This Privacy Policy explains how RAPIDPAYMENTS TECHNOLOGIES (PRIVATE) LIMITED (“RapidGateway”, “we”, “us” or “our”) collects, uses, shares, protects and keeps personal information when you use the RapidGateway mobile app (the “App”), the rapidgateway.pk website (the “Website”) and the merchant web portal on the Website (the “Portal”). It also explains your choices and how to delete your account.
Key points
- The App is for businesses that use RapidGateway to accept payments, and for the people those businesses authorize to use their merchant account. You must be 18 or older to use it.
- You sign in with your business email and password. You can also register a new business in the App. Registration asks for your name, business email, mobile number, CNIC number and city, and, if you choose, your website and expected monthly volume.
- The App shows information from your merchant account: payments, settlements, payouts and notifications. It does not take payments or move money, and it does not use your location, camera, photos, files or contacts.
- RapidGateway is not a bank. In Pakistan, payments to merchants are processed through banks, mobile wallet operators and payment service providers licensed by the State Bank of Pakistan (SBP). Other payment methods offered on the Website, such as USDT on the TRON network and payments in Qatar, are processed by the respective providers under the rules that apply to them (see section 1).
- We do not sell personal information. The App shows no ads and contains no advertising, analytics or crash-reporting tools. The Website and the Portal use a Google Ads tag, which sets cookies, to measure our advertising (see section 3.9).
- You can delete your account in the App (More › Privacy › Delete account) or at https://rapidgateway.pk/delete-account. The law requires us to keep some records for some time after an account is closed (see section 10).
1. Who we are
RAPIDPAYMENTS TECHNOLOGIES (PRIVATE) LIMITED is a company registered in Pakistan. You can find us at our office at A-601, Sumaira Sky Tower, Gulzar-e-Hijri, Scheme 33, Karachi, Pakistan. We develop and operate the App, the Website, the Portal and the RapidGateway payment gateway, which lets businesses accept online payments (https://rapidgateway.pk). We are responsible for the personal information we collect through the App, the Website and the Portal.
RapidGateway is a technology platform, not a bank. In Pakistan, the payments that customers make to merchants, and the settlements and payouts we make to merchants, are processed through banks, mobile wallet operators and payment service providers licensed by the SBP (“licensed partners”). Where the Website offers other payment methods, they are processed by the respective providers under the rules that apply to them: payments in Qatar go through a payment service provider licensed by the Qatar Central Bank, and USDT payments on the TRON network (TRC-20) are made on the public TRON blockchain. When a licensed partner or another payment provider uses information to provide its service, it also follows its own privacy notice and legal duties.
USDT payments are recorded on the public TRON blockchain, with the sending and receiving wallet addresses, the amount and the transaction hash. Anyone can see these records, and nobody, including us, can change or delete them.
For any privacy question, email contact@rapidpay.pk. Our website support address, support@rapidgateway.pk, receives the messages sent through the Website’s contact form, and you can write to it too.
2. Who this policy covers
- Merchants: businesses that use RapidGateway, and the people they authorize to use the merchant account, for example as an admin, manager or auditor.
- People who register a business in the App or on the Website, including people whose registration is not completed or not approved.
- Visitors to the Website, including people who send us a message through its contact form.
- Customers of merchants and people who receive payouts: the App shows a merchant some details of the payments made to it and the payouts it makes. Section 3.5 explains this.
This is the privacy policy for the RapidGateway mobile app, the rapidgateway.pk website and the merchant web portal. Your merchant account is the same account you use in the App and in the Portal. Sections 3.1 to 3.8 describe what the App collects, section 3.9 describes what the Website and the Portal collect, and the rest of this policy explains how we handle all of it.
