Privacy Policy
Than Lwin Pay (“we”, “us”, “our”) provides a digital payment wallet and related services in Myanmar. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
- Account details — name, phone number, password/PIN (stored hashed), profile photo (optional).
- KYC / identity — NRC number, residential address, and photos of your NRC (front/back) and a selfie for verification.
- Financial activity — wallet balance, transfers, top-ups, bill payments, gift cards, games, loans, fees, and transaction history.
- Service inputs you provide — recipient phone numbers, bill account/subscriber numbers, meter IDs, and similar details needed to complete a payment.
- Device & security — device identifiers used for device approval/session security, app version, and basic technical logs.
- Support — messages and images you send through in-app live support.
- Email — only when you enter it for a specific service lookup (for example some cable TV lookups), not as the primary login.
We do not collect precise GPS location, microphone audio, or your device contact book. Address information comes from what you type during KYC, not from device location services.
2. How we use information
- Create and manage your account, wallet, and device sessions
- Process transfers, top-ups, bills, and other payments you request
- Verify identity (KYC), prevent fraud, and keep the service secure
- Provide customer support and service notices
- Improve reliability, troubleshoot errors, and meet legal or regulatory requirements
3. Sharing
We share data only as needed to operate the service — for example with payment, telco, and bill-payment providers so your requested transaction can be completed, and with infrastructure providers that host our systems. We do not sell your personal information.
4. Retention
We keep account, KYC, and transaction records for as long as needed to provide the service, resolve disputes, prevent fraud, and comply with applicable law. If you permanently delete your account, personal account data is removed from active systems; limited records may be retained only where required for security, audit, accounting, or legal reasons.
5. Security
We use industry-standard measures including encrypted transport (HTTPS), hashed credentials, device-approval sessions, and access controls. No method of transmission or storage is completely secure; please protect your PIN and device.
6. Your choices
- Update profile and KYC information in the app where available
- Permanently delete your account from the app (PIN required) — see Delete account
- Contact support in the app if you need help with your data or account
7. Children
Than Lwin Pay is intended for users aged 18 and over. We do not knowingly collect personal information from children.
8. Changes
We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the app after an update means you accept the revised policy.
9. Contact
Questions about this policy or your data: email [email protected], use Live Support in the Than Lwin Pay app, or visit www.thanlwinpay.com.