AyeFace User
Terms and Conditions

In these AyeFace User Terms and Conditions (“Terms”), references to “You”, “Your” and “Yours” refer to the individual end user who is utilising the AyeFace service and has an account with Us. References to ‘We’, ‘Our’, ‘Ours’ and ‘Us’ refer to Aye Global Holdings Pte. Ltd., the company providing AyeFace services to You.

Aye Global Holdings Pte. Ltd. wholly owns Aye Solutions Sdn. Bhd., and these Terms are binding and enforceable with respect to any contracts, agreements, or engagements entered into with Aye Solutions Sdn. Bhd. in connection with the provision of AyeFace services.

These Terms govern Your access to and use of the AyeFace platform, including biometric verification functionality, automated payment features, and AI-driven personalisation tools. By using AyeFace, You agree to be bound by these Terms and acknowledge that Your Personal Data will be processed in accordance with Our Privacy Policy and applicable data protection laws (including the Malaysian PDPA, Singapore PDPA, and GDPR where applicable).

Depending on the type of Personal Data, We process Your data either (i) with Your explicit consent (for biometric identifiers and marketing), (ii) where necessary for the performance of our contract with You (to provide the AyeFace services), (iii) to comply with legal obligations, or (iv) for our legitimate interests, such as ensuring security and preventing fraud, provided these do not override Your fundamental rights.

Definitions

“AyeFace” means the software-based biometric payment solution developed and provided by Aye Global Holdings Pte. Ltd. and Aye Solutions Sdn. Bhd., comprising facial recognition functionality, customer and merchant onboarding flow, artificial intelligence (AI) Customer Relationship Management (CRM) integration, and transaction processing interfaces. This includes mobile applications, APIs, merchant integrations, and any associated features or updates.

“AyeFace Account” means the account registered by You to access the AyeFace services, which includes the biometric profile, associated payment methods, AI-generated preferences, and records of consents linked to Your use.

“Auto DirectDebit” means the payment authorisation mechanism whereby You consent to automated fund transfers from Your designated bank or e-money account linked to a DuitNow ID in accordance with applicable banking regulations and subject to your revocable consent.

“Business Day” means any day from Monday to Friday, excluding public holidays in Kuala Lumpur, Malaysia.

“Card” means any payment card issued by a licensed financial institution or card issuer, including debit card and credit card, which are used to authorise and complete transactions.

“DuitNow ID” means a commonly recognised identifier issued in Malaysia, such as a mobile number, NRIC, passport number, or business registration number, used to link a bank or e-money account for DuitNow transactions.

“DuitNow Operator” refers to Payments Network Malaysia Sdn. Bhd. (Company No.: 200801035403 (836743-D)), the operator of the DuitNow network.

“E-Wallet” means digital wallet services provided by licensed electronic money issuers, regulated by the relevant authorities in their respective jurisdictions. This includes regionally approved and licensed e-wallet providers through which users can store funds, initiate payments, and authorise transactions.

“Merchant” means any business, vendors, service providers, or entity that participate in the AyeFace ecosystem and accepts payments via AyeFace, and offers products or services to You as a Customer.

“Merchant Acquirer” means a licensed financial institution, payment service provider, or acquiring partner that enables Merchants to accept electronic payments from Customers via debit cards, credit cards, e-wallets, or bank transfers. The Merchant Acquirer is responsible for processing and settling payment transactions on behalf of the Merchant, in compliance with applicable regulations. In the AyeFace ecosystem, acquirers may be directly integrated or connected via intermediary payment rails, but remain the entity legally responsible for transaction authorisation and settlement. .

“Personal Data” means any data that identifies or relates to You, directly or indirectly, including name, contact details, identification numbers, payment and transaction data, biometric identifiers (such as facial data), and interaction or preference data generated through Your use of AyeFace. Sensitive categories of Personal Data (including biometric data) will only be processed with Your explicit consent. For the purpose of enhancing Our AI features, it extends to data concerning Your interactions and preferences within the AyeFace platform.