3. Information we collect
We collect information you give us in the App, on the Website and in the Portal, technical information that the App, the Website and our servers need to work, information collected by the Google Ads tag on the Website and the Portal, and information about the payments processed for your business.
| Type of information | Examples | Why we use it | Shared with |
|---|---|---|---|
| Sign-in | Business email address and password; the session token our servers issue when you sign in | Sign you in, keep you signed in and protect your account | Not shared |
| Business registration (only if you register in the App) | First and last name, business email, mobile number, CNIC number, city; if you choose, website and expected monthly volume in PKR | Create your merchant account, contact you about your application, send you a welcome SMS when you activate your account, verify your identity and business, prevent fraud, and keep the records our licensed payment partners need to meet their anti-money-laundering obligations | Licensed partners, as needed to approve and run your merchant account; our email delivery provider (to send your verification link); our SMS delivery provider, httpSMS (your first name and mobile number, to send the welcome SMS) |
| Notifications | Notification token and Firebase installation ID created on your phone; the platform (“Android”) | Send payment and account notifications to your phone | Google (Firebase Cloud Messaging), as our service provider |
| Activity in the App | What you search for and the filters you choose on the Transactions and Payouts screens; the transaction or notification you open; notifications you mark as read | Show you the results and details you ask for, and keep your unread count right | Not shared |
| Technical | IP address, date and time and the request made, recorded by our servers; standard request information received by Google when the App downloads its font | Security, preventing misuse and fixing problems | Our hosting and security providers; Google Fonts (font download only) |
| Website and Portal | What you type in the contact and sign-up forms; information you add in the Portal, including LeadRadar searches; cookies and visit information collected by the Google Ads tag; IP address and requests recorded by our servers | Answer you, open and run your merchant account, provide the Portal’s features, measure our advertising, security and fixing problems | Google (Google Ads, Google Fonts and the Google News button script); Cloudflare (cdnjs); CoinGecko (USDT to PKR rate); Anthropic (LeadRadar, with your own Anthropic API key); our hosting, email delivery, SMS delivery (httpSMS) and security providers |
3.1 Signing in
- You sign in with the business email and password of your merchant account. The App sends them to our servers over an encrypted connection so that we can check them. The App does not save your password on your phone.
- When you sign in, our servers send back a session token and the details of your user profile and merchant account. The App keeps these on your phone (see section 3.7) so that you stay signed in.
- The App does not use SMS codes, fingerprints or face recognition to sign you in.
3.2 Registering a business in the App
If you do not have a merchant account yet, you can register your business in the App. We collect:
- Your first and last name.
- Your business email address. We send a verification link to it, and it becomes the email you sign in with.
- Your mobile number. It is also used as your user ID on our platform. When you activate your account, by verifying your email and setting your first password, we send a welcome SMS to this number. It greets you by your first name, tells you that your account is ready and tells you how to get the App and reach us on WhatsApp. We send it through our SMS delivery provider, httpSMS (
api.httpsms.com), which receives your first name and mobile number for this purpose. - Your CNIC number. We use it to verify the identity of the people behind a merchant account, and we keep it with your identity records so that our licensed payment partners can meet their obligations under applicable Pakistani law, including the Anti-Money Laundering Act, 2010.
- Your city, which you choose from a list. The App does not use your phone’s location.
- If you choose to give them: your business website and your expected monthly payment volume in PKR. We use them to understand your business and to assess risk.
Full business verification is done on the RapidGateway web portal, not in the App. There you give us details and documents such as your NTN, company registration documents, the CNICs of directors or owners and the bank account we pay your settlements to. That information becomes part of your merchant account, and sections 7 to 12 of this policy apply to it.
3.3 Notifications
- To deliver notifications, Google’s Firebase Cloud Messaging service creates a notification token and a Firebase installation ID on your phone. These identify the App on your phone, not the phone’s hardware: they are not your IMEI, Android ID or advertising ID. To deliver messages, Firebase also receives the App’s version and basic platform and software version information.
- After you sign in, and each time the App starts while you are signed in, the App sends the notification token and the platform (“Android”) to our servers. We link the token to your user account so that payment and account notifications reach your phone.
- When you sign out, the App asks our servers to remove that token, so a shared or sold phone stops receiving your business’s notifications.
- Notifications are also listed in the App’s Notifications screen. You can turn push notifications off in your phone’s settings at any time.
3.4 Your activity in the App
- When you search or filter transactions or payouts, the App sends what you typed (for example a transaction ID or a customer’s mobile number) and your filters (status, date range, live or test payments) to our servers, to fetch the matching results.
- When you open a transaction or a notification, the App asks our servers for its details. When you open a notification or mark notifications as read, the App tells our servers, so that your unread count is right on all your devices.
- We do not use analytics tools to track how you use the App.
