Payment Provider Disclosure

1Introduction

This Partner / Third-Party Payment Provider Disclosure explains the relationship between EXICASH SDN BHD ("EXICASH", "we", "us", or "our"), merchants who use EXICASH technology services ("Merchants"), licensed or registered payment partners, banks, merchant acquirers, e-money issuers, payment gateways, payment processors, payment schemes, wallet providers, BNPL providers, payout providers, and other third-party service providers.

EXICASH provides technology, integration, dashboard, API, payment link, QR payment integration, reconciliation, reporting, fraud monitoring tools, white-label frontend, onboarding assistance, and technical support.

Regulated payment services, payment processing, acquiring, settlement, payout, refund processing, chargeback handling, transaction reversal, transaction holding, and related regulated functions are provided by licensed or registered third-party payment providers where applicable.

This Disclosure should be read together with EXICASH's Terms of Service, Privacy Policy, Data Processing Agreement / Data Protection Addendum, Information Security Policy or Security Statement, AML/CFT & Sanctions Compliance Statement, Anti-Bribery / Anti-Corruption Policy, Referral Partner Agreement, and any partner terms applicable to your use of payment services.

2EXICASH's Role

EXICASH acts as a technology provider and support provider.

Our role may include:

• providing payment gateway technology;
• providing API, webhook, plugin, dashboard, and reporting tools;
• providing payment links and QR payment integration;
• supporting FPX, DuitNow QR, card, e-wallet, BNPL, payout, disbursement, split payment, subscription, or recurring billing integrations;
• providing merchant dashboard access;
• providing reconciliation tools and settlement report display;
• providing fraud monitoring tools;
• providing white-label payment frontend technology;
• assisting with merchant onboarding and KYB/KYC document collection;
• forwarding merchant onboarding documents to licensed or registered payment partners;
• assisting communication between Merchants and payment partners;
• providing technical support between 8:00 a.m. and 10:00 p.m. Malaysia time, unless otherwise stated.

EXICASH does not act as the regulated provider of payment processing or settlement services unless expressly stated otherwise in writing and supported by applicable regulatory approval.

3Role of Licensed and Third-Party Payment Providers

Depending on the payment method, Merchant category, payment flow, or partner arrangement, payment-related services may be provided by third-party providers, including but not limited to:

• licensed banks;
• registered merchant acquirers;
• e-money issuers;
• payment gateways;
• card processors;
• FPX or online banking providers;
• DuitNow QR providers;
• e-wallet providers;
• BNPL providers;
• payout or disbursement providers;
• fraud monitoring providers;
• verification and KYB/KYC providers;
• card schemes, payment networks, and other payment infrastructure providers.

These parties may be responsible for one or more of the following:

• merchant approval;
• payment method approval;
• transaction processing;
• acquiring services;
• payment authorisation;
• settlement;
• payout;
• refund processing;
• chargeback handling;
• transaction reversal;
• rolling reserves;
• transaction monitoring;
• risk review;
• fraud investigation;
• compliance checks;
• merchant suspension or termination;
• reporting to regulators or authorities where required.

Merchants must comply with the terms, policies, rules, procedures, and requirements imposed by the relevant third-party payment providers.

4No Fund Holding by EXICASH

EXICASH does not receive, hold, pool, safeguard, control, settle, freeze, delay, or release merchant funds or consumer funds.

Where a payment transaction is successfully processed, settlement is handled by the relevant licensed or registered payment partner, bank, acquirer, e-money issuer, payment gateway, payment processor, or other authorised provider according to their own settlement schedule, payout process, risk controls, and terms.

EXICASH may display transaction status, settlement reports, payout information, reconciliation records, or payment references through its dashboard for convenience. Such information may depend on data received from third-party payment providers and may be subject to delay, correction, adjustment, or partner confirmation.

5Merchant Agreements with Payment Partners

Merchants may be required to enter into separate agreements or accept separate terms with licensed or registered payment partners.

These may include:

• merchant agreements;
• acquirer terms;
• payment gateway terms;
• payment method terms;
• settlement terms;
• card scheme rules;
• e-wallet provider terms;
• BNPL provider terms;
• FPX or DuitNow QR requirements;
• payout or disbursement terms;
• refund and chargeback procedures;
• risk and compliance policies;
• acceptable use policies;
• prohibited and restricted business policies.

By using EXICASH services, the Merchant acknowledges that such partner terms may apply in addition to EXICASH's own Terms of Service.

Where required, the Merchant must accept the relevant partner terms before using the applicable payment method or payment service.

6Merchant Approval and Onboarding

EXICASH may assist with onboarding and KYB/KYC document collection.

Documents may include, but are not limited to:

• SSM statutory documents;
• company profile;
• director and shareholder details;
• beneficial ownership information;
• NRIC or passport copies;
• business bank account details;
• bank statements;
• business address proof;
• website, social media, or online store details;
• nature of business;
• product or service information;
• licences, permits, or approvals;
• tax information;
• transaction volume estimates;
• refund or chargeback information;
• any additional documents requested by EXICASH or the relevant payment partner.

EXICASH may review such documents for internal record-keeping, safe keeping, onboarding support, risk review, partner submission, and compliance purposes.

However, final merchant approval may be determined by the relevant licensed or registered payment partner.

EXICASH does not guarantee that any Merchant will be approved by any payment partner, bank, acquirer, e-money issuer, payment gateway, card processor, wallet provider, BNPL provider, or payment method provider.

7Payment Method Availability

EXICASH may support integration with payment methods including:

• FPX;
• DuitNow QR;
• credit card;
• debit card;
• e-wallet;
• BNPL;
• payout or disbursement;
• subscription or recurring billing;
• split payment;
• other payment methods made available from time to time.

Payment method availability is subject to:

• payment partner approval;
• merchant eligibility;
• business category;
• transaction risk;
• technical availability;
• regulatory requirements;
• card scheme rules;
• payment network rules;
• e-wallet provider rules;
• BNPL provider rules;
• bank or acquirer requirements;
• compliance review;
• prohibited and restricted business controls.

EXICASH may add, remove, suspend, restrict, or modify payment method integrations at any time.

8Partner Decisions

Licensed or registered payment partners may, at their own discretion and according to their own terms, decide to:

• approve or reject a Merchant;
• approve or reject a payment method;
• impose onboarding requirements;
• request additional documents;
• impose transaction limits;
• impose settlement limits;
• impose rolling reserves;
• withhold or delay settlement;
• suspend or terminate payment processing;
• reject or reverse transactions;
• process refunds;
• process chargebacks;
• investigate suspicious activity;
• reject prohibited or restricted business categories;
• terminate a Merchant relationship;
• report suspicious or unlawful activity to relevant authorities where required.

EXICASH is not responsible for losses, delays, suspension, rejection, withholding, chargebacks, reversals, refunds, settlement issues, or business interruption caused by partner decisions.

EXICASH may assist communication between the Merchant and the relevant payment partner on a best-effort basis only.

9Settlement, Payouts, Refunds, and Chargebacks

Settlement, payout, refund, chargeback, reversal, transaction hold, reserve, and payment release matters are handled by the relevant licensed or registered payment partner.

Merchants acknowledge that:

• settlement timelines may vary depending on the payment partner, payment method, bank holiday, risk review, transaction type, or settlement policy;
• payout may be delayed or withheld by payment partners due to compliance review, suspected fraud, chargeback risk, regulator request, partner policy, incomplete documents, or prohibited activity;
• refunds and chargebacks may be handled according to partner terms, scheme rules, bank rules, card network rules, e-wallet rules, BNPL provider rules, and applicable law;
• EXICASH may display information related to settlements, refunds, chargebacks, or reversals, but such display is informational and may depend on partner-provided data.

Any dispute regarding settlement, payout, refund, chargeback, reversal, reserve, or withholding should be addressed between the Merchant and the relevant payment partner. EXICASH may assist with communication where possible but does not guarantee resolution or outcome.

10Consumer Payment Disputes

Consumers should contact the Merchant directly for matters relating to goods, services, orders, delivery, fulfilment, refunds, subscriptions, cancellations, warranties, complaints, or transaction disputes.

EXICASH is not responsible for the Merchant's products, services, delivery, customer support, refund obligations, warranty obligations, or consumer relationship.

If a Consumer contacts EXICASH regarding a payment or transaction, EXICASH may direct the Consumer to the Merchant and/or the relevant payment partner.

EXICASH may provide receipts, payment confirmations, or transaction status information in a technology capacity only. Such receipts or confirmations do not mean that EXICASH is responsible for the Merchant's goods, services, fulfilment, refund, or legal obligations.

11Merchant Responsibility for Consumers

Merchants are solely responsible for:

• goods and services sold to Consumers;
• product or service descriptions;
• pricing;
• invoices;
• delivery and fulfilment;
• refund and cancellation policies;
• consumer support;
• warranties;
• consumer complaints;
• chargeback evidence;
• transaction documentation;
• compliance with consumer protection laws;
• compliance with tax, licensing, and business laws;
• ensuring that their business activities are lawful and not prohibited.

Merchants must not misrepresent EXICASH as the seller, supplier, merchant acquirer, bank, e-money issuer, payment processor, or regulated payment provider for the Merchant's goods or services.

12Third-Party Provider Terms

Merchants agree that their use of payment methods and payment-related services may be subject to third-party terms.

These third-party terms may include rules on:

• merchant eligibility;
• prohibited businesses;
• restricted businesses;
• transaction limits;
• settlement timelines;
• fraud monitoring;
• refunds;
• chargebacks;
• reversals;
• reserves;
• dispute handling;
• data sharing;
• transaction monitoring;
• compliance checks;
• suspension and termination;
• fees;
• payment method rules.

Merchants are responsible for reviewing and complying with all applicable third-party terms.

EXICASH is not responsible if a Merchant fails to comply with third-party provider terms.

13Prohibited and Restricted Businesses

EXICASH and payment partners do not support high-risk, illegal, prohibited, or unauthorised business activity.

Prohibited and restricted businesses may include, but are not limited to:

• illegal goods or services;
• drugs, narcotics, illegal pharmaceuticals, or controlled substances;
• gambling, betting, casino, lottery, or games of chance;
• pornography, adult services, or adult entertainment;
• firearms, weapons, ammunition, or explosives;
• counterfeit, pirated, replica, stolen, or infringing goods;
• cryptocurrency, NFTs, virtual asset trading, token sales, or unlicensed digital asset activity;
• unlicensed lending, money services, remittance, e-money, or payment aggregation;
• scams, fraudulent schemes, phishing, hacking, malware, or cybercrime services;
• investment schemes, pyramid schemes, Ponzi schemes, or misleading wealth programmes;
• unauthorised charities, donations, fundraising, or crowdfunding;
• products or services prohibited by banks, acquirers, card schemes, wallet providers, BNPL providers, regulators, payment networks, or applicable law.

Restricted businesses may require additional review, documents, approval, conditions, transaction limits, or rejection.

EXICASH and payment partners may reject, suspend, or terminate a Merchant based on prohibited or restricted business concerns.

14Data Sharing with Payment Partners

To provide onboarding support, technical integration, transaction routing, fraud monitoring, reporting, reconciliation, partner communication, and payment method support, EXICASH may share Merchant information, Authorised User information, Consumer payment information, transaction data, KYB/KYC documents, bank account details, fraud signals, API logs, webhook logs, and support information with relevant third-party payment providers.

Such sharing may be necessary for:

• onboarding;
• merchant approval;
• payment method approval;
• transaction processing support;
• settlement reporting;
• fraud monitoring;
• chargeback handling;
• dispute support;
• compliance review;
• suspicious activity investigation;
• regulatory or legal requirements.

Personal data handling is further described in EXICASH's Privacy Policy and, where applicable, Data Processing Agreement / Data Protection Addendum.

15Technical Dependencies

EXICASH services may depend on systems operated by third parties, including:

• banks;
• acquirers;
• payment gateways;
• card processors;
• card schemes;
• FPX or online banking infrastructure;
• DuitNow QR infrastructure;
• e-wallet providers;
• BNPL providers;
• payout providers;
• cloud hosting providers;
• telecommunications providers;
• internet service providers;
• fraud monitoring providers;
• verification providers;
• software vendors.

