Bangladesh Bank PSP
iPay Systems Ltd. operates as a licensed Payment Service Provider under Bangladesh Bank — the country’s central bank and primary regulator for payment systems.
iPay is a payment platform first and a regulated entity always. Below: how we sit inside Bangladesh’s financial framework — the licence we hold, the laws we follow, and the controls we submit to inspection.
iPay Systems Ltd. operates as a licensed Payment Service Provider under Bangladesh Bank — the country’s central bank and primary regulator for payment systems.
Customer activity is monitored against the Money Laundering Prevention Act and Counter-Terrorism Acts of Bangladesh, with risk-based escalation to the relevant authorities.
Every wallet is opened with verified ID — National ID or passport, TIN, and a live photo — before transaction limits are unlocked.
Books, controls and transaction records are reviewed regularly by independent auditors, with findings shared with the regulator.
Six chapters of the iPay compliance programme — what they cover, and the laws and authorities they answer to. This page is a summary; binding language lives in the Privacy Policy, Terms of Service, and the regulations referenced below.
iPay Systems Ltd. is licensed by Bangladesh Bank as a non-bank Payment Service Provider. The licence governs the range of services we offer, the safeguarding of customer funds in a pooled account, and the channels through which money may flow into and out of iPay wallets.
Our anti-money-laundering programme follows the existing laws of Bangladesh, the rules of Bangladesh Bank, and FATF-aligned guidance. We monitor activity for unusual patterns, apply enhanced due diligence to higher-risk profiles, and escalate suspicious transactions to the Bangladesh Financial Intelligence Unit.
Onboarding combines document collection, biometric verification, and bank-account validation. For business members, we additionally verify trade licence, TIN, VAT registration and beneficial ownership. Higher transaction tiers require enhanced due diligence and ongoing review.
All members and counterparties are screened against domestic and international sanctions lists, including those published by Bangladesh Bank, the United Nations and other major regulators. Screening runs at onboarding, on profile changes, and continuously against transaction flows.
Customer information is collected, stored and processed on servers located in Bangladesh and is protected by firewalls, encryption and access controls. Information is shared with regulators, banks and law-enforcement bodies only when the law requires and only to the extent it requires.
Our internal-control framework covers financial reporting, transaction integrity, IT security and customer-protection controls. Independent external auditors review the books and controls regularly; outcomes are shared with the board, the regulator and material findings are remediated under tracked action plans.
If you suspect fraud, money-laundering, or any breach of the terms or law, raise it through the channels below. Reports made in good faith are protected — we don’t retaliate against members or employees who flag genuine concerns.
For unauthorized transactions on your own account, follow the five-working-day notification window described in section 6.2 of the Terms of Service.
Unusual flows, account takeovers, identity misuse, or anything that smells off.
compliance@ipay.com.bdSubpoenas, regulator queries, court orders. Send formal notices to our legal desk.
legal@ipay.com.bdA protected channel for raising integrity concerns about iPay or its employees.
ethics@ipay.com.bdAuditors, regulators and law-enforcement officers can reach our compliance officer directly. We respond to formal requests within statutory timelines and route emergency matters through the 24-hour helpline.