top of page

 

Privacy Policy

Last Updated: 15.12.2025

LLC “ZetPlat” (Payment Organization and Payment System Operator License No. 2060040225, issued on 04.02.2025 by the National Operator of the Kyrgyz Republic) is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and how we safeguard it.

1. What This Policy Covers

This Policy is prepared in accordance with the laws of the Kyrgyz Republic.
It applies whenever you provide your personal data to us through the website, mobile applications, forms, or any other channels.

We process your data strictly within the scope of the applicable legislation and only for the purposes outlined below.

2. Personal Data We Collect

We process personal data only of Users of our services.

We may collect and process the following information:

  • Full name;

  • Date and country of birth;

  • Photograph;

  • Residential address;

  • Passport details (series, number, issuing authority, issue date);

  • Phone number and e-mail address;

  • Cookies;

  • Any data you voluntarily provide.

We process only the data necessary for the purposes stated in this Policy.
We do not process excessive or irrelevant information.

Special categories of data (religion, health, political or philosophical beliefs, etc.) are processed only in cases explicitly permitted by law.

3. Purposes of Data Processing

Your personal data may be processed for the following purposes:

Main Purposes

  • Sending notifications, messages, and information;

  • Concluding, performing, and terminating contracts;

  • Providing access to our services, functions, and materials available on the website.

Legal Compliance Purposes

  • Compliance with the Law of the Kyrgyz Republic No. 87 of August 6, 2018
    “On Counteracting Financing of Terrorist Activities and Legalization (Laundering) of Criminal Proceeds” (AML/CFT).

  • Conducting identification, verification, and monitoring procedures required under AML/CFT legislation.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Constitution of the Kyrgyz Republic;

  • Civil Code of the Kyrgyz Republic;

  • Law of the Kyrgyz Republic “On Personal Information”;

  • Law of the Kyrgyz Republic No. 87 of August 6, 2018 “On Counteracting Financing of Terrorist Activities and Legalization (Laundering) of Criminal Proceeds”;

  • Law of the Kyrgyz Republic No. 21 of 21.01.2015 “On the Payment System of the Kyrgyz Republic”;

  • Regulation on the Regulation of the Activities of Payment Organizations and Payment System Operators, approved by the Resolution of the Board of the National Bank of the Kyrgyz Republic dated 30 September 2019 No. 2019-P-14/50-2-(PS)

  • Contracts concluded between you and LLC “ZetPlat”;

  • Your consent, where required;

  • Internal corporate regulations.

5. How We Process and Protect Your Data

We may process data both automatically and manually.
Processing includes collecting, storing, updating, organizing, blocking, deleting, and destroying personal data.

Consent

Your data is generally processed based on your consent, unless the law allows processing without it.

Third-Party Transfers

We may transfer your data to third parties only:

  • with your consent;

  • strictly for the purposes stated in this Policy;

  • provided that the recipient ensures confidentiality and data protection.

Security Measures

We apply legal, organizational, and technical measures to protect your data from:

  • unauthorized access;

  • accidental loss;

  • alteration;

  • destruction;

  • unlawful distribution.

Retention Period

We store personal data only for the period necessary to achieve the stated purposes or if required by law.
Retention periods may be extended only in your interest or on a legal basis.

6. Your Rights

You have the right to:

  • request information about the personal data we process;

  • request corrections or updates;

  • demand blocking or cessation of unlawful processing;

  • contact the authorized state body for personal data protection.

Our obligations:

We must:

  • respond to your request within 7 days;

  • provide access to your data if you are legally entitled to it;

  • delete your personal data within 2 weeks once the retention period expires or the processing purpose is achieved, unless their further retention is required for the purposes of complying with the Law of the Kyrgyz Republic No. 87 dated 06 August 2018 ‘On Counteracting the Financing of Terrorist Activities and the Legalization (Laundering) of Criminal Proceeds’ or for the purposes of protecting our legitimate interests in legal proceedings.

7. Amendments to This Policy

We may update this Privacy Policy from time to time.
A new version becomes effective once published on our website.
The date of the latest update will always be displayed at the top of the page.

bottom of page