One thing worth spelling out in your docs: P2P cash-out routes to PKR face FIA scrutiny, can expose innocent users to stolen funds, and banks may close accounts if virtual asset activity is detected. Saying plainly who carries that risk would help.