Acceptable Use Policy

This Acceptable Use Policy sets out what you may and may not do using the PekoFlow platform. It supplements and does not replace each Acquiring Partner's own prohibited-business and acceptable-use rules, which continue to apply in full and independently under your Acquiring Partner Merchant Agreement.

This Acceptable Use Policy applies to every merchant, merchant user, API integrator and end-customer interacting with PekoFlow. Breach of this Acceptable Use Policy is a breach of the Service Terms and, separately, may be a breach of one or more Acquiring Partner Merchant Agreements.

Prohibited business categories

You may not use PekoFlow to accept payments for, or in connection with, any of the following business categories. This list is illustrative, not exhaustive; each Acquiring Partner will apply its own list and may prohibit additional categories.

Illegal or restricted

• Any activity that is illegal in the jurisdiction of the merchant, the end-customer, the Acquiring Partner or the card scheme.
• Unlicensed regulated activity, including unlicensed financial services, banking, lending, insurance, money service business, virtual asset service provision, securities trading, investment advice and gambling.
• Narcotics, controlled substances, prescription drugs and prescription medical devices sold without required authorisation.
• Weapons, ammunition, explosives and their components, except for lawfully licensed dealers using specialised acquiring.
• Counterfeit goods, pirated content and material that infringes intellectual property rights.
• Human trafficking, sexual exploitation, and any product or service that sexualises or endangers minors.
• Terrorism financing, sanctions evasion, money laundering, and any transaction with a sanctioned person or in a sanctioned jurisdiction.

High-risk business categories

The following activities may only be supported where expressly approved by the relevant Acquiring Partner and, where applicable, enabled by Peko.

• Adult content and services.
• Gambling, betting, gaming with prizes, lotteries and skill-based prize competitions.
• Virtual assets, crypto exchange, ICOs and token sales.
• Peer-to-peer lending, crowdfunding, credit repair and debt collection.
• Multi-level marketing, pyramid schemes and get-rich-quick programmes.
• Nutraceuticals, CBD, hemp and any product with disputed regulatory status.
• Cross-border remittance and foreign exchange.
• Political fundraising.
• Any activity that requires a special-category acquiring arrangement under the Acquiring Partner's rules.

Prohibited conduct

Regardless of your business category, you may not:

• Provide false, misleading or incomplete information during onboarding, KYB, transaction disputes or any communication with Peko or an Acquiring Partner.
• Share user credentials, API keys, webhook secrets or access tokens with unauthorised persons, or otherwise compromise the security of your account.
• Attempt to avoid, manipulate or circumvent applicable Platform Fees, Acquiring Partner fees or transaction monitoring mechanisms.
• Impersonate another business, use a nominee, or conceal the true beneficial ownership or ultimate control of your business.
• Engage in transaction laundering, factoring, cash-advance schemes, split-transaction structuring, or process transactions for a third party.
• Process transactions that do not correspond to a bona fide sale of goods or services actually delivered or to be delivered.
• Bill for products or services that materially differ from what was described to the customer.
• Manipulate refunds, chargebacks or dispute evidence, or coach customers to file or withdraw disputes.
• Test your own cards through your own merchant account or use the platform to test cards for fraud purposes.
• Circumvent Acquiring Partner controls, card scheme rules or fraud-prevention systems.
• Reverse engineer, probe, scan, load-test, penetration-test or otherwise interfere with the security or integrity of the platform, except under a written testing engagement with Peko.
• Introduce malware, harmful code, phishing content or spam through the platform.
• Use the platform in breach of any applicable law, including data protection, consumer protection, tax, competition, anti-bribery, sanctions and eCommerce laws.
• Generate excessive fraud, chargeback or dispute rates that exceed the thresholds established by an Acquiring Partner, card scheme or applicable law.

Merchant obligations

• Maintain a valid trade licence, all required regulatory authorisations, and current tax and VAT registrations.
• Publish and honour your own terms of sale, refund policy and privacy notice to your end-customers.
• Deliver the goods or services purchased, on the timing represented at checkout.
• Respond to disputes and evidence requests within the timeframes set by the Acquiring Partner and the applicable card scheme.
• Maintain PCI DSS controls to the extent applicable to your integration and environment.
• Notify Peko and your Acquiring Partner promptly of any change of business activity, ownership, control, jurisdiction, licence or bank account.

Enforcement

If we reasonably believe you have breached this Acceptable Use Policy, or if an Acquiring Partner or regulator instructs, we may take one or more of the following actions, with or without prior notice depending on the nature of the breach, applicable law or regulatory requirements:

• Request further information or evidence.
• Restrict specific features (for example, disabling a payment method, capping volume, requiring step-up verification, or moving you to a longer settlement cycle at the Acquiring Partner's direction).
• Suspend your account, in whole or in part.
• Terminate your access to the platform.
• Report the matter to the Acquiring Partner, card scheme, regulator or law enforcement authority as required by law or by the terms binding on us or the Acquiring Partner.
• Exercise any rights to withhold, redirect or offset Peko-side amounts as provided in the Service Terms and cooperate across Acquiring Partners to remediate loss caused by your breach.

If you believe a merchant is using PekoFlow in breach of this Acceptable Use Policy, please email at help@peko.one with a description and any evidence. We treat reports confidentially, subject to legal or regulatory disclosure obligations.

We may update this Acceptable Use Policy from time to time.