Policy
PRIVACY POLICY OF CHOYKHONA JSC
This document (hereinafter referred to as the "Policy") is an official document defining the policy of CHOYKHONA Joint Stock Company. (hereinafter referred to as CHOYKHONA) regarding the collection, processing, and protection of personal information of individuals.
This Policy applies to all information that CHOYKHONA and/or its partners (including affiliates) receive about an individual in the course of providing CHOYKHONA services to this individual (hereinafter referred to as the User), as well as in the course of CHOYKHONA's execution of any other agreements or contracts aimed at providing services to the User.
CHOYKHONA is a payment organization providing services for accepting payments from individuals in favor of service (goods) providers through a payment agent network (including a network of self-service terminals - information kiosks), as well as the iWon mobile application (hereinafter referred to as the iWon Services).
By continuing to use the iWon Services, the User confirms that they have read this Policy and agrees to Explicit consent to the processing of personal data in the scope and for the purposes specified in this document. Consent is explicitly provided upon registration in the app by checking the appropriate box. If the User disagrees, they have the right to stop using the iWon Services.
CHOYKHONA reserves the right to unilaterally amend this Privacy Policy. Amendments will take effect upon publication of the new version of the Policy on the website or in the mobile app. In the event of significant changes, the User will be notified additionally (via push notification or other available means). CHOYKHONA does not collect any information about the individual accessing this Policy.
1. General Provisions
For the purposes of this Policy, the User's personal information is defined as information the User provides about themselves upon registration (creating an account) or while using the iWon Services, including:
Last name, first name, patronymic;
Personal Identification Number (PINFL);
Passport/ID card series and number;
Residential address;
Phone number;
Email address;
User's passport details (including photo);
IP address and device details;
User ID in the service provider's system;
User location;
Transaction details;
Information on completed forms in the Services iWon, as well as information on viewing data in the iWon Services interfaces;
Any other information received by CHOYKHONA in connection with the User's use of the iWon Services.
When registering and creating an account in the iWon mobile app, CHOYKHONA requests the User's phone number, device model, operating system, bank card details, transaction data, and bank card balance.
To ensure the proper operation of the iWon Services, CHOYKHONA gains access to certain device functions. Each permission is requested directly at the moment the User uses the relevant function, with a clear request and an explanation of its purpose. Access is granted solely with the User's voluntary consent.
When using the iWon Services, data is collected about the amount, time, payment method, service provider information, and other transaction-related information. Information received by CHOYKHONA may be used for research purposes to improve iWon Services in an anonymized form.
The User undertakes to keep confidential the personal data used to log in to the iWon mobile app, website, and other Services, to prevent loss, distribution, editing, publication, copying, or public use.
At CHOYKHONA's request and for the purpose of the identification procedure, the User undertakes to provide accurate passport information, a photo of their passport (ID card), and a selfie with the document.
Users who provide inaccurate personal information about themselves or the personal information of a third party without their consent are liable in accordance with the laws of the Republic of Uzbekistan.
2. Purposes of Using Personal Data
CHOYKHONA uses the User's personal data for the following purposes:
Identification: identifying the User registered in the iWon mobile app for subsequent authorization, payments, transfers, order placement, and other actions provided by the app's functionality and other iWon Services.
Access to Services: providing the User with access to iWon Services that require identification.
Feedback: establishing feedback with the User, including sending notifications and requests regarding the use of iWon Services, provision of services, and processing requests and applications from the User.
Marketing and Information: providing the User with special offers, information about the products and services of CHOYKHONA and CHOYKHONA's partners, newsletters, information about promotions, advertising materials — Only with the express consent of the User, provided separately in the application settings.
Analytics: maintaining statistics and research to improve service quality based on the User's anonymized data.
Security: monitoring and preventing fraud, combating money laundering, terrorist financing, and other actions contrary to the legislation of the Republic of Uzbekistan.
The User is hereby notified and agrees that CHOYKHONA has the right to transfer personal data to third parties in accordance with the requirements of the current legislation of the Republic of Uzbekistan.
The User agrees to the processing of their personal data for the purpose of participating in advertising, marketing, and other programs and promotions conducted by CHOYKHONA, as well as conducting research aimed at improving the quality of services provided, through direct contact using various means of communication (mailing list, email, SMS, push notifications) — Subject to the relevant consent, which the User has the right to revoke at any time in the app settings or by request to privacy@iwon.uz.
3. Measures to protect the User's personal information
All information about an individual collected, processed, and stored by CHOYKHONA is considered confidential and is stored in accordance with the laws of the Republic of Uzbekistan.
CHOYKHONA takes all necessary organizational and technical measures to protect information about an individual from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from illegal actions by third parties.
All information collected by CHOYKHONA is stored in encrypted, anonymized form in accordance with international security standards.
Database Localization:
In accordance with Article 27-1 of the Law of the Republic of Uzbekistan "On Personal Data," the collection, systematization, and storage of personal data of citizens of the Republic of Uzbekistan are carried out using technical means and in databases physically located within the territory of the Republic of Uzbekistan. Cross-border data transfer is permitted only if it is initially stored within the territory of the Republic of Uzbekistan.
CHOYKHONA collects, processes, stores, deletes, protects, edits, organizes, accumulates, and transfers the User's personal information exclusively using security tools and in strict compliance with the current legislation of the Republic of Uzbekistan.
