Last updated: 17 July 2025

1. Introduction

At YAP Pakistan ("YAP Pakistan," "we," "our," or "us"), your privacy matters. We are committed to safeguarding the personal information of all customers and visitors to our websites, mobile apps and branchless-banking services (collectively, the "Services"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you have. If you have any questions, please contact us at privacy@yappakistan.com.

By accepting this Privacy Policy and our Terms & Conditions during registration, or by using our Services, you consent to the collection, processing, storage, use and disclosure of your personal information as described below. You may withdraw your consent at any time (except where the information is required to provide the Services), exercise your privacy rights, or ask questions by emailing us at the address above.

We process your information in accordance with all applicable Pakistani laws and regulations, including the SBP Branchless Banking / EMI regulations issued April 2019 and revised June 2023, and any relevant data-protection requirements.

2. Information we collect

When you sign up for our products and services, we collect the information you choose to provide. Our goals are to offer a safe, efficient and customised experience and to protect your interests. The information we may collect includes, but is not limited to:

• Identifying data — name, CNIC number, date of birth, residential address, contact numbers, email address, father's / mother's / spouse's name.
• Biometric & identity data — selfie or live-liveness capture via camera (mandatory under the SBP Customers' Digital On-Boarding Framework), optional photo uploads, fingerprints and signatures.
• Financial data — debit/credit-card details, bank-account numbers, transactional history, lifestyle or spending patterns.
• Usage data — transaction type, date, time, location, IP address, browser type, device information, page-view statistics and traffic logs.
• Correspondence — emails, in-app messages, push notifications, SMS, customer-support calls, feedback, ratings or complaints.
• Additional verification data — utility bills, employment information, proof of income / source of funds, or other documents we may request to authenticate your identity and compliance.

Camera & TrueDepth API. Our mobile app uses the device's camera and Apple's TrueDepth API solely to confirm liveness for identity verification. We do not share any captured data through this API with any third party.

3. How we use your information

We never sell or rent your personal data to third parties for marketing without your explicit consent. We use your information to: provide, operate and maintain the Services; deliver products you order; authenticate and verify your identity (including liveliness and biometric checks); facilitate payments, collections and settlements; detect, prevent or investigate fraud and money-laundering; resolve disputes and secure payments; personalise your experience; notify you of promotions, products and features; enforce our Terms & Conditions; and comply with legal obligations and requests from regulators or law-enforcement agencies.

4. Sharing & disclosure

We disclose personal information only in accordance with Pakistani law and this Policy:

• Service partners & affiliates — banks, payment gateways, telecom operators and vendors that perform services on our behalf.
• Regulators & law enforcement — the State Bank of Pakistan, FIA, courts or other governmental bodies when required by law.
• With your consent — third parties to whom you explicitly direct us to disclose information (e.g. billers, merchants or loyalty partners).

We take reasonable steps to ensure all recipients only process your data for authorised purposes, maintain confidentiality and apply adequate security controls.

5. Your choices & rights

Subject to applicable law, you may: access, correct or update certain personal information in your account settings; withdraw consent or request deletion (where we have no overriding legal grounds to retain it); object to or restrict processing for direct-marketing; and request a copy of your data in a portable format. To exercise these rights, email privacy@yappakistan.com or use the in-app privacy tools.

6. Account & PIN protection

Your 4-digit PIN is the key to your account. Choose a strong MPIN (avoid sequences such as "12345" or repeating digits), do not store it on your device, and never share it — even with us. If your MPIN, passcode or SIM is lost or compromised, notify us immediately so we can suspend or block the Service; you'll be liable for transactions authorised before such notification.

7. Data security

Customer data is stored on secure servers and is encrypted. We protect your information using industry-standard measures, including encryption, firewalls, role-based access controls and physical safeguards. No system is completely foolproof, so you also play a vital role in safeguarding your credentials and devices.

8. Retention

We retain personal information only as long as necessary for the purposes described above, to comply with legal or regulatory requirements, or to resolve disputes. Once data is no longer required, we securely destroy or anonymise it.

