TERMS AND CONDITIONS GOVERNING UNIFIED PAYMENTS INTERFACE (UPI) SERVICES OF THE NATIONAL PAYMENT CORPORATION OF INDIA (NPCI).

1. n this document, the following words and phrases have the meanings set opposite them unless the context indicates otherwise:

   • ‘Account(s)’ refers to the Resident Indian Savings and/or Current Bank Account(s) held and maintained with ICICI Bank or Resident Savings and/or Current Account held with any bank in India, to be used for operations through the UPI Facility

   • ‘Bank SDK’ means the Sponsor Bank’s Software Development Kit which comprises of PSP Bank’s branding, interfacing components, wrapper functionality (created by PSP Bank) bundled with the Common Library

   • ‘Guidelines’ means the Guidelines as prescribed by NPCI, RBI and/or any other regulatory authority/ies pertaining to the UPI Facility and/or the UPI Plug-in Facility, as updated from time to time

   • ‘ICICI Bank’ means ICICI Bank Limited, a company incorporated under the Companies Act, 1956 and licensed as a Bank under the Banking Regulation Act, 1949, having its registered office at ICICI Bank Towers, near Chakli Circle, Old Padra Road, Vadodara, 390007 Gujarat and its Corporate Office at ICICI Bank Towers, Bandra Kurla Complex, Mumbai - 400051

   • ‘Merchant/s’ means and includes online, mobile-app based and offline merchant who provides goods and services in exchange for payment through UPI

   • ‘Partner/s’ means institutions and includes online, mobile-app based and offline institutions who avail various UPI services from ICICI Bank

   • ‘NPCI UPI System’ means the switch and related equipment and software owned by NPCI to provide UPI based fund transfers and fund collection facilities including the National Financial Switch;

   • ‘Payment Order’ means an unconditional instruction issued by the User in writing or transmitted electronically to ICICI Bank through UPI or Unstructured Supplementary Service Data (USSD) or ICICI Bank’s iMobile Pay app or Pockets application through the Partner’s channel (including but not limited to the Partner Application) or through such other means as provided by ICICI Bank, to effect a fund transfer for a certain sum of money expressed in Indian rupees to the designated account of a designated beneficiary by debiting Account(s) of the User

   • ‘PSP (Payment Service Provider)’ refers to banks which are allowed to acquire Users and provide payment (credit/debit) services to Users

   • ‘Partner Application’ or ‘Merchant Application’ means the application through which the merchant is providing services to the end-user and the same is integrated with the Parent Application for the UPI Plug-in

   • ‘TPAP’ means Third Party Application Providers

   • ‘UPI’ refers to the Unified Payments Interface Service offered by NPCI in collaboration with its member banks

   • ‘UPI Facility’ means the UPI based electronic fund transfers and fund collection facilities provided by ICICI Bank to Users through the NPCI UPI System, as per the Guidelines

   • ‘UPI Plug-in’ means existing Payment Service Provider (PSP) applications (Sponsor Bank applications) to extend their Software Development Kit (SDK) to integrate with the Partner’s application (any third-party player or merchant) for Person to Merchant (P2M) transactions and other limited UPI services, as per the business use-case of the merchant

   • ‘User’ means any person whose UPI transaction has been facilitated by ICICI Bank. As a PSP, ICICI Bank has extended its Bank SDK to integrate with the Partner’s Application (any third-party player or merchant) for Person to Merchant (P2M) transactions only and other limited UPI services, as per the business use-case of the merchant. ICICI Bank has provided UPI-Plug in services through Partner Application to the Users. The Partner Application can be used by Users to transact through their bank account after a one-time registration process.

2. Words or expressions used in this form, but not specifically defined will have the respective meanings assigned to them by NPCI.

