Loyalty

Pursuant to the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V "On Personal Data and Their Protection" and, where applicable, the laws of the Astana International Financial Center (hereinafter referred to as the AIFC) in the field of data protection, as well as legal acts adopted in accordance therewith (hereinafter referred to as the Applicable Laws), I hereby give my consent to: 

1. the collection and processing of Data (as defined in paragraph B of this Consent) through: 
(a) registration and (or) authorization of the Subject on the website (in the mobile application) of the Operator or in another electronic resource of the Operator; 
(b) signing the Consent in hard or soft copy in any way, not limited to affixing a signature (handwritten), using an electronic digital signature, or a one-time code (one-time password) sent by the Operator or its agent to the Subject's mobile phone number by SMS or in a web or other application by push notification; 
(c) visiting the Operator's offices, where applicable; 
(d) visiting the Operator's electronic resources, including by accepting Cookies or other policies, protocols, software and hardware that can record the Subject's data; 
(e) using the Operator's products or services. 

2. the transfer of Data, not limited to personal data, data constituting a banking secret, an insurance secret, a commercial secret in the securities market and other legally protected secrets in favor of the Operator's affiliates, the Operator's agents, and any other third parties (hereinafter collectively referred to as "Third Parties"), when the provision of Data is required by law, for the provision of products and services by the Operator or Third Parties to the Subject, or for the purpose of fulfilling obligations under the agreement between the Operator and the Third Parties. The Subject agrees that the Data may be entered in the databases of the Operator or Third Parties, where the personal data of the Subject may subsequently be processed without any participation of the Operator; provided that the Operator undertakes to require Third Parties to ensure the confidentiality of the transferred Data; 

3. cross-border transfer by the Data Operator outside the territory of the Republic of Kazakhstan and the territory of the AIFC to the territory of states in cases where it is necessary for the purposes of collecting and processing the Data stated in this consent. 

The Subject agrees that the states to which the Data may be transferred may have conditions and requirements for storing the Data lower than those provided for by applicable laws of the Republic of Kazakhstan / AIFC, and the Data Operators in these states will not be able to provide them with adequate protection. 

A. In this Consent, "Data" shall not be limited to data/information related to a Subject identified or identifiable on their basis, recorded on electronic, paper and/or other tangible media, including, but not limited to: last name, first name and patronymic (if any); transcription of the name; individual or other identification number (if provided by the Subject to the Operator); full date of birth; details of the identity document (if provided by the Subject to the Operator) and other documents (passport, driver's license, etc.); certificates from government agencies (medical, drug rehabilitation institutions, etc.); phone number; email address; residential address; image of the Subject (photograph, account picture, etc.) (if provided by the Subject to the Operator); biometric data; identifiers (name of accounts and identifiers selected by the Subject); phone book contacts (when using the Operator's/Third Parties' mobile applications); images from the Subject's device camera; digital documents; audio recording from the mobile device microphone; the Subject's device model and data on its operating system and browser and/or type of Internet connection; the market segment to which the Subject belongs; information about the Subject's tax residency and tax identifier; records of communications with the Operator's customer support and sales representatives; information identifying the Subject's device; public comments by the Subject posted on websites; data on the Subject's location obtained via IP address and/or via e-SIM and/or SIM card and/or via GPS (global positioning system); information about websites visited by the Subject; information about purchases made by the Subject on the Internet and other metadata for analytics (cookies, etc.); content posted by the Subject or viewed by him/her on the Internet; as well as publicly available information about the Subject from social networks; information/data constituting a banking secret, an insurance secret, a commercial secret in the securities market, and other legally protected secrets; information/data that may be received by the Operator from or in relation to the Subject. 

B. The Subject's data is collected and processed for the purpose of (the list is not exhaustive): operations of the Operator and Third Parties related to providing financial services, carrying out marketing and advertising activities, research, promotions, providing (forwarding) to the Subject any information materials, including about products and (or) services and (or) offers of the Operator and Third Parties, as well as other notifications by phone, fax and other types of communication, as well as through open communication channels (including SMS, e-mail, push notifications, voice messages, remote access systems, social networks, etc.), for payment using QR codes or barcodes, for selecting the recipient of payment or service from the phone book contacts, for displaying the account picture/photo of the Subject in the mobile application of the Operator and/or Third Parties, for receiving and providing digital documents of the Subject to/from the digital document service(s), for voice communication with representatives of the Operator/Third Parties; for delivery of goods and provision of services to the Subject; for conducting checks by the Operator/Third Party related to compliance with legal requirements for combating legalization (laundering) of income and financing of terrorism; for protecting the Operator's clients from fraudulent actions of Subjects. 

C. The personal data of the Subject may not be distributed by the Operator and (or) Third Parties in public sources, except in cases where a relevant written consent to such actions has been received from the Subject. 

D. This Consent is provided for the entire period of the Operator's activity or until the date when an updated consent is issued and communicated to the Subject.