1 GENERAL PROVISIONS
“Token Plaza” LLC (hereinafter – the Company) acts as a virtual asset exchange operator under the law of the Kyrgyz Republic.
This Privacy Policy (hereinafter – the Policy) determines the procedure for the collection, processing, storage, use and protection of users’ personal data acquired in the course of usage of the functionality of the Company’s official website hosted at:
https://tokenplaza.kg (hereinafter – the Website), and in the course of performance of agreements or contracts, or any other forms of interaction between the Company and the users
The Policy has been developed in accordance with the Law of the Kyrgyz Republic “On Information of Personal Nature”, other legal regulatory acts of the Kyrgyz Republic, in consideration of the legal requirements governing the operation of virtual asset exchange operators.
This Policy applies to any user data acquired by “Token Plaza” LLC through the Website and/or otherwise within the boundaries of performance of agreements and contracts, other forms of interaction with users. By using the Website and otherwise interacting with the Company, the user confirms familiarisation with this Policy and expresses consent to the processing of personal data on the terms and in accordance with the procedure stated in this Policy and by the law of the Kyrgyz Republic.
If required, the Company may request the user to express such consent explicitly by ticking a checkbox in the respective section of the Website, confirming familiarisation with and consent to the terms of the Policy and processing of their personal data. ,
2 INFORMATION ABOUT THE COMPANY
The Company is the holder (data controller) of users’ personal data.
Official website of the Company: https://tokenplaza.kg
The Company’s contact e-mail address for matters of personal data collection and processing:
support@tokenplaza.kg
3 PERSONAL DATA AND SOURCES THEREOF
Personal data – any information recorded on a material data carrier and allowing direct or indirect identification of a specific individual.
The Company collects and processes users’ personal data through the Website’s functionality and by other means, including, without limitation:
• user registration, identification and verification forms at the Website;
• feedback forms at the Website;
• application and request forms (also those available at the Website);
• mailing forms;
• automatic collection of technical and statistical information during Website visitation;
other functional capabilities of the Company.
The Company does not collect personal data covertly and does not receive users’ personal data from questionable sources and/or from third parties.
4 CONTENT OF THE PROCESSED PERSONAL DATA
Depending on the purposes of usage of the Website and the essence of the services being provided, the Company may process the following categories of users’ personal data (including those in foreign languages):
• surname, first name, patronymic;
• date and place of birth;
• citizenship;
• details of the identity document;
• registered and (or) actual residence address;
• phone number;
• e-mail address;
• information on the employer and position (if required);
• information about social network accounts, including direct links to profiles;
• payment and transaction data;
• images (including photographs), audio, video data;
• information on legal entities and their representatives (for corporate customers), including passport data and data of other documents certifying the representatives’ authority;
• information on beneficial owners of legal entities;
• technical data, including IP addresses, browser types, operating systems, time of use of the Website’s functionality, geolocation;
• coоkie file and server log data;
• other data (as may be required).
The Company does not collect, process, accumulate, store or use personal data of special categories, except for cases explicitly provided for by the law of the Kyrgyz Republic.
5 PURPOSES OF PERSONAL DATA PROCESSING
The Company only processes users’ personal data for legal purposes, including, without limitation:
• providing access to the Website’s functionality;
• identification, verification of users and customers;
• provision of virtual asset exchange services;
• discharge of liabilities imposed by contracts and agreements;
• compliance with the requirements of the law of the Kyrgyz Republic;
• countering legalisation of criminal proceeds (money laundering) and terrorist financing;
• maintaining security of the Website, identification and prevention of illegal activities;
• analysis and improving the efficiency of the Website’s operation, collection of other analytical and statistical information;
• communication with users, including dispatch of notifications and responses to requests;
• compliance with acts issued by government authorities and officials, rulings of the court.
6 LOG FILES
The Company uses standard server log files.
Log files can contain the following data:
• the user’s IP address;
• browser and operating systеm type;
• internet service provider;
• date and time of access;
• entry and exit pages;
• number of clicks and other technical parameters.
The data referred to above are not used for direct user identification and are only used for the analysis of the Website’s operation and maintaining its stability, for improving information security, identifying and preventing illegal activities.
7 USAGE OF coоkie FILES
The Website only uses coоkie files for technical and analytical purposes.
coоkie files are used to:
• ensure proper functioning of the Website;
• saving user settings;
• analyse visitation statistics and user behaviour;
• improving the efficiency of the Website’s operation.
coоkie files are not used for automatic generation of decisions entailing legal consequences for users.
The user may restrict or disable the use of coоkie files in their browser settings. Disabling cookies can restrict the functionality of specific sections of the Website.
8 TRANSFER OF PERSONAL DATA TO THIRD PARTIES
The Company does not transfer personal data to any third parties except for the following cases:
• with the consent of the personal data subject;
• in case of extreme necessity, to protect the interests of the personal data subject;
• at the request of government authorities and officials or municipal institutions;
• in compliance with the requirements of the law of the Kyrgyz Republic;
• transfer to third parties (including contractors) who process personal data at the Company’s instruction, in the users’ interests, pursuant to the respective contracts.
Personal data is transferred in the scope required for achieving the purposes of the processing thereof.
9 STORAGE AND PROTECTION OF PERSONAL DATA
The Company implements the required legal, organisational and technical measures to protect personal data from unauthorized access, illegal disclosure, loss, alteration, distribution and other illegal activities.
The Company does not guarantee unconditional security and protection of personal data in the course of transfer thereof to Users via the Internet. The User agrees not to hold the Company responsible for any negative consequences, including losses resulting from illegal third party actions, including damage, distortion, destruction, illegal use of personal data in the process of transfer thereof.
Personal data is stored for the periods determined by the law of the Kyrgyz Republic or until the purposes of processing thereof are achieved, unless the law or contract provides for different periods.
10 RIGHTS OF THE USER / PERSONAL DATA SUBJECT
The User is entitled to:
• make decisions regarding the provision of their personal data and provide consent to such provision;
• receive information related to collection and processing of their personal data, view documents containing the user’s personal data;
• request refinement, blocking or erasure of personal data;
• revoke consent to the processing of personal data without specifying reasons;
• challenge the Company’s actions in respect of personal data in accordance with the law of the Kyrgyz Republic.
For the purpose of exercising and/or protecting their rights, users may file requests with the Company by e-mail at: support@tokenplaza.kg
11 CONCLUDING PROVISIONS
The Company may make amendments to this Privacy Policy. The current version of the Policy is published at the Company’s official website.
Use of the Website’s functionality and any other interaction with the Company after any amendments have been made to the Privacy Policy constitutes the user’s consent to the updated version of the Policy.
Any explanations regarding personal data, the collection, processing and storage thereof can be obtained by filing an application with the Company by e-mail at: support@tokenplaza.kg
Published on: September 22, 2025
Revised on: January 26, 2026
