
Dubai
OfficeUnited Arab Emirates · GCC headquarters
Treasury and GCC operations, alongside compliance and FX routing.
Sun–Thu · 09:00–18:00 GST
Built for regulation: payments, cards, wallets and settlement are designed to run through licensed partners and national payment systems — screened in real time and scored continuously. BINK is not yet licensed; regulated services will be provided through licensed partners.
3 markets
Each with its own group company. BINK is not yet licensed in any of them.
Licenses · Group entitiesBuilt for regulation
When live, customer funds will be held in segregated accounts at licensed partners.
Not yet liveRTO 4 hours
Maximum time to restore service, against a 15-minute recovery point.
Security · InfrastructureGlobal infrastructure
Money is designed to move between the group’s markets over partner banks and national payment systems. No partner rails are live yet, and BINK is not yet licensed in any market.
EgyptUnited Arab EmiratesUnited KingdomRiyadhPlannedSettlement network
When live, issuing, settlement and safeguarding will each sit with a licensed partner. Knowing which one, and on what terms, is the point of this section.
Issuing through licensed partners
When live, cards will be issued by licensed issuing partners under their scheme licences. Card transactions will be subject to network rules, merchant authorisation holds and the daily limits shown in your card settings.
Partner banks and national payment systems
Settlement will be executed through partner banks and national payment systems. No partner rails are live yet; partner names will appear in your product terms.
Destination network and cut-off times
Settlement times depend on the destination network, the receiving institution and applicable cut-off times. Expected timings are published in the application before you confirm.
Designed to meet safeguarding rules
When live, customer funds will be held in segregated accounts at licensed partners, kept separate from BINK’s own money. No customer funds are held or safeguarded by anyone yet.
Assessed before onboarding, reviewed annually
Every partner and processor will be assessed before onboarding and reviewed annually, covering regulatory standing, security posture, resilience and data protection.
No partner rails are live yet. See Regulatory status and the Terms v2.4. Partner names will appear in your product terms, not on a marketing page.
How money travels
Controls are easier to trust when you can see where each one sits. This is one payment, end to end, with the clause behind every leg.
You instruct a payment in the application. Fees are shown before you confirm, and expected timings are published at the same point.
Terms · Payments, FeesA payment instruction is treated as authorised once you have completed the required authentication — passkeys and hardware security keys on every account, with one-time codes for step-up verification. Authorised instructions are generally irrevocable; scheduled payments may be cancelled before execution begins.
Terms · Payments · Security · 2Customers, counterparties and payments are screened against applicable sanctions lists in real time. Matches are held for review, and confirmed matches are reported and blocked.
Compliance · 4Sessions, devices and payments are scored continuously. Unusual patterns trigger step-up verification, a temporary hold, or review by our fraud team, and alerts are investigated by trained analysts.
Security · 5 · Compliance · 5The instruction is routed to the destination network. Which network, and the cut-off times that apply to it, determine when it can settle.
Terms · PaymentsExecution will run through partner banks and national payment systems, under the licences those partners hold. When live, your balance will be held in segregated accounts at licensed partners rather than on our balance sheet.
Licenses · 3, 4The receiving institution credits the beneficiary and the payment is confirmed in the application. If funds are credited in error, we may reverse the entry and will tell you why.
Terms · PaymentsWhen live, customer funds will be held in segregated accounts at licensed partners.
Not yet licensed · Preparing for UK e-money registration
Operational health
4 hours
Recovery time objective
The maximum time to restore service after a failure, stated in the Security policy. Paired with a 15-minute recovery point objective — the largest window of data a failure can cost.
Recovery point objective — the maximum data-loss window.
Security · 4Traffic encrypted in transit, between your device and the platform.
Security · 3Data encrypted at rest, keys held in hardware modules under split control.
Security · 3Backups encrypted and restored on a schedule, not assumed.
Security · 4Sessions, devices and payments scored for anomalies.
Security · 5Detection and triage, at all times.
Security · 6Vulnerability reports acknowledged.
Security · 7Regional coverage
BINK is a group of companies. The entity you contract with depends on your country of residence and the product you use, and it is named in your account agreement.
BINK PAY
BINKPAY FINANCING BROKER L.L.C
BINK PAY LTD

United Arab Emirates · GCC headquarters
Treasury and GCC operations, alongside compliance and FX routing.
Sun–Thu · 09:00–18:00 GST

