Flux Pay (Private) Limited · Enterprise Payment Technology & Operating Policies

Acceptable Use Policy (AUP)

Merchant compliance boundaries, permitted commerce, prohibited sectors, and API risk monitoring standards.

Corporate Entity Flux Pay (Private) Limited

Document Ref DOC-FLX-AUP-2026.4

Effective Scope Applies continuously across all live and sandbox environments

Last Revised October 21, 2026

Jurisdiction Islamic Republic of Pakistan

MERCHANT COMPLIANCE & RISK

Executive Summary & Key Governance Takeaways

Plain-English operational breakdown of key merchant commitments under this agreement.

Authorized Commercial Use: Services are reserved exclusively for verified commercial businesses selling legitimate goods, SaaS, and services in Pakistan.
Strict Anti-Gambling Prohibition: Online gambling, casinos, betting, lotteries, lucky draws, crypto speculation, and pyramid schemes are strictly prohibited.
Immediate Strict Action: Prohibited activity triggers instant API key revocation, a 180-day balance escrow freeze, and permanent network blacklisting.
Law Enforcement Prosecution: Fraudulent activity and illegal gambling operations are reported directly to the FIA National Cyber Crime Bureau.

1.0

Objective, Scope & Legal Basis

1.1 Corporate Entity, Scope & Applicability

This Acceptable Use Policy ("AUP") defines the commercial boundaries, prohibited business verticals, and API security guidelines governing every merchant account integrated with Flux Pay (Private) Limited ("Flux Pay", "we", "us"), a private limited company incorporated in Pakistan, across both live and sandbox environments.

1.2 Legal Framework

This policy is enforced pursuant to commercial financial guidelines, the Pakistan Penal Code, the Anti-Money Laundering Act, 2010, and international financial crime conventions.

2.0

Permitted Commercial Activities

Flux Pay infrastructure is designed to empower lawful commercial enterprises operating within Pakistan, including but not limited to:

E-Commerce & Retail: Physical retail goods, fashion, electronics, cosmetics, FMCG, groceries, and home goods with verified fulfillment channels;
Digital Products & SaaS: Cloud software, mobile applications, licensed digital content, hosting, and subscription services;
Education & Professional Services: Accredited courses, tutorial academies, corporate training, consulting, accounting, and legal services;
Hospitality & Ticketing: Hotels, event ticketing, domestic tour operators, and restaurant pre-orders;
Corporate Invoicing: B2B wholesale trade settlements and vendor invoicing.

3.0

Strictly Prohibited Business Categories & Anti-Gambling Enforcement

CRITICAL NOTICE: ZERO-TOLERANCE ON GAMBLING, BETTING & FRAUD

Flux Pay strictly and uncompromisingly prohibits online gambling, sports betting, casinos, lotteries, lucky draws, speculative games (including Teen Patti, Poker, and binary wagering), cryptocurrency speculation, and deceptive schemes. We maintain automated algorithmic risk telemetry that intercepts unauthorized payment patterns. Any merchant attempting to process gambling or prohibited transactions will face immediate, severe punitive action:

Immediate API Revocation Live API credentials, hosted checkout URLs, and webhook relays are permanently terminated upon detection.

180-Day Balance Escrow Lock All unsettled funds and ledger balances are locked for up to 180 calendar days to absorb chargeback liabilities.

Permanent Network Blacklisting Merchant CNIC, NTN, settlement bank accounts, and digital fingerprints are permanently blacklisted across our platform.

Criminal Prosecution & FIA Referral Merchant identity dossiers, transaction logs, and IP forensics are handed over directly to the Federal Investigation Agency (FIA).