1. Each User who is keen to avail of the UPI Facility or UPI Plug-in facility will by way of a one-time registration in such form, manner and substance as ICICI Bank may prescribe, apply for the UPI Facility and ICICI Bank will be entitled, at its sole discretion, to accept or reject such applications. The User may apply for the UPI Facility by downloading iMobile Pay or Pockets application and through TPAP. The User may apply for a UPI Plug-in facility through Partner Application (only P2M transactions). On iMobile Pay, the User will have an option to set a virtual payment address and initiate transactions via UPI. In Pockets, if the User adds an ICICI Bank Account, there will be an option to set a virtual payment address for that account and start transacting using UPI. In Partner Application, the User will have an option to set a virtual payment address and initiate in-app P2M transactions, because P2P transactions aren’t allowed. The User can link other bank accounts through a one-time registration process defined and standardised by NPCI and then start transacting. By applying for and accessing the UPI Facility, the User accepts these Terms, which will govern the provision of the UPI Facility and UPI Plug-in facility by ICICI Bank. The Terms will be in addition to and not in derogation of the Guidelines issued from time to time

2. The User’s consent to having read and understood the Terms, is by accessing, using and taking benefit of the UPI Facility provided by ICICI Bank

3. The User hereby acknowledges that the User has read and understood the Guidelines and agrees that the rights and obligations provided therein and in these Terms in so far as it relates to the User will be binding on the User with regard to every Payment Order issued by him/her for execution in the NPCI UPI System. The User understands and agrees that nothing in terms of availing the UPI Facility will be seen as creating any contractual or other rights against NPCI or any participant in the NPCI UPI System other than ICICI Bank. Notwithstanding anything contained herein, all terms and conditions stipulated by ICICI Bank in connection with the Accounts will continue to apply.

UPI Facility offers an instant 24x7, inter-bank electronic fund transfer or fund collection service to the Users of UPI member banks. Whereas, UPI Plug-in offers an instant 24x7, interbank electronic (only P2M) fund transfer or fund collection service to Users of UPI member banks. The Users can put in a request for fund transfers, fund collections or respond to fund collections from iMobile Pay or Pockets PSP mobile banking channels, through TPAP and in case of UPI Plug-in through Partner Application (only P2M transactions) in a secure manner for any of their linked Bank Accounts. As a PSP, ICICI Bank will provide a mobile application to the Users which will use the NPCI UPI libraries, facilitating payments.

In case of UPI Plug-in, ICICI Bank will extend Bank SDK to integrate with the Partner Application so that payments can be made through Partner Application to merchants only (P2P transactions aren’t allowed in case of UPI Plug-in). The PSP mobile application can be used by User(s) to transact on Account(s) and the Partner Application can be used by User(s) to transact on merchant Account(s) after a one-time registration process. For the convenience of making payments, we will use the VPA associated with the User’s mobile number or that of the remitter/beneficiary who has transacted with the User. The User/Partner can choose to pay or make a collect request basis any mobile number, wherein the PSP mobile application/Partner Application may display the UPI IDs in a masked format, linked to such mobile number to enable the User/Partner to pay or make collect requests.

• The User will be entitled, subject to other terms and conditions of the service, to issue Payment Orders for execution by ICICI Bank

• The Payment Order will be issued by the User, in the form as prescribed by ICICI Bank, which is complete in all particulars. The User will be responsible for the accuracy of the particulars given in the Payment Order for the UPI Facility and will be liable to compensate ICICI Bank for any loss arising on account of any error in the Payment Order

• ICICI Bank disclaims all liability for execution of any Payment Order in good faith and in compliance with the instructions given by the User

• The User authorises ICICI Bank to act as a PSP and debit Account(s) as per instructions received by way of Payment Orders. The User understands that although multiple bank accounts can be linked with the UPI Facility, debit/credit transactions can be done from the default account. The User may change the default account before initiating such debit/credit transactions. Each Account that may be linked with the UPI facility can be opened with a separate username/Virtual Payment Address (VPA)