3.5 Information the App shows you
The App displays information that is already in your merchant account. It comes from your registration, your business verification and the payments processed for your business, not from your phone. Depending on your role, the App can show:
- Business and profile details: merchant ID, business name and type, website, business address and city, onboarding status, and your name, email, mobile number, CNIC number and role.
- Transactions: amount, status, payment channel, dates, the reason a payment failed, and, where the payment includes them, the customer’s mobile number, email address and customer ID.
- Settlements and payouts: amounts collected, settled and refunded; payout history, including the receiving bank, account number, account title and mobile number of each payout.
- Notifications about your payments and account.
- API credentials (for approved merchants): the keys your website or app uses to connect to RapidGateway. Anyone who has them can use your merchant account’s API, so do not screenshot or share that screen.
For merchants: please use the information about your customers and payout recipients only to provide your goods or services and to handle questions about the payment, and keep it confidential.
If you paid a business that uses RapidGateway, or received a payout from one: we process your payment details to carry out the payment for that business, with our licensed partners, and to meet our legal duties. The business can see the details listed above. For questions, contact the business or email us at contact@rapidpay.pk.
3.6 Technical information
- When the App connects to our servers, the servers record technical information such as your IP address, the date and time and the request made. We use this for security, to prevent misuse and to fix problems.
- The App downloads its typeface from Google Fonts (
fonts.gstatic.com). Like any web request, this gives Google your IP address and standard request information. No information from your account is sent.
3.7 Information kept on your phone
- The App keeps your session token and the user profile and merchant account details that our servers return at sign-in (for example your name, email, mobile number, CNIC number, role and business details) in the App’s private storage on your phone. It also remembers your light or dark theme and whether you have seen the introduction screen.
- When you sign out, the App deletes the session token and the profile and merchant details from your phone. Uninstalling the App, or clearing its storage, removes everything.
3.8 Information we do not collect
- The App does not access your location, camera, microphone, photos, files, contacts, SMS messages or call logs.
- The App does not read your phone number, IMEI, Android ID or other hardware identifiers, and it does not use your phone’s advertising ID.
- The App contains no advertising, analytics, crash-reporting or biometric tools.
- The App does not take payments and does not ask for card or bank account details.
3.9 The Website and the Portal
- Contact form. When you send us a message through the contact form, we collect your name, email address and message, and, if you give them, your company, phone number, type of business and subject. Our servers email your message to our support team at support@rapidgateway.pk, and we use it to answer you.
- Sign-up form. When you register a business on the Website, we collect your first and last name, phone number, CNIC number, city, business email, expected monthly volume in PKR and website, and anything else you choose to tell us. We use this information as described in section 3.2, and we email a verification link to your business email.
- The Portal. You sign in to the Portal with your business email and password. In the Portal you complete business verification (section 3.2), and you can add information about other people, for example the customers you send invoices to, the leads you manage, the people you send payouts to and the users you add to your merchant account. We process that information for your business, to provide the services you use. Messages you type to Rapi, the Portal’s built-in assistant, are processed by our servers to answer you. If you use LeadRadar, the Portal’s AI store-discovery feature on the Leads tab, our servers send your search query and the country you choose to Anthropic (
api.anthropic.com), using the Anthropic API key you saved in the Portal’s settings, and Anthropic searches the web for matching online stores. Anthropic handles these requests under your own account with Anthropic and its policies, so please do not type personal information into a LeadRadar search. The Portal keeps your sign-in session and some settings in your browser’s storage. Signing out removes your session from the browser. - Google Ads tag. Apart from this policy, our account deletion page and our password-reset and account-activation pages, every page of the Website and the Portal loads Google’s tag (
gtag.js) for our Google Ads account. The tag sets cookies in your browser and sends Google information about your visit, such as the page you open, your IP address, your browser and the date and time. We use it to measure whether our ads bring people to the Website and lead them to sign up. Google uses this information under its own policies: see how Google uses information from sites that use its services. You can block or delete cookies in your browser’s settings, and you can manage the ads Google shows you at https://myadcenter.google.com. - Fonts, icons and scripts from other providers. Pages of the Website and the Portal (other than this policy and our account deletion page) load fonts from Google Fonts (
fonts.googleapis.comandfonts.gstatic.com) and icons and a script from cdnjs (cdnjs.cloudflare.com, run by Cloudflare). Apart from our password-reset and account-activation pages, they also load a Google script (news.google.com) that shows a “preferred source” button on our articles. Like any web request, this gives those providers your IP address and standard request information, such as your browser and the address of our website, and they may use cookies under their own policies. We do not send them information from your merchant account. - USDT to PKR rate. Our USDT to PKR converter page (rapidgateway.pk/usdt-to-pkr) asks CoinGecko (
api.coingecko.com) for the current rate directly from your browser. This gives CoinGecko your IP address and standard request information, such as your browser and the address of our website. The amounts you type into the converter stay in your browser and are not sent to CoinGecko or to us. - Server logs. When you visit the Website or use the Portal, our servers and hosting providers record technical information such as your IP address, your browser, the page or request and the date and time. We use it for security, to prevent misuse and to fix problems, and keep it as described in section 10.
