Login to personal account
Important Terms
An issuing bank is a financial institution or organization responsible for issuing and managing various financial instruments such as payment cards, checks, electronic money and other means of payment. It plays an important role in the financial system by ensuring the availability and functionality of these instruments for customers and participants in payment systems.
Examples of issuers
Examples of issuing banks include commercial banks, specialized financial institutions and international payment systems. Commercial banks often act as issuers of payment cards and other means of payment for their customers. They issue these instruments on the basis of agreements with payment systems and organizations, which ensures the possibility of non-cash payments and cash withdrawals from customers' bank accounts.
Specialized financial institutions may also act as issuing banks, issuing certain types of financial instruments specific to their activities. For example, mortgage banks may issue bonds and other mortgage-related instruments to raise funds in the capital markets.
Key functions of the issuing bank
Issuing banks perform a number of important functions related to the issuance and management of financial instruments, ensuring the efficiency of the payment system and meeting customer needs. Main functions of issuing banks:
Issuing bank and acquiring bank: differences and similarities
The issuing bank and the acquiring bank play two different roles in the payment system. The issuing bank is responsible for issuing and managing financial instruments, while the acquiring bank processes payments and provides the technical infrastructure for transactions. The issuing bank and acquiring bank may be the same organization, but they are often separate institutions that interact with each other to ensure the efficient functioning of the payment system.
Examples of issuers
Examples of issuing banks include commercial banks, specialized financial institutions and international payment systems. Commercial banks often act as issuers of payment cards and other means of payment for their customers. They issue these instruments on the basis of agreements with payment systems and organizations, which ensures the possibility of non-cash payments and cash withdrawals from customers' bank accounts.
Specialized financial institutions may also act as issuing banks, issuing certain types of financial instruments specific to their activities. For example, mortgage banks may issue bonds and other mortgage-related instruments to raise funds in the capital markets.
Key functions of the issuing bank
Issuing banks perform a number of important functions related to the issuance and management of financial instruments, ensuring the efficiency of the payment system and meeting customer needs. Main functions of issuing banks:
- Issue and distribution of financial instruments. The issuing bank issues and distributes payment cards and other means of payment based on agreements with relevant payment systems and organizations.
- Establishing conditions of using the instruments. The issuing bank sets the rules and conditions for using a card or other financial instrument, including limits, fees of issuing banks and security rules.
- Transaction processing. The issuing bank processes payment transactions related to cards or other financial instruments and carries out settlements between participants in the payment system.
- Providing customer service. The issuing bank provides customers with information about the account status, transactions performed, opportunities to use instruments and other services related to financial instruments.
Issuing bank and acquiring bank: differences and similarities
The issuing bank and the acquiring bank play two different roles in the payment system. The issuing bank is responsible for issuing and managing financial instruments, while the acquiring bank processes payments and provides the technical infrastructure for transactions. The issuing bank and acquiring bank may be the same organization, but they are often separate institutions that interact with each other to ensure the efficient functioning of the payment system.
PCI DSS certificate is a document certifying a company's compliance with the requirements of the PCI DSS (Payment Card Industry Data Security Standard) standard. PCI DSS is a set of standards and rules developed jointly by international payment systems to ensure the security and privacy of payment data. It is the primary security standard for organizations that accept, process, store or transmit payment information during transactions.
Purpose and designation of the PCI DSS certificate
The purpose of PCI DSS certification is to confirm that a company strictly complies with the requirements and security measures established by the standard to protect the payment information of its customers. A PCI DSS certificate documents a company's compliance with the standard and confirms that the organization has effective security measures in place to protect payment information from unauthorized access, theft, or misuse.
Basic requirements of the PCI DSS standard
The PCI DSS standard establishes a number of mandatory requirements that an organization must meet to obtain a PCI DSS certificate. Some of the basic requirements include:
PCI DSS certification is not only confirmation of a company's compliance with the requirements of the standard, but also indicates that the security of payment data has been verified and confirmed by independent auditing companies. Obtaining a PCI DSS certificate is an important step for an organization to ensure customer confidence and protection of their privacy in the field of payment transactions.
Purpose and designation of the PCI DSS certificate
The purpose of PCI DSS certification is to confirm that a company strictly complies with the requirements and security measures established by the standard to protect the payment information of its customers. A PCI DSS certificate documents a company's compliance with the standard and confirms that the organization has effective security measures in place to protect payment information from unauthorized access, theft, or misuse.