• The User will ensure availability of funds in his/her Account(s) towards the fulfillment of the Payment Order before/at the time of the execution of the Payment Order by ICICI Bank. The User hereby authorises ICICI Bank to debit the Account(s) of the User for any liability incurred by ICICI Bank on behalf of the User for execution of the instruction issued by the User. The User understands and agrees that once a fund collection request is accepted, the default account will automatically be credited with such amounts as may be mentioned in the fund collection request. The User understands and agrees that such amounts once credited to the default account cannot be reversed by the User

• The User agrees that the Payment Order will become binding when it is executed by ICICI Bank

• The User agrees that he will not be entitled to make any claim against RBI and/or NPCI with respect to the UPI or UPI Plug-in Facility

• The User agrees that in the event of any delay in the completion of the fund transfer or any loss on account of error in the execution of the fund transfer pursuant to a Payment Order or on account of error, negligence or fraud on the part of any employee of ICICI Bank, ICICI Bank will have no liability whatsoever with respect to the same

• The User will provide the correct beneficiary details to ICICI Bank at the time of availing the UPI or UPI Plug-in Facility. The User will be solely responsible for entering wrong beneficiary details such as incorrect Virtual Payment Address, incorrect Aadhaar number or an incorrect mobile number, due to which the funds get transferred to an incorrect beneficiary

• The User will not hold ICICI Bank responsible for any damage, claim and/or issues arising out of or in connection with any purchase of goods/services from merchants through Payment Orders issued by UPI or the UPI Plug-in Facility. The User understands and agrees that all such losses, damages and issues will constitute a claim against such merchants

• The User agrees that the UPI Facility and UPI plug-in Facility is offered in line with RBI’s guidelines on mobile banking and all other relevant guidelines/circulars issued by RBI/ NPCI which are subject to change from time to time

• The User will inform ICICI Bank immediately regarding any inquiry, question or issue raised by any authority including but not limited to any statutory or official authority regarding and relating to ICICI Bank, as well as expeditiously notify ICICI Bank of any show causes, seizure or similar action and provide copies of any notices, memos or correspondences received from such authority. The User will not unilaterally file any response/reply to such an authority without prior approval and vetting by ICICI Bank

• The User will be solely liable for ensuring availability of sufficient funds in the Account(s) at all times for the purpose of availing the Facility. The User agrees that in the event there are insufficient funds in the Account, ICICI Bank will decline the transaction instruction.

• ICICI Bank will execute a Payment Order issued and duly authorised by the User unless: (a) the funds available in the Account(s) of the User are not adequate or the funds are not properly applicable/available to comply with the Payment Order; or (b) the Payment Order is incomplete or it is not issued in the agreed form; or (c) ICICI Bank has reason to believe that the Payment Order is issued to carry out an unlawful transaction; or (d) the Payment Order cannot be executed under the NPCI UPI System

• No Payment Order issued by the User will be binding on ICICI Bank until ICICI Bank has accepted it

• For execution of every Payment Order, ICICI Bank will be entitled to debit the designated Account(s) of the User, with the amount of the funds to be transferred together with charges payable thereon

• A duly authenticated record of the transaction after completion of the fund transfer or fund collection or response to a fund collect request will be recorded in the Statement of Account in the mobile application of ICICI Bank or in the Partner Application (in case of UPI Plug-in). The transaction will also be recorded in the Statement of Account issued by the User’s bank to the User. The User will, within a period of ten days from the date of receipt of the monthly statement, report to ICICI Bank any discrepancy in the execution of the Payment Order. The User agrees that he/she will not be entitled to dispute the correctness of the execution of the Payment Order or the amount debited to his/her Account(s) if he/she fails to report the discrepancy within the said period

• ICICI Bank will follow the process prescribed by NPCI for providing the UPI Facility or the UPI Plug-in facility to the User in this regard, including but not limited to process for settling of timed out transactions within the time limit prescribed by NPCI

• ICICI Bank may review User transactions for identifying high risk transactions and reserves the right to not process the transaction if it believes it to be suspicious, fraudulent or unusual and report the transaction and User account details to legal enforcement agencies or other regulatory authorities, as applicable or notified by law

