Privacy policy

stc Pay is committed to protecting the personally identifiable information of users of its mobile payment products and services. To provide the Services, stc Pay must collect and maintain certain Personal Information as described in this Privacy Policy. This Privacy Policy applies to Your use of the Services via computer, “smartphone” or other mobile device (“Mobile Device”), or point-of-sale terminals (collectively “Devices”). This Privacy Policy is subject to change at any time, which stc Pay may do by updating this Privacy Policy on stc Pay’s Mobile Device/Application or sending You an e-mail at the e-mail address You use in connection with Your stc Pay account (“stc Pay Account”). You can always find the most recent, updated version of this Privacy Policy on the stc pay Website or Application. You are advised to review the Privacy Policy regularly for updates.
But whatever We do with Your Personal Information, We do it on a legal basis and process it in line with the purposes outlined under Law No. 30 of 2019 on the issuance of the Personal Data Protection Law (the “Applicable Privacy Law“). If You choose to use the Application and Service, then You agree to the collection and use of Personal Information in relation to this Policy. The Personal Information that We collect is used for providing and improving the Service. We will not use or share Your information with anyone except as described in this Policy.
The terms used in this Policy have the same meanings as in Our MSA, which is accessible to the Application unless otherwise defined below:

1. What Personal Information does stc Pay collect?

1.1. When You open a stc Pay Account, stc Pay collects and stores Personal Information that may include the following: name and e-mail address; mailing address and telephone number; browser type and Internet Protocol address; credit, debit, rewards, and other card information, bank name, bank account number, date of birth, place of birth, national ID and passport details (number, expiry date), nationality, gender, employer name, occupation status, transaction history made with purchases using the Service, or any other information can be collected through stc Pay systems or Service(s).

1.2. stc Pay, card issuers, payment processors, and financial institutions receive Personal Information when You make or accept a payment (“Payment”).

1.3.  stc Pay receives certain tracking (geo-location) information when You access the Services via a Mobile Device to make a Payment, access stc Pay Account Application and Website, or use mapping, merchant search, or other Services.

1.4. Based on the above, We may store and share Your Personal Information with Our third party suppliers to be able to provide You with the Services. You agree to grant Us such rights for the purpose of market analysis, marketing and for statistical purposes.

1.5. When You use the Service(s), You accept to receive notifications from Us about Our products and Services.

2. Does stc Pay use "cookies"?

A “cookie” is a small data file that a website can send to Your web browser and store on Your computer or Mobile Device. stc Pay uses a cookie only for the purpose of identifying the language (e.g., English) that You have selected for Your browser sessions on Your computer or Mobile Device. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but You can usually modify Your browser setting to decline cookies if You prefer. If You choose to decline cookies, You may not be able to use all the features of the Services or the Application. This Privacy Policy does not apply to third-party cookies or other tracking technologies, and stc Pay has no responsibility for them. If You are concerned about them, please check the privacy policies of the third-party sources of these cookies and other tracking technologies.

3. What Personal Information does stc Pay disclose and to whom?

3.1 stc Pay will not share any personal or sensitive data with any external organization unless the same is necessary to enable stc Pay to provide Services (to customers or business associates) or to enable completion of a legitimate transaction or for reporting which may be necessary or required pursuant to Applicable Law or pursuant to the Central Bank of Bahrain (“CBB”) regulations or pursuant to the terms and conditions applicable to such information as agreed to with stc Pay such as:

3.1.1 Banking and financial services providers:

o   Banks and financial services companies and payment companies involved in processing payments made by You using Our services.

3.1.2 Government and regulatory bodies:

o   The Central Bank of Bahrain (CBB) and other governmental bodies and departments where required to by law or an instruction of theirs including to comply with applicable regulations.

o   The Police or the courts in the event that We wish to take legal action.

3.1.3 Technology providers:

o   Third party companies providing Us with IT systems, application or IT support to maintain Our systems.

3.1.4 Ancillary service providers:

o   Storage companies for archiving and destruction of Your personal data once We have no need to retain it following delivery of products and services to You.

o   External legal counsel in the event that We wish to take legal action.

o   Our consultants who support Us with Our business.

o   Our external auditors for auditing purposes.

o   Other service providers required in order to fulfil Our business operations.

3.2 Where We use any external organization, We’ll make sure it’s protected, as far as is reasonably possible.

4. What We Market to You and how We identify products and services that interest You

4.1 We’ll use Your Personal Information to send You direct marketing and to better identify products and services that interest You. We do that if You’re one of Our customers or if You’ve been in touch with Us another way (such as entering a prize promotion or competition).

4.2 If You no longer want to receive a marketing activity from Us, You will need to call Us on 77123123 to submit Your request along with Your proof of identity, and We will attend Your request in due course. We will notify You, with any of the following:

4.2.1 With Our acceptance to Your request and to discontinue marketing;

4.2.2 With Our partial response to Your request (indicating the cause and the extent of Our response); or

4.2.3 Rejection of Your request and the reason therefore.

4.3 If You have opted out of a marketing activity, You may still receive service-related messages (e.g. transaction confirmation etc.).