Basic requirements of the PCI DSS standard
The PCI DSS standard establishes a number of mandatory requirements that an organization must meet to obtain a PCI DSS certificate. Some of the basic requirements include:
- Protecting the system and network from attacks and unauthorized access.
- Regular software updates and application of security patches.
- Install and maintain strong authentication methods and passwords.
- Protection of payment data storage, including encryption and limited access.
- Monitoring and logging security events.
- Regularly conduct security testing and system audits.
PCI DSS certification is not only confirmation of a company's compliance with the requirements of the standard, but also indicates that the security of payment data has been verified and confirmed by independent auditing companies. Obtaining a PCI DSS certificate is an important step for an organization to ensure customer confidence and protection of their privacy in the field of payment transactions.
An SDK (Software Development Kit) is a set of resources that includes a set of tools, libraries, and reference documentation for creating software. The acronym SDK stands for Software Development Kit. The SDK provides developers with the necessary resources and tools to create applications, including application programming interfaces (APIs), documentation, code examples, and development tools.
Key components of the SDK
The SDK includes several key components that provide functionality and capabilities for developers:
Popular SDKs for application development
There are many well-known and widely used SDKs. Some of them include:
An SDK is an essential tool in software development, simplifying the development process, speeding up deployment time, and improving the quality of applications. It provides standard features, interfaces, and tools to create unique functionality and improve user experience. The SDK is also widely used in various areas of development, allowing the integration of third-party services, expanding functionality and creating ecosystems of developers.
Key components of the SDK
The SDK includes several key components that provide functionality and capabilities for developers:
- API and SDK. The API (Application Programming Interface) provided by the SDK defines the available functions, methods, and data structures that can be used by developers to create applications.
- Development tools. The SDK provides tools that help developers create, debug, and test applications. These can be integrated development environments (IDEs), compilers, debuggers, simulators, and other tools that simplify the development process.
Popular SDKs for application development
There are many well-known and widely used SDKs. Some of them include:
- Android SDK. SDK for developing mobile applications for the Android operating system. It provides tools and libraries for creating applications, including access to device features, user interface, and other Android features.
- iOS SDK. SDK for developing applications for the iOS operating system used on iPhone, iPad and iPod Touch devices. It contains tools and libraries that allow developers to create apps, interact with iOS features, and leverage the Apple ecosystem.
- Windows SDK. SDK for developing applications for Windows operating systems. It includes tools, libraries, and documentation that allow developers to create applications for a variety of Windows platforms, including desktop, mobile, and Xbox.
- Facebook SDK. An SDK provided by Facebook for app development, integration with the Facebook social platform, and use of Facebook API features.
An SDK is an essential tool in software development, simplifying the development process, speeding up deployment time, and improving the quality of applications. It provides standard features, interfaces, and tools to create unique functionality and improve user experience. The SDK is also widely used in various areas of development, allowing the integration of third-party services, expanding functionality and creating ecosystems of developers.
CMS (Content Management System) is a content management system that is software designed to manage the creation, editing, organization and publishing of content on websites. CMS allows you to effectively manage information, facilitating the processes of creating and updating content on the site.
What is a CMS?
CMS, which stands for Content Management System, is a tool that manages the content of a website. CMS allows users without special programming skills to create, edit and publish website content using a convenient user interface. It provides tools for adding text, images, video, audio, and other elements to web pages. A CMS also provides the ability to organize content, manage the site structure, and customize its appearance.
CMS functionality
CMS includes several main components, each of which performs its own function:
CMS allows users to easily create, edit and publish content, manage the design and functionality of the site, and expand its capabilities using modules and plugins. Using a CMS greatly simplifies and automates content management processes, allowing website owners to focus on creating quality content and improving the user experience.
What is a CMS?
CMS, which stands for Content Management System, is a tool that manages the content of a website. CMS allows users without special programming skills to create, edit and publish website content using a convenient user interface. It provides tools for adding text, images, video, audio, and other elements to web pages. A CMS also provides the ability to organize content, manage the site structure, and customize its appearance.
CMS functionality
CMS includes several main components, each of which performs its own function:
- Material editing tool. This module allows users to create and modify content, add texts, images, videos, audio and other components on a website.
- Information storage. A CMS uses a database to store and organize content and other information needed to run a website.
- User panel. The content management system provides a user interface through which users can interact with the CMS.
