1. Standard Operating Procedure:

   

1. 1. The methods of transferring funds, Transaction settlement, and reconciliation stipulated in this Standard Operation Procedure (SOP) are applied to Transaction that using the method of transferring funds through Media where Media acts as an intermediary for the following types of payment methods / channels:

      1. BCA VA (AGGREGATOR)

      2. DANAMON VA

      3. BRI VA (AGGREGATOR)

      4. BNI VA

      5. MANDIRI VA

      6. PERMATA VA (AGGREGATOR)

      7. PERMATA NET

      8. MAYBANK VA

      9. MAYBANK 2U

      10. CIMB VA

      11. SINARMAS VA

      12. BNC VA

      13. FASPAY CREDIT CARD

      14. CIMB CLICKS

      15. DANAMON ONLINE

      16. REKPON CIMB

      17. OCTO MOBILE

      18. SAKUKU

      19. OVO

      20. SHOPEEPAY

      21. QRIS

      22. LINKAJA

      23. DANA

      24. INDOMARET GROUP

      25. ALFAMART

      26. ALFAMIDI

      27. DanDan

      28. Lawson

      29. KREDIVO

      30. AKULAKU

      31. INDODANA

      32. BRI Ceria

      33. B-SECURE.

   2. A successful transaction data report ("Successful Transaction Report") shall be informed by Media to Merchant on the next working day after the transaction day (D+1) no later than 08:30 WIB (Western Indonesia Time / GMT+7).

   3. In the event that there is a dispute or difference in the successful transaction data ("Difference"), Merchant shall conduct reconcilation and send the confirmation back to Media no later than 10:00 on the same day, which is the day when Merchant receives Successful Transaction Report.

   4. The funds credited to Merchant have been deducted with Service Fee per Transaction which is the rights of Media and Payment Channel Provider.

   5. Complaints shall be submitted by Merchant through Media to Payment Channel Provider and will be resolved together.

   6. The transaction fund credit shall be carried out by Media to Merchant, in accordance with the provisions of the transfer of funds from each Payment Channel Provider. In the event of a Difference, the transaction fund credit shall be carried out by Media to Merchant after Media receives the reconciliation results from Merchant.

Note: - Faspay referred to herein is a brand of the facilities and services provided by Media.

1. Standard Operating Procedure for Transaction Flow:

   

1. 1. The methods of transferring funds, Transaction settlement, and reconciliation as stipulated in this Standard Operation Procedure (SOP) are applied to Transaction that using the method of transferring funds directly from Payment Channel Provider to Merchant, for the following types of payment methods/channels:

      1. BCA VA (DIRECT)

      2. BCA KLIKPAY

      3. BRIMO

      4. BRI VA (DIRECT)

      5. BRI Direct Debit

      6. PERMATA VA (DIRECT)

      7. KREDIVO (DIRECT)

      8. CREDIT CARD MANDIRI

      9. CREDIT CARD CIMB

      10. CREDIT CARD DANAMON

      11. CREDIT CARD BCA

   2. Payment Channel Provider shall credit the transaction funds to Merchant on the same day as the transaction day (D+0), except for credit card Payment Channel Provider which shall be made (D+2) after the transaction day.

   3. The funds credited to Merchant have been deducted with Service Fee which is the right of Payment Channel Provider.

   4. Successful Transaction Report shall be sent by Media on the next working day after the transaction day (D+1) no later than 8:30 WIB (Western Indonesia Time / GMT+7).

   5. Merchant shall conduct reconciliation and send the confirmation back to Payment Channel Provider.

   6. Transaction status sent in real-time to the Merchant after the Transaction is carried out by the User, if there is a discrepancy between Transaction status provided by the Media to the Merchant and Settlement fund received by the Merchant from Payment Channel Provider, Merchant may submit a claim to Media for the discrepancy or dispute Transaction status no later than 3 (three) Business Days since the Transaction date status was received by the Merchant.

   7. Complaints shall be submitted by Merchant directly to Payment Channel Provider and Media to be resolved together.

2. Payment Procedure for Service Fee which is the Rights of Media

   1. Service Fee to which is the rights of Media be billed through an invoice sent automatically via system to Merchant's email on the date 8th of the following month which falls on a working day. If the date 8th falls not on a business day, the invoice shall be sent on the next business day. The due date for payment of the invoice by Merchant is a maximum at the date 25th of the same month as the invoice sending date.

