Compliance at Payixay

Last updated: 10 July 2026 · Compliance contact: info@payixay.com

1. Our regulatory position, stated plainly

Payixay is a payment technology platform operated by Emcenton Technology Limited, a technology company headquartered in Nairobi, Kenya. Payixay is not a bank. Regulated activities — card acquiring, funds custody and fiat settlement — are performed by banking, acquiring and technology partners under their own licenses and regulatory permissions. Our role is the technology layer and the merchant relationship, and we describe it that way deliberately.

2. Payment card security

Card transactions are processed on gateway infrastructure provided by our partner Akurateco, whose technology is PCI DSS Level 1 certified — the highest level of the Payment Card Industry Data Security Standard. Card data is encrypted and tokenized on that infrastructure. Emcenton does not store raw card numbers on its own systems.

3. Anti-money-laundering and merchant due diligence

• KYC/KYB at onboarding: business registration verification, director identification and beneficial ownership checks before any account is activated.
• Sanctions screening: merchants and beneficial owners are screened against applicable sanctions lists. Services are not available in jurisdictions subject to OFAC sanctions, United Nations sanctions, or other applicable regulatory restrictions.
• Ongoing monitoring: transaction monitoring for unusual patterns, with escalation, review and — where required — reporting in line with applicable law.
• Restricted categories: we maintain a prohibited and restricted business list aligned with card network rules and partner requirements.

4. Fraud and risk management

Real-time risk scoring on every transaction, 3-D Secure 2 authentication on card payments, velocity and geographic rules per merchant profile, and chargeback monitoring with merchant-level thresholds.

5. Data protection

We process personal data under the Kenya Data Protection Act, 2019 and, where it applies to our processing, the GDPR. Details, including data subject rights and retention periods, are in our Privacy Policy.

6. Stablecoin services

USD ⇄ USDT settlement is offered subject to compliance review of the merchant, the corridor and applicable law. We monitor the evolving regulatory treatment of virtual assets in the markets we serve, including Kenya’s virtual-asset regulatory framework, and adjust availability accordingly.

7. What onboarding requires

Merchants should expect to provide: certificate of incorporation or business registration; director identification documents; beneficial ownership declaration for holders of 10% or more; proof of business address; website or app URL that will process payments; and a description of products, target markets and expected monthly volumes. We screen the business, its directors and beneficial owners against applicable sanctions lists, and review the website for prohibited categories and card-network compliance. Complete applications are typically decided within two business days; we tell you promptly if your category or market is one we cannot support.

8. Questions and escalation

Banks, acquirers, partners and merchants can direct due-diligence and compliance questions to info@payixay.com, marked for the attention of the Compliance function. We respond to due-diligence requests within five business days.