4. How we use information
- To provide the App, the Website, the Portal and your merchant account: sign you in, show you your payments, settlements, payouts and notifications, and send notifications to your phone.
- To open and review merchant accounts: register your business, verify the identity of the people behind it and the business itself, and decide whether to approve it.
- To keep your account and our services safe: protect sign-in, detect and prevent fraud and misuse, and investigate security issues.
- To support legal and regulatory compliance: collect and keep identity and transaction records so that our licensed payment partners can meet their obligations under applicable Pakistani law, including the Anti-Money Laundering Act, 2010, and cooperate with lawful requests from authorities.
- To contact you: send your verification link, a welcome SMS when you activate your account, account and security messages, information about your application, and notice of important changes to this policy. We do not send marketing messages. If we want to start, we will ask for your consent first, and you will be able to opt out at any time.
- To help you: answer questions and handle complaints and disputes.
- To measure our advertising: use the Google Ads tag on the Website and the Portal to see whether our ads bring people to the Website and lead them to sign up (section 3.9).
- To fix and improve our services: use technical information, combined or anonymized where possible, to find errors and improve the App, the Website and the Portal.
5. Legal basis and consent
We use your personal information only when we have a lawful reason to:
- Contract: to provide the RapidGateway services your business has asked for.
- Legal requirements: to collect and keep identity and transaction records so that our licensed payment partners can provide their services to your business and meet their obligations under applicable Pakistani law, including the Anti-Money Laundering Act, 2010, and to cooperate with lawful requests from authorities.
- Consent: for push notifications. You can withdraw consent at any time in your phone’s settings. We may still need to keep information that the law requires us to keep.
- Legitimate interests: to keep our services secure, prevent fraud, improve the App, the Website and the Portal, and measure our advertising, in ways that do not override your rights.
6. App permissions
You can see and change the App’s permissions at any time in your phone’s Settings › Apps › RapidGateway. (Older versions installed from our web portal are labelled “Rapid Pay” on the phone.)
| Permission | When | What it is used for | If you say no |
|---|---|---|---|
| Notifications | You choose in your phone’s settings, or when the App asks | Show payment and account notifications | The App still works. You can see your notifications in the App’s Notifications screen. |
| Internet and network status | Granted automatically when you install the App | Connect to our servers over an encrypted connection | Not applicable |
| Receive notifications, keep the phone awake briefly, vibrate | Granted automatically. They are added by Google’s Firebase Cloud Messaging and the notification component. | Receive a notification and display it | Not applicable |
The App does not ask for location, camera, microphone, contacts, phone, SMS, storage or NFC permissions, and it does not need any special hardware.
7. How we share information
We share personal information only as described here, and only what each recipient needs.
- Licensed partners and other payment providers. In Pakistan, the banks, mobile wallet operators and payment service providers licensed by the SBP that process payments to your business and pay your settlements and payouts. For other payment methods offered on the Website, the providers that process them, such as the payment service provider licensed by the Qatar Central Bank for payments in Qatar. They receive what they need to approve and run your merchant account with them, process and settle payments, prevent fraud and meet their own legal duties.
- People your business authorizes. Users your business adds to its merchant account can see the account’s information that their role allows.
- Service providers who work for us. Cloud hosting and data storage, email delivery (for verification links and notices), SMS delivery through httpSMS (your first name and mobile number, for the welcome SMS when you activate your account), Google Firebase Cloud Messaging (for notifications), and security and support tools. They may use the information only to provide their service to us, under contract, and must protect it.