United Kingdom · European operations
International banking and partnerships, reporting and the FX engine.
71–75 Shelton Street · Covent Garden · WC2H 9JQ
Mon–Fri · 09:00–18:00 GMT

Arab Republic of Egypt · Engineering
Engineering, customer operations and compliance teams.
Smart Village · B127
Sun–Thu · 09:00–18:00 EET

Kingdom of Saudi Arabia · Strategic expansion
Planned expansion. BINK has no entity in Saudi Arabia and offers no product there.
No address yet
Not yet operational
An office is not a licence. BINK is not yet licensed in any of the markets above and is preparing for UK e-money registration — see Regulatory status. Regulated services will be provided through licensed partners.
Infrastructure principles
Principle 01
Controls are layered across identity, application, network and data, and no single control is relied upon. A control that cannot fail is a control nobody has tested; these are arranged so the failure of any one is contained by the others.
Security · 1 Security modelPrinciple 02
Production runs in isolated environments with least-privilege access. Access to production data requires approval and is time-bound, so a credential that leaks is a credential that has already expired.
Security · 4 InfrastructurePrinciple 03
Every privileged action is logged and reviewed. Observability here is not dashboards for their own sake — it is the record that makes an incident reconstructable afterwards.
Security · 1, 4Principle 04
A running version is replaced, never edited in place, and every change carries mandatory peer review and automated checks before it ships. Rollback is therefore a deploy, not a repair.
Security · 4 InfrastructurePrinciple 05
Detection and triage are on call at all times, affected sessions or accounts are isolated before anything else happens, and affected customers and any relevant authorities are notified as required. A post-incident review is published in summary where material.
Security · 6 Incident responsePrinciple 06
Backups are encrypted and tested quarterly against a stated recovery point of 15 minutes and recovery time of 4 hours. A resilience claim without a figure attached to it is not a claim.
Security · 4 InfrastructureReliability
Every figure below is a commitment in the Security policy. None is independently attested: BINK holds no certification and has not been externally audited.
RPO 15m
Recovery point objective
The maximum window of data a failure can cost, with encrypted backups tested quarterly against it.
Security policy · 4RTO 4h
Recovery time objective
The maximum time to restore service. Stated in the policy rather than estimated for this page.
Security policy · 4Not yet certified
No external certification or audit
BINK holds no SOC 2, ISO 27001 or PCI DSS certification and has not been externally audited. This page does not print an uptime percentage no document supports.
Not yet licensedIn-app
Monitoring built into the platform
Sessions, devices and payments are scored for anomalies by BINK’s own software. No external audit has taken place yet.
Security policy · 5Questions
To the destination network for the instruction, through partner banks and national payment systems. Which network applies, and its cut-off times, determine when the payment can settle — expected timings are published in the application before you confirm.
Detection and triage are on call at all times. Affected sessions or accounts are isolated first, then affected customers and any relevant authorities are notified as required, and a post-incident review is published in summary where the incident was material.
Through stated recovery objectives rather than adjectives: a recovery point objective of 15 minutes and a recovery time objective of 4 hours, with encrypted backups tested quarterly against them. BINK does not publish a region topology or a failover mechanism, and this page does not describe one.
No. No approved policy states one, so this page does not print one. BINK holds no SOC 2 or other certification and has not been externally audited yet.
Sessions, devices and payments are scored continuously, and customers, counterparties and payments are screened against applicable sanctions lists in real time. Alerts are investigated by trained analysts, and suspicious activity is reported to the relevant financial intelligence unit.
No partner rails are live yet, and no customer funds are held or safeguarded by anyone. When live, customer funds will be held in segregated accounts at licensed partners, kept separate from BINK’s own money.
The three markets listed on this page are where the group has companies. BINK is not yet licensed in any of them. Riyadh appears as a planned office, not a market.
Not yet. BINK holds no licence, authorisation or registration and is not regulated by any authority. It is preparing for UK e-money registration, and regulated services will be provided through licensed partners.
The layered controls behind identity, application, network and data.
Trust ComplianceRegulatory status and financial-crime controls.
Trust Help CenterSearch an answer, or reach the team that owns your question.
Support Regulatory statusGroup entities, licensing status and planned partner arrangements.
v3.0 Security policyArchitecture, encryption, monitoring and recovery objectives.
v2.2 Privacy PolicyWhat we collect, why, and the rights you can exercise.
LegalOur compliance team answers diligence questionnaires from prospective partners and business customers.
Licensing v3.0 · Security v2.2 · Compliance v2.0 · Terms v2.4