The collection, storage, processing, and protection of the User's personal information are carried out in accordance with the requirements of the Law of the Republic of Uzbekistan "On Personal Data," the Resolution of the Board of the Central Bank of the Republic of Uzbekistan "On Approval of the Regulation on Ensuring Information Security in Payment Systems," and No. 3268 of June 30, 2020, and other regulatory legal acts in the field of personal information security.
Incident Notification:
In the event of unauthorized access or leakage of personal data, CHOYKHONA undertakes to notify the User and the authorized government agency within the timeframe and manner established by law.
4. User Rights
The User has the right:
Request CHOYKHONA to clarify, block, or destroy their personal data if the data is incomplete, outdated, inaccurate, or not necessary for the stated purpose of processing.
Revoke your consent to the processing of your personal data by sending a written request to: privacy@iwon.uz. In this case, CHOYKHONA has the right to continue processing data only if there are grounds specified in the Law (for example, to comply with the Central Bank of the Republic of Uzbekistan's requirement to store transaction data for 5 years for anti-money laundering purposes).
Receive information about the processing of your personal data, including confirmation of the processing, the legal basis, and the purposes of the processing.
Unsubscribe from receiving marketing and advertising messages at any time through the app settings or by requesting privacy@iwon.uz.
For all questions related to the processing of personal data, the User may contact the data protection officer:
Email: privacy@iwon.uz
5. Using the Telegram SDK
The iWon mobile app uses a third-party software development kit (SDK) for the Telegram service.
The Telegram SDK is used solely to simplify user identification within the system and to provide recipient selection for P2P transfers between iWon users. The Telegram SDK is not used as a payment instrument.
CHOYKHONA confirms that the Telegram SDK used in the iWon app complies with the Google Play policy regarding work with third-party SDKs.
5.1. Transmitted Data
When using the relevant functionality, the following data may be transmitted via the Telegram SDK:
user's phone number;
name, username, and Telegram ID;
Device technical data (IP address, device type, operating system version — as part of the standard SDK functionality).
Data is transferred only when the User initiates the relevant function. Data is not transferred in the background.
5.2. Limitations on Telegram Use
Telegram is not used to:
Storing or displaying balances;
Processing, confirming, or executing transactions;
Transferring transfer amounts;
Storing the User's financial data;
Authorizing payment transactions.
All financial transactions, including money transfers, are carried out exclusively on secure CHOYKHONA servers.
5.3. Data Processing and Transfer
The Telegram SDK is activated only through the explicit use of the relevant app functionality at the User's initiative.
Data transmitted via the Telegram SDK may be processed by Telegram in accordance with their own Privacy Policy, available at: https://telegram.org/privacy.
By using this functionality, the User consents to the cross-border transfer of a limited amount of technical and identification data necessary for the operation of the Telegram SDK. The list of transferred data is specified in Section 5.1 of this Policy.
CHOYKHONA does not control how Telegram processes and stores data. CHOYKHONA recommends that Users read Telegram's privacy policy before using the relevant functionality.
5.4. Android Operating System Permissions
The following Android operating system permissions may be requested for the proper operation of the iWon mobile app. Each permission is requested in the context of using the corresponding function - When the User accesses it, with an explanation of the purpose of the request.
android.permission.READ_EXTERNAL_STORAGE
Used to access files stored in the device's memory exclusively when the User independently selects an image or document to upload in the application.
android.permission.READ_MEDIA_IMAGES
Used to access images on the device when uploading a photo of a document, avatar, or other images at the User's initiative.
android.permission.READ_MEDIA_VIDEO
Used to access video materials on the device exclusively when selected by the User.
android.permission.READ_CONTACTS
Used to simplify the selection of a recipient for P2P transfers by selecting a phone number from the User's contact list. Permission is requested only when this function is accessed.
android.permission.WRITE_CONTACTS
Used to store contact information related to the use of app functionality, exclusively upon explicit action by the User.
android.permission.ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION
Used exclusively during a payment transaction to verify location for fraud prevention purposes. The app does not collect location data in the background. Permission is requested only during an active user session and immediately before the transaction.
android.permission.SYSTEM_ALERT_WINDOW
Used exclusively to display the payment transaction confirmation screen over other apps if the User initiates a payment from an external source (e.g., via a link or QR code). This permission is not used to display advertising or third-party content.
android.permission.USE_FULL_SCREEN_INTENT
Used to display priority notifications directly related to active financial transactions (e.g., payment confirmation requests).
android.permission.READ_PHONE_NUMBERS
Used to simplify registration and user identification by automatically detecting the device's phone number. This permission is used once during initial registration with the user's consent.
android.permission.RECEIVE_SMS / READ_SMS
Used exclusively to automatically insert a one-time verification code (OTP) from an SMS message during phone number verification. The application does not read or save the contents of other SMS messages.
6. Storage Periods and Final Provisions
The storage period for personal data is determined by the achievement of the processing objectives, as well as the requirements of legislation on combating money laundering and the financing of terrorism (at least 5 years after termination of the relationship). After the expiration of the storage period, personal data is subject to destruction or anonymization.
This Policy is valid indefinitely, until a new version is adopted or the Organization ceases operations. The current version of the Policy is available at: www.iwon.uz.
Details and contact information
Joint Stock Company "CHOYKHONA"
License of the Central Bank of the Republic of Uzbekistan No. 19 dated July 9, 2024
Address: Republic of Uzbekistan, Tashkent, 100070, Yakkasaray district, st. Rustaveli St., 32A
TIN: 307347685
OKED: 63110
Contacts:
Tel.: (+998 71) 205-99-11
E-mail: info@iwon.uz
E-mail for data protection inquiries: privacy@iwon.uz
Website: www.iwon.uz