- Additional components. Many CMS offer the ability to expand functionality using various modules and plugins. These additional components allow you to add new features and functionality such as social media integration, search engine optimization, user management and other useful features.
CMS allows users to easily create, edit and publish content, manage the design and functionality of the site, and expand its capabilities using modules and plugins. Using a CMS greatly simplifies and automates content management processes, allowing website owners to focus on creating quality content and improving the user experience.
With the advent of the digital era, a growing number of businesses are moving their business online. This raises new issues related to taxation and financial accounting. An important tool offered by the state is online fiscalization.
What is fiscalization?
Fiscalization is the process of linking a cash register or online cash register to the state tax accounting system. It allows you to automatically transmit information about each financial transaction to the tax authorities. As a result, all data on sales and income generated becomes available for verification and analysis.
Advantages of online fiscalization
Fiscalization of online payments has a number of advantages:
Fiscalization of online payments represents an important step in the modern digital business world. Its implementation has a number of advantages that significantly facilitate tax procedures, combat tax crimes and help increase customer confidence.
Examples of online fiscalization implementation
Remote fiscalization is an important tool for simplifying tax procedures and combating tax crimes. Its implementation helps improve business efficiency, strengthen customer confidence and ensure transparency of financial transactions. Businesses should consider introducing online check fiscalization into their operations to reduce time and resources spent on tax procedures and comply with the requirements of the state tax system.
What is fiscalization?
Fiscalization is the process of linking a cash register or online cash register to the state tax accounting system. It allows you to automatically transmit information about each financial transaction to the tax authorities. As a result, all data on sales and income generated becomes available for verification and analysis.
Advantages of online fiscalization
Fiscalization of online payments has a number of advantages:
- Simplification of tax procedures. Online fiscalization of checks reduces the need for manual data entry and reporting. All information is automatically transmitted to the tax authorities, which simplifies the process of filing tax returns and reduces the likelihood of errors.
- Combating tax crimes: Online fiscalization allows the state to more effectively control the financial transactions of enterprises and promptly identify possible tax crimes or tax evasion.
- Increased customer trust: Customers receive electronic receipts or purchase confirmations, providing transparency and trust in the business. This also helps protect consumer rights and improve the level of service.
Fiscalization of online payments represents an important step in the modern digital business world. Its implementation has a number of advantages that significantly facilitate tax procedures, combat tax crimes and help increase customer confidence.
Examples of online fiscalization implementation
- Online cash registers. Many countries have already implemented online checkout systems that automatically transmit sales information to tax authorities. This requires the mandatory use of cash registers that meet certain requirements.
- Electronic reports. Businesses can provide electronic reports on sales and income received through special portals or systems that are linked to tax authorities.
- Integration with accounting programs. Many online services and accounting programs offer the ability to automatically transfer data on financial transactions to the tax system, which simplifies accounting and reporting.
Remote fiscalization is an important tool for simplifying tax procedures and combating tax crimes. Its implementation helps improve business efficiency, strengthen customer confidence and ensure transparency of financial transactions. Businesses should consider introducing online check fiscalization into their operations to reduce time and resources spent on tax procedures and comply with the requirements of the state tax system.
RRN (Reference Retrieval Number) is used in the context of financial transactions and is essential for identifying and tracking payments.
What is the RRN on a check?
The RRN on a check is a unique number or code that is assigned to each payment or transaction. It serves to identify and associate a specific check with the corresponding payment. The RRN on a check plays an important role in recording and reporting financial transactions.
Examples of using RRN
RRN is used in various fields such as:
Financial operations
RRN is used in payment systems such as bank cards or electronic payment systems. Each transaction receives a unique RRN, which allows banks and payment processors to accurately identify and track payments.
Booking and orders
In the tourism, hospitality and online retail industries, RRN is used for booking and booking management. Each booking receives a unique RRN, which associates the booking with a specific payment or transaction.
Financial reporting documentation
RRN on a check helps businesses record and report financial transactions. It ensures accurate identification of each payment and simplifies the process of analyzing and monitoring financial data.
Search for payment by RRN
RRN provides the ability to efficiently search and link to the relevant payment or transaction. Using RRN, you can search databases or systems to quickly and accurately find information about a specific payment. This makes it easier to track and analyze financial transactions.