- Google and the other providers whose tools the Website and the Portal load: the Google Ads tag, the fonts, icons and scripts, and the CoinGecko rate service described in section 3.9. Google uses the information it receives through the Google Ads tag under its own policies.
- Anthropic, only if you use LeadRadar in the Portal: your LeadRadar search query and the country you choose, sent with your own Anthropic API key (section 3.9).
- Authorities. The SBP, the Financial Monitoring Unit, tax authorities, law enforcement agencies and courts, when the law requires it or to answer a valid legal request, and when needed to protect the rights, property or safety of our users, the public or us.
- Professional advisers and auditors, who must keep the information confidential.
- A new owner of our business, if we are involved in a merger, acquisition or sale of assets. The new owner must keep protecting your information as this policy describes.
- Anyone else, only with your consent.
We do not sell or rent personal information, and we do not share it with data brokers. Apart from the Google Ads tag described in section 3.9, we do not share it with advertising companies.
8. Where information is stored
Your information is stored and processed on secure servers run by our cloud hosting providers. Some of our service providers and servers are located outside Pakistan. When information is transferred outside Pakistan, we take steps, including contracts with our providers, to keep it protected as this policy describes and as applicable Pakistani law and the rules that apply to our licensed payment partners require.
9. How we protect information
- The App connects to our servers only over encrypted connections (HTTPS/TLS). It refuses unencrypted connections.
- Your password is checked by our servers and is not stored on your phone. Signing out removes your session from the phone.
- Access to merchant information depends on the user’s role, in the App, in the Portal and on our servers.
- Only staff and service providers who need personal information for their work can access it.
- We use firewalls and monitoring to protect our systems and to detect unusual activity.
- If a security breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires.
No system is completely secure. Please help protect your account: keep your password and API credentials secret, lock your phone, and sign out on shared phones. RapidGateway staff will never ask you for your password or your API secret key.
10. How long we keep information
We keep personal information only as long as we need it for the purposes in this policy, or longer if the law requires it.
| Information | How long we keep it |
|---|---|
| Identity and business verification records: your name, business email, mobile number, CNIC number, city, website and expected volume, and the details and documents given for business verification | While your merchant account is open, and after it is closed for as long as required by applicable Pakistani law (including the Anti-Money Laundering Act, 2010) and the rules that apply to our licensed payment partners, and then deleted or made anonymous |
| Transaction, settlement, refund and payout records, including the customer and payout recipient details on them | While your merchant account is open, and after it is closed for as long as required by applicable Pakistani law (including the Anti-Money Laundering Act, 2010) and the rules that apply to our licensed payment partners, and then deleted or made anonymous |
| Business and tax records: fees, settlements and invoices | After the merchant account is closed, for as long as required by tax law (including the Income Tax Ordinance, 2001) or by anti-money-laundering law, whichever is longer, and then deleted or made anonymous |
| Fraud-prevention record: the CNIC number, mobile number, business email and merchant ID of a closed account, with the reason it was closed | After the account is closed, only for as long as we reasonably need it to prevent fraud and misuse of our services, or longer if the law requires it, and then deleted |
| Notification tokens | Until you sign out on that phone, the token changes, or your account is deleted |
| Your in-app notifications and their read status | Until your account is deleted |
| Complaints, support and contact-form messages, and deletion requests | After the matter is closed, for as long as we need them to deal with any related dispute, complaint or regulator enquiry and to show how we handled it, or longer if the law requires it, and then deleted |
| Server and security logs, including searches recorded in them | For a limited period, only as long as we need them for security, preventing misuse and fixing problems, unless we need them longer to investigate a security issue or the law requires us to keep them, and then deleted |
| Backups | Deleted information can remain in backups until they are overwritten in our regular backup cycle. Backups are used only to recover from a system failure. If we ever restore one, we delete that information again. |
| Information saved on your phone | Until you sign out, clear the App’s storage or uninstall the App (your theme choice and the introduction flag stay until you clear storage or uninstall) |
| Cookies and browser storage on the Website and the Portal | Cookies set by the Google Ads tag stay in your browser for the period Google sets, or until you delete them. The Portal’s sign-in session stays in your browser until you sign out or clear your browser’s data for the Website. |
When a retention period ends, we delete the information or make it anonymous. If records are needed for an investigation, dispute or court order, we keep them until the matter is closed.