   2. The amount of the fee bill every month shall be adjusted to the number of transactions that occur between Merchant and Payment Channel Provider which is recorded in the transaction data for 1 (one) month multiplied by Service Fee per transaction.

   3. The Parties hereby agree that in the event that Payment Channel Provider makes corrections to the transaction data that has been sent by Payment Channel Provider’s system, the Parties shall make adjustments to the excess or lack of payment in the following month. The adjustment as referred to in this paragraph does not delay Merchant's obligation to keep making payments of Service Fee to Media on the invoice submitted by Media to Merchant.

   4. Payment of Service Fee shall be made by Merchant to Media in accordance with the instructions on the invoice sent by Media.

   5. If the payment referred above is due, and Merchant does not complete the payment, then Media is entitled to temporarily suspend PIAS Service, not to carry out its obligations as referred to in this Agreement (without notification), and/or other actions that is deemed necessary by Media, until the payment of Service Fee is paid in full amount by Merchant.

3. Note: - Faspay referred to herein is the brand name of the facilities and services provided by Media.

In using the PIAS Service, Merchant is prohibited to conduct the following actions:

1. Conduct Transaction that violates Prevailing Regulations.

2. Charge any surcharge to the User for a Transaction that has been made.

3. Conduct Transaction that do not meet the terms set forth in the Agreement or Payment Gateway Service Terms and Conditions.

4. Transfer PIAS Service along with the type of payment methods/channels that have been used (including re-aggregate PIAS Service) without the prior written consent of Media.

5. Conduct business activities or businesses that are included in the Negative Business List as stipulated in this Operational Terms.

6. Conduct and/or receive Transaction that is not included in the type of business owned by Merchant and which have been previously registered to Media during the KYC process.

7. Refuse Transaction requests for certain Payment Channel Provider without justifiable reasons.

Regarding the type of Credit Card payment method/channel, Merchant is required to comply with the following conditions:

1. Merchant shall not charge additional fees to their Customers related to the use of PIAS Service.

2. Merchant engaged in the business of selling non-digital goods or services, including but not limited to Merchant engaged in providing aviation services, hospitality, online ticket purchases, and bookstores; then the following provisions apply:

   1. Merchant shall identify and verify User who hold printouts /soft copies of proof of transactions to ensure the correctness and validity of online transactions.

   2. In the event of a Transaction that is indicated to be fraud and/or other criminal acts, Merchant shall check and submit to Media the print-out / soft copy of the transaction evidence held and owned by their User as proof that there has been a purchase of goods and / or services and User warrants that the document can be used as valid and perfect evidence both inside and outside the court.

3. Merchant shall not make any cash withdrawals using cards and/ or make cash refunds to their Customers and / or solve the value of e-commerce transactions using cards.

4. Merchant shall not act as payment service providers for other merchants.

5. Merchant is responsible for the procurement, provision, care, maintenance, and monitoring of their websites.

6. In the event that Merchant's website is managed by a third party, Merchant shall obtain prior written approval from Media and Merchant is obliged to provide the third party's data to Media.

7. Merchant shall allow Media (including other third parties appointed by Media), with prior written notice no later than 1 (one) working day, to conduct inspections, internal and external audits, visit their respective business locations, in order to check the state of business and / or their respective websites including not limited to viewing assets, daily operational transactions, bookkeeping records, checking compliance with minimum standards that is required, website security level, e-commerce payment system integrated into their respective websites to always be in good condition and maintained.

8. Merchant promise not to create, organize, modify, or run other websites and / or other artificial e-commerce payment systems that violate the intellectual property rights of any party based on the provisions of Prevailing Regulations.

9. Merchant shall not make efforts or try to make efforts to crack code, hacking, cracking, virus penetration, use of software, shareware, freeware, or create fake / imitation websites that aim to interfere with / damage the e-commerce payment system and / or know and / or store payment data inputted by the Customer on the website, unless data storage is carried out in accordance with PCI-DSS standards, related to the protection and confidentiality of such data.

