merchant-agreement

(j) observe and implement the fraud prevention procedures set out in the NAB
Credit Card Fraud Prevention booklet and any other fraud prevention material
we provide you including the fraud prevention pack, fraud prevention video and
fraud prevention fl iers. You must also observe and implement any fraud prevention
techniques demonstrated to you by us in any training sessions.
UnionPay card terms and conditions
3.5. Consistent with clause 3.2, this clause prevails over any other inconsistent provisions
of this agreement. You agree that:
(a) UnionPay card transactions have a fl oor limit of zero and can only be processed and
authorised electronically not manually or in fallback mode; and
(b) a UnionPay card can only be processed on a UnionPay terminal by swiping the card
through that terminal in the presence of the UnionPay cardholder; and
(c) pre-authorisations on a UnionPay cards must be evidenced by the UnionPay card
holder signing a pre-authorisation receipt or a transaction receipt as applicable; and.
(d) a UnionPay card transaction can only be refunded if:
(i) the transaction is refunded to the UnionPay card used in the original sales
transaction and in the presence of the UnionPay cardholder; and
(ii) the UnionPay card holder used their PIN and signed the transaction receipt
in both the original UnionPay card transaction and the refund transaction; and
(iii) details of the original sales transaction match the details of the refund
transaction; and
(iv) any other requirements set out in the UnionPay User Guide have been followed;
and
(e) a UnionPay card transaction must not be processed to give the UnionPay cardholder
cash; and
(f) if the transaction involves the delivery of goods or services you must retain evidence
of that delivery by, amongst other things, retaining a copy of the delivery invoice
noting expected delivery date on the original copy; and
(g) a UnionPay card holder must enter their PIN in connection with a debit transaction
but subject to clause 3.4(d)(ii) asking for a PIN is otherwise optional.
Data security standards
3.6. You acknowledge and agree:
(a) you must protect stored cardholder data, regardless of the method used to store such
data. Data storage also includes physical storage and security of cardholder data.
Some examples of other data storage which must be secured include an access or
excel database and hard copy fi les. Storage should be kept to the minimum required
for business, legal, and/or regulatory purposes; and
33