11. Your rights and choices
Subject to Pakistani law and our legal duties, you can:
- Access your information: ask for a copy of the personal information we hold about you.
- Correct your information: ask us to fix information that is wrong or incomplete. You can change most business details on the web portal; some identity and business details can be changed only after we check them again.
- Delete your information or close your account: see section 12.
- Withdraw consent and control cookies: turn notifications off in your phone’s settings, and block or delete cookies in your browser’s settings.
- Object to how we use your information.
- Complain: contact us first and we will try to fix the problem. If your complaint is about a service provided by a licensed partner or another payment provider, you can also use that provider’s complaint process and, if you are still not satisfied, escalate it to its regulator (for our licensed partners in Pakistan, the State Bank of Pakistan) as that regulator’s rules allow.
To make a request, email contact@rapidpay.pk with the subject “Privacy request”, from the business email registered on your account if you can. We will check your identity first. For example, we may ask you to confirm the request by replying from your registered business email address. We will reply within 30 days. We cannot delete records that the law requires us to keep, and we cannot share information that would reveal another person’s data or harm an investigation.
12. Deleting your account
You can ask us to delete your account and the personal information linked to it at any time:
- In the App: open the More tab and, under Privacy, tap Delete account. The App explains what deletion means, then opens our account deletion page.
- On the web: visit https://rapidgateway.pk/delete-account. Use this if you no longer have the App. You will need the business email registered on your account.
- By email: write to contact@rapidpay.pk with the subject “Account deletion request - RapidGateway app”.
We confirm that we received your request within 2 business days. We then check that the request really comes from you. We may ask you to confirm the request by replying from your registered business email address. We never ask for your password.
Before we close a merchant account: pending payments, refunds and disputes must be completed; any amount still owed to your business is settled to your registered settlement account; and any amount your business owes us must be paid. Closing a merchant account turns off its API credentials, so your website or app stops accepting payments through RapidGateway, and it ends access for every user of that account. If you are a manager or auditor on another business’s merchant account, you can ask us to delete only your own user account; the business’s merchant account stays open.
Timing: within 3 business days after we confirm your identity, we close your account, so nobody can sign in to it in the App or on the web portal. Within 30 days after we confirm your identity, we delete or anonymize your personal information, except:
- identity, business verification, transaction, tax and fraud-prevention records that the law requires us to keep. We keep these securely for the periods in section 10, use them only for legal, regulatory and fraud-prevention purposes, never for marketing, and then delete them; and
- information we need to settle a dispute or legal claim, or that a court, regulator or law-enforcement agency has told us to preserve, until that matter is closed.
We ask the companies that work for us to delete your information too, unless the law requires them to keep it. Our licensed partners and other payment providers keep their own records as their legal duties require. Records on a public blockchain, such as the wallet addresses and transaction hash of a USDT payment, cannot be deleted by anyone, including us (see section 1).
You can also ask us to delete specific information without closing your account. We will do so unless we must keep it for the reasons above.
Signing out removes your session and account details from your phone. To remove everything the App stored, uninstall it or clear its storage (Android Settings › Apps › RapidGateway › Storage › Clear storage). Uninstalling the App on its own does not delete your account.
Full details are on our account deletion page: https://rapidgateway.pk/delete-account.
13. Children
The App and the Portal are business tools for adults. They are not for anyone under 18, and registering a business requires a valid CNIC. We do not knowingly collect personal information from anyone under 18. If you think a child has given us personal information, contact us at contact@rapidpay.pk and we will delete it, unless the law requires us to keep it.
14. Other services and links
The App opens some pages in your web browser: the Portal, our developer documentation, this policy and our account deletion page. The Website links to other services, such as WhatsApp (to chat with our support team) and our pages on social networks. Your browser and any third-party services or pages you go on to visit have their own privacy policies, which this policy does not cover.
15. Changes to this policy
We may update this policy when our services or the law change. We will change the effective date at the top of this page. If we make important changes, we will tell you in the App, on the Website or by email before they take effect. You can ask us for earlier versions.
16. Contact us
RAPIDPAYMENTS TECHNOLOGIES (PRIVATE) LIMITED
A-601, Sumaira Sky Tower, Gulzar-e-Hijri, Scheme 33, Karachi, Pakistan
Email: contact@rapidpay.pk
Website support: support@rapidgateway.pk
Website: https://rapidgateway.pk