10. Merchant shall use and implement FDS.

11. Merchant shall have a Standard Operating Procedure (SOP) that regulates monitoring, prevention, and/or detection of fraud; have monitoring, fraud prevention, and data theft systems in e-commerce transactions; including but not limited to Customer data protection and encryption policies, installation and configuration of firewalls, antivirus updates, and Merchant shall comply with the provisions applied by Media related to the use of User IDs and special passwords for access and transactions, regular security system testing, periodic monitoring of business flows, velocity checking, negative list databases, checking internet protocol (IP) addresses and transaction trends from Customers or  any other provisions that Media stipulates from time to time.

12. Media cannot be held liable for losses suffered by Merchant if it is proven that the card used for e-commerce transactions by the Customer is a fake / stolen card / the result of a criminal act. Especially for 3D secure transactions, liability shall be transferred to the card issuing bank, with reason codes from the Customer as follows:

    1. Fraudulent multiple Transaction;

    2. Counterfeit Transaction;

    3. Unauthorized Transaction (no authorization);

    4. The validity period of the card is expired (expired card);

    5. Transaction not recognized;

    6. and other codes as per the provisions of the CARD BRAND HOLDER.

13. Merchant shall comply with and comply with all provisions of the regulations of the bank, bank Indonesia, CARD BRAND HOLDER, and applicable laws and regulations.

14. Media is entitled to charge back to Merchant, all penalties imposed by CARD BRAND HOLDER / bank against Media for e-commerce transactions made through Merchant's website if it is proven that there is a mistake from Merchant.

15. Merchant shall release Media and bank from all requests, suits, compensations, claims, complaints, and/or lawsuits; in the event of damage or disruption to Merchant's website caused by interconnection and installation related to this Credit Card Service.

1. Credit Card Service Chargeback (hereinafter referred to as "Chargeback") is a request for a cardholder limit refund through the credit card issuing bank due to suspected / problematic / illegal / fraud services and goods transactions carried out by merchants a maximum of 180 (one hundred and eighty) calendar days after the date the Transaction is made.

2. The Parties agree that Chargeback may only be made in the event of any of the provisions referred to below:

   1. The cardholder denies having made a transaction;

   2. The Customer does not accept goods and / or services purchased from Merchant;

   3. The Customer is dissatisfied with the goods and / or services received from Merchant or the goods and / or services received by the Customer are not in accordance with the specifications that have been promised between the Customer and Merchant, thus stating an official complaint to the bank, so that the Customer's funds are returned;

   4. It is known that the transactions carried out by the Customer are transactions that are contrary to Prevailing Regulations;

   5. It is known that there is a misuse of credit cards against transaction made by Merchant (elements of fraud); or

   6. Other conditions that can be used as the basis for Chargeback in accordance with the provisions of VISA / MasterCard and / or other payment system service providers and / or other provisions that apply in the credit card industry and / or other authorized institutions.

3. In Chargeback conditions, after notification from Media, Merchant has the following obligations:

   1. Take full responsibility for all transactions that have the potential to chargeback and are willing to pay Chargeback including fines and/or fees charged by VISA/ MasterCard and/or other payment system service providers for Chargeback and release Media from responsibility for any claims, suits, and/or demands in connection with Chargeback;

   2. Provide proof of transaction and/or other support related to Chargeback transaction no later than 7 (seven) calendar days from the notification submitted by Media;

   3. Paying off the chargeback transaction bills including fines and / or fees charged by VISA / MasterCard and / or other payment system service providers, to Media no later than 7 (seven) calendar days; and

   4. Take the necessary measures to prevent and/or reduce the number of Chargeback transactions.

4. In the event of Chargeback transaction, Media is entitled to the following:

   1. Delaying or canceling settlement funds to Merchant in the value of Chargeback transaction, and in this case, Merchant authorizes Media who cannot be withdrawn at any time to deduct funds for transaction bills that should be devolved to Merchant both related to Credit Card Services and other Services (worth the amount of chargeback transactions);

   2. Billing the payment of Chargeback transaction to Merchant if the funds are not available and / or insufficient for the total value of Chargeback transaction with the deadline for repayment of Merchant a maximum of 7 (seven) calendar days from the notification from Media.

   3. Temporarily suspend the Credit Card Service to Merchant if there is Chargeback (with or without notice), until changes and / or improvements have been made by Merchant to prevent and / or reduce Chargeback transaction; and/or

   4. Closing the Credit Card Service to Merchant (with or without notice) in the event of Chargeback that violates the provisions regulated by the bank, VISA / Mastercard, and / or other payment system service providers, and / or based on Media’s policies.

