Privacy Policy
Effective Date: September 29, 2026 • Governing Law: Islamic Republic of Pakistan (PECA & SBP Guidelines).
1Information We Collect
When you register and participate in the 4tsaz platform, we collect information necessary to operate secure financial ledger accounts and comply with regulatory standards:
- Account Information: Full legal name, email address, password hash, and referral tracking identifiers.
- Financial & Rail Identifiers: Bank account titles, IBANs, and mobile wallet details (JazzCash, EasyPaisa, Raast ID) submitted solely for processing approved deposit credits and withdrawal settlements.
- Security & Audit Logs: Session timestamps, IP addresses, and cryptographic OTP verification logs to prevent unauthorized account access.
2How We Use Your Information
Your information is processed strictly for the following purposes:
- Authenticating member logins and dispatching time-sensitive 6-digit OTP verification codes.
- Calculating and recording append-only double-entry ledger entries for deposits, daily yields, and referral bonuses.
- Processing manual and automated withdrawal settlements directly to recipient Pakistani banking rails.
- Mitigating malicious behavior, parameter tampering, SQL injection, and automated bot registrations.
3Data Protection & Cryptographic Security
We implement enterprise security standards to protect your sensitive records:
Plaintext passwords are never stored. Passwords are hashed using one-way cryptographic algorithms with unique 16-byte random salts.
All traffic transmitted between your client browser, our Next.js edge, and the Mumbai PostgreSQL ledger is 256-bit TLS encrypted.
4Third-Party Sharing & Compliance
We never sell, rent, or trade your personal information. Information is shared exclusively with authorized Pakistani payment aggregators (PayFast APPS, JazzCash, EasyPaisa, 1Bill/Raast) solely to the extent necessary to process initiated deposits or execute fund transfers.
5Contact Our Privacy Team
For inquiries, data correction requests, or regulatory privacy questions, contact our designated Data Protection Officer: