1. Definitions & Interpretation

In these Terms & Conditions, unless the context otherwise requires, the following words and expressions shall have the meanings set out below:

2. Service Overview

Click by Paymob is Paymob's one-click checkout solution. It allows you to:

• Create a secure account during any Paymob-powered checkout or Click Customer Portal;
• Save your payment card details (credit and debit cards) and delivery addresses;
• Enjoy faster, frictionless payments across Merchants that use Paymob Checkout;
• Authenticate using OTP (via SMS or email) or a passkey for subsequent logins.

The Service is available across Paymob's operational markets: the Arab Republic of Egypt, the Kingdom of Saudi Arabia, the Sultanate of Oman, and the United Arab Emirates. Country-specific regulatory provisions are set out in Section 18.

3. Eligibility & Registration

3.1 Eligibility Criteria

To use Click by Paymob, you must:

• Be at least 18 years of age, or the age of legal majority in your jurisdiction, whichever is higher;
• Be a natural person acting in your personal capacity or as an authorised representative of yourself;
• Hold a valid payment card accepted by Paymob (credit or debit);
• Be transacting through a Merchant that has enabled the Click by Paymob service;
• Comply with all laws and regulations applicable in your jurisdiction.

3.2 Registration Process

You may register through Paymob's Checkout during a purchase flow, or directly via the Click by Paymob Customer Portal. Registration requires:

• A valid email address;
• A valid mobile number in the applicable country format;
• OTP verification of your mobile number.

3.3 Account Security

You are solely responsible for:

• Maintaining the confidentiality of your login credentials, OTPs, and passkeys;
• All activities that occur under your account, whether authorised or not;
• Immediately notifying Paymob via the support channel for your country (Section 19) if you suspect any unauthorised access or fraudulent activity.

4. How Click by Paymob Works

4.1 Initial Setup

During your first checkout at a participating Merchant, you will be invited to create a Click by Paymob account. You provide:

• Shipping and / or billing address (where requested by the Merchant);
• Payment card details (credit or debit card);
• Email address and mobile number.

Your card information is immediately tokenised and encrypted. Paymob does not store raw card numbers; only secure tokens are retained.

4.2 Tokenisation & Encryption

All stored card data is:

• Converted into unique cryptographic tokens that cannot be reversed to retrieve the original card data;
• Encrypted at rest and in transit using industry standard encryption (TLS 1.2 or higher and AES 256);
• Processed and stored in compliance with PCI DSS Level 1 standards.

4.3 Future Checkouts

On subsequent visits to any participating Merchant, you can:

• Authenticate via OTP (SMS or email) or your saved passkey;
• Complete the purchase in one click using your stored card and address;
• Select from multiple saved cards or addresses if you have stored more than one.

4.4 Passkeys (FIDO2)

You may optionally set up a passkey for passwordless login. Passkeys are:

• Generated and stored on your device using the FIDO2 / WebAuthn standard;
• Cryptographically linked to your account and cannot be used on another account;
• Never shared with Merchants or third parties.

5. Stored Information & Data Management

5.1 What You Can Save

Within your Click by Paymob account, you may securely store:

• Payment card tokens (credit and debit cards only);
• Billing address;
• Shipping address;
• Passkeys for faster login.

Prepaid cards, digital wallets, and bank account details are not currently supported for storage.

5.2 Cross-Merchant Usability

Your stored information is universally usable across Merchants that use Paymob Checkout in your country of registration. This means:

• You can pay instantly with your saved card at any participating Merchant;
• Your saved billing / shipping address is auto filled when the Merchant's checkout requests address information.

5.3 Managing Your Saved Data

You retain full control over your stored information at all times. Via your account portal, you may:

• Add, update, or delete saved payment cards;
• Add, update, or delete saved addresses;
• Add or remove passkeys;
• Delete your entire account, upon which all stored data is permanently removed from Paymob's active systems within the retention period prescribed by Applicable Law.

Note: Deleting your account is irreversible. You will need to re-register to use Click by Paymob again.

5.4 Merchant Access to Your Data

6. Security & Fraud Prevention

6.1 Paymob's Security Measures

Click by Paymob employs the following security controls:

• Tokenisation and AES 256 encryption for all stored card data;
• FIDO2 compliant passkeys for secure, phishing resistant authentication;
• PCI DSS Level 1 compliance for the handling of payment data;
• OTP based multi factor authentication for account access and payment confirmation;
• Real time transaction monitoring and anomaly detection;
• 3D Secure (3DS2) authentication for higher risk or higher value transactions where mandated by the card network or the Regulatory Authority.

6.2 Higher-Risk Transactions

Certain transactions may require additional verification, including without limitation:

• Transactions exceeding monetary thresholds set by Paymob, the Merchant, or the card network;
• Transactions flagged by Paymob's fraud monitoring systems;
• Transactions subject to enhanced scrutiny under applicable AML / CFT regulations.

In such cases Paymob may require 3D Secure authentication, OTP re-verification, or manual review before processing the Transaction.

6.3 Suspension for Suspicious Activity

Paymob reserves the right to immediately and without prior notice suspend your access to Click by Paymob if:

• Suspicious, fraudulent, or unauthorised activity is detected on your account;
• Regulatory requirements mandate a hold or review of your account;
• Your account is associated with a transaction under investigation by a Regulatory Authority, FIU, or law enforcement agency.

7. Transaction Processing

7.1 Transaction Initiation

Transactions are processed immediately upon your confirmation (click, tap, or biometric authentication). By confirming a Transaction, you authorise Paymob to debit the selected payment instrument for the stated amount.

7.2 Transaction Currency

Transactions are processed in the local currency of the Merchant's country of registration unless otherwise specified at checkout. Cross-currency transactions may attract foreign-exchange charges levied by your card issuer, which are beyond Paymob's control.

7.3 Transaction Limits

Transaction limits may apply on the basis of:

• Limits set by your card issuer;
• Merchant specific limits;
• Paymob's internal risk controls;
• Regulatory caps prescribed by the Regulatory Authority in the relevant jurisdiction.

7.4 Pricing & Fees

Click by Paymob is provided to you, the User, at no additional charge. Transaction pricing follows Paymob's standard pricing model agreed between Paymob and the Merchant. The Merchant's prices, service charges, and delivery fees are determined solely by the Merchant.

8. Refunds, Returns & Dispute Resolution

8.1 Merchant Refund Policy

Refunds and returns are governed exclusively by the Merchant's own refund and returns policy. Paymob's role is limited to facilitating the payment Transaction; Paymob does not control, determine, or override Merchant refund policies.

8.2 Disputed Transactions

In the event of a disputed Transaction:

• Contact the Merchant directly to attempt resolution in the first instance;
• If unresolved, contact Paymob via the support channel for your country (Section 19);
• Paymob will engage its standard dispute resolution process, which may include liaison with the card network and / or your card issuer;
• You may also raise a chargeback request with your card issuer in accordance with the card network's rules.

8.3 Chargeback Process

Paymob will cooperate fully with chargeback investigations initiated through your card issuer. You must:

• Raise chargebacks in good faith and only for legitimate disputed Transactions;
• Provide Paymob with all requested documentation in a timely manner;
• Not raise chargebacks for Transactions that have already been refunded by the Merchant.

9. User Responsibilities & Prohibited Conduct

9.1 Your Obligations

As a User you must:

• Ensure all stored information (name, address, email, card details) is accurate, complete, and kept current;
• Use the Service only for lawful purposes and in accordance with these Terms;
• Immediately notify Paymob if you suspect any unauthorised use of your account or stored payment methods;
• Not share your OTP, passkey, or account credentials with any third party;
• Ensure your registered mobile device is secure and protected.

9.2 Prohibited Conduct

You must not use Click by Paymob to:

• Process Transactions for unlawful goods or services;
• Circumvent fraud detection controls or engage in friendly fraud;
• Impersonate another person or use another person's payment credentials without authorisation;
• Engage in any activity that violates applicable AML / CFT or international or local sanctions regulations;
• Use the Service for money laundering, terrorist financing, proliferation financing, or any other criminal purpose.

Violation of these prohibitions may result in immediate account suspension, reporting to the relevant Regulatory Authority and / or FIU, and legal action.

10. Liability & Indemnification

10.1 Paymob's Liability

To the fullest extent permitted by Applicable Law:

• Paymob's aggregate liability to you in connection with any single Transaction shall not exceed the value of that Transaction;
• Paymob shall not be liable for indirect, special, incidental, consequential, or punitive damages;
• Paymob shall not be liable for losses arising from (i) your failure to secure your account credentials; (ii) Merchant decisions on refunds or fulfilment; (iii) actions of the card issuer or card network; or (iv) Force Majeure events.

10.2 Your Indemnification Obligations

You agree to indemnify, defend, and hold harmless Paymob, its affiliates, officers, employees, and agents against any claims, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your breach of these Terms;
• Your misuse of the Service, including unauthorised or fraudulent Transactions resulting from your acts or omissions;
• Your violation of any Applicable Law or third party rights.

11. Privacy & Data Protection

11.1 Data-Processing Principles

Paymob processes your personal data in accordance with its Privacy Policy and the data-protection laws applicable in each jurisdiction (see Section 18). Paymob applies the following principles:

• Lawfulness, fairness, and transparency;
• Purpose limitation — data is collected only for specified, legitimate purposes;
• Data minimisation — only data necessary for the Service is processed;
• Accuracy — stored data is kept accurate and up to date;
• Storage limitation — data is retained only for as long as legally required;
• Integrity and confidentiality — appropriate technical and organisational security measures are applied at all times.

11.2 Data Shared with Merchants

Paymob does not share your stored card data with Merchants. Addresses are shared only where explicitly required by a specific Merchant Transaction. Paymob does not sell your personal data to third parties.

11.3 Cross-Border Data Transfers

Where personal data is transferred across borders (for example to Paymob's technology infrastructure, group affiliates, card networks, or sub-processors), Paymob ensures that appropriate safeguards are in place, including standard contractual clauses, adequacy decisions, or equivalent mechanisms required by Applicable Law in your jurisdiction.

11.4 Your Data Rights

Subject to Applicable Law in your jurisdiction, you may have the right to:

• Access the personal data that Paymob holds about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data (subject to mandatory legal retention requirements);
• Object to or restrict the processing of your data;
• Data portability (where applicable);
• Lodge a complaint with the competent data protection authority in your jurisdiction.

To exercise your rights contact privacy@paymob.com.

12. Intellectual Property

All intellectual-property rights in and to the Click by Paymob service, including its software, trademarks, branding, and documentation, are owned by or licensed to Paymob. Nothing in these Terms grants you any right, title, or interest in Paymob's intellectual property except a limited, non-exclusive, non-transferable, revocable licence to use the Service for its intended purpose.

13. Modification & Termination

13.1 Modifications by Paymob

Paymob reserves the right to modify, update, or amend these Terms at any time. Where changes are material:

• Paymob will provide notice via your registered email address or a prominent in app or portal notification;
• Notice will be given at least 30 calendar days prior to the changes taking effect, except where immediate changes are required by Applicable Law or to address security relevant changes;
• Continued use of the Service after the effective date of the revised Terms constitutes acceptance of the revised Terms.

13.2 Service Modifications

Paymob may modify, suspend, or discontinue any feature of the Service or the Service in its entirety at any time, in particular in response to:

• Regulatory changes or directives from the relevant Regulatory Authority;
• Security incidents or fraud trends;
• Technical requirements or system upgrades.