5. Merchant agrees to cooperate in Chargeback simulation by providing proof of transaction and/or other support related to Chargeback simulation.

Merchant who registers to use PIAS Service shall not fall under the criteria for prohibited industries, which includes the following:

1. Industries engaged in the field of pornography and pornographic services or containing adult content, including nightclubs.

2. P2P Lending business that does not have a license from or is registered with OJK.

3. Businesses that have a relationship with PEP.

4. Businesses that sell rifles.

5. Military business or organization.

6. Adult goods supporting sexual activities, including but not limited to strong drugs, stimulants, sex toys, adult medicines except for medical devices (contraceptives) that are allowed to be traded by Prevailing Regulations in Indonesia.

7. Selling dangerous goods. Such as: weapons.

8. Gambling, lottery, and/or betting businesses.

9. Merchant who sells alcohol drinks without a permit, such as SIUP MB or e-retail permits from BKPM; and a special permit for each alcohol beverage sold.

10. Businesses that mostly sell counterfeit products or products that violate copyright or other Intellectual Property Rights.

11. Selling illegal drugs such as drugs, narcotics, psychotropics, as well as drugs that are not registered with the health office and BPOM.

12. Goods and/ or services that contain content with material dishonesty, fraud, or misleading others. (For example, mystical or superstitious things (Amulets, objects that are claimed to have supernatural powers and provide supernatural powers), deceive, money laundering services, document forgery services (diplomas, certificates, doctor's letters, receipts, and so on).

13. Merchant that sells living things. Animal husbandry, adoption, custody, etc. if you do not have a permit from the Ministry of Environment and Forestry.

14. Businesses that trade protected plants and/or animals.

15. Buyers club.

16. Internet pharmacies that sell medicines with a doctor's prescription (drugs with the K logo) without having a Pharmacy license or an appointment letter from a Pharmacy. As for Merchant who sell general medicines, herbal medicines, it is still possible as long as they have a BPOM permit or equivalent.

17. Virtual currency marketplace business or digital assets that do not have permission from Bappebti.

18. Provides an e-money / e-wallet system with an open loop model.

19. Businesses that are specifically prohibited by the Applicable Regulations in Indonesia (illegal businesses).

20. Businesses that provide loan services (lending business) without a license, registered letter, or recorded letter from the OJK.

21. Forex, money market investment, and capital market without permission or registered letter from OJK.

22. Businesses that sell toxic and harmful chemicals.

23. Businesses that sell electronic products from the "black market".

24. Businesses that are required to have SNI, but do not comply with it. For example: gas stoves, helmets, etc.

25. Pyramid scheme business.

26. Businesses that sell organic products. Where Merchant claims that the process is carried out organically but does not have an organic certificate. Including Merchant who sell illegal organic products such as magic mushrooms, marijuana, etc.

27. Money changer.

28. Both conventional and e-cigarettes (vapes) that do not have the following permit requirements:

    1. Permission from the Directorate General of Customs and Excise (if imported)

    2. API Permission from the Ministry of Trade or OSS (if imported)

    3. SIUP for Cigarette Trading Business / Tobacco Processing Business

29. Merchant who has business activities or legal entities established in countries listed on the OFAC sanction list.

30. Merchant related to negative news and involved in crimes related to:

    1. Corruption

    2. Bribery

    3. Narcotics

    4. Psychotropics

    5. Labor smuggling

    6. Migrant smuggling

    7. Crimes in the field of banking

    8. Crimes in the field of capital markets

    9. Crimes in the field of insurance

    10. Customs

    11. Excise

    12. Human Trafficking

    13. Illegal arms trade

    14. Terrorism

    15. Abduction

    16. Theft

    17. Embezzlement

    18. Fraud

    19. Money Counterfeiting

    20. Gambling

    21. Prostitution

    22. Money Laundering

For assessment of negative news, it shall be considered based on the following factors:

• Name, place and date of birth, address, occupation (to determine whether the match is positive or not)

  Confirmation of the name found on the negative news with the name contained on the identity document is a match. Check the information of the place and date of birth on the news, if the name and place and date of birth match, it can be confirmed that the match is positive. Additional information such as address and occupation may also be used.