• ICICI Bank will be entitled to recover the applicable charges (including Merchant Discount Rate) levied by the any regulatory authority including NPCI, by either sending the User an invoice on the User’s registered e-mail ID which the User will process and make payments within a period of seven (7) working days from the date of the receipt of the invoice, failing which, ICICI Bank will be entitled to debit the User account held with ICICI Bank for the pending invoice amount with no further notice. ICICI Bank will be entitled to debit the User’s Account with such applicable charges associated with the usage of the services selected by the User on a daily basis. The User agrees to sufficiently fund their account so that the payment of applicable charges can be carried out unimpeded, failure towards which will be considered a material breach of contract, leading to the suspension of services till such time that the payment is received by ICICI Bank. ICICI Bank will in no way be liable or responsible for any direct, indirect, special or exemplary losses that may occur to the User as a result of debits made from the User account in accordance with this clause.

• The User is responsible for the accuracy and authenticity of the instructions provided to ICICI Bank and the same, if it is in the form and manner prescribed by ICICI Bank, will be considered to be sufficient to operate the UPI or UPI Plug-in Facility. ICICI Bank will not be required to independently verify the instructions. ICICI Bank has no liability if it does not or is unable to stop or prevent the implementation of any Payment Order issued by the User. Once a Payment Order is issued by the User the same cannot be subsequently revoked by the User

• ICICI Bank will refuse to comply with the instructions without assigning any reason and will not be under any duty to assess the prudence or otherwise of any instruction. ICICI Bank has the right to suspend the transactions with respect to the UPI or UPI Plug-in Facility if it has reason to believe that the User’s instructions will lead to direct or indirect loss to ICICI Bank or may require an indemnity from the User before continuing to operate the UPI or UPI Plug-in Facility

• All instructions, requests, directives, orders and directions entered by the User are based upon the User’s decisions and considered to be the sole responsibility of the User.

The User irrevocably and unconditionally authorises ICICI Bank to access and use all information of the User’s Account(s) and records received while facilitating the UPI or UPI Plug-in Facility. The User agrees that ICICI Bank and its affiliates (or their contractors/service providers) may hold and process its personal information, any information made available pursuant to processing of the UPI transaction and all other information concerning its Account(s) on computer or otherwise in connection with the UPI or UPI Plug-in Facility as well as for analysis, credit scoring and marketing or making offers of various financial or other products and/or services that provide an opportunity to the User to acquire, insure, invest, save or otherwise undertake a financial or other transactions.

ICICI Bank does not hold out any warranty and makes no representation about the quality of the UPI or UPI Plug-in Facility. The User agrees and acknowledges that ICICI Bank will not be liable and in no way be held responsible for any damages whatsoever, whether such damages are direct, indirect, incidental or consequential and irrespective of whether any claim is based on loss of revenue, interruption of business, transaction carried out by the User and processed by ICICI Bank, information provided or disclosed by ICICI Bank regarding the User’s Account(s) or any loss of any character or nature whatsoever and whether sustained by the User or by any other person. While ICICI Bank will endeavour to promptly execute and process the transactions as proposed to be made by the User, ICICI Bank will not be responsible for any non-response or delay in responding due to any reason whatsoever, including failure of operational systems or any requirement of law. ICICI Bank will not be liable for any loss, claim or damage suffered by the User and/or any other third party arising out of or resulting from failure of a UPI transaction on account of time out transaction i.e. where no response is received from NPCI or the beneficiary bank to the transaction request and/or where the mobile number or account number of the beneficiary does not exist. Further, ICICI Bank will also not be liable for any loss, damage and/or claim arising out of or resulting from wrong beneficiary details, mobile number and/or account details being provided by the User. Neither ICICI Bank nor its affiliates, directors, officers and/or agents will be liable for any unauthorised persons accessing the records or Account(s) or information through the use of UPI or UPI Plug-in Facility and the User hereby fully indemnifies and holds ICICI Bank, its affiliates, directors and officers harmless against any action, suit, proceeding initiated against it or any loss, cost or damage incurred by it as a result thereof. ICICI Bank will under no circumstance, be held liable to the User if UPI or UPI Plug-in Facility or Partner Application access is not available in the desired manner for reasons including but not limited to natural calamities, legal restraints, faults in the telecommunication network or network failure, or any other reason beyond the control of ICICI Bank. Illegal or improper use of the UPI or UPI Plug-in Facility will render the User liable for payment of financial charges (to be decided by ICICI Bank) or may result in suspension of the UPI or UPI Plug-in Facility to the User. ICICI Bank states that it will have no liability or obligation towards any erroneous transactions getting triggered due to a system bug on the app or system breakdown at TPAP’s or Partner’s end or for any other reasons solely attributable to the TPAP or Partner Application.

