Pluspay
SupportGet started

Other policies

Pluspay Security and Privacy Policies

Dear Visitor, at Pluspay Finansal Teknoloji Hizmetleri A.Ş., our highest priority as we accompany you on your financial journey is the security of your data and the transparency of our systems. We are pleased to share the core principles we have adopted in line with international standards and legal regulations.

Your Data Is Safe with Us. At Pluspay, we are committed to protecting the confidentiality, integrity and continuous availability of all our information assets. We safeguard customer data to the highest security standards and see a culture of information security as a shared responsibility for all employees. By continually updating our technology infrastructure, we provide you with a secure financial ecosystem.

Access Only for Those Authorized and in Need. We manage access to our systems and customer data on the principles of least privilege and “need to know.” Each employee has access only to the minimum information required to carry out their work. This keeps your information secure and protected from unauthorized access, even within our organization.

Care in Physical and Digital Environments. We believe security extends beyond digital systems. In our offices, we take the utmost care to ensure that documents containing sensitive information are never left unattended on desks and that screens are locked whenever someone steps away from their computer. This helps us maintain the highest information security standards in our physical spaces as well.

Security from the Design Stage. When developing the applications and software we provide, we make security a foundation of the work from the outset. Our software is built using a "Security by Design" approach and undergoes comprehensive testing before deployment to make it as secure as possible for you.

We Expect the Same Care from Our Partners. We make sure that all the partners and suppliers we work with to improve our service quality maintain security standards at least as high as our own. Through contracts that safeguard data security, we ensure the same reliability throughout the Pluspay ecosystem.

Your Data Is Protected by Strong Algorithms. Your sensitive financial and personal data is protected both at rest and in transit using modern, robust encryption standards. Our data traffic is encrypted with internationally recognized secure protocols to prevent third parties from reading or altering your information.

Proactive Protection Against Cyber Threats. We protect our corporate network and devices against viruses, ransomware and other cyber threats with multiple layers of security. We maintain a continuous line of defense to prevent malware from entering our ecosystem.

Continuous Auditing, Continuous Improvement. We keep our systems up to date to address new risks that may emerge as technology develops. We regularly commission independent cybersecurity experts to test our systems through penetration testing. We proactively identify areas for improvement and strengthen them quickly.

Secure, Uninterrupted Data Flow. We maintain the highest level of data transfer security in our internal communication networks and external integrations. We configure our network architecture to transmit data securely and protect our communication channels against unauthorized eavesdropping or interference with modern firewalls.

Your Identity Stays Private with Us. We respect the privacy of all information that identifies you directly or indirectly (PII). We collect this data only to provide you with better service and meet our legal obligations, and never share it with third parties without your permission and knowledge.

Rigorous Oversight of System Administration. We apply strict rules to the use of accounts with administrator (admin) privileges in our systems. We log and regularly audit all activity by these privileged accounts, which perform critical operations, and protect our systems against potential human error.

Special Care for Sensitive Data. We apply extra protection to the sensitive personal data used in identity verification processes. We process this data within the rules established by law and only after obtaining the required explicit consent.

Transparency and Full Legal Compliance. We operate in full compliance with all applicable legislation, particularly the Personal Data Protection Law No. 6698 (KVKK). We process your personal data fairly, transparently and only for the purposes stated in our privacy notice. We provide the infrastructure you need to exercise your legal rights over your data promptly.

We Keep Data Only as Long as Needed. We do not retain your personal data indefinitely. Your data is stored securely for the periods prescribed by law or determined by the nature of our services.

For a Better Web Experience. We use cookies on Pluspay's digital platforms to offer you a faster, more secure, and personalized experience. When you visit our platforms, we make it easy to manage your cookie preferences and seek your explicit consent for uses beyond essential functions.

Secure Everywhere, Wherever You Work. We never compromise on security as we adapt to modern working models. Even when working outside the office, our colleagues access Pluspay networks only through encrypted connections and secure, company-provided devices. We guarantee the uninterrupted and secure continuity of our services.

Uninterrupted, High-Quality Financial Technology Services. We work to maximize the quality, sustainability and continuity of the services we provide to our customers and business partners. We continuously monitor our service infrastructure and manage your requests and feedback through a central system, aiming to improve our processes and deliver a seamless user experience.