Balikan - Loyalty Platform with Second-Person Approvals and Fraud Rules

Dashboard, members, member detail with all 8 tabs, adjustment approvals and fraud alerts. Each of the 24 demo members opens its own record with a points ledger and the earn calculation behind every entry.

Every manual change to a balance waits for a second person. The raiser cannot approve their own adjustment, and anything above 2,000 points escalates to the programme manager.

Shared QR at distant stores (more than 5 km apart within 30 minutes), too many earns per day, staff self-earn, many accounts on one device, referral rings, redemption right after an adjustment and unusual cancel-and-refund patterns.

3 tiers, 22 of the 60 stores, 8 staff users, 13 adjustments, 11 fraud alerts, 8 support cases and 4 privacy requests, priced in PHP on Manila time.

Balances Changed Without a Trace

Support typed points into accounts with no reason and no second check, and nobody noticed when one account received 40,000 points in a month. Every balance has to come from an append-only ledger, with each manual change reasoned, approved and audited.

Abuse at the Counter

Shared QR codes used at stores kilometres apart, crew earning on their own sales, many accounts on one phone and referral rings all cost real money. The rules have to catch them on each till post without stopping the sale.

Consent and Privacy by Law

Under the Data Privacy Act, marketing, profiling for personalised offers and partner sharing each need specific, recorded consent with its version and timestamp. Members can access, correct, object to, erase and export their data, and app store rules require account deletion inside the app.

A Liability Finance Can Defend

Under PFRS 15, points earned on a sale are generally a separate performance obligation. Head office could not say what unredeemed points were worth when the auditors asked, and expiry has to follow the published terms, with members warned before points lapse.