Saved Payment Credentials Agreement

SKILLCARRY LIMITED, a company registered under the laws of the Hong Kong Special Administrative Region at Flat/Rm B, 5/F, Gaylord Commercial Building, 114-118 Lockhart Road, Wan Chai, Hong Kong, Business Registration Number 77321124 (the “Merchant”), offers to enter into this Agreement on the Storage and Use of Saved Payment Credentials (the “Agreement”) with any registered user of https://skillcarry.net (the “Platform”) who chooses to save a payment method for later use (the “Cardholder”). The Merchant and the Cardholder are together the “Parties” and each a “Party”.

Saving a payment method is optional. You can pay for any Order without accepting this Agreement; it applies only if you tick the box offering to save your payment method.

1. Definitions

1.1. Capitalized terms that are not defined here, including Booster Services, Virtual Items, Platform Services, Order and Account, have the meanings given in the SkillCarry Terms & Conditions (the “T&C”).

1.2. Credentials on File or COF – saved payment credentials, payment tokens or other payment references that allow a payment method to be used again without re-entering its details.

1.3. Cardholder-Initiated Transaction – a payment that the Cardholder starts personally on the Platform using the COF, for example by confirming an Order at checkout.

1.4. Merchant-Initiated Transaction – a payment that the Merchant starts using the COF without the Cardholder being present in the checkout, strictly on the basis of an arrangement the Cardholder has expressly authorized beforehand.

2. Purpose of this Agreement

2.1. The Parties are already bound by the T&C, under which the Cardholder, as a User of the Platform, orders Booster Services, Virtual Items and other products or services available on the Platform.

2.2. To pay for them, the Cardholder provides payment information at checkout.

2.3. This Agreement sets out the conditions on which the Cardholder authorizes the secure storage of the COF and its use for future purchases and other transactions the Cardholder has authorized on the Platform.

3. Consent and authorization

3.1. By ticking the relevant box at checkout or in the Account, the Cardholder expressly accepts this Agreement and authorizes the Merchant and its certified payment processing providers to store the COF securely and to use it for future transactions on the Platform.

3.2. To administer the COF and later transactions, the Merchant may receive from the payment provider and store a limited set of payment-related data:

• first and last name;
• masked card details;
• card expiry date;
• card type;
• last four digits of the card;
• payment token;
• payment identifier;
• payment method;
• transaction references;
• payment status;
• refund records;
• chargeback records.

3.3. Full card numbers (PAN), CVV/CVC codes and other sensitive authentication data are processed by certified third-party payment service providers, acquiring banks, processors and card schemes. The Merchant does not store them.

3.4. The Cardholder authorizes the Merchant to pass the COF, for the purposes of this Agreement, to the certified payment service provider that processes card payments on the Platform (at the date of this Agreement, Stripe and its affiliated companies) or to another certified payment service provider, acquiring bank, processor, card scheme or payment partner engaged by the Merchant from time to time.

3.5. The Cardholder expressly authorizes:

• Cardholder-Initiated Transactions – payments the Cardholder starts to pay for Booster Services, Virtual Items, top-ups of the SkillCarry Balance or other activity on the Platform; and
• Merchant-Initiated Transactions – payments started by the Merchant on a recurring or scheduled basis, solely for ongoing services or periodic payments that the Cardholder has explicitly agreed to in advance. The Merchant will not initiate any other charge.

3.6. The Cardholder authorizes the Merchant and its payment partners to submit and process authorized transactions using the COF in accordance with this Agreement, the T&C, the payment providers’ rules, card scheme rules and applicable law.

4. Data processed for each transaction

For every Cardholder-Initiated or Merchant-Initiated Transaction, the Merchant and its payment partners may process and transmit the payment-related data needed to authorize, submit, process, settle, reconcile, refund, dispute or otherwise administer it, including:

• transaction amount;
• applicable surcharges, if any;
• transaction currency;
• transaction date;
• authorization code;
• payment identifier;
• payment token or saved payment reference;
• payment method;
• payment status;
• refund records;
• chargeback or dispute records;
• other payment information required by the payment provider, acquiring bank, processor, card scheme, applicable law or the Platform’s rules.

