Security Policy

1. 256-Bit SSL / TLS Encryption

Every connection made between your web browser or mobile application and Smart Shop servers is encrypted with high-grade 256-Bit SSL (Secure Sockets Layer) encryption. This ensures all sensitive data, including login passwords, credit/debit information, and KYC files, cannot be intercepted by third parties during transmission.

2. Transaction PIN & Multi-Factor Authorization

To safeguard member funds against unauthorized transfers:

• A secondary 4-digit Transaction Security PIN is mandatory for wallet balance transfers, voucher redemptions, and bank withdrawal requests.
• Even if an unauthorized party gains access to your login credentials, wallet balances cannot be transferred or withdrawn without your unique Transaction PIN.
• Members are advised never to write down or share their Transaction PIN with anyone, including Smart Shop staff.

3. KYC Verification & Anti-Money Laundering (AML)

To maintain a secure and compliant ecosystem:

• Every member account requesting wallet withdrawals must submit clear government-issued identity documents (Aadhaar & PAN) and verified bank account documents.
• All KYC submissions are strictly cross-checked and approved by our compliance security team.
• Suspicious financial transactions or irregular downline turnover are flagged by automated risk triggers for manual review.

4. Infrastructure & Server Hardening

Our platform runs on hardened cloud servers configured with:

• Real-time Web Application Firewalls (WAF) to prevent DDoS, SQL injection, and cross-site scripting (XSS) attacks.
• Automated daily encrypted database backups stored in geo-redundant storage.
• Strict role-based access control (RBAC) ensuring only authorized administrative personnel can access backend controls.

5. User Security Responsibilities

Help us keep your account safe by following these vital recommendations:

• Create a strong, unique password comprising uppercase letters, numbers, and special characters.
• Never share your password, OTP (One-Time Password), or Transaction PIN with anyone.
• Always check that you are on the official Smart Shop website before entering your login credentials.
• Report any suspicious account activity immediately to our security response team.