Service interruptions, delays, errors, declined transactions, reporting delays, settlement delays, failed callbacks, webhook errors, API response delays, or downtime may occur due to third-party systems outside EXICASH's control.

EXICASH is not liable for interruptions, delays, losses, or failures caused by third-party systems, payment partners, banks, payment networks, payment schemes, or other external providers outside EXICASH's reasonable control.

16White-Label and Branding Disclosure

EXICASH may provide a white-label payment frontend or branded payment interface.

Depending on the configuration:

• the EXICASH brand may appear;
• the Merchant brand may appear upon request and approval;
• the licensed payment partner's brand may or may not appear, depending on partner requirements;
• payment method brands may appear where required;
• receipts or confirmations may be generated through EXICASH technology.

A white-label frontend does not mean that EXICASH is the seller of goods or services, the regulated payment processor, the merchant acquirer, the e-money issuer, the settlement provider, or the party responsible for refunds, chargebacks, or consumer disputes.

17No Warranty on Third-Party Services

EXICASH does not guarantee that any third-party payment provider, bank, acquirer, e-money issuer, payment gateway, wallet provider, BNPL provider, card scheme, payment network, verification provider, fraud monitoring provider, hosting provider, or other third-party service will be uninterrupted, error-free, secure, timely, available, or suitable for the Merchant's business.

EXICASH does not guarantee:

• merchant approval by payment partners;
• payment method approval;
• successful transaction processing;
• uninterrupted payment availability;
• settlement within a specific timeframe;
• absence of chargebacks or refunds;
• approval of high-risk or restricted business categories;
• continued availability of any payment partner or payment method;
• accuracy of third-party data beyond what EXICASH receives.

18Limitation of EXICASH Responsibility

To the fullest extent permitted by law, EXICASH shall not be responsible for:

• payment partner decisions;
• merchant approval rejection;
• payment method rejection;
• settlement delay or withholding;
• refund processing;
• chargeback processing;
• transaction reversal;
• rolling reserves;
• failed payouts;
• third-party downtime;
• bank or acquirer errors;
• card scheme or payment network rules;
• Consumer disputes;
• Merchant goods or services;
• Merchant refund obligations;
• Merchant fraud or misconduct;
• regulatory action taken by a payment partner or authority;
• loss caused by the Merchant's failure to comply with partner terms.

EXICASH's role is limited to technology, integration, dashboard, onboarding support, communication support, reporting, and technical support, unless otherwise agreed in writing.

19Changes to Payment Partners or Payment Methods

EXICASH may add, remove, replace, suspend, restrict, or change payment partners, payment methods, payment integrations, dashboard features, API functions, or technical flows from time to time.

Changes may be required due to:

• partner requirements;
• regulatory requirements;
• technical changes;
• security reasons;
• commercial arrangements;
• risk controls;
• payment method availability;
• scheme rules;
• business decisions;
• system upgrades.

Where practicable, EXICASH may provide notice of material changes, but some changes may take effect immediately if required for security, compliance, partner instruction, or operational reasons.

20Merchant Acknowledgement

By using EXICASH services, the Merchant acknowledges and agrees that:

• EXICASH provides technology, integration, dashboard, reporting, onboarding support, communication support, and technical support only;
• regulated payment services are provided by licensed or registered third-party payment providers where applicable;
• EXICASH does not receive, hold, pool, control, freeze, release, or settle funds;
• settlement is handled by the relevant licensed or registered payment partner;
• payment partners may approve, reject, suspend, terminate, delay, withhold, reverse, or investigate transactions according to their own terms and applicable law;
• the Merchant remains responsible for its own goods, services, Consumers, refunds, chargeback evidence, compliance, and business operations;
• third-party provider terms may apply in addition to EXICASH's Terms of Service.

21Contact Us

If you have questions about this Partner / Third-Party Payment Provider Disclosure, please contact:

EXICASH SDN BHD Company Registration No.: 202601015752 (1677849-M) Address: 16-19, Menara Mutiara Sentral, No. 2, Jalan Desa Aman 1, Cheras Business Centre, 56000 Kuala Lumpur, Malaysia Email: support@exicash.com Website: www.exicash.com