13.3 User Termination

You may terminate your Click by Paymob account at any time by:

• Navigating to your account settings and selecting account deletion; or
• Contacting Paymob support via the channel for your country (Section 19).

Upon termination, all Stored Credentials are deleted, subject to mandatory legal retention periods. Active or pending Transactions at the time of termination will continue to be processed in the normal course.

13.4 Paymob's Right to Terminate

Paymob may suspend or terminate your account immediately and without notice if you:

• Breach any provision of these Terms;
• Engage in fraudulent, unlawful, or prohibited conduct;
• Are subject to regulatory action or sanctions designation;
• Are determined by Paymob, acting reasonably, to pose an unacceptable risk to the integrity of the Service.

14. AML / CFT & Regulatory Compliance

Paymob operates a robust Anti-Money-Laundering, Counter-Terrorism-Financing, and Counter-Proliferation-Financing (AML / CFT / CPF) programme aligned with FATF Recommendations and the requirements of the Regulatory Authority in each jurisdiction. In connection with your use of the Service:

• Paymob may conduct identity verification (KYC) and ongoing due diligence as required by Applicable Law;
• Paymob screens Users and Transactions against applicable sanctions lists, including UN, OFAC, EU, UK, and lists issued by the Regulatory Authority and / or local authorities in your jurisdiction;
• Paymob may decline, block, or reverse Transactions flagged by its compliance systems;
• Paymob is required to file Suspicious Transaction Reports with the relevant FIU where legally obligated;
• You must not use Click by Paymob for any activity related to money laundering, terrorist financing, proliferation financing, or sanctions evasion.

15. Force Majeure

Paymob shall not be liable for any failure or delay in performing its obligations under these Terms to the extent caused by circumstances beyond its reasonable control, including without limitation acts of God, war, terrorism, pandemic, government action, regulatory intervention, telecommunication failures, power failures, or cyberattacks. Paymob will use reasonable endeavours to resume performance as soon as reasonably practicable.

16. Third-Party Services & Links

The Click by Paymob service may interact with or be accessed through third-party platforms (including Merchant websites and mobile applications). Paymob is not responsible for:

• The content, products, services, or privacy practices of third party Merchants or platforms;
• Any data you provide directly to Merchants outside of the Paymob checkout flow;
• Any losses arising from your use of third party services.

17. General Provisions

17.1 Entire Agreement

These Terms, together with Paymob's Privacy Policy and any applicable country-specific provisions in Section 18, constitute the entire agreement between you and Paymob in respect of the Click by Paymob service and supersede all prior agreements, representations, and understandings.

17.2 Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.

17.3 Waiver

Paymob's failure to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.

17.4 Assignment

You may not assign or transfer your rights or obligations under these Terms without Paymob's prior written consent. Paymob may assign its rights and obligations to an affiliate or successor entity without your consent, provided that your rights under these Terms are not materially affected.

17.5 Language

These Terms are issued in English. Where a translated version is provided (including Arabic or Urdu), the English version shall prevail in the event of any inconsistency, except where Applicable Law in your jurisdiction requires otherwise.

17.6 Governing Law & Conflict

These Terms are subject to the country-specific governing law and jurisdiction provisions set out in Section 18. The country-specific provisions in Section 18 prevail over the general provisions of these Terms in respect of the relevant jurisdiction in the event of any conflict.

18. Country-Specific Regulatory Provisions

The provisions in this Section 18 apply in addition to the general terms above and prevail in the event of any conflict with the general terms in respect of the applicable jurisdiction. Each User is bound by the country-specific provisions for the jurisdiction in which they are registered or in which the Transaction is processed.

18.1 Arab Republic of Egypt

18.2 Kingdom of Saudi Arabia

18.3 Sultanate of Oman

18.4 United Arab Emirates

19. Contact Information & Support

Data-protection enquiries: privacy@paymob.com

General queries: www.om.paymob.com