Effective Date: April 21, 2026
At MFSC Holdings Ltd. (“we,” “our,” or “us”), we are committed to maintaining the highest standards of compliance and security to protect both our clients’ data and our own. This Compliance & Security Policy outlines our approach to maintaining compliance with regulatory requirements and safeguarding the confidentiality, integrity, and availability of information.
1. Compliance with Regulatory Standards
We are committed to complying with all applicable laws, regulations, and industry standards to ensure that our products and services meet the highest standards of legality and ethics. The key regulations we adhere to include the following:
- General Data Protection Regulation (GDPR): We are fully committed to protecting the privacy and personal data of individuals within the European Union, in accordance with GDPR guidelines.
- Anti-Money Laundering (AML): We maintain strict compliance with AML laws to prevent financial crimes, including money laundering and terrorist financing.
- Know Your Customer (KYC): We implement KYC procedures to verify customer identities and ensure our platform is not used for fraudulent or illegal activities.
- Payment Card Industry Data Security Standard (PCI DSS): We comply with PCI DSS guidelines to ensure that payment data is securely handled.
- UAE, UK, and EU Regulations: We operate in a multi-jurisdictional environment and comply with all applicable regulations in the countries in which we operate.
We continuously monitor regulatory changes and update our processes and policies to stay in compliance with evolving laws and industry best practices.
2. Data Security Measures
We take data security very seriously. MFSC Holdings Ltd. has implemented robust security measures to protect the confidentiality, integrity, and availability of the information we collect. Our security practices include, but are not limited to:
a. Encryption
- We use SSL (Secure Socket Layer) encryption and TLS (Transport Layer Security) to protect data transmission between our users and the Website. Sensitive data, such as payment information, is encrypted during transmission to safeguard against unauthorized access.
b. Data Storage and Protection
- We store personal data and other sensitive information in secure, encrypted databases. All data is securely stored and only accessible by authorized personnel.
- Regular security audits are conducted to identify and address vulnerabilities in our system.
- We follow industry best practices to secure our systems and use firewalls, antivirus software, and intrusion detection systems to protect against unauthorized access.
c. Access Control
- Access to sensitive information is restricted to authorized personnel only. We use multi-factor authentication (MFA) for accessing critical systems and data.
- We conduct regular training for our employees to ensure they understand the importance of data security and are well-informed about the measures we have in place.
d. Backup and Disaster Recovery
- We regularly back up data to prevent data loss. Our disaster recovery plan ensures that, in the event of a security incident or data breach, we can restore data promptly and resume normal business operations.
e. Vulnerability Management
- We regularly assess the security of our systems through vulnerability scanning and penetration testing. Any identified vulnerabilities are addressed promptly to minimize the risk of security breaches.
3. Risk Management and Fraud Prevention
We have established a comprehensive risk management framework to identify, assess, and mitigate risks associated with our business operations. This includes:
a. Fraud Detection
- We employ advanced fraud-detection systems to monitor and analyze transactions in real time. These systems help identify suspicious activities and mitigate the risk of fraudulent transactions.
- Our fraud detection models use machine learning and data analytics to flag high-risk activities, such as unusual payment patterns or anomalous behavior.
b. Transaction Monitoring
- We continuously monitor transactions for compliance with AML and KYC requirements. This allows us to identify potentially suspicious transactions and report them to relevant authorities as required.
- Automated alerts are triggered for high-risk transactions, enabling quick intervention to prevent financial crime.
4. Privacy Protection
We are committed to protecting the privacy of our users and clients. Our approach to privacy protection includes:
- Data Minimization: We collect only the data necessary to provide our services. We ensure that personal data is not retained longer than necessary for its intended purpose.
- Consent Management: We obtain explicit consent from users to collect and process their personal data, in line with the GDPR and other relevant regulations.
- User Rights: We respect users’ rights regarding their personal data. Users can request access to, correction of, or deletion of their personal information at any time. We provide easy-to-use tools that let users manage their privacy preferences.
- Third-Party Data Sharing: We do not share personal data with third parties unless required by law or necessary to provide our services. Any third-party partners we work with are bound by strict data protection agreements.
5. Incident Response and Breach Notification
In the event of a data breach or security incident, we have a detailed incident response plan to ensure a swift and effective response. This includes:
- Immediate Containment and Investigation: We take immediate action to contain the breach and investigate the extent of the impact.
- Breach Notification: If a breach compromises personal data, we will notify affected individuals within 72 hours in compliance with GDPR and other applicable laws. Notifications will include the nature of the breach, the steps we are taking to mitigate the risk, and the actions users can take.
- Remediation: We will address any identified vulnerabilities to prevent future breaches.
6. Employee Training and Awareness
Our employees are integral to maintaining compliance and security. We provide regular training on:
- Data Protection: Ensuring employees understand their responsibilities regarding personal data protection and security.
- Compliance: Keeping staff up to date with the latest regulatory requirements and company policies.
- Security Best Practices: Educating employees about the risks associated with cyber threats, phishing, and other forms of social engineering.
7. Compliance Audits
We conduct regular internal and external audits to ensure that our security and compliance practices align with industry standards and regulatory requirements. Our audit process includes:
- Reviewing data security measures and protocols
- Ensuring compliance with relevant laws and regulations
- Verifying that all systems and processes are functioning as intended and remain secure
8. Changes to the Compliance & Security Policy
We may update this Compliance & Security Policy from time to time to reflect changes in regulations, security technologies, or business practices. When we make updates, we will post the revised policy on our website with the new effective date. We encourage you to review this policy periodically to stay informed about our security practices.
9. Contact Us
If you have any questions or concerns about this Compliance & Security Policy, or if you wish to report a security incident, please contact us at:
Company Name: MFSC Holdings Limited
Registration No.: HE 406018
Phone: +357 2301 0342
Email: info@mfsc-fintech.com
Address: 41 Archiepiskopou Makariou III, 1st Floor, Office 13, 1065, Nicosia, Cyprus