“User Portal” means the digital platform provided by Us through which You can manage Your AyeFace Account, including viewing, updating, and managing payment methods, reviewing and renewing consents, viewing rewards, and accessing other account-related features securely. The User Portal also allows You to exercise Your data protection rights where applicable.

Introduction

AyeFace Registration

a. To register for an AyeFace Account, You must complete an initial facial capture process and set a personal identification number (PIN) for verification purposes. By completing registration, You confirm that You are at least 18 years old (or the minimum legal age in Your jurisdiction) and capable of entering into a binding contract. Our services are not directed to children under 16, and we do not knowingly collect their data without parental consent, in line with PDPA and GDPR requirements. If We become aware that We have collected Personal Data from a child without required parental consent, We will delete it promptly.

b. You may link a payment method to Your AyeFace Account, including:

i. A credit or debit card,

ii. A bank or e-money account via DuitNow ID (e.g. mobile number, NRIC, or passport number), or

iii. A supported e-wallet account.

c. For linking credit/debit cards or e-wallets, You must input the mobile phone number affiliated with the respective card or e-wallet account. A nominal verification fee may be charged and subsequently refunded to confirm ownership and enable secure linking. Such verification will be handled in accordance with security standards and data protection laws.

d. For e-wallets, You will be redirected to the relevant e-wallet application or site to complete the verification and authentication process, in accordance with the e-wallet provider’s requirements.

e. For bank or e-money accounts, You will be required to initiate an Auto DirectDebit consent request by entering Your DuitNow ID (such as mobile number, NRIC, or passport number) through the AyeFace interface. Upon submitting the consent request, Your banking application will prompt You to approve the authorisation. Once approved, the Auto DirectDebit consent will remain valid for a period of six (6) months, unless earlier revoked or renewed.

f. By linking a payment method, You consent to Us securely storing Your payment details in encrypted form, solely to facilitate future payments through AyeFace. We do not store full card or bank credentials directly; instead, we rely on tokenisation or secure references provided by licensed payment processors. All storage and processing of data complies with Our Privacy Policy and applicable data protection laws (including PDPA and GDPR where applicable).

g. It is Your responsibility to review and confirm that all payment details are accurate before completing the linking or authorisation process.

h. Once a payment is confirmed via AyeFace, it is considered final and irrevocable, except in cases where payments are found to be fraudulent, unauthorised, or erroneous. Such cases will be subject to investigation by the relevant financial institution, card issuer, or e-wallet provider. Refunds or reversals will be handled in accordance with the Section (Refunds and Recovery of Funds).

i. You acknowledge that We are not responsible for any delay, error, omission, or failure arising during the consent or payment process, including unsuccessful payments to participating Merchants, whether caused by You, a third-party provider, or otherwise. Our role is limited to facilitating the payment initiation process; we are not liable for the authorisation, settlement, or reversal of funds, which remains the responsibility of licensed financial institutions and payment providers.

AyeFace Account and Payment Methods Management

a. As a user, You may access the AyeFace User Portal, which provides an overview of all payment methods linked to Your AyeFace Account. This includes details such as payment method status, expiry of consents (where applicable), and recent activity.

b. Through the User Portal, You may manage your payment methods including:

i. Adding, updating, or removing available payment methods. When adding a new method, You provide explicit consent for its use and processing in line with applicable data protection laws. Re-registration of Your Account is not required.

ii. Suspending or revoking payment methods and associated consent at any time. Withdrawal of consent will not affect the lawfulness of processing already carried out prior to withdrawal.

c. By linking any payment method to Your AyeFace Account, You consent to Us securely storing Your payment details in encrypted form, solely to facilitate future transactions. Full card or bank credentials are not stored directly by Us, but via tokenisation or secure references issued by licensed processors. Your data will be handled in accordance with Our Privacy Policy and applicable data protection laws (including PDPA and GDPR where applicable).

d. Once a payment method is successfully linked, You will receive a confirmation notification via the most recent contact information You have provided to Us.