Merchants are strictly prohibited from utilizing Flux Pay to accept payments, process disbursements, or facilitate transactions involving the following products, services, or activities:

Prohibited Vertical	Specific Prohibited Activities	Statutory Rationale
Virtual Assets & Crypto	Speculative cryptocurrency trading, crypto exchanges, initial coin offerings (ICOs), and NFT marketplaces.	SBP BPRD Circular No. 03 of 2018 prohibition on crypto dealing.
Gambling & Betting	Online casinos, sports betting, lotteries, lucky draws, prediction markets, and games of chance.	Prevention of Gambling Act, 1977 & federal laws.
Unauthorized Financial Services	Unlicensed forex brokers, unregistered binary options, peer-to-peer lending schemes, and unauthorized remittances.	Foreign Exchange Regulation Act, 1947 & financial crime statutes.
Pyramid & Ponzi Schemes	Multi-level marketing (MLM), matrix schemes, referral fee pyramids, and get-rich-quick investment packages.	Statutory prohibition on illegal deposit-taking and fraud.
Controlled Substances	Illicit narcotics, prescription drugs without DRAP license, steroids, and drug paraphernalia.	Control of Narcotic Substances Act, 1997 & DRAP guidelines.
Weapons & Munitions	Firearms, ammunition, tactical combat weapons, explosive materials, and fireworks.	Pakistan Arms Act & federal public safety mandates.
Counterfeit & Infringing Goods	Replica luxury fashion, bootleg media, stolen digital keys, and unauthorized IP reproductions.	Intellectual Property Organization (IPO) of Pakistan laws.
Adult Content & Escort Services	Pornography, sexually explicit digital media, escort services, and prostitution facilitation.	PECA 2016 & Pakistan Penal Code public decency provisions.

4.0

Regulated Industries Requiring Prior Underwriting Approval

Certain specialized categories require explicit written pre-approval and submission of statutory regulatory licenses before integration:

Non-Governmental Organizations (NGOs) & Charities: Valid registration certificate, Economic Affairs Division (EAD) clearance, and Pakistan Centre for Philanthropy (PCP) certification;
Travel Agencies & Hajj/Umrah Operators: Valid Department of Tourist Services (DTS) license and Ministry of Religious Affairs accreditation;
Precious Metals & Gems: Proof of registration with the All Pakistan Gem & Jewellers Association and strict AML record-keeping mechanisms.

5.0

Technical Restrictions & API Conduct

Merchants utilizing Flux Pay APIs, webhooks, and hosted checkout URLs must adhere to strict operational standards:

Rate Limiting: Merchants must avoid abusive automated polling. Repeated rapid requests exceeding standard capacity will trigger automated 429 Too Many Requests HTTP throttling.
Idempotency Keys: Merchants must pass unique idempotency_key headers on charge and payout API requests to prevent accidental duplicate operations.
Security Prohibitions: Reverse engineering checkout scripts, attempting SQL injection, launching Denial-of-Service (DDoS) attacks, or performing automated credential stuffing is strictly prohibited and constitutes a criminal offense under PECA 2016.

6.0

Automated Telemetry & Real-Time Risk Monitoring

6.1 Real-Time Anomaly Detection

All transaction streams are continuously evaluated by automated algorithmic risk engines. Suspicious velocities, mismatched billing geo-locations, and stolen wallet identifiers are intercepted instantaneously before settlement.

6.2 Infrastructure Integrity & Ecosystem Protection

Platform infrastructure nodes maintain strict telemetry to ensure zero fraudulent traffic pollutes partner banking networks, preserving high settlement uptime for all compliant merchants.

7.0

Sanctions, Suspensions & Escrow Holds

If a merchant violates this Acceptable Use Policy, Flux reserves the immediate right to:

Instantaneously terminate API keys and revoke checkout access;
Place an administrative escrow freeze on pending balances for up to 180 calendar days to satisfy customer chargebacks and regulatory fines;
Submit an official Suspicious Transaction Report (STR) to the Financial Monitoring Unit (FMU) of Pakistan or report the merchant to the Federal Investigation Agency (FIA).

8.0

Reporting Violations & Risk Inquiries

If you suspect a merchant is processing payments in violation of this Acceptable Use Policy, please submit an abuse report immediately to our compliance investigations team:

Compliance & Abuse Investigation Unit

Email: abuse@gofluxpay.com | legal@gofluxpay.com
All whistleblower reports are investigated under strict confidentiality.

LEGAL & COMPLIANCE DESK

Questions Regarding Platform Policies?

Our dedicated Legal & Compliance Directorate is available to assist merchants with KYC documentation, corporate onboarding queries, and regulatory disclosures.

Contact Support Talk to Compliance