurfer and its service providers may process personal data in countries outside the country or jurisdiction in which you are located.

This may include Singapore and other countries where our service providers, infrastructure, or business operations are located.

Where applicable, we take appropriate measures to ensure that international transfers of personal data are carried out in accordance with applicable data protection laws.

For transfers of personal data from the European Economic Area (EEA), the United Kingdom, or other jurisdictions requiring specific transfer safeguards, we may rely on appropriate mechanisms, including:

  • An adequacy decision issued by the relevant authority;
  • Standard Contractual Clauses approved by the European Commission;
  • The UK International Data Transfer Agreement or Addendum, where applicable;
  • Appropriate supplementary technical and organizational measures; and
  • Other lawful transfer mechanisms permitted under applicable data protection laws.

Where required, we conduct Transfer Impact Assessments or equivalent assessments to evaluate the risks associated with international data transfers.

Information about relevant sub-processors and applicable transfer mechanisms may be provided upon request.

7. Data Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including:

  • Providing and maintaining our services;
  • Maintaining business and contractual records;
  • Meeting legal, regulatory, accounting, tax, and reporting obligations;
  • Resolving disputes;
  • Preventing fraud and security incidents; and
  • Establishing, exercising, or defending legal claims.

The specific retention period depends on the type of personal data, the nature of the relationship, the service being provided, and applicable legal or regulatory requirements.

When personal data is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with our applicable retention and security procedures.

Where PaySurfer processes personal data on behalf of a customer, retention may be determined by the customer’s instructions and applicable contractual arrangements.

8. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal data, including:

Access
Request access to personal data we hold about you.

Rectification
Request correction of inaccurate or incomplete personal data.

Erasure
Request deletion of your personal data where applicable.

Restriction
Request that we restrict the processing of your personal data in certain circumstances.

Objection
Object to certain types of processing, including processing based on legitimate interests where applicable.

Data Portability
Request your personal data in a structured, commonly used, and machine-readable format where applicable.

Withdraw Consent
Withdraw consent where processing is based on your consent.

Complaint
Lodge a complaint with the relevant data protection authority in your jurisdiction.

These rights may be subject to applicable legal limitations and exceptions.

To exercise your rights, please contact us using the details provided in the Contact Us section.

Where PaySurfer processes personal data on behalf of a customer, you may need to direct your request to the relevant merchant, payment service provider, or other customer who controls the processing. Where appropriate, PaySurfer will assist the relevant customer in responding to such requests.

9. Security Measures

We take the security of personal data seriously and maintain appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Our safeguards may include:

Encryption

We use encryption and other security measures to protect data during transmission and, where appropriate, while stored.

Payment information may be tokenized, encrypted, or masked in accordance with applicable payment security requirements.

Access Controls

Access to personal data is limited to authorized personnel and service providers who require access for legitimate business purposes.

We use appropriate authentication, access-control, and security mechanisms to protect our systems.

Secure Infrastructure

Our services are operated using secure infrastructure and cloud technologies with appropriate security controls.

We implement measures such as network security controls, monitoring, logging, and vulnerability management.

Security Testing

We conduct security assessments, testing, monitoring, and other activities designed to identify and address potential vulnerabilities.

Incident Response

We maintain procedures for identifying, investigating, responding to, and managing security incidents and data breaches.

Where required by applicable law or contractual obligations, we will notify relevant customers, regulators, or affected individuals of a personal data breach.

Staff Training and Confidentiality

Personnel who have access to personal data are subject to appropriate confidentiality obligations and receive relevant security and data protection training.

Sub-Processor Management

We assess and manage relevant third-party service providers and require appropriate security and data protection commitments where they process personal data on our behalf.

PaySurfer maintains security practices appropriate to the nature of the services it provides and applicable industry requirements, including relevant payment security standards where applicable.

10. Cookies and Web Tracking

We use cookies and similar technologies on the PaySurfer website to operate the website, understand how visitors use our services, and improve the user experience.

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow a website to recognize your device and remember certain information about your visit.

Types of Cookies We May Use

Essential Cookies
These cookies are necessary for the website to operate properly and may support functions such as security and navigation.

Analytics Cookies
These cookies help us understand how visitors use our website so that we can improve its performance and content.

Functional Cookies
These cookies may remember preferences such as language or other settings.

Marketing Cookies
Where used and permitted, these cookies may help us understand the effectiveness of marketing activities and provide more relevant communications or advertising.

Third-Party Services

We may use third-party services such as Google Analytics or other analytics and website technologies. These providers may collect information about your use of our website through cookies or similar technologies and may process such information in accordance with their own privacy policies.

Your Choices

Where required by applicable law, you can manage non-essential cookies through our cookie consent mechanism.

You may also:

  • Change your browser settings to block or delete cookies; or
  • Use available opt-out mechanisms provided by certain third-party analytics services.

Disabling certain cookies may affect the functionality or performance of our website.

11. Children’s Privacy

PaySurfer’s services are intended for businesses and professional users and are not directed at children.

We do not knowingly collect personal data from individuals under the age of 18 through our website or services where such collection is not permitted by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal data to us, please contact us.

If we become aware that we have collected personal data from a child in circumstances where such collection was not permitted, we will take appropriate steps to delete the information in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, business practices, technology, or applicable legal and regulatory requirements.

When we make changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Where required by applicable law, we will provide additional notice of material changes.

We encourage you to review this Privacy Policy periodically to understand how we handle personal data.

13. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us:

MineSec Pte. Ltd.
PaySurfer
10 Anson Road, #03-27 International Plaza
Singapore 079903

Email: support@minesecsoftpos.com

For privacy or data protection requests, please include sufficient information for us to understand and respond to your request.