Security & Compliance

Secure, Compliant,
and Built for Trust

At PayLoro, security and compliance are built into every transaction. We support merchants with reliable payment infrastructure and transparent reporting.

PCI DSS
Certified
Payment Card Industry Data Security Standard compliance for card payment processing.
BSP
Registered OPS
PayLoro is operated by eMandarin Ventures, Inc, a BSP-supervised EMI-NBFI and BSP-registered Operator of Payment System.
QR Ph
Ready
QR Ph payment acceptance is enabled through participating institutions and approved partner arrangements.
ISO
Roadmap in Progress
ISO compliance roadmap currently in progress — certification targeted upon completion.
🔐

Data Protection

End-to-end encryption of all merchant and customer data with strict access controls.

🔒

Transaction Encryption

All payment transactions are encrypted using industry-standard protocols.

🛡️

Fraud Monitoring

Real-time fraud detection and monitoring to protect merchants and customers.

🔑

Access Controls

Role-based access controls ensure only authorized personnel can access sensitive data.

📱

Two-Factor Authentication

Mandatory 2FA for merchant accounts to prevent unauthorized access.

📋

Merchant KYC/KYB

Rigorous Know Your Customer and Business verification for all onboarded merchants.

⚖️

Dispute Handling

Structured process for handling payment disputes with transparent coordination.

🌐

BSP Regulatory Alignment

Operating under eMandarin Ventures, Inc in alignment with BSP guidelines.

🔐

Your Security Is Our Priority

At PayLoro, security and compliance are built into every transaction. We support merchants with reliable payment infrastructure, proper onboarding controls, transaction monitoring, and transparent reporting — so you can focus on growing your business.

Contact PayLoro support: scan the QR code to add our dedicated agent, or reach us via WeChat, phone, or email
Security & Compliance

Security and Compliance at the Core of Every Transaction

PayLoro recognizes that trust, security, and compliance are essential to operating a responsible payment ecosystem.

We continuously strengthen our policies, systems, procedures, and controls to address payment risk, fraud, cybersecurity, data privacy, consumer protection, and operational resilience.

Fraud Management

PayLoro maintains fraud management capabilities designed to identify, review, and respond to suspicious activities.

  • Transaction rules
  • Amount and velocity monitoring
  • Account behavior analysis
  • Device and access monitoring
  • Merchant risk monitoring
  • Alerts and case review
  • Account restriction
  • Escalation procedures
  • Investigation and documentation
  • Regulatory and partner reporting when required

Merchant Due Diligence

  • Business registration
  • Ownership and authorized representatives
  • Government-issued identification
  • Tax registration
  • Business permits
  • Bank or settlement account
  • Products and services
  • Website or application
  • Licenses and accreditations
  • Expected transaction activity
  • Source of funds or business income
  • Industry and risk classification
  • Beneficial ownership
  • Sanctions and watchlist information

Additional requirements may apply depending on the business model and risk profile.

Data Privacy

  • Lawful and transparent data processing
  • Defined purposes for data collection
  • Access controls
  • Secure storage
  • Data retention controls
  • Confidentiality requirements
  • Vendor and partner assessments
  • Incident management
  • Data subject request procedures
  • Employee awareness and training

Payment Security

  • Secure system access
  • User authentication
  • Encryption
  • Role-based permissions
  • Activity logs
  • API security
  • Environment separation
  • Transaction monitoring
  • Vulnerability management
  • Incident response
  • Business continuity procedures

Consumer Protection

PayLoro is committed to fair treatment, transparent communication, responsible complaint handling, and appropriate customer support.

  • Transaction amount
  • Applicable fees
  • Payment status
  • Refund conditions
  • Settlement expectations
  • Product terms
  • Support channels
  • Data usage
  • Complaint procedures