Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• You the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
• Account a unique account created for You to access our Service or parts of our Service.
• Affiliate an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
• Application refers to Blicq, the software program provided by the Company.
• Company refers to Blicq (Pvt) Ltd, 135b Rajagiriya Rd, Rajagiriya, Sri Lanka.
• Country refers to Sri Lanka.
• Device any device that can access the Service such as a computer, a cell phone, or a digital tablet.
• Personal Data any information that relates to an identified or identifiable individual.
• Service refers to the Application.
• Service Provider any natural or legal person who processes the data on behalf of the Company.
• Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Collecting and Using Your Personal Data

Types of Data Collected

A. Basic Account Data

Since Blicq acts as a pass-through payment platform, we require minimal information to create Your secure profile:

• First Name and Last Name
• Email address
• Mobile Phone number

B. Financial and Transaction Data

To facilitate payments between Your linked funding source and the merchant, we collect:

• Tokenized Payment Information We do not store Your full credit/debit card numbers or bank account credentials. We use secure, bank-grade tokenization through our licensed acquiring partners. We only store masked details (e.g., the last 4 digits of Your card) for Your reference.
• Transaction History Details of Your LANKAQR payments, including merchant name, location, time, amount, and applied Blicq rewards/discounts.

C. Usage and Device Data

Collected automatically to ensure app security and optimize performance: IP address, device type, mobile OS, unique device identifiers (UUID), and diagnostic data.

D. Location Data

With Your explicit permission, we collect real-time geo-location data. This is strictly used to verify You are at the merchant's location when scanning a QR code (fraud prevention) and to show You nearby Blicq-supported locations.

Lawful Bases and Use of Your Personal Data

Under the Sri Lanka PDPA, we process your data under the following lawful bases:

• Account Creation & Support Processed under the basis of Performance of a Contract.
• Facilitating LANKAQR Payments via Linked Cards/Accounts Processed under the basis of Performance of a Contract.
• Fraud Prevention & Security Monitoring Processed under the basis of Legitimate Interest & Compliance with Legal Obligations.
• Push Notifications & Marketing Offers Processed under the basis of Your Explicit Consent (This can be withdrawn by You at any time).

Sharing Your Personal Data

The Company may use Personal Data for the following purposes:

We never sell Your data. We share Your information only to make payments happen:

• With Payment Gateways and Partner Banks Your encrypted payment requests are routed through licensed financial institutions in Sri Lanka to process the LANKAQR transaction.
• With Merchants When You pay, the merchant only sees a transaction ID, Your masked name, and the payment status. They do not see Your card or bank details.
• With Law Enforcement If legally required by authorities (e.g., Central Bank of Sri Lanka) to investigate fraudulent activities.

Your Rights Under Sri Lanka PDPA

• Access and Rectify Request a copy of your data or correct it via the app.
• Erasure (Right to be Forgotten) You can request account deletion. Upon deletion, Your linked payment tokens will be destroyed. (Note: Basic transaction logs may be retained by our partner banks as required by financial regulations).
• Unlink Funding Sources You can instantly unlink any bank account or card from the Blicq app at any time.

Security

We implement PCI-DSS compliant standards through our payment gateway partners. Your sensitive card data never touches our servers directly; it is encrypted and tokenized immediately upon entry.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located (such as secure cloud servers hosted outside of Sri Lanka).

Because Blicq acts as a payment facilitator, Your tokenized payment data may also be routed through international payment networks (e.g., Visa, Mastercard) to process the transaction. This means that Your information may be transferred to — and maintained on — computers located outside of Your state, province, or country where the data protection laws may differ from those of Sri Lanka.

By using the Service and linking Your payment methods, You consent to this transfer.

