on VirtuOZ platform
EN · language
Home/Legal/Privacy

EvoPay privacy policy

EvoPay LLP · BIN 240440034473

Effective date: 1 January 2026

Last updated: 18 July 2026

1. Introduction

This Policy explains how EvoPay LLP processes personal data when you use the EvoPay service (wallet, payments, escrow) on the VirtuOZ platform. We rely on the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” and other applicable rules. By using the service, you agree to this Policy. If you do not agree, do not use the service.

2. Data operator

  • EvoPay LLP · BIN 240440034473
  • Address: Kazakhstan, Almaty, Auezov District, Microdistrict 6, Building 58, Office 23
  • Data questions: privacy@evopay.biz
  • Support: support@evopay.biz

3. Data we collect

You provide:

  • account data (name, email, phone, and similar);
  • KYC (ID document, selfie, and address/TIN when needed);
  • bank details and, where needed for top-up, payment card data (processed by payment partners);
  • transaction history and balances;
  • escrow and dispute information;
  • support requests.

Collected automatically:

  • IP, device, browser;
  • actions in the service;
  • approximate location from IP;
  • cookies — see the Cookie policy.

From third parties:

  • banks and payment channels (payment status);
  • identity and fraud-prevention services;
  • public lists (including sanctions);
  • data from other users in a deal.

4. Why we process

  • to provide services under the contract / public offer (account, wallet, payments, escrow);
  • to meet AML/CFT and other applicable duties (KYC, monitoring);
  • legitimate interests: security, anti-fraud, service improvement;
  • marketing and precise location — only with consent; you may withdraw consent.

5. How we use data

  • run your account;
  • verify identity;
  • process payments and escrow;
  • prevent fraud;
  • contact you about deals and security;
  • improve the service;
  • respond to lawful authority requests;
  • marketing — only with consent.

6. Who we share with

We do not sell personal data. We may share:

  • with the other party to a deal — the minimum needed;
  • with contractors (hosting, payments, KYC, support) under contracts;
  • when required by law, a court, or an authorised body;
  • in a business reorganisation;
  • with others — only with your consent.

7. Cross-border transfer

Primary storage is in the Republic of Kazakhstan. If a contractor is abroad, we use contractual and other permitted safeguards.

8. Security

Encryption in transit, access controls, and organisational measures. Absolute security on the internet is not guaranteed.

9. Retention

We keep data as long as needed for this Policy and the law. Guideposts:

  • account — up to 5 years after closure;
  • operations and KYC/AML/CFT — usually at least 7 years where the law requires;
  • marketing — until consent is withdrawn.

Then we delete or anonymise.

10. Your rights

Access, correction, deletion (subject to law), restriction, objection, portability, and withdrawal of consent. Request via the cabinet or privacy@evopay.biz; we may ask you to confirm identity. You may also complain to the authorised body in Kazakhstan.

11. Cookies

Cookies are used for sign-in, security, and language. Details are in the Cookie policy.

12. Children

The service is not for anyone under 18. We do not knowingly collect children’s data; if we learn we have, we will delete it.

13. Changes

We may update this Policy; the “Last updated” date changes. For material changes we notify via the platform and/or email. Continued use means acceptance, unless law requires otherwise.