The RRN on a check plays an important role in accounting and linking with the corresponding payments. The ability to search for a payment using RRN makes it easier to record and analyze financial transactions. RRN is an essential tool for accurately identifying and tracking payments in today's financial environment.
What is the RRN on a check?
The RRN on a check is a unique number or code that is assigned to each payment or transaction. It serves to identify and associate a specific check with the corresponding payment. The RRN on a check plays an important role in recording and reporting financial transactions.
Examples of using RRN
RRN is used in various fields such as:
- financial operations;
- reservations and orders;
- financial reporting documentation.
Financial operations
RRN is used in payment systems such as bank cards or electronic payment systems. Each transaction receives a unique RRN, which allows banks and payment processors to accurately identify and track payments.
Booking and orders
In the tourism, hospitality and online retail industries, RRN is used for booking and booking management. Each booking receives a unique RRN, which associates the booking with a specific payment or transaction.
Financial reporting documentation
RRN on a check helps businesses record and report financial transactions. It ensures accurate identification of each payment and simplifies the process of analyzing and monitoring financial data.
Search for payment by RRN
RRN provides the ability to efficiently search and link to the relevant payment or transaction. Using RRN, you can search databases or systems to quickly and accurately find information about a specific payment. This makes it easier to track and analyze financial transactions.
The RRN on a check plays an important role in accounting and linking with the corresponding payments. The ability to search for a payment using RRN makes it easier to record and analyze financial transactions. RRN is an essential tool for accurately identifying and tracking payments in today's financial environment.
In the modern world of e-commerce and online services, recurring payments are becoming increasingly popular. Recurring payments are a payment system that ensures automatic and regular debiting of funds from customer accounts or bank cards.
What are recurring payments?
Recurring payment is a payment system wherein the customer agrees to the automatic and regular debiting of funds from their account or bank card for a certain amount at a given time. This system simplifies the payment process and provides the customer with convenience and reliability.
Advantages of a recurring payment system
Recurring payments provide a number of benefits for both consumers and businesses. For customers, recurring payments provide convenience and time savings because they only need to set up autopayments once, and then the system automatically debits the funds at the specified time. For businesses, recurring payments provide a stable and predictable income stream, increase customer loyalty and reduce the risk of non-payment.
Application of automatic payments
Recurring payments are used in a variety of areas, including:
In conclusion, recurring payments are an important tool in today's economy, providing convenience and security for both customers and businesses. Recurring payment services make the payment process simpler and more reliable for everyone involved.
What are recurring payments?
Recurring payment is a payment system wherein the customer agrees to the automatic and regular debiting of funds from their account or bank card for a certain amount at a given time. This system simplifies the payment process and provides the customer with convenience and reliability.
Advantages of a recurring payment system
Recurring payments provide a number of benefits for both consumers and businesses. For customers, recurring payments provide convenience and time savings because they only need to set up autopayments once, and then the system automatically debits the funds at the specified time. For businesses, recurring payments provide a stable and predictable income stream, increase customer loyalty and reduce the risk of non-payment.
Application of automatic payments
Recurring payments are used in a variety of areas, including:
- Recurring Subscription: Customers can subscribe to a specific service or product and agree to pay recurring fees for its use.
- Online commerce: Recurring payments are widely used to automatically purchase goods or services by setting up autopayments for customers.
- Financial services: banks, payment platforms and services provide special recurring payment services, providing convenience and security for customers and businesses.
In conclusion, recurring payments are an important tool in today's economy, providing convenience and security for both customers and businesses. Recurring payment services make the payment process simpler and more reliable for everyone involved.
3D Secure authentication provides an additional layer of security for payments by requiring the entry of a special one-time password or other identifier that is known only to the cardholder.
What is 3D Secure?
3D Secure is a technology for protecting payments by bank cards on the Internet, which allows you to confirm the identity of the card owner when making online purchases. This is an abbreviation for Three Domain Secure, which means that three domains are involved in the payment process: the domain of the issuer (the bank that issued the card), the domain of the acquirer (the bank that serves the merchant) and the domain of the payment system (Visa, Mastercard, etc.).
Types of 3D Secure authentication
There are different types of 3D Secure, depending on the protocol used by the card issuing bank. The most common are 3D Secure 1.0 and 3D Secure 2.0:
How 3D Secure technology works
When paying for a purchase in an online store that supports 3D Secure, you are redirected to a secure page of the issuing bank. There you are prompted to enter a one-time password or other identifier, which can be obtained in several ways:
3D Secure authorization improves transaction security, reduces the risk of fraud and increases customer confidence in online stores.