In accordance with the Sri Lanka Personal Data Protection Act (PDPA No. 9 of 2022), Blicq Asia (Pvt) Ltd ensures that any cross-border transfer of Your Personal Data is subject to appropriate safeguards. We only transfer data to recipients that are bound by legally enforceable instruments (such as standard contractual clauses or binding corporate rules) that guarantee a level of data protection equivalent to the laws of Sri Lanka.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Since Blicq does not operate a digital wallet and does not hold Your funds, You can manage Your privacy directly within the Application by:

• Unlinking Funding Sources You can instantly remove or delete any linked bank account or payment card from Your Blicq profile at any time through the account settings. Once unlinked, the secure payment tokens associated with those cards/accounts are permanently destroyed.
• Deleting Your Blicq Account You can request the full deletion of Your Blicq profile within the app settings or by contacting us.

Please note, however, that while we will immediately delete Your active profile and unlinked payment methods, We may be legally required to retain certain transaction logs and basic identifier data for a statutory period (typically 5 to 7 years) to comply with the Central Bank of Sri Lanka (CBSL) anti-money laundering (AML/CFT) regulations and financial record-keeping laws.

Disclosure of Your Personal Data

Business Transactions

If involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will notify You before that happens.

Law Enforcement

We may disclose Personal Data if legally required or requested by public authorities.

Other Legal Requirements

We may disclose Your Personal Data in good faith to:

• Comply with legal obligations
• Protect and defend Company rights
• Investigate wrongdoing
• Protect users or the public
• Protect against legal liability

Children’s Privacy

We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe Your child has provided Us data, please contact Us. We will delete it.

If required by law, we may request parental consent before processing children's data.

Links to Other Websites

Our Service may contain links to third-party websites. We do not control or assume responsibility for their content or privacy practices. We strongly advise You to review their Privacy Policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with an updated “Last updated” date.

We may notify You by email or a prominent notice before changes take effect. Please review this page periodically.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

• By email privacypolicy@blicq.io
• By visiting http://blicq.io/contact

Definitions and Introduction

Welcome to Blicq, the mobile application that revolutionizes your payment and lifestyle experience by allowing you to seamlessly execute payments and earn loyalty cashback. By downloading and using Blicq, you join a community of users who benefit from exclusive advantages with our merchant network.

These Terms of Service ("Agreement") govern your access to and use of the Blicq application.

Definitions:

• Blicq (The App) The mobile application provided by Blicq Asia (Pvt) Ltd., which acts as a payment aggregator and loyalty platform allowing users to link funding sources, make LANKAQR payments, and earn rewards.
• Company ("We", "Us", "Our") Refers to Blicq Asia (Pvt) Ltd., the operational entity providing the Service in Sri Lanka.
• User ("You", "Your") A legally capable individual who meets the requirements of this Agreement, has completed the registration, and accepted these terms.
• Blicq Rewards ("Blicqs") Digital cashback or loyalty units earned by users following authorized purchases at partner merchants. These units can be used for discounts or redeemed to a linked bank account/card subject to processing fees.

Acceptance of Terms

By creating an account and using Blicq, you expressly and unconditionally accept these Terms of Service and our Privacy Policy. If you do not agree with these terms, you must immediately cease using the Application.

Your use of Blicq is subject to all applicable local and international laws and regulations. We reserve the right to modify or update these terms at any time. Your continued use of Blicq after such modifications constitutes your acceptance of the revised Agreement.

Registration Conditions

Eligibility Criteria:

To create an account and use Blicq, individuals must meet certain eligibility criteria. Users must be at least 18 (eighteen) years old. Additionally, users must reside in a country where Blicq is available, as specified in the application details. Other criteria may include agreeing to specific user agreements relevant to their location.

Registration Process:

To register, users are required to provide accurate and current information about themselves, including but not limited to, their name, email address, phone number and any other details deemed necessary by the Application for the creation of an account. Users must agree to keep their account information up to date. The registration process may also involve verification steps to ensure user eligibility and account security.

Blicq rewards and Operation

Earning Blicqs:

Users earn Blicq Rewards automatically by completing eligible purchases at partner merchants via the App. The reward percentage or fixed amount varies based on ongoing promotions and specific merchant agreements.

