Skip to main content

Compliance

Built around responsible payment operations.

Rainbow Pay applies compliance-led onboarding and ongoing controls appropriate to its services, merchant relationships and regulatory obligations.

Hong Kong regulatory framework

Rainbow Pay Limited is licensed as a Money Service Operator under the Anti-Money Laundering and Counter-Terrorist Financing Ordinance (Cap. 615) and supervised by the Hong Kong Customs & Excise Department. Rainbow Pay's MSO status relates to the money service activities falling within the applicable Hong Kong MSO regime.

The MSO licence is not a card acquiring licence and is not the legal basis for every product on this website. Availability and legal structure of individual payment products may differ according to jurisdiction, merchant entity, service configuration and relevant payment/acquiring arrangements. Rainbow Pay is not a bank and does not take deposits.

Merchant due diligence

Every merchant is reviewed before services are provided. Depending on the business, review typically covers the legal entity, its registration and directors; beneficial ownership and control; the business model, website, products and customer markets; the expected payment profile and proposed payment setup; and sanctions and, where applicable, politically exposed person screening.

Documents are requested through a secure onboarding process after an initial review — never through the enquiry forms on this website.

Payment ecosystem requirements

Card schemes, wallet providers and payment partners set their own rules for the merchants they serve. Rainbow Pay applies those requirements alongside its own, which can affect which businesses, markets and payment methods are eligible.

Ongoing compliance

Compliance does not end at approval. Merchant relationships are reviewed on an ongoing basis, and payment activity may be reviewed in accordance with compliance, risk and partner requirements. Merchants are expected to tell us about material changes to their business.

Data and security

Personal data is handled in line with our Privacy Notice and the Personal Data (Privacy) Ordinance. Our approach to information and payment security is described on the Security page.

Restricted businesses

Rainbow Pay focuses on mainstream, legitimate commercial businesses. Some activities are outside our risk appetite or are prohibited by law, by our partners or by payment scheme rules. See Restricted & Prohibited Businesses.

Merchant applications are subject to KYB/KYC, compliance review and approval. Services are not available in all jurisdictions. Nothing on this website constitutes a guarantee of merchant approval or an offer of banking, legal, investment or tax advice.

Ready to discuss your payment setup?

Tell us how your business accepts payments today and what you need from your next payment integration.

Cookie preferences

Choose which optional cookies we may use. Strictly necessary cookies are always active because the website cannot work without them.

  • Strictly necessary

    Security, load balancing, form protection and remembering your cookie choice.

    Always active

Read the Cookie Policy