Business Continuity and Emergency Contact Information
1. PurposeThis procedure has been prepared within the scope of the Paribu Business Continuity Processes — designed to ensure that the information systems operating within Paribu Kripto Varlık Alım Satım Platformu A.Ş. (Paribu Crypto Asset Trading Platform Inc.) ("Paribu"), the trading platform service, and customer communication processes can be sustained without interruption in extraordinary situations — to inform customers about what the possible risks may be, what kind of measures are being taken by Paribu in respect of these possible risks, the actions that will be taken by Paribu in such situations, what possible risks customers may be exposed to in respect of their personal information and assets, and what customers can do to prevent these possible risks.
2. Emergency Contact Information
Paribu Support: https://www.paribu.com/destek
Website: https://www.paribu.com
Operations status check: https://status.paribu.com
Call Center: +90 850 303 60 00
3. Information Security Risks to Which Paribu May Be Exposed
Information security risks to which Paribu may be exposed cover risks that may result in financial losses for Paribu or its customers, or in the disclosure of data / data falling into the hands of unauthorised third parties, as a result of inadequate or violated measures aimed at ensuring the confidentiality, integrity, and availability of Paribu's financial data — primarily — as well as company-secret data and the personal and financial data of its customers.
Some of the possible risks regarding the failure to ensure the confidentiality, integrity, and availability of data, and the measures taken by Paribu in respect of these risks, are set out below. The risks to which Paribu may be exposed are not limited to these only.
Unauthorised access; any kind of activity and attempt by any person other than users with access and transaction authority to Paribu information systems that may result in leaking, modifying, or deleting information in Paribu information systems is considered unauthorised access.
Malware attacks; these are types of attacks in which malicious persons aim to cause service interruptions and data leakage by targeting the system infrastructure with methods such as malware, ransomware, or distributed denial-of-service (DDoS) attacks.
Infrastructure-related risks; data losses that may occur as a result of the inability of infrastructure systems such as electricity, internet, servers, etc. — required for the uninterrupted operation of Paribu information systems — to provide service due to any failure or disaster, are considered infrastructure-related risks.
Risks arising from outsourced services and integrations; information security violations and vulnerabilities that may occur in any service, service provision, or integration outsourced regarding Paribu information systems are evaluated within this category.
4. Measures Taken by Paribu to Mitigate Information Security Risks
The basic measures taken by Paribu in respect of information security risks to which it may be exposed are set out below. The measures Paribu has taken or will take in respect of risks to which it may be exposed are not limited to these only.
- Establishing information security policies and procedures.
- Defining access authorisations in accordance with the principles of segregation of duties and least privilege.
- Conducting regular risk assessment studies for risks that may be exposed to.
- Conducting regular information security controls.
- Conducting various training sessions to increase the awareness of our employees against current types of attacks.
5. Physical Risks to Which Paribu May Be Exposed
Physical risks to which Paribu may be exposed are extraordinary situations that may occur in the working environments of Paribu employees or in the physical areas where Paribu information systems are located. The physical risks that, in the event they occur, are assessed as having a high probability of disrupting the services provided by Paribu or rendering them unavailable are set out below:
- Fire
- Earthquake
- Flood
- Civil Unrest
- Terrorist Acts, Sabotage
- Epidemics
- Workplace Accidents
6. Measures Taken by Paribu to Mitigate Physical Risks
In order to minimise the effects of physical risks on Paribu's operations, the business continuity process has been structured and a Recovery Plan has been established for possible emergency situations. Within the scope of this plan, employees who will take part in critical processes have been identified and their responsibilities have been defined. When an emergency or unexpected situation is encountered, employees are ensured to act in line with the determined plan. This plan is reviewed and updated as necessary.
7. Information Security Risks to Which Customers May Be Exposed
The information security risks to which Paribu customers may be exposed in respect of their personal data and assets contain threat elements aimed at the failure to ensure the confidentiality, integrity, and availability of customer data. These risks are of critical importance both for the security of customer data and for the operational continuity of the platform.
The most frequently encountered possible risks regarding the failure to ensure the confidentiality, integrity, and availability of our customers' data are set out below; it is important to be aware that the possible risks to which our customers may be exposed are not limited to these only, and that, in case our customers have any suspicions regarding the security of their personal data and/or assets, they should contact Paribu without delay through the communication channels set out under the heading "Emergency Contact Information and Channels" of this procedure.
Use of weak passwords; customers using simple, easy-to-guess passwords or using the same password across multiple systems may lead to customer accounts being compromised.
Social engineering attacks; customers being exposed to social engineering attacks such as phishing via fake calls, SMS, or email may result in customer information such as username, email, password, etc. being seized by malicious persons.
Unauthorised access to customer accounts; customers sharing the email, phone number, and password they use to access the Paribu platform — for any reason — may lead to customer accounts being used outside of their own information.
Use of outdated systems; the failure to apply security updates to the devices customers use to access the Paribu platform may lead to the email, phone number, and password used by the customer to access the Paribu platform being seized by malicious persons.
8. Measures Customers Can Take to Mitigate Information Security Risks
Measures customers can take in respect of the information security risks to which they may be exposed are set out below. The measures our customers can take in respect of risks to which they may be exposed are not limited to these only.
- Use strong and unique passwords.
- Enable two-factor authentication (2FA).
- Use official channels to communicate with Paribu.
- Be cautious against phishing attacks.
- Ensure device security.
- Regularly monitor account activities.
- Do not share personal data with anyone.
9. Emergency Contact Information and Channels
In emergency and unexpected situations, 24/7 support service is provided so that our customers can quickly reach Paribu. Our customers can reach Paribu through Paribu Support — available on the Paribu website and the mobile app — or via phone at 0850 303 60 00.
In the event of extraordinary situations such as economic, political, technological, or systemic events that may cause sudden and unexpected fluctuations in market prices, lack of liquidity in the market, suspension of trading, technical failures affecting the operation of platforms, cyber attacks, or natural disasters, related explanations and the measures taken in this scope will be shared on the Paribu website (www.paribu.com) and other announcement channels.
10. Ensuring Business Continuity in Emergency and Unexpected Events
The necessary response and action plans prepared within the scope of the Paribu Business Continuity Processes have been determined; in any extraordinary event that may affect the continuity of the services provided by Paribu, the necessary actions will be taken within the scope of the Paribu Business Continuity Processes.