Fraud, Abuse, Account Security & Responsible Disclosure Policy

1Introduction & Scope

This policy explains how HmperCo identifies, investigates, and acts on fraud, abuse, unauthorised access, and security vulnerabilities affecting the Platform.

2Legal Framework

• Cybercrimes Act 19 of 2020 — criminalises unlawful access to, and interference with, data and computer systems, and unlawful acquisition, possession, or use of another person's personal information for fraudulent purposes.
• Prevention of Organised Crime Act 121 of 1998 ("POCA") — governs money laundering and racketeering offences relevant to organised return-fraud or payment-fraud rings.
• Financial Intelligence Centre Act 38 of 2001 ("FICA") — informs HmperCo's and its payment provider's anti-money-laundering diligence.
• Electronic Communications and Transactions Act 25 of 2002 ("ECTA") — sections 85–89 (as complemented by the Cybercrimes Act) address unauthorised access to and interception of data.
• Protection of Personal Information Act 4 of 2013 ("POPIA") — governs how HmperCo processes personal information gathered during a fraud investigation.

3Types of Fraud & Abuse Covered

This policy addresses, among other things: identity theft and account takeover; payment fraud and illegitimate chargebacks; Voucher fraud; returns fraud and abuse; SnS and Stokvel fraud (including fabricated member consent); creation of multiple/fake accounts to exploit promotions; counterfeit product claims; unauthorised access, hacking, or scraping of the Platform; and malicious interference with Platform security.

4Detection & Investigation

HmperCo uses a combination of automated monitoring and manual review to detect suspicious activity. Where an Account, Order, Voucher, or transaction is flagged, HmperCo may place it on hold pending investigation, and may request additional verification from you before proceeding.

5Account Action

Where fraud or serious abuse is confirmed, HmperCo may: cancel or reverse the relevant transaction(s); suspend or terminate the Account(s) involved, in accordance with clause 13 of the Master Terms; withhold or recover amounts owed as a result of confirmed fraud; and, where appropriate, restrict future re-registration. HmperCo will explain its reasoning to you where reasonably possible, save where doing so would prejudice an investigation.

6Law Enforcement Cooperation

Where HmperCo reasonably believes a criminal offence has occurred (for example, under the Cybercrimes Act or POCA), it may report the matter to the South African Police Service or other relevant authority, and will cooperate with lawful requests for information from law enforcement, subject to POPIA.

7Responsible Security Disclosure

If you discover a security vulnerability on the Platform, please report it responsibly to info@hmperco.co.za before disclosing it publicly, providing enough detail for HmperCo to reproduce and assess it. Please do not exploit a vulnerability beyond what is necessary to demonstrate it, access data that is not yours, or disrupt the Platform's operation. HmperCo will acknowledge good-faith reports and will not pursue legal action against researchers who comply with this responsible-disclosure approach.

8How to Report Suspected Fraud

If you suspect fraudulent activity on your Account or elsewhere on the Platform, report it immediately to info@hmperco.co.za with as much detail as possible.

9Contact Details