One Co-branded credit card Tokenisation – Terms & Conditions
1. Introduction
These terms and conditions (“T&Cs”) along with the Credit Card Terms located at
https://www.getonecard.app/ govern your use of the “One Co-branded credit card Tokenization”
feature within the OneCard app (where FPL acts as a merchant) which is operated and
managed by FPL Technologies Private Limited and may include its affiliates (“FPL”/ “Company”
/ “we” / “us” / “our”). As per RBI mandate starting 1st October 2022, actual card number, CVV and
Expiry date and any other sensitive information related to cards cannot be stored by merchants or
payment aggregators/gateways for processing online transactions. Hence, the card numbers be
replaced with Token as mentioned below. By accessing this feature, you agree to comply with these
terms and be bound by these T&Cs.
2. Definition of Tokenisation
Tokenization refers to the replacement of your actual card details (such as card number, CVV,
and expiry date) with an alternate unique code called as “Token”, enhancing security for
transactions within OneCard app’s ecosystem.
3. User Consent & Authorization
In the event, if you wish to save the card as per new RBI guidelines then:
You must provide explicit consent before your card can be tokenized i.e. by initiating a
request on the OneCard app.
Total number of ‘COINS’ earned by participants will define the ‘Rank’
of the participants in the leaderboard. Higher and faster the ‘COINS’
are earned, the better the ‘Rank’.
Consent will be recorded and stored as per regulatory guidelines.
You can revoke your consent at any time via the OneCard app i.e. perform the de-
tokenisation.
We as a token requestor will forward the request to the payment gateways which, with
the consent of the card issuer, will issue a token corresponding to the combination of
the card, to us, and the device.
4. Scope of Token Usage
Your tokenized One Co-branded credit card will be used for transactions where we act
as the merchant, such as:
OneStore/Gift card purchases
Bill payments via Bharat Connect
Mobile recharges
Rent payments
This token cannot be used outside OneCard app's ecosystem.
5. Multiple Token Handling
Each card may have a separate token for different payment networks (e.g., VISA,
RuPay) or different Payment Gateways (RazorPay, PayU, etc)
If multiple tokens exist, the system will prioritize transactions using the most beneficial
token.
If a card is used without a token, Users will be prompted to tokenize it.
Rent payments
6. Security & Fraud Protection
Tokenization ensures that actual card details are never stored or shared, reducing
the risk of fraud and data breaches.
Tokens are encrypted and accessible only by authorized payment processors.
We do not store your original card details once the card is tokenized.
7. Token Expiry & Management
Tokens are automatically activated upon successful consent and generation.
Expiry of tokens will follow card network or Payment Gateway policies. You will be
notified before token expiration.
If your card expires, is replaced, or is blocked, a new token must be generated.
Users can delete a tokenized card from the OneCard app at any time.
8. Notification & Alerts
You will receive notifications for:
Successful tokenization
9. Reporting & Monitoring
You can view their tokenized cards via the Card Tokens Dashboard in the OneCard
app.
We reserve the right to audit and suspend tokens in case of suspicious activity.
10.Compliance with Regulatory Guidelines
Tokenization follows the Reserve Bank of India (RBI) guidelines for card security.
You are required to accept RBI-compliant terms before enabling tokenization.
We may update these terms from time to time as per regulatory updates.
11. Limitation of Liability
We are not responsible for:
Transactions declined due to tokenization errors from third-party networks or
payment gateways.
Any loss due to unauthorized use of a tokenized card after consent is provided.
Failure to process payments if tokenization is disabled by you.
You shall be solely liable for all losses in case of misuse of the tokenised One Co-
branded credit card by someone who obtained access to the device/ tokenised One
Co-branded credit card with the consent of the User.
12. Opt-Out & Deactivation
You can opt out of tokenization at any time by:
Deleting the tokenized card in the OneCard app.
Contacting OneCard support for assistance.
13. Modifications to Terms
We reserve the right to modify these T&C’s at any time.
14. Contact & Support
For any queries regarding tokenization, you can reach out to OneCard Support through:
In-app chat support
Customer care helpline
Email support
Capitalised terms used herein, but not defined, shall in the context of the One Co-branded Credit
Card, have the meaning assigned to such terms in the Terms and Conditions and the MITC located
at https://www.getonecard.app/ under Credit Card Terms.