Acceptable Use Policy

About This Policy

This Acceptable Use Policy (“AUP”) sets out the rules for using Apipay’s website, API, documentation, and console dashboard (together, the “Service”), operated by PT Api Teknologi Indonesia (“Apipay”, “we”, “us”). It applies to everyone who registers for or accesses the Service, alongside our Terms of Service and Prohibited Businesses policy. A breach of this AUP is a breach of the Terms of Service and may lead to suspension or termination of your access, as described there.

Acceptable Use

You may use the Service only for legitimate business or personal transactions that comply with applicable law, including Bank Indonesia and OJK regulations, payment network rules, and anti-money-laundering (AML) requirements. You’re responsible for keeping your account information accurate, protecting your API keys and account credentials, and cooperating with any verification or review request we or our PSP partners make.

Prohibited Conduct

You may not use the Service, or help anyone else use the Service, to:

• engage in illegal activity, including money laundering, terrorism financing, or fraud
• submit, or knowingly process, a transaction you know or suspect to be unauthorized, fraudulent, or otherwise illegitimate
• probe, test, or “card” payment credentials, accounts, or API behavior to find exploitable weaknesses
• double dip during a dispute by seeking funds from both Apipay (or a PSP partner) and the paying customer for the same transaction
• route a sub-merchant’s or third party’s transactions through your account without our authorization to act as a payment aggregator
• structure or split transactions to avoid fees, limits, or review
• reverse engineer, decompile, or attempt to extract the source code of the API or console
• use the Service to build a competing product by copying our structure, documentation, or data
• use anonymizing proxies, bots, scrapers, or other automation against the Service without our permission
• unreasonably interfere with, disrupt, or overload the Service’s infrastructure, or bypass rate limits or other technical safeguards
• misuse, share, or attempt to access another party’s API credentials or account without authorization
• upload or transmit malware, or anything designed to damage or gain unauthorized access to a system
• harass, threaten, or abuse Apipay staff, PSP partners, or other users
• transact with, or for the benefit of, a person, entity, or country subject to applicable Indonesian or international sanctions

Prohibited & Restricted Businesses

Certain business categories and activities may not use the Service at all, or may require our prior approval. These are listed in full on our Prohibited Businesses page, which is part of this AUP. If you’re not sure whether your business qualifies, contact us before signing up or processing transactions.

Monitoring & Enforcement

We may review transactions and accounts, request supporting documentation, and share information with our PSP partners, Bank Indonesia, OJK, or law enforcement where we reasonably suspect a violation of this AUP. Where we find or suspect a violation, we may place a hold on related funds, suspend or limit access to the Service, or terminate your account, with or without prior notice, as described in our Terms of Service.

Reporting a Violation

If you come across a merchant or party misusing Apipay in a way that violates this AUP, report it through our Abuse Report page.

Changes to This Policy

We may update this AUP from time to time. Material changes will be announced through the Service before they take effect.

Contact

Questions about this policy can be sent to legal@apipay.id or to PT Api Teknologi Indonesia, Jl. Bintaro Raya Selatan No.8C, Kebayoran Lama Utara, Kec. Kebayoran Lama, Kota Jakarta Selatan, Daerah Khusus Ibukota Jakarta 12240, Indonesia.