Last updated: July 27, 2026
Security
1. Our Approach
MAWG3 Inc. treats the security of merchant and customer information as a core part of the service. We maintain organisational and technical measures intended to protect information against unauthorised access, disclosure, alteration and loss, and we review those measures as the platform develops and as risks change. This page describes our approach in general terms. We do not publish details of our systems, configurations or controls, because doing so would itself weaken them.
2. Protecting Information
Traffic between your browser or app and our platform is encrypted using current industry-standard transport encryption, and published storefronts are served over secure connections. Account passwords are stored using a one-way cryptographic function and are never held in a form we can read. Credentials you supply for third-party services you connect are protected at rest and are shown masked once saved. Backups are taken on a regular cycle and are held under access controls.
3. Access and Internal Controls
Access to production systems and customer information is limited to personnel who require it for their role, and is removed when it is no longer needed. Administrative activity on the platform is logged. Staff are bound by confidentiality obligations covering any information they encounter in the course of their work. We support multi-factor authentication and passkeys on merchant accounts and encourage every account holder to enable them, since account credentials remain the most common route to compromise.
4. Payments
Card payments are handled by licensed payment providers. MAWG3 does not receive, process or store full card numbers or security codes on its own systems, and card details entered at checkout are submitted directly to the payment provider. Our payment integrations are operated in accordance with applicable Central Bank of Kuwait requirements for electronic payment services.
5. Monitoring and Resilience
We log platform and authentication activity, apply rate limiting to sensitive operations, and investigate anomalies that our monitoring surfaces. Our measures are kept under review and are updated in response to newly identified risks. No online service can be guaranteed completely secure, and we do not represent that our measures will prevent every possible incident.
6. Incident Response
We maintain internal procedures for identifying, containing and investigating security incidents. Where an incident affects personal information and is likely to result in a risk to the people concerned, we will notify affected users and the competent authorities without undue delay, in accordance with applicable Kuwaiti law, and we will explain what occurred, what information was involved and what steps we recommend. We cooperate with lawful requests from Kuwaiti authorities in the investigation of security incidents.
7. Legal Framework
We operate under the laws of the State of Kuwait, including the Cybercrime Law No. 63 of 2015 and the Electronic Transactions Law No. 20 of 2014, together with applicable regulatory requirements for electronic and payment services. Our handling of personal information is described in our Privacy Policy, which forms part of our commitments to you. Where we work with external providers, we require appropriate confidentiality and security undertakings from them by contract.
8. Reporting a Vulnerability
If you believe you have found a security vulnerability affecting MAWG3, please report it to us privately at [email protected] with enough information for us to reproduce the issue. We will acknowledge your report, keep you informed while we investigate, and we will not pursue action against researchers who act in good faith, test only against their own account, avoid accessing or altering other people's data, and give us a reasonable opportunity to resolve the issue before disclosing it publicly. Please do not perform testing that degrades the service for other users.