All the records of ICICI Bank generated by the transactions arising out of the use of the UPI or UPI Plug-in Facility, including the time the transaction is recorded will be conclusive proof of the genuineness and accuracy of the transaction. For the protection of both the parties and as a tool to correct misunderstandings, the User understands, agrees and authorises ICICI Bank, at its discretion and without further prior notice to the User, to monitor and record any or all telephone conversations between the User/users and ICICI Bank and any of its employees or agents. ICICI Bank expressly disclaims all warranties of any kind, whether express or implied or statutory, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, data accuracy and completeness and any warranties relating to non-infringement in the UPI or UPI Plug-in Facility.

The User/Partner/s agree/s, at his/her own expense to indemnify, defend and hold harmless ICICI Bank, its directors and employees, representatives, agents and its affiliates against any claim, suit, action or other proceeding brought against ICICI Bank, its affiliates, directors and employees, representatives or agents by a third party, to the extent that such claim, suit, action of other proceeding brought against ICICI Bank, its affiliates, directors and employees, representatives or agents is based on or arises in connection with the use of the UPI or UPI Plug-in Facility with reference to :

• a violation of the Terms by the User;

• any deletions, additions, insertions or alterations to or any unauthorised use of the UPI or UPI Plug-in Facility by the User;

• any misrepresentation or breach of representation or warranty made by the User contained herein;

• any breach of any covenant or obligation to be performed by the User hereunder;

• fraud, error, inadequate financial capacity to fulfil obligations and/or provide remedies;

• legal risks including but not limited to exposure to fines, penalties or corrective damages resulting from supervisory actions as well as private settlements due to omissions and commissions of the User;

• against any losses which may be suffered or incurred by the NPCI and that the NPCI compels ICICI Bank to pay, which must arise out of or in connection with the following events, solely to the extent that such events are directly caused by the acts or omissions of the Partners

• false and misleading statements and/or disclosures by Partners, whether or not related to the strategic tie-ups between ICICI Bank and Partners;

• any third-party claim or action against NPCI in connection with the use of UPI services/platform by Partners (and in such an event, besides the obligation to indemnify, Partners will defend and/or NPCI in defending, at the option of ICICI Bank and at the Partners‘ sole cost, such claims or actions); or

• any infringement of intellectual property rights pertaining to the use of the UPI services/platform, irrespective of whether or not NPCI incurs any liability in this regard by virtue of any judgement of a court of competent jurisdiction

• Reliance being placed by ICICI Bank on communication received from TPAP’s/Partner’s system, if such communication was occasioned by any error or malfunction of TPAP’s/Partner’s Application.

The User agrees to pay any and all costs, damages and expenses, including but not limited to reasonable attorneys’ fees and costs awarded against it or otherwise incurred by or in connection with or arising from any such claim, suit, action or proceeding attributable to any such claim. The User hereby agrees that under no circumstances, ICICI Bank’s aggregate liability for claims relating to the UPI or UPI Plug-in Facility, whether for breach or in tort including but not limited to negligence will be limited to the transaction charges/fees or consideration paid by the User within the previous twelve (12) months for the UPI or UPI Plug-in Facility, excluding any amount paid towards transactions.

