Acceptable Use Policy

This Acceptable Use Policy binds Merchants using DaoPay payment services, and flows down to any sub-merchants and end customers reached through them. It is incorporated into the Terms, which prevail unless this policy sets a stricter restriction. Applicable payment scheme rules sit above both and override where stricter.

The English (en-GB) version is authoritative if it conflicts with the German version.

To use DaoPay payment services, a Merchant must be a duly constituted legal entity in an eligible jurisdiction, with verifiable registration and good standing. Change of control or a material change in beneficial ownership or governance must be notified to us promptly. Coverage spans 72+ countries but is not guaranteed in every jurisdiction.

Some business categories are prohibited without exception. These include goods and services illegal under Austrian or EU law, activity connected with jurisdictions subject to EU restrictive measures, unlicensed gambling, adult content inconsistent with scheme rules, and weapons, controlled substances and counterfeit or infringing goods.

Some categories are accepted only after enhanced review and additional conditions. These verticals always exit PreCheck as Review and may require scheme registration before activation. Enhanced documentation, ongoing monitoring, risk-tier pricing and reserve arrangements may apply.

Regardless of vertical, certain conduct is prohibited. This includes transaction laundering, unauthorised aggregation and merchant-category miscoding, deceptive checkout design, recurring billing without explicit payer consent, and chargeback or friendly-fraud manipulation. Circumventing required regulatory checks is prohibited.

Merchants must show an accurate billing descriptor that identifies them on every payer statement, and must present their refund, cancellation and sale terms before checkout. DaoPay marks and scheme marks may be used only within contractual scope and must not imply that DaoPay endorses the Merchant's offerings.

Merchants and their sub-processors are responsible for handling personal data and card data safely. Merchants must not store full card numbers or card verification values unless independently validated to the applicable card-data security standard, and must use protected channels with industry-standard encryption. Data incidents must be reported to us within the statutory timelines.

Personal-data processing is governed by our Privacy notice.

DaoPay may monitor transactions, request supporting documentation, and conduct remote or on-site audits where required. Merchants must keep records sufficient to evidence transaction legitimacy throughout the relationship and cooperate with any scheme-mandated audit.

Where appropriate, enforcement is graduated, giving a Merchant the chance to remediate before termination. DaoPay retains the right to act immediately in cases of fraud, suspected abuse, regulatory or scheme requirements, sanctions, security risk, material breach or other serious risk. Settlement of outstanding obligations continues under the Terms and applicable law.

Suspected violations or abuse can be reported to us at support@daopay.com. DaoPay may amend this policy with reasonable notice where appropriate, by posting the updated version and, where required, by email. This policy is governed by Austrian law, with jurisdiction as set out in the Terms.