Validity and Expiration:

Blicqs remain valid as long as your account is active and in good standing. While Blicqs generally do not expire, the Company reserves the right to introduce expiration policies or modify the reward ecosystem structure with prior notice to users.

Redeeming and Withdrawing Blicqs

Blicqs hold promotional value and can be utilized in two ways:

• In-App Redemptions Applied as instant discounts on future purchases at partner merchants. Minimum thresholds or item-specific restrictions may apply.
• Bank Withdrawals Users may request a withdrawal of accrued Blicqs to their linked domestic bank account or credit/debit card in the local currency. Standard bank processing times apply. Please note: Blicq applies a processing and management fee of 5% to 15% on each withdrawal transaction, which will be clearly displayed prior to confirmation.

Privacy and Data Protection

Your privacy is our priority. We collect, process, and protect your personal and financial data in strict accordance with the Sri Lanka Personal Data Protection Act (PDPA No. 9 of 2022).

We do not sell your personal data. We only share necessary encrypted information with licensed banking partners and payment gateways to facilitate your transactions. For complete details, please refer to our separate Privacy Policy.

Rights and Obligations of Users

Your Rights:

• Access and use the Application in compliance with this Agreement.
• Earn, redeem, and withdraw Blicq Rewards subject to the outlined conditions.
• Access, rectify, or request the deletion of your personal data.

Your Obligations:

• Provide truthful information and maintain the confidentiality of your login credentials.
• Prohibited Conduct You shall not use Blicq for any illegal, fraudulent, or unauthorized activities (including money laundering, funding terrorism, or bypassing merchant acquiring rules).
• Single Account Policy Users are strictly prohibited from creating multiple accounts. Each individual is permitted only one (1) verified account.

Modification and Suspension of the Service

We continually strive to improve Blicq. The Company reserves the right to modify, suspend, or discontinue any feature of the App at any time.

We also reserve the right to temporarily suspend or permanently terminate your account without prior notice if we suspect violations of these Terms, fraudulent activity, or at the request of law enforcement and regulatory authorities.

Limitations of Liability

To the maximum extent permitted by applicable law, the Company and its affiliates shall not be liable for any direct, indirect, incidental, consequential, or punitive damages resulting from:

• Your use or inability to use the Application.
• Delays, payment gateway failures, or malfunctions of the LANKAQR network.
• Loss of Blicq Rewards due to technical issues or account termination.
• Unauthorized access to your account resulting from your failure to protect your credentials.

Blicq is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind.

Intellectual Property

All content within Blicq, including texts, graphics, logos, and software, is the property of the IN : S.A. based at 14A rue des Bains, L-1212 Luxembourg (Luxembourg) or its content suppliers and is protected by copyright and other intellectual property laws.

Users are granted a limited, revocable, non-exclusive, and non-transferable license to use the Application strictly for personal, non-commercial purposes. Any unauthorized reproduction, modification, or distribution is strictly prohibited and protected by international copyright laws

Resolution of Conflicts

In the event of a dispute arising from your use of Blicq, we encourage you to contact Customer Support first for an amicable resolution.

If the dispute cannot be resolved informally, this Agreement shall be governed by and construed in accordance with the laws of the Democratic Socialist Republic of Sri Lanka.

Both parties agree to submit to the exclusive jurisdiction of the competent courts located in Colombo, Sri Lanka.

Suspension and Voluntary Account Termination

The Company reserves the right to suspend or terminate a user’s account for violations of these terms, including, but not limited to, the creation of multiple accounts, fraudulent activities, or any other misuse of the application.

You may terminate this Agreement at any time by closing your account through the Application settings and ceasing all use of the Service. Upon voluntary termination, any unused Blicq Rewards remaining in your profile will be permanently forfeited.

Contact and Customer Service

For assistance or inquiries regarding Blicq, please contact our customer service team at:

Email: support@blicq.io

We are committed to providing quality support to our users and will respond to all inquiries as quickly as possible.