Security Policy

1. Secure Transmission of Card Details

• Every page on this website is served over HTTPS, encrypting all data in transit with industry-standard TLS.
• Card details are entered on and transmitted directly to the Bank of Maldives (BML) PCI-DSS compliant gateway. Full card numbers, expiry dates and CVV/CVV2 values are never stored on, or transmitted through, our own servers.
• Eligible transactions are protected by card-scheme authentication (3-D Secure / Authenticated Payment Program).

2. Our Security Capabilities

• Payment confirmation is captured server-to-server via a verified BML webhook and re-checked against BML's API, so order status cannot be spoofed by a browser.
• Role-based access control and authentication for all administrative access.
• CSRF protection, server-side validation and secure session handling on all forms.
• Download links are tokenised, time-limited and only issued for paid orders.
• Regular updates of the platform and dependencies.

3. Your Part in Staying Safe

• Check the address bar shows https:// before entering payment details.
• We recommend you retain a copy of your transaction records and a copy of our policies and rules.
• Never share your card PIN, full card number or one-time passwords with anyone, including our staff.

4. Reporting a Concern

If you suspect unauthorised use of your card or a security issue with this website, contact us immediately at info@thaksphoto.com / +960 9992333 and notify your card issuer.