1. Data Collection We collect and process personal data (Individual Identification Number (IIN), Full Name, payment details) solely for the purposes of executing contracts and complying with the legislation of the Republic of Kazakhstan on AML/CFT.
2. Data Localization In accordance with the Law of the Republic of Kazakhstan “On Personal Data and their Protection”, all databases are hosted on servers physically located within the territory of the Republic of Kazakhstan.
3. Security Measures We use AES-256 encryption for data at rest and TLS 1.3 for data in transit. We do not store full bank card details; we use tokenization via our licensed payment partners.
4. Third-Party Disclosure We do not sell your data. Data may be transferred to government bodies (State Revenue Committee) only when required by law for tax reporting purposes.