At Thawani Pay, we combine advanced encryption with rigorous regulatory standards to ensure your financial life remains private, protected, and under your control.
Licensed & Regulated
Thawani Pay is proudly licensed by the Central Bank of Oman (CBO) as a Payment Service Provider. We operate under the highest level of financial oversight, ensuring that every Rial you move is handled with institutional-grade integrity.
2. Data Privacy (PDPL)
We are fully compliant with the Oman Personal Data Protection Law (Royal Decree 6/2022). Your data belongs to you; we simply provide the vault. We ensure all personal information is processed locally and securely within the Sultanate.
3. PCI-DSS Level 1 Certified
We meet the gold standard of the payments industry. Your card details are never stored on your device or our servers. Instead, we use Secure Tokenization, replacing sensitive data with unique digital identifiers that keep your identity invisible to hackers.
4. End-to-End Encryption
From the moment you tap 'Pay' to the second the merchant receives the funds, your data is shielded by 256-bit AES encryption. This is the same level of security used by global banks and intelligence agencies.
5. Biometric & Multi-Factor Guard
Access your wallet in a blink—but only if it’s you. We utilize FaceID, TouchID, and 3D Secure (3DS) technology to ensure that every transaction is verified via an encrypted biometric signature or a one-time passcode (OTP).
6. Real-Time Fraud Monitoring
Our AI-driven systems work 24/7 in the background, scanning for unusual patterns. If we spot a suspicious login from a new location or an atypical purchase, we freeze the transaction and notify you instantly
7. Total Control Over Your Data
Transparency is our policy. You have the right to:
Access: Request a copy of the data we hold.
Rectify: Update your information at any time.
Portability: Move your data when you choose.
Erasure: Request account deletion in accordance with CBO retention policies.
8. Found a Vulnerability?
We believe in the power of the community. If you are a security researcher and have discovered a potential flaw, please reach out to our team at [email protected]. We value your help in keeping our ecosystem safe.