Rule · PMA · 30 Jun 2021
The Palestine Monetary Authority issued Instructions No. (7) of 2021 to regulate the relationship between licensed payment service providers and their users, mandating secure, transparent contractual frameworks and strict data confidentiality protocols. The regulations require providers to establish dedicated complaint handling mechanisms with defined response timelines, implement rigorous procedures for freezing dormant accounts and managing deceased users' estates, and enforce transparent disclosure of all fees and commissions. Furthermore, the directives stipulate the transfer of unclaimed balances to a separate suspended account after ten years of inactivity and mandate quarterly reporting to the Authority to ensure ongoing compliance and consumer protection.
Based on the provisions of Legislative Decree No. (17) of 2012 concerning the National Payment Settlement Law, particularly Articles (5) and (9) thereof, and based on what the Board of Directors of the Palestine Monetary Authority approved in its meeting No. (236) dated 23/06/2021, and in pursuit of the public interest, we have issued the following Instructions:
The words and phrases contained in these Instructions shall have the meanings specified below, unless the context indicates otherwise:
The Service Provider shall comply with the following:
The Service Provider shall organize the relationship with the user based on clear contractual foundations containing at a minimum the following:
The terms and conditions related to the service, and the rights and obligations arising therefrom.
An accurate and complete description of the payment service and its benefits.
Procedures for handling objections and complaints.
The mechanism for obtaining financial statements and notifications.
Including the following obligations on the user:
a. Use the payment service and its applications securely and in compliance with their requirements and procedures, and take all precautionary measures to safeguard codes and/or passwords and any other security requirements.
b. Notify the Service Provider without delay from the moment the user becomes aware of any potential error in their accounts and/or any unauthorized orders executed, or upon the theft or loss of payment instruments.
The Service Provider shall comply with the following:
The Service Provider shall comply with the following when handling user complaints:
Request the following basic information from the user at a minimum:
a. Name of the complainant and contact details. b. Subject of the complaint.
c. Any supporting documents for the complaint.
Provide the user with a notification of complaint receipt from the Service Provider.
Register the complaint in a dedicated complaint log and include all relevant information.
Notify the user of any follow-up within a maximum of (4) four days from the date of complaint submission, and grant them a period of (5) five working days to complete it.
Notify the user within a maximum of (10) ten working days from the date the complaint is completed, including at a minimum the following information:
a. Complaint reference number. b. Subject of the complaint.
c. Final decision regarding the complaint, with reasons.
The Service Provider shall refund the amount of disputed payment orders, or those proven to have been incorrectly executed by the Service Provider, to the user within (3) working days from the date the validity of the objection is established.
The Service Provider shall comply with the following:
Continuously update user data and monitor daily newspapers, various media outlets, and any means or systems provided by the Authority to identify deceased users of the Service Provider.
Prepare operational procedures for handling deceased users' accounts to ensure dual control and mitigate any risks associated with these accounts, which shall include at a minimum the following:
a. Place a hold on the deceased's account in the Service Provider's systems upon learning of the death, preventing any transactions or operations on the account. b. Inventory all balances of the deceased's accounts across different payment instruments and associated wallets, and place them under hold.
c. Separate deceased users' account files from other accounts, and attach documents and records confirming the accuracy of account balances.
d. Obtain approval from the Service Provider's legal department or legal counsel for the distribution of shares to heirs according to the estate inventory certificate. e. Subject these accounts to internal audit programs at least once annually. f. Prepare periodic reports and follow-up results for these accounts, and provide the Authority with a quarterly report on deceased users' accounts.
The Service Provider shall comply with the following:
All competent authorities shall, within their respective jurisdictions, implement the provisions of these Instructions, effective from the date of their issuance.
Issued in Ramallah on 30/06/2021
Dr. Firas Malham
Governor
Note from RegAlert. AI assistants can read this document in full, and search 70,000+ more, through the RegAlert MCP connector (https://mcp.regalert.today/mcp). Free with an account. How to connect ChatGPT, Claude or Cursor.
More like this from PMA
PMA published 4 documents in the last 30 days. We email you each new one the day it's published.
Source: Palestine Monetary Authority — original document · Summary generated with machine assistance and reviewed before publication; the authoritative text is the regulator's original document. How RegAlert works
In RegAlert: added · updated