e. We will provide You with a notification seven (7) days before Your payment method(s) consent expires, sent to Your latest email address or phone number that You have notified Us, or in such manner as We deem fit. You may renew the consent using an AyeFace device or the User Portal. If expired, a new consent must be submitted before further use.

f. You may also view Your transaction history including transaction ID, timestamp & merchant info on the portal. Should there be any dispute on the transactions made, You may contact AyeFace Support via email complaints@aye-ai.org and provide the transaction ID to request for investigation or refund.

g. Through the User Portal, You may also manage additional account settings and preferences, and access additional features, including:

i. Setting or updating payment limits,

ii. Enabling or disabling the use of a PIN for transaction authorisation,

iii. Managing notification preferences,

iv. Customising your personalised experience and marketing preferences.

v. Viewing and tracking eligible rewards from participating merchants and AyeFace.

vi. Obtaining referral codes for eligible merchants and AyeFace, and tracking applicable referral rewards via AyeFace and merchant referral programmes.

h. All changes made in the User Portal will take effect immediately and remain under Your sole control unless otherwise required by law or system limitations.

i. Some changes that involve sensitive information might require face verification to proceed.

j. You can access to Your User Portal by logging in with Your designated phone number. A one-time password (OTP) will be sent to Your registered number for secure login.

k. You must take reasonable precautions to keep Your login credentials and authentication methods confidential. If You become aware of any unauthorised use or security breach, You must notify Us promptly. Until such notice is received, You remain responsible for all use of Your Account.

AyeFace Artificial Intelligence Service

a. When You register for AyeFace, Your facial features are captured and converted into a unique, tokenised template using secure encryption technology. This biometric data is processed solely for recognition, authentication, and personalisation within AyeFace, in accordance with applicable data protection laws (including PDPA and GDPR).

b. AyeFace’s artificial intelligence (“AI”) features are designed to enhance Your interaction with Merchants. These may include personalised prompts, menu recommendations, targeted marketing, and other contextual suggestions based on Your preferences, purchase behaviour, and platform usage.

c. By using AyeFace, You agree to use the AI and biometric features for lawful and personal purposes only. Any use of the service for illegal, harmful, or commercial exploitation is strictly prohibited.

d. To provide a personalised and secure experience, We collect and process Your Personal Data, including biometric identifiers. By registering and using AyeFace, You provide explicit consent for such processing. This processing is governed by Our Privacy Policy (link), which explains how We collect, store, use, and protect Your data, and how You may exercise Your rights under applicable laws.

e. AI is not used to initiate, authorise, or complete any payments or financial transactions on Your behalf. All payment transactions require explicit action by You and must follow the authorisation methods You have enabled and configured with Your consent, which may require periodic re-confirmation.

f. You acknowledge that AI and biometric technologies are inherently probabilistic and may not always be accurate, reliable, or appropriate. Performance may be affected by environmental or technical factors (such as lighting, device quality, or network connectivity), and systems may produce rejections, or errors.

g. You understand and accept that, despite security safeguards, there remains an inherent risk of misuse, malfunction, or unauthorised access associated with AI and biometric technologies. By continuing to use AyeFace, You expressly consent to these technologies and accept the associated risks, to the fullest extent permitted by law. This does not affect Your statutory rights under applicable data protection and consumer protection laws

h. We do not guarantee any specific outcomes or results from AI or biometric features. To the fullest extent permitted by law, We shall not be liable for any direct, indirect, incidental, or consequential damages arising from Your use of or reliance on AI-generated outputs, except where such limitation is prohibited by applicable law.

