Last updated: 29.10.2026
This Privacy Policy explains how IGNEELION DMCC, a company registered in the Dubai Multi Commodities Centre free zone, registration number [●], with its registered address at Unit No: BA2334, DMCC Business Centre, Level No 1, Jewellery & Gemplex 3, Dubai, United Arab Emirates, operating under the trade name HighHelp (“HighHelp”, “we”, “us”, “our”), collects, uses, shares and protects personal data.
We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”), applicable anti-money laundering and counter-terrorist financing (“AML/CFT”) legislation of the UAE and, where it applies to a particular processing activity, the EU General Data Protection Regulation 2016/679 (“GDPR”) and other local data protection laws of the countries in which we operate.
1.1. This Policy applies to personal data of:
1.2. Controller and processor roles. When we process data of Website visitors, Merchants and their representatives, we act as a data controller. When we process End User data in order to execute transactions on a Merchant’s instructions, we generally act as a processor on behalf of the Merchant, except where we process such data for our own legal obligations (for example AML/CFT screening and fraud prevention), in which case we act as an independent controller. End Users should also read the privacy policy of the Merchant they deal with.
1.3. Our services are intended for businesses only. They are not directed at individuals under 18 years of age, and we do not knowingly collect data from minors through the Website.
2.1. Data you provide via the Website. When you submit the “Get started” form or otherwise contact us, we collect: company name, company website, estimated monthly turnover range, business email address, Telegram username, and any other information you choose to share in correspondence.
2.2. Onboarding (KYB/KYC) data. Before providing services we collect information required by our onboarding and compliance procedures, which may include: corporate documents (certificate of incorporation, articles, register of directors and shareholders), licences and permits (for example gaming, brokerage or virtual asset licences), identity documents and proof of address of directors, UBOs and signatories, date and place of birth, nationality, tax identification numbers, information on source of funds and source of wealth, business model, traffic sources, target countries, expected volumes, and photographs or video taken during identity verification.
2.3. Account and communication data. Login, account settings, API keys metadata, records of support requests (including via email, Telegram and other messengers), call notes and meeting records.
2.4. Transaction data (End Users). Depending on the payment method and country: name, email, phone number, customer ID assigned by the Merchant, IP address, device and browser data, geolocation derived from IP, payment amount, currency, date and time, payment method, masked or tokenised card details, bank account, e-wallet or mobile money account details, crypto wallet addresses, and transaction status. [Confirm whether full card data is ever handled; if so, reference PCI DSS scope.]
2.5. Technical data. IP address, browser type and version, operating system, language settings, pages visited, referring URL, date and time of visit, and security signals generated by our bot-protection tools.
2.6. Data from third parties. Identity verification and KYB providers, sanctions, PEP and adverse-media screening databases, public company registers, payment providers and acquiring partners (for example fraud signals and chargeback information), and Merchants who refer End Users to us.
3.1. We process personal data for the following purposes and on the following legal bases:
Purpose
Legal basis
Responding to enquiries submitted via the Website or messengers
Steps prior to entering into a contract; legitimate interests
Onboarding Merchants, KYB/KYC checks, sanctions and PEP screening
Legal obligation (AML/CFT); legitimate interests
Providing payment acceptance, mass payouts, routing and orchestration services
Performance of contract; processing on Merchant instructions
Transaction monitoring, fraud and chargeback prevention, risk scoring
Legal obligation; legitimate interests
Settlement, invoicing, accounting and record-keeping
Performance of contract; legal obligation
Technical support and service communications
Performance of contract
Website operation, security and protection against bots
Legitimate interests
Analytics and Website improvement
Consent (where required)
Marketing communications to business contacts
Legitimate interests or consent, where required
Establishing, exercising or defending legal claims; cooperation with authorities
Legal obligation; legitimate interests
3.2. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4.1. Because we serve high-risk industries (including iGaming, Forex and binary options, crypto brokerage and exchanges), we apply enhanced due diligence and ongoing monitoring to Merchants and transactions.
4.2. Transactions may be assessed automatically by risk and fraud rules and by our routing and cascading engine, which selects the payment channel for each transaction. Such automated assessment may result in a transaction being declined, delayed, routed to another provider or flagged for manual review. Decisions that have legal or similarly significant effects on Merchants (such as account termination) are reviewed by our staff. You may request human review of a decision and express your point of view by contacting us.
5.1. We share personal data only to the extent necessary, with:
5.2. We do not sell personal data.
6.1. Due to the cross-border nature of payments, personal data may be transferred to and processed in countries outside the UAE, including countries where our payment partners operate and countries that may not provide the same level of protection as the UAE or the EU.
6.2. We carry out such transfers only where permitted by the PDPL and other applicable law, for example where the transfer is necessary to perform a contract or execute a payment, on the basis of appropriate contractual safeguards (including standard contractual clauses where the GDPR applies), or with your consent.
7.1. We keep personal data only for as long as necessary for the purposes described above. Enquiry data from prospects who do not become clients is kept for up to [24] months from the last contact.
7.2. Onboarding, identification and transaction records are retained for at least five (5) years after the end of the business relationship or the date of the transaction, or longer where required by AML/CFT law, a regulator, a payment partner or for pending legal claims.
8.1. We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls on a need-to-know basis, segregation of environments, logging and monitoring, and contractual confidentiality obligations for staff and vendors. [Add PCI DSS / ISO 27001 status if available.]
8.2. No system is completely secure. If you believe your interaction with us is no longer secure, please contact us immediately.
9.1. Subject to applicable law, you have the right to:
9.2. Some rights may be limited where we must keep data to comply with AML/CFT and other legal obligations. In particular, we may not inform you about reports made to competent authorities.
9.3. To exercise your rights, contact us at [privacy@highhelp.io]. We may ask you to verify your identity and will respond within the time limits set by applicable law. End Users should usually address their request to the Merchant first; we will assist the Merchant as required.
10.1. Our Website uses cookies and similar technologies. Details are set out in our Cookies Policy.
11.1. The Website may contain links to third-party websites and services (for example Telegram). We are not responsible for their privacy practices. Please read their privacy policies.
12.1. We may update this Policy from time to time. The current version is always available on the Website with the date of the last update. Where changes are material, we will notify Merchants by email or via their account.
IGNEELION DMCC (HighHelp) Unit No: BA2334, DMCC Business Centre, Level No 1, Jewellery & Gemplex 3, Dubai, United Arab Emirates Email: [privacy@highhelp.io]