ICICI Bank will be entitled to sell, assign, securitise or transfer ICICI Bank’s right and obligations under these Terms and any security in favour of ICICI Bank (including all guarantee/s) to any person of ICICI Bank’s choice in whole or in part and in such manner and on such Terms and Conditions as ICICI Bank may decide. Any such sale, assignment, securitisation or transfer will conclusively bind the User and all other persons. The User, its successors and assignees are bound by these Terms. However, the User will not be entitled to transfer or assign any of its rights and obligations under these Terms.

The User may request for termination of the UPI or UPI Plug-in Facility any time by giving a prior written notice of at least <30> days to ICICI Bank. The User will remain responsible for all the transactions made through the UPI or UPI Plug-in Facility until the time of such termination. ICICI Bank may withdraw or terminate the UPI or UPI Plug-in Facility anytime either entirely or with reference to a specific UPI or UPI Plug-in Facility without assigning any reasons whatsoever. ICICI Bank may suspend or terminate the UPI or UPI Plug-in Facility without prior notice, if the User has breached any of these Terms.

The laws of India will govern these Terms and Conditions and/or the operations in the Account(s) maintained with ICICI Bank. Any legal action or proceedings arising out of these Terms will be brought in the courts or tribunals at Mumbai in India. ICICI Bank may, however, in its absolute discretion commence any legal action or proceedings arising out of these Terms in any other court, tribunal or other appropriate forum and the Customer hereby consents to that jurisdiction. The clause headings in these Terms are only for convenience and do not affect the meaning of the relative clause. ICICI Bank may sub-contract and employ agents to carry out any of its obligations hereunder. ICICI Bank may transfer or assign its rights and obligations under this contract to any other entity. ICICI Bank has the absolute discretion to amend or supplement any of the Terms as stated herein at any time and will endeavor to give a prior notice of fifteen (15) days for such changes, wherever feasible. By using the new services, the User will be deemed to have accepted the changed Terms and Conditions. Notices under these Terms may be given in writing by delivering them by hand, on ICICI Bank’s website (www.icicibank.com) or by sending them by post to the last given address by the User and in case of ICICI Bank to its corporate office address. In addition, ICICI Bank may also publish notices of a general nature, which are applicable to all Users in a newspaper or on its website at www.icicibank.com . Such notices will have the same effect as a notice served individually to each User. Notice and instructions will be deemed as served <7> days after posting or upon receipt in the case of hand delivery, cable, telex or fax. Any provision of these Terms, which is prohibited or unenforceable in any jurisdiction will as to such jurisdiction, be ineffective to the extent of prohibition or unenforceability but will not invalidate the remaining provisions of these Terms or affect such provision in any other jurisdiction. ICICI Bank will have the right of set-off and lien, irrespective of any other lien or charge, present as well as future on the deposits held in the Account(s) to the extent of all outstanding dues whatsoever, arising as a result of the UPI Facility extended to and/or used by the User.

• NPCI owns and operates the Unified Payments Interface (UPI) platform

• NPCI prescribes rules, regulations, guidelines and the respective roles, responsibilities and liabilities of the participants, with respect to UPI and UPI Plug-in. This also includes transaction processing and settlement, dispute management and clearing cut-offs for settlement

• NPCI approves the participation of Issuer Banks, PSP Banks, Third Party Application Providers (TPAP) and Prepaid Payment Instrument Issuers (PPIs) in UPI and Partner/Merchant/s in UPI Plug-in

• NPCI provides a safe, secure and efficient UPI system and network

• NPCI provides online transaction routing, processing and settlement services to members participating in UPI and UPI Plug-in

• NPCI can either directly or through a third party, conduct audits on UPI participants and call for data, information and records in relation to their participation in UPI and UPI Plug-in

• NPCI provides the banks participating in UPI, access to systems where they can download reports, raise chargebacks, update the status of UPI transactions etc.