• Subject status (Suspect, defendant, eyewitness, in custody, and others). Each status has a different level of risk acceptance.

• Case status (ongoing, dismissed, completed, and more)

• Case period (date/month/year).

• Court verdict

Note:
The Payment Channel Provider is entitled to make changes at any time to the maximum and minimum Transaction limit provisions above.

1. Fraud, Act of Abuse or Suspicious Transactions:

   1. Media is entitled to limit, block, or close the access of the parties involved in indications or events to the Open API Payment.

   2. Media is entitled to delay or not process Transactions that are indicated or constitute as Fraud, Act of Abuse or Suspicious Transactions.

   3. Media is entitled to do a Temporary Suspension, if there are indications or events of Fraud, Act of Abuse or Suspicious Transactions.

   4. Merchant shall carry out instructions from Media and coordinate with Media to follow up on indications and/or occurrences of Fraud, Act of Abuse or Suspicious Transactions. The instructions referred to include but are not limited to: (i) withholding User transfer of funds to another User (unless otherwise stipulated by Prevailing Regulations); (ii) withhold delivery of goods or services to User; and/or (iii) conduct investigations of User who are indicated or proven to have committed or been involved in Fraud, Act of Abuse or Suspicious Transactions.

   5. Merchant shall take the necessary actions to stop the potential occurrence of Fraud, Act of Abuse or Suspicious Transactions or the continuation of Fraud, Act of Abuse or Suspicious Transactions that occur or prevent potential losses or further losses, by coordinating with Media.

   6. The Parties shall take preventive measures to prevent the recurrence of similar incidents.

   7. Media is entitled to withhold Settlement fund transfers to Merchant or cut Settlement funds for Merchant who are indicated or proven to have committed or been involved in Fraud, Act of Abuse or Suspicious Transactions.

   8. Media is entitled to request and obtain accountability from Merchant for losses arising from the negligence or mistakes of Merchant in maintaining the security of the execution of Transactions and acceptance of Transactions carried out based on cooperation, including, but not limited to; request and obtain material compensation directly from Merchant for losses suffered by Media or deduct Settlement funds for compensation.

2. Data Leakage: The handling of Data Leakage incidents is carried out based on the source of the Data Leakage as follows:

   1. Data Leakage due to disturbances in the system, among others, is carried out by means of a mechanism to limit the impact of incidents so that they do not spread, namely by at least:

      1. stop unauthorized access to hacked data, systems, networks or applications;

      2. isolate affected data, systems, networks, or applications;

      3. carry out the implementation of the recovery strategy that has been determined; and

      4. take preventive measures to prevent the same incident from recurring.

   2. Data Leakage due to human factor, among others, is carried out through a mechanism in accordance with the provisions that apply to each Party while regarding Prevailing Regulations.

   3. In the event that there is an incident of Data Leakage, Media is entitled to do a Temporary Suspension.

3. Reporting and Notification: Execution of reporting and notification of Security Incidents and Suspicious Transactions is carried out in accordance with the provisions of the governance guidelines stipulated in the Prevailing Regulations regarding SNAP.

   Merchant shall monitor and be aware of patterns of transactions and/or Suspicious Transactions carried out through the PIAS Service and shall notify to Media immediately after an incident no later than 3x24 hours.

This Operational Terms is an English version of Ketentuan Operasional Layanan Gerbang Pembayaran that can be accessed in the following link: https://faspay.co.id/id/ftnc-ops-business-billing/ ("Bahasa Indonesia Version"). In compliance with the Law of the Republic of Indonesia No. 24 of 2009 dated July 9, 2009 regarding Flag, Language, Coat of Arms and Anthem and its implementing regulations (the “Law No. 24“), the Parties agree that the Bahasa Indonesia version of this Operational Terms shall be treated as an integral and inseparable part of the English version. In the event of any ambiguity, inconsistency or difference of interpretation between the Bahasa Indonesia Version and the English version, the Bahasa Indonesia version shall prevail, and Merchant is encouraged to refer to the Bahasa Indonesia version. Each Party further agrees that neither Party shall in any manner or forum, or in any jurisdiction, challenge the validity of, or raise or file any objection to, this Operational Terms contemplated herein on the basis of non-compliance with Law No. 24.