5. Data protection and your rights

5.1. Personal Data relating to the COF and to transactions is processed in accordance with the SkillCarry Privacy Policy and applicable data protection law, including, where it applies, the General Data Protection Regulation (GDPR) and the Personal Data (Privacy) Ordinance of Hong Kong. The Privacy Policy describes the categories of data, purposes, legal bases, recipients, international transfers and retention periods.

5.2. The Cardholder may exercise the rights available under applicable law, including the rights of access, rectification, erasure, restriction, objection and data portability, subject to the conditions and limits the law sets.

6. PCI DSS and security

6.1. Payment card data and the COF are processed in accordance with the applicable requirements of the Payment Card Industry Data Security Standard (PCI DSS), payment provider rules, card scheme rules and applicable law.

6.2. The Merchant protects the limited payment-related data it receives or stores with appropriate technical and organizational measures, including access controls, role-based permissions, encryption or tokenization where applicable, logging, monitoring, due diligence on providers and incident-response procedures.

7. Withdrawing your authorization

7.1. The Cardholder may withdraw the authorization for future use of the COF at any time by removing the saved payment method in the Account, where that option is available, or by writing to support@skillcarry.net.

7.2. On receiving the request, the Merchant takes reasonable steps to disable further use of the COF and, where applicable, asks the payment provider to delete or deactivate the corresponding token or saved reference.

7.3. Withdrawal does not affect transactions already initiated, amounts already due, refunds, chargebacks, reconciliation, fraud prevention, compliance, accounting or legal claims, or data that must be retained under applicable law, payment provider rules or card scheme rules.

8. Amendments

The Merchant may amend this Agreement by publishing the revised version on the Platform. Material changes are notified in the manner and within the period set out in Section 21 of the T&C. If the Cardholder continues to keep a saved payment method after the notice period, the amended Agreement is accepted; a Cardholder who does not agree may withdraw the authorization under Section 7.

9. Liability

9.1. The Merchant is liable for unauthorized access to, or disclosure or alteration of, the limited payment-related data or saved payment references it processes, where this is caused by its negligence or by a breach of its security obligations.

9.2. That liability is limited to direct losses. The Merchant is not liable for indirect, incidental, consequential or punitive damages arising from a data breach, unauthorized access or security incident, except in cases of gross negligence or willful misconduct, or where such a limitation is not permitted by law.

10. Term and termination

10.1. This Agreement takes effect once the Cardholder’s card issuer has successfully authorized the card (or verified the account) and the Merchant has received the Cardholder’s acceptance. It remains in force until terminated by the Merchant or at the Cardholder’s written request.

10.2. Either Party may terminate the Agreement by written notice; an email to or from the address linked to the Account is sufficient. After termination the COF is securely deleted within 30 (thirty) days, except for data that must be kept to meet legal obligations. Transactions initiated before termination remain subject to this Agreement.

11. Governing law and disputes

This Agreement is governed by the laws of the Hong Kong Special Administrative Region. Disputes arising out of or in connection with it are subject to the jurisdiction of the courts of Hong Kong. This does not deprive a consumer of rights or of access to courts that the mandatory law of the consumer’s country of residence provides.

12. General

12.1. This Agreement is the entire understanding between the Parties on the storage and use of the COF and replaces any earlier communication on that subject, whether oral or written. It is to be read together with the T&C and the Privacy Policy.

12.2. The Agreement is drawn up in English. Translations are provided for convenience only; if there is a discrepancy, the English version prevails.

13. Contact

Questions about this Agreement can be sent to SkillCarry support at support@skillcarry.net.

By saving your payment credentials you confirm that you have read and understood this Agreement, the SkillCarry Terms & Conditions and the SkillCarry Privacy Policy, and that you agree to them.