9. Contact us

Data Protection Officer, YAP Pakistan (Private) Limited
Email: privacy@yappakistan.com
Helpline: 042-111-212-434
WhatsApp: +92 300 0081266

Pilot phase

1. Introduction

Welcome to YAP Pakistan. These Terms and Conditions govern your use of our services, including account creation, digital payments and debit-card access. By registering and using the YAP Pakistan app, you confirm that all provided information is accurate and that you agree to comply with these Terms.

2. What you're agreeing to

You must provide accurate information and keep it updated. These Terms form a legal agreement between you and YAP Pakistan. To use YAP, you must:

• Be a Pakistani national, age 18+;
• Hold a valid CNIC or NICOP;
• Have a registered mobile number (biometrically verified);
• Provide personal info (address, photo, etc.) and accept these Terms.

Only one account per CNIC / mobile number is allowed.

3. Definitions

• Account — your registered relationship with YAP Pakistan to use its services through the mobile application.
• Application — the mobile app owned or licensed by YAP Pakistan (Private) Limited.
• Company — YAP Pakistan (Private) Limited, Plot #34, Abdul Haque Road, Block J3, Johar Town, Lahore, Pakistan.
• EMI — an Electronic Money Institution as defined by SBP regulations.
• NADRA — National Database and Registration Authority.
• SBP — State Bank of Pakistan.

4. Your account & wallet

• Your account is a PKR wallet — funds do not earn interest.
• You alone control the money in your wallet.
• Funds can be added via bank transfers, debit cards or other YAP wallets; withdrawals are through ATMs.
• Fees, if any, are shown clearly in-app and deducted automatically.

5. Security & your responsibilities

• Keep your PIN / passcode private — don't share it.
• Use the lock feature or call our Helpline immediately if your PIN, phone or card is lost.
• Report any unauthorised transactions within 24 hours.
• You're responsible for keeping your details accurate and secure.

6. Card usage & limits

• Daily ATM limit: PKR 10,000 for biometric users.
• Monthly transaction limits vary based on verification level.
• If lost or stolen, lock the card immediately and inform us within 7 days.

7. Payments & transaction rules

• Sufficient balance is required for all payments.
• Transactions violating laws or limits may be declined.
• You can restrict specific categories (e.g. gambling) from settings.

8. Fees & charges

All applicable charges are clearly listed in the in-app Fee Schedule (SOC) — including fees for loading money, transfers or ATM withdrawals. If your wallet doesn't have enough funds to cover a fee, access to services may be temporarily restricted. There are no hidden costs — every fee is displayed before you confirm a transaction.

9. Privacy & data use

We collect, store and use your personal data to meet legal requirements, enhance your security and deliver a seamless experience. We may share your data only with authorised entities like SBP, NADRA or licensed compliance partners. Your data will never be used for marketing without your consent or shared with unauthorised third parties.

10. Intellectual property

Everything inside the app — from the code to the design, branding, logos and system logic — is owned by YAP Pakistan and protected by intellectual-property laws. You may not copy, modify, distribute or reverse-engineer any part of the app or its content.

11. Liability & disputes

We are not liable for indirect losses, service interruptions or issues caused by your negligence. You are responsible for monitoring your account and promptly reporting errors. For failed, duplicate or incorrect payments, we will assist in recovery where possible, but success is not guaranteed.

12. When we can terminate your account

We may provide 24-hour prior notice before account closure in standard cases. Immediate suspension may occur if we detect fraud, unlawful activity, regulatory intervention or a breach of Terms. If your account has a remaining balance, you'll be given a window to withdraw it.

13. Changes to these terms

We may modify these Terms at any time to reflect changes in law, regulation or our services. Minor changes may take effect immediately on publication in the app. For major revisions, we'll provide at least 30 days' advance notice via in-app notification, email or SMS. Continuing to use YAP after updates take effect means you accept the revised Terms.

14. Complaints & support

Reach us through the app, email help@yappakistan.com, or call our helpline at 042-111-212-434. Please clearly mark complaints so we can prioritise them. We aim to acknowledge all complaints within 48 hours.

15. Governing law

These Terms are governed by the laws of the Islamic Republic of Pakistan. The courts of Lahore shall have exclusive jurisdiction over all disputes.

