SYSTEM INTRODUCTION

0. Introduction

Payment Services Specified in the First Paragraph of Article 12 of Law No. 6493

• a) All operations necessary for the operation of the payment account, including services that
allow money to be deposited into the payment account and withdrawn from the payment
account. (License that provides customers with wallet creation, depositing/withdrawing
money from wallet to wallet, enabling transfers from wallet to wallet. Like mobile banking...)

• b) Transfer of funds in the payment account held by the payment service user with the
payment service provider, including one-time direct debit transactions, payment transactions
made with a payment card or similar instrument, and money transfers including standing
payment orders. (License for transactions with card and/or POS.)

• c) Issuance or acceptance of a payment instrument. (License to make payments with money

in the wallet, electronic money transfer to banks or elsewhere. With this license, an IBAN is
provided to the customer. Remittance/EFT. Like mobile banking...)

• ç) Money remittance. (Refers to hand-to-hand, hand-to-account, or account-to-hand

transfers.)

• e) Services for intermediating bill payments.

Electronic Money Issuance Specified in Article 18 of Law No. 6493

It is the license for the money deposited in the wallet to be considered electronic money. With this
license, the money in the wallet can be traded between parities such as gold, foreign currency, etc.
Without this license, the above licenses cannot be operated!

1. About the Company

• Company Name: SPT Inc.

• Field: Development of electronic money and payment services and financial technology
products.

• Competency: Licensed infrastructures, domestic and customizable modules, advanced

security and regulatory compliance.

2. Product Portfolio Overview

Products

Product Name Description

Offers features such as balance management, money loading/withdrawal, IBAN

Electronic Wallet
viewing, and tracking past transactions for users.

Bill Payment Provides the opportunity to pay bill items such as electricity, water, natural gas,
Module mobile, internet, etc., directly through the system.

Offers payment collection infrastructure to member businesses with physical

POS Module
POS and virtual POS (vPOS) solutions.
Product Name Description

Money Includes money sending/receiving via domestic and international

Remittance representatives, code-based collection structure, representative-based
Module transaction management.

CRM Module Provides detailed control panels such as authorization, user management,
(Admin) transaction tracking, representative limit and commission definition.

Reporting Module
Data analysis and reporting tools to monitor system performance.
(Admin)

Admin Panel and Management Systems

• Data Center & Security: Data is held in domestic data centers in compliance with ISO 27001
and PCI-DSS. 7/24 monitoring, backup, and disaster recovery (DR) structure is available.

3. Detailed Product Introduction

3.1. Electronic Wallet Module

The electronic wallet module enables users to manage money in a digital environment. This
structure, which works integrated via mobile, web, and API, offers the following comprehensive
features:

Basic Features

• Money Transfer with IBAN (EFT/Remittance): External bank transfers can be made through
TR IBAN definition specific to the user.

• Payment/Receipt with QR Code: QR code can be generated to receive instant payment or

make payment to another user.

• Transfers Between Wallets: Free, instant transfer opportunity between users within the
same platform.

• Money Loading: Balance can be loaded with credit card, debit card, or remittance.

• Money Withdrawal: User can withdraw their balance to their own bank account.

• Balance Viewing: Real-time balance update.

• Transaction History: All transaction records are listed with timestamp and can be filtered.

• Virtual Card Creation (Optional): Single-use or time-limited virtual cards can be generated
on behalf of the user (with Visa/MasterCard integration).

• Push Notifications and SMS/Email Alert System: Instant notification on transactions.

Security Features

• 2FA (Two-step verification with SMS/OTP)

• IP & Device Control

• Suspicious Transaction Detection (Rule-based / ML supported option)

 • PCI-DSS Compliant Card Data Management (Tokenization, masking)

3.2. Bill Payment Module

With this module, users can make their bill payments directly through the application or system.
Integrations and automation structure include the following features:

Basic Functions

• Automatic Bill Query: Debt query is made with the user's GSM, subscription, or meter
information (via API integration).

• Bill List Display: Debts are shown to the user in detail.

• Bulk Payment Support: Supports payment of multiple bills with a single transaction.

• Registered Bill Definition: Registered bill items can be defined on behalf of the user and paid
without re-query.

• Receipt Creation After Payment: Digital receipt or PDF output can be obtained.

Operation and Management

• Service Provider Integration: Integration with live systems such as E-Kent, ICRON, EasyCep,
etc.

• Commission Definition: Management of service fee to be charged to the user.

• Reporting: Monthly payment statistics, service failure reports, transaction success/failure

logs.

3.3. POS (Payment Point) Module

The POS module includes both physical and virtual POS solutions. It is optimized for member
businesses to accept card payments.

Virtual POS Features

• Payment Page / API Integration: Can be connected to e-commerce sites via REST API or
iframe.

• 3D Secure Support: Mandatory identity verification for secure payment processes.

• Installment Payment Support: Bank-based installment options.

• Campaign Management: Integration with bank campaigns (World, Bonus, Axess, etc.).

• Partial Deduction and Deferral: Partial deduction of payment amount or future-dated

deduction.

Physical POS Features

• Contactless Payment / Payment with QR

• Cash Register-POS Integration

• Hardware Support: SDK support for Android POS devices.

Managerial Features
 • POS Application Management

• Commission Definition Based on Business Place

• POS Reports & Daily Transaction Summaries

• Refund & Cancellation Transactions

3.4. Money Remittance Module

It is a domestic/international money transfer system. It operates in an agent-to-agent model. The

user can receive or send money with identity information and transaction code.

Sender Side

• Identity information, address, and contact details are taken.

• Sending country, representative, and currency are selected.

• The system automatically calculates commission and total amount.

• After transaction approval, a tracking code is generated.

Receiver Side

• Tracking code and identity verification are performed.

• Representative to make payment is selected.

• The system records to the transaction history.

Representative Management

• Distinction between internal and external representatives (location-based).

• Daily transaction limit, commission rate, currency authorities specific to the representative.

• Transaction tracking and managerial approval processes.

Security & Compliance

• MASAK Compliant Suspicious Transaction Notification

• Identity Verification (NFC reading, OCR supported)

• Secure Collection with Transaction Code

• Instant Transaction Verification and SMS Notification

3.5. Admin Panel Features

It is a central control panel where internal authorities can manage all systems.

General Competencies

• User Management: Active users, blocking, verification control.

• Representative Management: Commission, limit, transaction-based filtering.

• Reporting: Detailed reports based on date, transaction type, user.

 • Dashboard: Real-time transaction status, system health, and log graphics.

• Authorization: Role-based access such as admin, operations, finance, customer services.

Advanced Features

• Log & Activity Monitoring: Recording of every transaction.

• Campaign / Reward Definition: Integration of bonus, reward, loyalty system.

• Automation: Triggers for routine operations.

• Alerts & Alarms: Transaction failure, system-out-of-bound behavior detection.

3.6. Data Center and Security Structure

Systems operate in domestic data centers compliant with ISO 27001 and PCI-DSS.

Hosting Infrastructure

• Location: Domestic Tier 3+ level data center.

• Load Balancing (Failover): Automatic switch to backup center in case of main center failure.

• Backup: Daily full backup, weekly off-site backup, cloud backup support.

• SLA: 99.9% uptime guarantee, 7/24 monitoring.

Security and Compliance

• KVKK Compliance: Secure processing and storage of personal data.

• PCI-DSS Compliance: Mandatory security standards for card payment systems.

• ISO 27001: Information security management system.

• WAF (Web Application Firewall) and IDS/IPS Systems

• SIEM Integration: Central collection and analysis of all logs.