What is 3D Secure?
3D Secure is a technology for protecting payments by bank cards on the Internet, which allows you to confirm the identity of the card owner when making online purchases. This is an abbreviation for Three Domain Secure, which means that three domains are involved in the payment process: the domain of the issuer (the bank that issued the card), the domain of the acquirer (the bank that serves the merchant) and the domain of the payment system (Visa, Mastercard, etc.).
Types of 3D Secure authentication
There are different types of 3D Secure, depending on the protocol used by the card issuing bank. The most common are 3D Secure 1.0 and 3D Secure 2.0:
- 3D Secure 1.0 is based on redirecting the user to a special bank page, where they must enter a one-time password or answer a security question to confirm the payment.
- 3D Secure 2.0 is a more modern and convenient authentication method that does not require going to another website, but uses biometric data, SMS codes or mobile applications to verify the buyer’s identity.
How 3D Secure technology works
When paying for a purchase in an online store that supports 3D Secure, you are redirected to a secure page of the issuing bank. There you are prompted to enter a one-time password or other identifier, which can be obtained in several ways:
- via SMS;
- by call;
- via app or other channel.
3D Secure authorization improves transaction security, reduces the risk of fraud and increases customer confidence in online stores.
Cookie files
Notification about the use of cookies
Our website, like most others, uses cookies and other similar technologies (pixel tags, etc.) to provide services that best suit your interests and needs, and to collect statistical and marketing information to analyse and improve our services and websites.
By using this site, you consent to the use of cookies and other similar technologies in accordance with this Notice.
If you do not agree to us using this type of cookie, you must adjust your browser settings accordingly or not use our website.
Please note that if you block or delete cookies, we cannot guarantee that our website will work correctly on your browser.
Cookies that are stored through the website do not contain information that can be used to identify you.
What is a cookie and other similar technologies
A cookie is a small text file stored on your computer, smartphone or other device that you use to visit websites.
Some pages you visit may also collect information using pixel tags and web beacons, which are electronic images called single-pixel (1×1) or blank GIF images.
Cookies may be placed on your device by us ("own" cookies) or by other operators ("third party" cookies).
We use two types of cookies on the website: 'session cookies' and 'persistent cookies'. Session cookies are temporary cookies that remain on your device until you leave the site. A persistent cookie stays on your device for a long time or until you manually delete it (how long a cookie stays on your device will depend on the length or "lifetime" of the particular cookie and your browser settings).
Cookies come in different types:
Necessary. These files are necessary to ensure the proper operation of the site, the use of its functions. Disabling the use of such files will lead to a drop in site performance, inability to use its components and services.
Cookies related to performance, efficiency and analytics. These cookies allow us to analyse visitors' interaction with the site, optimise the content of the site, measure the effectiveness of advertising campaigns by providing information on the number of visitors to the site, the time of use, and errors that occur.
Functional cookies remember users who have already visited our site, their individual parameters (such as language and region, for example) and preferences, and help to personalise the content of the site.
Social Media Access Buttons. These are used to allow users to share a link to a social media page or bookmark an email. These buttons are links to social media websites owned by third parties, which in turn may record information about your online activity, including on our website. Please review the respective terms of use and privacy policies of such sites to understand how they use your data and how you can opt-out or delete your data.
Third Party Web Services. We sometimes use third-party web services on this website. For example, to display certain elements (images, videos, presentations, etc.), to organise surveys, etc. As with social media buttons, we cannot prevent these sites or external domains from collecting information about how you use the content on the site.
How do I manage cookies?
Most internet browsers are initially set to automatically accept cookies.
At any time, you can change your browser settings to block cookies or to alert you when cookies are sent to your device (refer to your specific browser's usage guide). Disabling cookies may affect your browsing experience.
If you use multiple devices and/or browsers to access the Internet, the appropriate settings must be changed in each of them.
Final Terms
At our sole discretion, we may change this Notice from time to time.
If you have any questions, we can be contacted using the contacts on our website.
We are using cookie files
Are you ready to grow with Freedom Pay?