Refunds and Recovery of Funds

a. You may initiate a refund request for an authorised transaction by contacting the relevant merchant directly and providing the transaction ID, which is available in your User Portal. Refunds will only be processed once approved by the merchant. Approved refunds will be returned to your original payment method (card or eWallet), provided that the account remains active. Refund timelines may vary depending on the Merchant and the relevant payment service provider.

b. If You believe that a payment made through AyeFace was erroneous or unauthorised (including fraud), You have the right to initiate a dispute or recovery process. This process must be initiated directly with the financial institution or payment service provider linked to Your payment method (e.g. bank, card issuer, or e-wallet provider). You may notify AyeFace Support for further assistance where necessary.

c. You acknowledge and agree that We do not act as a payment processor. Accordingly, We are not liable for refunding any such amounts processed by payment processors (i.e. licensed acquirers or banks), even if We are notified of the issue. While We are not a party to disputes handled by payment providers, We will provide supporting information or facilitate resolution where reasonably possible.

d. In the event of any erroneous or unauthorised payments, We will do our best to assist in the investigation, particularly in areas where We are directly involved or able to provide supporting information. We may, at our discretion, coordinate with the relevant parties including merchants, payment processors, or banks to help facilitate a resolution.

e. If the error relates to a DuitNow-linked payment, You must contact the bank or e-money issuer associated with Your DuitNow ID. They will investigate and take further action in accordance with their standard operating procedures.

f. If the error relates to a credit or debit card, or an e-wallet transaction, You must contact the respective card issuer or e-wallet provider to raise the dispute or request reversal, subject to their policies.

g. You undertake not to include or name Us as a party in any dispute, chargeback, or legal proceedings related to erroneous or unauthorised payments processed by payment processors. This does not affect Your statutory rights under applicable consumer protection or financial services laws.

Liability and Indemnity

Contact and Complaints

General

a. Amendments. We reserve the right to amend, update, or modify these Terms from time to time by providing You with at least thirty (30) days’ prior notice. Such notice may be delivered via email, the AyeFace portal, sent to your phone number, or published on Our official website. Continued use of the AyeFace services after the effective date of any changes constitutes Your acceptance of the revised Terms. If You do not agree to the revised Terms, You must discontinue Your use of the services before the effective date. Notice shall be deemed effective when sent or published via the methods described above.

b. Multi-Region Operations. We operate in multiple markets and regions, and our services may be made available to users across different jurisdictions. For data storage and processing, We will comply with applicable laws based on (i) Your place of residence, and (ii) where the processing takes place. If laws conflict, We will apply the stricter standard where required.

c. Applicable Law. These Terms shall be governed by and construed in accordance with the laws of Malaysia, without regard to its conflict of law principles. You agree to submit to the exclusive jurisdiction of the courts of Malaysia for any disputes arising under or in connection with these Terms. Mandatory consumer protection or data protection laws of Your country of residence may also apply and shall prevail where required by law.

d. Data Use and Privacy. You consent to Our collection, use, and disclosure of Your Personal Data for the purpose of delivering, maintaining, and improving the AyeFace services. We process such data in accordance with applicable data protection laws and Our Privacy Policy. For further information on how We collect, use, and store personal data, please refer to Our Privacy Policy. In the event of a conflict between these Terms and the Privacy Policy regarding personal data, the Privacy Policy shall prevail.

e. International Data Transfers. Your personal data may be transferred to, stored in, or otherwise processed in countries outside of Your country of residence where required for the provision of Our services. Whenever such transfers occur, We will implement appropriate safeguards to protect Your data in accordance with applicable data protection laws. Where personal data is subject to EU or UK data protection regulations, the Standard Contractual Clauses (“SCCs”) approved by the European Commission shall apply automatically and are incorporated by reference into these Terms. You can access the applicable SCCs at: https://commission.europa.eu/standard-contractual-clauses. Where required, We may also implement supplementary measures or enter into additional data transfer agreements to ensure lawful transfers.

f. Severability. If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, that provision shall be severed from the remaining Terms, which shall remain in full force and effect.

g. No Waiver. Our failure to enforce any right or provision under these Terms shall not constitute a waiver of such right or provision unless expressly agreed in writing.

h. Entire Agreement. These Terms, together with any referenced policies or executed consents, constitute the entire agreement between You and Us with respect to the AyeFace services and supersede all prior or contemporaneous communications and understandings, whether written or oral.

Last Updated: 1 October 2025