1. What information we need

We need information about you so that you can use YAP Young. We collect things like:

• Your name and date of birth;
• Your Smart CNIC / B-Form number;
• Your phone number / email address and where you live;
• When and where you pay for something, and how much you spend.

2. Why we use your information

• To add you to your YAP Young account;
• To help you spend, save and move money;
• To keep the account and your information safe;
• To talk to you about the account;
• To help improve YAP Young.

3. Things you can ask us

• For a copy of your information;
• To correct information that is wrong;
• To review a decision made without a human — for example, if we stop a payment;
• To delete or stop using your information — we can't always do this, but when we can, we will.

If you're using a YAP Young account and are under 18, you'll need to ask your parent or guardian to contact us on your behalf, through the app or the details below.

4. Who we share your information with

The parent or guardian who opened the account can see how much money is in it and your spending. We share your information with other companies that help our services work, and when it helps to keep you or your money safe. We also share your information with companies when you spend money on your card.

5. How long we keep your information

We keep your information as long as you're using YAP Young, and for 10 years after that. We'll delete your data when we don't need it anymore.

6. Learn more & contact us

Our YAP Pakistan Privacy Policy contains more information on how and why we use information for our services. Ask your parent or guardian if you have any questions — they can contact us directly in the app, or email help@yappakistan.com.

1. These terms and using your account

These legal terms are between you and YAP Pakistan. YAP Young is an account you can give your child access to. YAP Young has no contractual or legal relationship with any child who uses the account. You're responsible for making sure any child who uses the account does so in line with these T&Cs. Your YAP Pakistan T&Cs also apply; where they're inconsistent on the same issue, these terms apply. You're responsible for your child's use of the account, including any losses they might incur.

2. How the account works

You can set up a YAP Young account to help manage your child's everyday spending. You can have a maximum of 4 Young accounts — one child per account. We'll refer to the account using your child's name in your app. You'll be the legal and beneficial owner of any money in the account. You need a YAP Pakistan account to have a YAP Young account; if we close or lock your YAP Pakistan account, we'll also close or lock your YAP Young account. Your child must be a Pakistani resident, and you must be the parent or legal guardian.

3. Getting your child set up

If your child is aged 6–17, you can give them access to a YAP Young account. We'll use your child's email address / phone number to link them to your account. You can also grant access using a 4-digit PIN or a QR code generated in your YAP Pakistan app. Your child doesn't need their own device to use the account — they can spend on the card without a device or the app. You'll be notified and have full visibility whenever their account or card is used.

4. Account information

By giving your child access, you're permitting them to access account details, transaction history and balance information. You can also see your child's details in the app, and you're responsible for making sure your child keeps the PIN safe.

5. Your child's card

You can order a card for your child through the YAP Pakistan app, agreeing that your child can make card payments within the card-control limits set. We charge a fee for replacement cards (e.g. if lost, damaged, expired, stolen, swallowed by an ATM, or cancelled due to fraud concerns), taken from your YAP Pakistan account.

6. Turning 18

We will lock and cancel the YAP Young account when your child turns 18. They can then apply for their own YAP Pakistan account, where they would be the account holder and legal owner of the money.

7. Spending & sending money

You can use customisable controls (in Card Control) to turn cash withdrawals and online payments on or off. Your child can make card payments, online payments and ATM withdrawals. To top up, transfer from your YAP Pakistan account; you can also transfer money back. You accept responsibility for all spending and acknowledge we'll treat any payment a child makes as authorised by you. As you legally own the money, the YAP Young account might not be the right place for long-term savings.

8. How to contact us

Get in touch through the YAP Pakistan app, email help@yappakistan.com, or phone 042-111-212-434 (or WhatsApp +92 300 0081266). You'll need to notify us about things like stolen cards or fraudulent transactions. We won't get involved in a dispute between you, your child or anyone else; if we become aware of one, we can lock or close the account.

9. Closing your account

Once this agreement starts, it won't end until you or we end it. To close, transfer your balance to your YAP Pakistan account and repay any money owed. Once closed, the card won't work and neither you nor your child will be able to access the account. We can close it immediately if you've given false information or used the account in a way that isn't allowed.