Pay anywhere in Asia.
Your keys. Your money.

1. Nature of Service

Ninja Pay Asia ("Ninja Pay", "we", "us") provides a self-custody mobile wallet application that enables users to make payments to merchants in Thailand and Vietnam using stablecoins (USDT, USDC) on the BNB Smart Chain. Ninja Pay is a software tool — not a bank, money transmitter, exchange, custodian, or financial institution of any kind.

2. Self-Custody & User Responsibility

Your wallet is generated locally on your device using the BIP-39 standard. The 12-word seed phrase is the only way to recover your wallet. Ninja Pay does not store, transmit, or back up your seed phrase. If you lose your seed phrase, your funds are permanently irrecoverable. We cannot assist with recovery under any circumstances.

3. No Personal Data Collection

Ninja Pay does not collect, store, or process any personal data. We do not require:

• Email address or phone number
• Name, date of birth, or government ID
• Location data, IP addresses, or device identifiers
• Transaction history (all transactions occur on-chain and are publicly verifiable on the BNB Smart Chain)

We have no user accounts, no databases of user information, and no ability to identify individual users of the application.

4. Payment Processing

Fiat settlement to merchants is processed exclusively by our licensed payment processing partner, Triple-A Pte Ltd, a regulated entity based in Singapore. When you make a payment:

• Your stablecoins are sent directly from your self-custody wallet to the payment processor's address
• The payment processor converts the stablecoins to local currency (THB or VND)
• The merchant receives the local currency in their bank account

Ninja Pay does not touch, hold, or route your funds at any point during this process. The transaction is a direct on-chain transfer from your wallet to the payment processor.

5. KYC/AML Compliance

As a self-custody wallet provider that does not hold user funds or personal data, Ninja Pay does not perform KYC (Know Your Customer) or AML (Anti-Money Laundering) checks. KYC/AML obligations for the fiat settlement are handled by our licensed payment processing partner in accordance with applicable regulations in their operating jurisdictions.

6. Fees & Transparency

Ninja Pay charges a flat service fee on each payment transaction. This fee is displayed in absolute terms (not as a percentage) on the payment confirmation screen before the user authorizes any transaction. Network fees (gas) for BNB Smart Chain transactions are separate and determined by network conditions. No hidden fees, spreads, or markups are applied beyond what is shown on the confirmation screen.

7. Security

The application implements the following security measures:

• PIN authentication: 6-digit PIN stored as a salted SHA-256 hash — the raw PIN is never stored
• Biometric authentication: Face ID / Touch ID via the device's native LocalAuthentication framework
• Secure storage: Seed phrase encrypted at rest via iOS Keychain (WHEN_UNLOCKED_THIS_DEVICE_ONLY) / Android Keystore
• Auto-wipe: 5 consecutive incorrect PIN attempts trigger automatic deletion of all wallet data
• No cloud backup: Wallet data is excluded from iCloud and Google Drive backups

8. Risks & Disclaimers

By using Ninja Pay, you acknowledge and accept the following risks:

• Cryptocurrency transactions are irreversible. Sending funds to a wrong address results in permanent loss
• Stablecoin values may fluctuate and are not guaranteed to maintain their peg
• Blockchain networks may experience congestion, downtime, or increased fees
• Ninja Pay is provided "as is" without warranty of any kind, express or implied
• We are not liable for any loss of funds resulting from user error, device compromise, lost seed phrases, or third-party actions
• Regulatory changes in any jurisdiction may affect the availability or functionality of the service

9. Limitation of Liability

To the maximum extent permitted by law, Ninja Pay Asia, its founders, developers, and affiliates shall not be liable for any direct, indirect, incidental, special, consequential, or exemplary damages arising from the use or inability to use the application, including but not limited to loss of funds, loss of data, or loss of business opportunity.

10. Governing Law

These terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict of law provisions.

11. Contact

For inquiries regarding these terms or the Ninja Pay application:

contact@ninjapayasia.com

Summary

Data We Collect

None. The application operates entirely on your device. No data is transmitted to our servers because we have no servers that receive user data. All wallet operations (key generation, transaction signing, balance queries) occur locally on your device or directly with the BNB Smart Chain public RPC nodes.

Data We Do NOT Collect

• Personal identifiers (name, email, phone, government ID)
• Device identifiers or fingerprints
• Location or IP address data
• Usage analytics or behavioral data
• Transaction history (viewable on-chain by anyone)
• Seed phrases, private keys, or PIN codes

Third-Party Services

The application connects to the following external services for functionality purposes only:

• BNB Smart Chain RPC nodes — to query balances and broadcast transactions
• Binance public API — to fetch current BNB price for display purposes
• Triple-A payment API — to process merchant payments (only transaction data, no personal data)

These connections transmit only the blockchain data necessary for the requested operation. No personal identifiers are included.

Data Retention

We retain no data because we collect no data. If you delete the application, all wallet data stored on your device is permanently deleted.

Children's Privacy

Ninja Pay is not intended for use by individuals under 18 years of age.

Changes to This Policy

Any updates to this privacy policy will be published at ninjapayasia.com/privacy. Continued use of the application constitutes acceptance of the updated policy.