• PSP Bank is a member of UPI and connects to the UPI platform for availing a UPI payment facility and providing the same to the TPAP, which in turn enables the end-user customers/merchants to make and accept UPI payments

• PSP Bank, either through its own app or TPAP’s app, onboards and registers the end-user customers on UPI and links their bank accounts to their respective UPI IDs

• PSP Bank is responsible for authentication of the end-user customer at the time of registration of such customer, either through its own app or TPAP’s app

• PSP Bank engages and on-boards the TPAPs to make the TPAP’s UPI app is available to the end-user customers

• PSP Bank has to ensure that TPAP and its systems are adequately secure to function on a UPI platform

• PSP Bank is responsible to ensure that the UPI app and systems of TPAP are audited to safeguard the security and integrity of the data and information of the end-user customer, including UPI transaction data and UPI app security

• PSP Bank has to store all the payment data including UPI Transaction Data collected for the purpose of facilitating UPI transactions, only in India

• PSP Bank is responsible for giving all UPI customers an option to choose any bank account from the list of Banks available on the UPI platform for linking with the customer’s UPI ID

• PSP Bank is responsible to put in place, a grievance redressal mechanism for resolving complaints and disputes raised by the end-user customer.

Sponsor Bank is a UPI certified member and acts as a channel between the Partner Application and NPCI. PSP Bank/Sponsor Bank is extending a UPI based payment facility to their partners by extending its SDK to the Partner Application.

1. The Sponsor Bank must complete due diligence of partner on-boarding with all pre-requisite documents, as per the requirement prescribed by NPCI in this regard

2. The Bank must only extend the Bank’s own app service to the Partner apps

3. The Parent Application (Bank UPI app) must be certified with NPCI, support interoperability and enabled for all UPI mandatory features, including services provided by their client app (Partner Application)

4. Profiles managed under the Partner Application must be in sync with the Parent Application and guidelines related to non-exclusive handles must comply

5. Users can be on-boarded via the Parent Application or Partner Apps, however the User UPI profile should only be maintained by the Sponsor Bank

6. The Sponsor Bank must ensure compliance on the guidelines issued by the NPCI and regulators

7. The Sponsor Bank must restrict customer sensitive payment information flow to the Partner Application. Only requisite payment information may be shared, which is essential to support payment services

8. As there is no back-office change, the Bank needs to ensure data restriction as per the NPCI/regulator guidelines with such Partners in the back-office reports or files

9. Ensure correct information flow to the NPCI, basis the initiating app (Parent or Partner app) and the relevant app ID details to be passed to NPCI

10. The Sponsor Bank must ensure Data Localisation guidelines by Regulators

11. UPI interoperability to be ensured via the Partner’s Application

12. The Bank developed solution should mandatorily control the information flow to the Partner Application (restrict customer sensitive data flow from the Sponsor Bank SDK to the Partner app)

13. Must ensure that all the user on-boarding activity is managed by the PSP SDK only and not dependent on the Partner Application

14. The Sponsor Bank must ensure there will be no server connectivity or API connectivity with the partners to initiate the payment request. The same will be managed by PSP SDK only. However, the Partner’s server can be used for processing transaction confirmation/ status enquiry related activities

15. Any UPI functionality supported by the Partner Application must be supported by the Parent Application

16. The Sponsor Bank has to ensure that by virtue of UPI integration via UPI Plug-In, the Partner does not have access to customer sensitive data, including personal information and sensitive personal data and information, except as may be required by the merchant to support customers to raise disputes with respect to UPI transactions made using the merchant app. Further, the Partner will not share any UPI transaction data with any other entity without prior consent of the Sponsor Bank and NPCI

17. The Partner Application should provide the option of raising complaints and disputes for transactions initiated by the Partner Bank via this route

18. The Sponsor Bank should have the Unified Dispute and Issue Resolution (UDIR) services which should be integrated by the Partner Application. All the eligible customer complaints and disputes should be routed via UDIR

19. The Sponsor Bank will be liable for all the security mechanism implemented in SDK/ Plug-in including all NPCI defined security checks and validations. Any losses arising out of non-implementation of such processes will be owned by the Sponsor Bank.