5. Security Practices

stc Pay shall take all precautions to maintain the confidentiality of personal and sensitive information/data pertaining to its customers/users and business associates by imparting proper training to its employees and by providing restricted access to persons who may require access to such data strictly on a need to know basis. stc Pay maintains reasonable physical, electronic, and procedural safeguards to protect the security of Your Personal Information. These safeguards include encrypted storage of some of Your Personal Information and limiting third-party decryption of Personal Information to that which is reasonably desirable or appropriate for vendors, Card Issuers, Payment Processors, and Contractors to provide the Services. stc Pay uses firewalls and other security technology to protect its network and systems from external attacks, and by requiring You to enter a unique username, password and PIN to access or update Your Personal Information. All users must enter their PIN when confirming changes to their Personal Information or executing transactions. Vendors agree with stc Pay to employ certain security measures and meet certain security standards, but stc Pay cannot and does not warrant that vendors will do so.

6. Fraud and Credit Agencies

6.1 To the extent required by Applicable Law and the CBB’s regulations, such as by order or authority of a governmental regulatory body, or in connection with a subpoena issued in a legal proceeding, stc Pay will disclose Your Personal Information in order to comply with the law and cannot be held liable in any way by the User/customer for such disclosure. stc Pay may maintain records of Your Personal Information associated with Your use of the Services, even after Your stc Pay Account is closed, for as long as several years to comply with laws and regulations, including anti-money laundering laws. Other card issuers and financial institutions also may require record retention for extended periods. stc Pay may confirm some of Your Personal Information with third parties, or use it to comply with governmental regulatory requirements to prevent fraud and money laundering. Further, stc Pay shall not take any responsibility and will not be held responsible for any misuse of information / details due to negligence on the part of the customer of sharing their personnel information with the outsiders or any third party.

7. Changes to This Privacy Policy

7.1 We may update Our Privacy Policy from time to time. Thus, You are advised to review this page periodically for any changes. We will notify You of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this Website or Application.

8. Limitation of Liability

8.1 We make no representations or warranties of any kind, express or implied, as to the operation of this Application, Content or materials included on this Application. Moreover, We do not warrant that this Application is free of viruses or other harmful components. Therefore, We will not be liable for any damages of any kind arising from the use of this Application, and You agree that Your use of this Application is at Your sole risk.

8.2 We will make all reasonable efforts to ensure that all information provided via this Application or Website is accurate at the time of its inclusion; however, there may be errors, for whatsoever reason. In such cases, We shall be released from any responsibility.

9. Proprietary Rights

9.1 All Trade Marks used on the Application, whether words or designs in any way, are the Trade Marks of stc Pay and/or its partners or merchants. You shall not use these Trade Marks; in addition, You acknowledge and agree that You are only allowed to use the Website, Application and the Services as set out in this Policy. Nothing on this Application can be interpreted as granting any license to transfer any Intellectual Property.

9.2 You must not copy any material contained on this Application or Website to any other server without Our prior written consent. Any unauthorized use of the contents of the Application shall be deemed in breach of copyright laws and trademark laws in Kingdom of Bahrain or other laws and international conventions “e.g. Berne, TRIP’s…etc.”. 

10. Contact Us

10.1 You can get in touch with Us by email at [email protected] or call Us on +973 77123123.

10.2 If You’d like any more details, or You have comments or questions about Our privacy policy, write to Us via postal/registered mail to the following address:
STC PAY Office 101, stc Tower, Building 15, Road 68, Block 428, Seef, Manama, Kingdom of Bahrain (P.O. Box 21529)

10.3 If You want to make a complaint on how We have handled Your Personal Information, please contact Our data protection controller who will investigate the matter and report back to You. If You are still not satisfied after Our response or believe We are not using Your Personal Information in line with the law, You also have the right to complain to the CBB.

11. Definitions

· Application” or “Mobile Device” means any virtual tool through which the Services are provided by stc Pay and; which includes but is not limited to virtual cash payment mechanism and international monetary remittance.

· Content” All Intellectual Property, data, information, and material including, but not limited to, texts, pictures, photographs, software, videos, music, sounds and graphics.

· Intellectual Property” means (i) the rights to any material, data or information (texts, graphics, animations, software, music, photos, pictures, audios, videos) contained on Our Application and/or electronic account which are the exclusive property of Us and are protected by the Bahraini intellectual property law. This definition shall not apply to Your data posted on Your electronic account.

· Master Services Agreement” or “MSA” means Our User Agreement as posted on the Application which You have accepted before using the Services.

· Personal Information” means information that can be used on its own or with other information to identify, contact, or locate You, or to identify an individual in context, this information includes but is not limited to Your name, physical address, email address, nationality, financial details.

· Policy” means this privacy policy published on the Application and Website.

· stc Pay” or “Our” or “Us” or “We” means STC PAY Bahrain B.S.C. (Closed), a licensed and regulated as an Ancillary Payment Service Provider by the Central Bank of Bahrain, with its address at Office 101, stc Tower 15, Road 68, Block 428 Seef, Manama, Kingdom of Bahrain.

· Services” any service provided by Us through the Application or Website.

· Trade Marks” The word or mark “stc” or “VIVA”, however represented, including stylized representations all associated logos and symbols and combinations and drawings.

· Website” means the URL located at

· You” or “Your” or “User” means a person subscribed to Our Services and/or access the Application or Website.

stc Pay Privacy Policy: 39C2022V3