Consent to the Collection and Processing of Personal Data
1. General Provisions
JSC "FREEDOM PAYMENTS" (hereinafter referred to as the "Operator"), as part of its core business activities, collects, processes, and stores personal data of various categories of data subjects, including through the Operator's websites that link to this "Policy Regarding the Processing and Ensuring the Security of the Operator's Personal Data" (hereinafter referred to as the "Policy"). In accordance with the current legislation of the Republic of Uzbekistan, the Operator also acts as a personal data operator. When organizing and implementing the processing of personal data, the Operator is guided by the Law of the Republic of Uzbekistan No. ZRU-547 dated July 2, 2019, "On Personal Data" and other regulatory legal acts adopted in accordance with it. For the purposes of this Policy, personal data means any information provided via internet websites to the Operator and/or collected using such internet websites, relating to a directly or indirectly identified or identifiable individual (the data subject).
2. Collection of Personal Data
The Operator collects information through internet websites in the following ways:
The Operator may use third-party internet services (third-party technologies) to organize the collection of statistical personal data; these third-party services ensure the storage of the obtained data on their own servers. The Operator is not responsible for the localization of third-party internet service servers. At the same time, such third-party internet services installed on the Site may set and read cookies from the browsers of the Site’s end-users to collect information during advertising activities on the Site. The procedure for collecting and using data by such third-party services is determined independently by those services, and they bear direct responsibility for compliance with this procedure and the use of the data they collect, including compliance with the legislation of the Republic of Uzbekistan.
The Operator does not cross-reference information provided independently by the user that allows for the identification of the data subject with statistical personal data obtained through such passive collection methods.
3. Principles and Conditions for Processing Personal Data
The processing of personal data by the Operator is carried out in strict accordance with the requirements of the legislation of the Republic of Uzbekistan and is limited to achieving specific, predetermined, and legally justified goals, including compliance with the Rules for the implementation of activities of the payment organization JSC "FREEDOM PAYMENTS." Only personal data that meets the purposes of its processing is subject to processing. The content and scope of the personal data processed by the Operator correspond to the stated processing purposes; the processing of excessive personal data is not permitted. The Operator ensures the accuracy, sufficiency, and, where necessary, relevance of personal data in relation to the purposes of processing. The Operator takes necessary measures to delete or clarify incomplete or inaccurate data. The Operator may provide and/or delegate the processing of personal data to another person with the consent of the data subject, unless otherwise provided by the legislation of the Republic of Uzbekistan. A mandatory condition for such delegation is the obligation of the parties to maintain confidentiality and ensure the security of the personal data. The terms for processing personal data are determined in accordance with the purposes for which they were collected.
4. Rights of the Data Subject
The data subject has the right to:
5. Implementation of Personal Data Protection Requirements
To maintain its business reputation and ensure compliance with the laws of the Republic of Uzbekistan, the Operator considers it a priority to ensure the legitimacy of personal data processing and provide an appropriate level of security. The Operator requires other persons who have gained access to personal data not to disclose it to third parties or distribute it without the consent of the data subject, unless otherwise provided by law. The Operator takes necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, or other illegal actions. The Operator ensures that all organizational and technical protection measures are carried out on legal grounds. To ensure adequate protection, the Operator conducts harm assessments and identifies current threats to the security of personal data in information systems. In accordance with identified threats, the Operator applies security measures including the use of information protection tools, detection of unauthorized access, restoration of data, access restriction, and monitoring the effectiveness of security measures. The Operator's management encourages the continuous improvement of the personal data protection system. Responsible persons have been appointed for the organization of processing and security. Every new employee directly involved in processing data is familiarized with the requirements of the legislation of the Republic of Uzbekistan and this Policy.
6. Consent of the Data Subject
JSC "FREEDOM PAYMENTS" (hereinafter referred to as the "Operator"), as part of its core business activities, collects, processes, and stores personal data of various categories of data subjects, including through the Operator's websites that link to this "Policy Regarding the Processing and Ensuring the Security of the Operator's Personal Data" (hereinafter referred to as the "Policy"). In accordance with the current legislation of the Republic of Uzbekistan, the Operator also acts as a personal data operator. When organizing and implementing the processing of personal data, the Operator is guided by the Law of the Republic of Uzbekistan No. ZRU-547 dated July 2, 2019, "On Personal Data" and other regulatory legal acts adopted in accordance with it. For the purposes of this Policy, personal data means any information provided via internet websites to the Operator and/or collected using such internet websites, relating to a directly or indirectly identified or identifiable individual (the data subject).
