Privacy Policy and Personal Data Processing of LLP “World play”
1. General Provisions
1.1. This Privacy Policy (hereinafter — the “Policy”) is developed in accordance with the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” dated May 21, 2013 No. 94-V (hereinafter — the “Kazakhstan Law”), Government Decree No. 909 “On Approval of the Rules for Ensuring the Protection of Personal Data,” and other regulatory legal acts of the Republic of Kazakhstan.
1.2. This Policy defines the procedure for collecting, processing, storing, and protecting personal data of users of the website:
https://smmlead.kz (hereinafter — the “Website”).
1.3. The owner and operator of the personal data database is:
LLP “World play”
BIN: 251140027622
Legal address: Republic of Kazakhstan, Almaty, Bostandyk District, Bukhar Zhyrau Boulevard, Building 26/1, 050060 (hereinafter — the “Operator”).
1.4. By using the Website, the user confirms that they have read this Policy and provide consent to the processing of their personal data as described herein.
2. Terms and Definitions
The terms used in this Policy follow the definitions of the Kazakhstan Law:
Personal data — information relating to an identified or identifiable individual.
Processing of personal data — actions (operations) involving the collection, storage, systematization, use, transfer, blocking, destruction, etc.
Personal data subject — an individual whose data is being processed.
Database owner/operator — LLP “World play”.
Database administrator — a person appointed by the Operator to ensure technical maintenance and protection of the information system.
3. Composition and Categories of Personal Data
3.1. The Operator processes the following user data:

• name;
• phone number;
• email address;
• IP address;
• information submitted through feedback and application forms;
• technical cookies required for proper functioning of the Website.

The Operator does not use marketing, advertising, behavioral, or third-party cookies.
4. Legal Grounds for Personal Data Processing
4.1. Processing is carried out on the basis of voluntary consent provided by the data subject in the form of an electronic document in accordance with Article 8 of the Kazakhstan Law.
4.2. Any action performed by the user on the Website, including:

• completing forms;
• submitting applications;
• clicking the “Agree” checkbox;
• continuing to use the Website,
• is considered equivalent to written consent for data processing.

5. Purposes of Personal Data Processing
Personal data is processed for the following purposes:

• providing the user with access to Website functionality;
• processing inquiries, requests, and applications;
• communicating with the user;
• improving the quality of the Website and services;
• fulfilling obligations to the user.

The Operator does not process data for purposes not specified in this Policy.
6. Principles of Data Processing
The Operator processes personal data based on the following principles:

• lawfulness, fairness, and transparency;
• minimization of collected data;
• achievement of specific and legitimate purposes;
• ensuring accuracy and relevance of data;
• protection against unauthorized access;
• termination and destruction of data upon achieving the processing purpose.

7. Storage and Protection of Personal Data
7.1. All personal data is stored exclusively on servers located within the territory of the Republic of Kazakhstan, in accordance with Article 30 of the Kazakhstan Law.
7.2. The Operator implements necessary technical and organizational security measures, including:

• access control systems;
• antivirus protection;
• encrypted data transmission (HTTPS);
• data backup;
• protection against unauthorized access.
• 7.3. Access to personal data is restricted and granted only to authorized personnel.

8. Transfer of Personal Data to Third Parties
The Operator does not transfer personal data to third parties except in the following cases:

• obtaining direct consent from the data subject;
• requirements established by the legislation of the Republic of Kazakhstan;
• fulfillment of obligations to the user (e.g., hosting provider).

Unauthorized transfer of data is strictly prohibited.
9. Rights of the Personal Data Subject
The personal data subject has the right to:

• obtain information regarding the processing of their data;
• request correction, blocking, or destruction of their data;
• withdraw consent for processing;
• file a complaint with the court or the authorized body — MDDIAI of the Republic of Kazakhstan.

The response period for user requests is 15 calendar days (Article 12 of the Kazakhstan Law).
10. Data Retention and Destruction
10.1. Personal data is stored until processing purposes are achieved, but no longer than 5 years from the user’s last interaction with the Operator (unless a different period is mandated by law).
10.2. Data must be destroyed:

• upon achieving the processing purpose;
• upon withdrawal of consent;
• if unlawful processing is detected;
• upon expiration of the storage period.

Destruction is performed in a manner that prevents further recovery of the data.
11. Withdrawal of Consent
The user may withdraw their consent to data processing at any time by sending a request to:
📧 tsmagulov78@gmail.com
Upon receiving the notification, data processing is terminated except as required by the Kazakhstan Law.
12. Amendments to the Policy
The Operator may amend this Policy at any time. The updated version becomes effective upon publication on the Website.
Continued use of the Website constitutes acceptance of the updated Policy.
The current version is available at:
https://smmlead.kz/privacy
13. Contact Information
For questions related to personal data processing:
📧 tsmagulov78@gmail.com
Operator: LLP “World play”