Compliance

Compliance, by design.

iPay is a payment platform first and a regulated entity always. Below: how we sit inside Bangladesh’s financial framework — the licence we hold, the laws we follow, and the controls we submit to inspection.

Entity
iPay Systems Ltd.
Licence
Bangladesh Bank PSP
Jurisdiction
People’s Republic of Bangladesh
Compliance officer
compliance@ipay.com.bd
The four pillars
Licence

Bangladesh Bank PSP

iPay Systems Ltd. operates as a licensed Payment Service Provider under Bangladesh Bank — the country’s central bank and primary regulator for payment systems.

AML / CFT

Anti-money-laundering

Customer activity is monitored against the Money Laundering Prevention Act and Counter-Terrorism Acts of Bangladesh, with risk-based escalation to the relevant authorities.

KYC

Know-your-customer

Every wallet is opened with verified ID — National ID or passport, TIN, and a live photo — before transaction limits are unlocked.

Audit

Independent audit

Books, controls and transaction records are reviewed regularly by independent auditors, with findings shared with the regulator.

Regulatory framework

The rules we work inside.

Six chapters of the iPay compliance programme — what they cover, and the laws and authorities they answer to. This page is a summary; binding language lives in the Privacy Policy, Terms of Service, and the regulations referenced below.

01

PSP licence

iPay Systems Ltd. is licensed by Bangladesh Bank as a non-bank Payment Service Provider. The licence governs the range of services we offer, the safeguarding of customer funds in a pooled account, and the channels through which money may flow into and out of iPay wallets.

02

AML & counter-terrorism financing

Our anti-money-laundering programme follows the existing laws of Bangladesh, the rules of Bangladesh Bank, and FATF-aligned guidance. We monitor activity for unusual patterns, apply enhanced due diligence to higher-risk profiles, and escalate suspicious transactions to the Bangladesh Financial Intelligence Unit.

03

Customer due diligence

Onboarding combines document collection, biometric verification, and bank-account validation. For business members, we additionally verify trade licence, TIN, VAT registration and beneficial ownership. Higher transaction tiers require enhanced due diligence and ongoing review.

04

Sanctions & screening

All members and counterparties are screened against domestic and international sanctions lists, including those published by Bangladesh Bank, the United Nations and other major regulators. Screening runs at onboarding, on profile changes, and continuously against transaction flows.

05

Data protection

Customer information is collected, stored and processed on servers located in Bangladesh and is protected by firewalls, encryption and access controls. Information is shared with regulators, banks and law-enforcement bodies only when the law requires and only to the extent it requires.

06

Audit, controls & reporting

Our internal-control framework covers financial reporting, transaction integrity, IT security and customer-protection controls. Independent external auditors review the books and controls regularly; outcomes are shared with the board, the regulator and material findings are remediated under tracked action plans.

Reporting & escalation

See something? Tell us.

If you suspect fraud, money-laundering, or any breach of the terms or law, raise it through the channels below. Reports made in good faith are protected — we don’t retaliate against members or employees who flag genuine concerns.

For unauthorized transactions on your own account, follow the five-working-day notification window described in section 6.2 of the Terms of Service.

Suspicious activity

Unusual flows, account takeovers, identity misuse, or anything that smells off.

compliance@ipay.com.bd

Legal & regulatory

Subpoenas, regulator queries, court orders. Send formal notices to our legal desk.

legal@ipay.com.bd

Whistleblower

A protected channel for raising integrity concerns about iPay or its employees.

ethics@ipay.com.bd
Regulators welcome

Trust, on the record.

Auditors, regulators and law-enforcement officers can reach our compliance officer directly. We respond to formal requests within statutory timelines and route emergency matters through the 24-hour helpline.

Compliance desk
Email
compliance@ipay.com.bd
24-hour helpline
16542 · +880 9638 900801
Postal address
iPay Systems Ltd. · Silver Tower (Level 12)
52 Gulshan Avenue, Circle-1
Dhaka-1212, Bangladesh
⬡ Licensed PSP — Bangladesh Bank