20. The Sponsor Bank must ensure the UPI Plug-In SDK will be hosted in the bank Infrastructure only and data communication for payment requests will happen between the UPI Plug-In SDK and the Bank server directly, without routing data to the Partner’s server. However, the Partner’s server can be used for processing transaction confirmation/ status enquiry related activities.

21. The Sponsor Bank must validate and allow only Merchant Payments via this integration

22. NPCI, RBI or any authorised agency must have the right to conduct any audit, seek data and reports and/or copies of agreements between the Sponsor Bank and the Partner.

UPI Plug-In enabled Partner’s applications, customer interface/app for initiating payment. The Partner Application must undertake the following responsibilities;

1. The UPI Plug-In solutions based approach is on the SDK integration approach which will be deployed in the Partner applications

2. The Partner Application must complete due diligence of NPCI and the Sponsor Bank PSP SDK enablement requirements, to enable the UPI Plug-in service

3. While enabling UPI on the Partner Application, the Partner will prominently communicate to the customer/end customers that the UPI based payment facility on the Partner Application is provided by the Sponsor PSP Bank and the Parent PSP Application can be used for full UPI functionality. The Sponsor Bank logo and information that the SDK solution is provided by the Sponsor Bank should be prominently shown when the User is initiating UPI payment via the Sponsor Bank SDK

4. The Partner Application must ensure to comply with the relevant guidelines/circulars issued by NPCI and regulators under the proposed framework

5. The Partner Application should provide the option of raising complaints and disputes for transactions initiated by the Partner Bank via this route. The Sponsor Bank SDK should have the UDIR services which should be integrated by the Partner Application. All the eligible customer complaints and disputes should be routed via UDIR

6. The Partner Application has to comply with the interoperable guidelines and provide other UPI payments as an option to customers via intent or collect-based payment mode

7. Following are the minimum requirements that need to be supported by the Partner Application;

• UPI app customers being the end-users can raise a complaint with respect to a UPI transaction/UPI Plug-in transaction on the PSP app/TPAP app

• End-Users can select the relevant UPI transaction/UPI Plug-in transactions and raise a complaint in relation thereto

• A complaint will be first raised with the relevant TPAP/Partner Application with respect to all UPI related grievances/complaints of the end-users on-boarded by the PSP Bank/ TPAP (if the UPI transaction is made through TPAP app)/by the Partner. In case the complaint/grievance remains unresolved, the next level for escalation will be the PSP Bank, followed by the bank (where the end-user maintains his/her account) and NPCI, in the same order. After exercising these options, the end-user can approach the Banking Regulator and/or the Regulator for Digital Complaints, as the case may be

• The complaint can be raised for both types of transactions i.e. fund transfers and merchant transactions. For UPI Plug-in, complaints can be raised for merchant transactions only

• The end-user will be kept informed by the PSP/TPAP/Partner by means of updating the status of such end-user’s complaint on the relevant Partner Application itself.

The User will comply with all applicable laws and understand the usage of the UPI Facility/UPI Plug-in, in addition to the Terms and Conditions applicable to ICICI Bank Accounts, when the UPI ID is linked to an ICICI Bank Account.

The User has to understand that the UPI Facility/UPI Plug-in Facility may become unavailable due to support/technical upgradation or maintenance work, in order to update the content or for any other reason.

The User understands that these Terms may be amended or supplemented at any time by hosting the same on its website i.e. www.icicibank.com (“Website”) or in any other manner as decided by ICICI Bank. The User shall be responsible for regularly reviewing these Terms and the amendments thereto as may be posted on the Website.