Legal and regulatory information
Policies, notices and disclosures that apply to this website and to Rainbow Pay's services.
Privacy NoticeThis notice explains what personal data Rainbow Pay collects when you visit this website, contact us, apply to become a merchant or act for a merchant, why we collect it, who we may share it with, how long we keep it and how you can access or correct it. We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. Our services are for businesses, and our website forms never ask for card numbers, passwords or identity documents.Cookie PolicyWe use a small number of cookies. Two are our own: one remembers your cookie choices and one remembers your language, and the language cookie is set only if you allow preference cookies. Analytics cookies load only if you consent. We do not currently use marketing cookies. You can change your choices at any time using the "Cookie settings" link in the footer.Terms of UseThese terms cover your use of this website only. The website provides general information about Rainbow Pay and its services; it is not an offer of services and does not create a merchant relationship. Actual payment services are governed by separately executed merchant or service agreements.Regulatory DisclosureRainbow Pay is the trading name of RAINBOW PAY LIMITED, a Hong Kong company licensed as a Money Service Operator under the AMLO (Cap. 615) and supervised by the Hong Kong Customs & Excise Department. This page explains what that status covers, what it does not cover, and how to verify it yourself on the official register.AML / CFT Policy SummaryAs a licensed Money Service Operator, Rainbow Pay must know who its merchants are, understand what they do, and watch for and report suspicious activity. This page summarises how we do that. It is a public summary, not our internal policy, and it deliberately does not publish operational detail.Restricted & Prohibited BusinessesRainbow Pay serves mainstream, legitimate commercial businesses. Some categories of business cannot be accepted, and others are subject to additional review or conditions. This page lists examples so that applicants know in advance.Complaints PolicyIf you are unhappy with Rainbow Pay, tell us. You can use the form on this page, email us or write to us. Complaints are free to make, are handled fairly by someone not directly involved where possible, and can be escalated to senior management. Never include card numbers, security codes or passwords in a complaint.Responsible Security DisclosureIf you believe you have found a security vulnerability in Rainbow Pay's website or publicly exposed services, please report it privately to security@rainbowpay.hk. We welcome good-faith reports, will work with you to understand and fix the issue, and ask that you give us reasonable time to do so before disclosing it. We do not run a bug bounty programme at present.