Transport security
All connections to HafilatPass use TLS 1.3 with modern cipher suites. The site sets strict transport headers and does not load third-party scripts.
Card data
Card details are entered on the processor's PCI-DSS compliant billing page. HafilatPass does not receive, log, or store card numbers on this site.
Request data
The card serial, amount, and email you submit are passed to the processor together with the request and are not kept on our site after the top-up completes.
Reporting an issue
If you believe you have found a security issue, please write to security@hafilatpass.com. We reply within one working day and coordinate a fix quietly.