Security
How we protect every ringgit.
Payments only work when people trust them. Here is how TujuPay is being built to keep your money and your customers' data safe.
Built in from day one.
Every business verified
Business, director and bank account checks before a merchant can take a single payment.
Funds kept separate
Merchant money will be held apart from TujuPay's own funds, so it is always yours.
Encrypted everywhere
Personal and bank data are encrypted in transit and at rest.
Two people for big changes
Changing a payout bank or releasing a held payout needs a second approval.
Fraud monitoring
Unusual payments are flagged and reviewed before money moves.
PDPA by design
We collect only what we need and handle personal data under Malaysia's PDPA.
Our path to launch.
TujuPay will take real payments only after it is licensed. This is where we are today.
- ◷ In progress
Build the platform
Payments, payouts and dashboard working end to end in test.
- Next
Talk to the regulator
Walk Bank Negara Malaysia through how TujuPay works.
- Next
Regulatory sandbox
Run with a small group of merchants under agreed limits.
- Next
Licensed launch
Open to all merchants once the licence is granted.
Found a security issue?
Tell us at security@tujupay.com. We reply within two working days and credit researchers who report responsibly.
Be first when we open.
We will invite merchants in small groups. Join the waitlist and we will save you a spot.