2. Collection of Personal Data
The Operator collects information through internet websites in the following ways:
- Personal data provided by users: The Operator collects personal data entered into data fields on the Operator's websites by the users themselves or by other persons on their behalf.
- Collection of users' IP addresses and cookies.
- Passive collection of personal data regarding the current connection in terms of statistical information (at the Operator's discretion):
- User identifier assigned by the Site;
- Pages visited;
- Number of page visits;
- Information on movement through site pages;
- Duration of the user session;
- Entry points (third-party sites from which the user follows a link to the Site);
- Exit points (links on the Site through which the user navigates to third-party sites);
- User's country and region;
- Time zone set on the user's device;
- User's internet service provider;
- User's browser;
- Browser digital fingerprint (canvas fingerprint);
- Available browser fonts and installed browser plugins;
- Browser WebGL parameters;
- Type of available media devices in the browser;
- Presence of ActiveX;
- List of supported languages on the user's device;
- Processor architecture of the user's device;
- User's Operating System (OS);
- Screen parameters (resolution, color depth, page layout parameters on the screen);
- Information on the use of automation tools when accessing the Site.
The Operator may use third-party internet services (third-party technologies) to organize the collection of statistical personal data; these third-party services ensure the storage of the obtained data on their own servers. The Operator is not responsible for the localization of third-party internet service servers. At the same time, such third-party internet services installed on the Site may set and read cookies from the browsers of the Site’s end-users to collect information during advertising activities on the Site. The procedure for collecting and using data by such third-party services is determined independently by those services, and they bear direct responsibility for compliance with this procedure and the use of the data they collect, including compliance with the legislation of the Republic of Uzbekistan.
The Operator does not cross-reference information provided independently by the user that allows for the identification of the data subject with statistical personal data obtained through such passive collection methods.
3. Principles and Conditions for Processing Personal Data
The processing of personal data by the Operator is carried out in strict accordance with the requirements of the legislation of the Republic of Uzbekistan and is limited to achieving specific, predetermined, and legally justified goals, including compliance with the Rules for the implementation of activities of the payment organization JSC "FREEDOM PAYMENTS." Only personal data that meets the purposes of its processing is subject to processing. The content and scope of the personal data processed by the Operator correspond to the stated processing purposes; the processing of excessive personal data is not permitted. The Operator ensures the accuracy, sufficiency, and, where necessary, relevance of personal data in relation to the purposes of processing. The Operator takes necessary measures to delete or clarify incomplete or inaccurate data. The Operator may provide and/or delegate the processing of personal data to another person with the consent of the data subject, unless otherwise provided by the legislation of the Republic of Uzbekistan. A mandatory condition for such delegation is the obligation of the parties to maintain confidentiality and ensure the security of the personal data. The terms for processing personal data are determined in accordance with the purposes for which they were collected.
4. Rights of the Data Subject
The data subject has the right to:
- Request clarification, blocking, or destruction of their personal data if the data is incomplete, outdated, inaccurate, unlawfully obtained, or unnecessary for the stated purpose of processing;
- Request a list of their personal data processed and stored by the Operator and the source of its acquisition;
- Receive information regarding the terms of processing of their personal data, including storage periods;
- Demand notification of all persons to whom incorrect or incomplete personal data was previously disclosed regarding all exclusions, corrections, or additions made;
- Appeal against unlawful actions or omissions in the processing of their personal data to the authorized body for the protection of the rights of data subjects or through judicial proceedings;
- Protect their rights and legitimate interests, including claims for damages and/or compensation for moral harm through the courts. The Operator is not responsible for inaccurate information provided by the data subject.
5. Implementation of Personal Data Protection Requirements
To maintain its business reputation and ensure compliance with the laws of the Republic of Uzbekistan, the Operator considers it a priority to ensure the legitimacy of personal data processing and provide an appropriate level of security. The Operator requires other persons who have gained access to personal data not to disclose it to third parties or distribute it without the consent of the data subject, unless otherwise provided by law. The Operator takes necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, or other illegal actions. The Operator ensures that all organizational and technical protection measures are carried out on legal grounds. To ensure adequate protection, the Operator conducts harm assessments and identifies current threats to the security of personal data in information systems. In accordance with identified threats, the Operator applies security measures including the use of information protection tools, detection of unauthorized access, restoration of data, access restriction, and monitoring the effectiveness of security measures. The Operator's management encourages the continuous improvement of the personal data protection system. Responsible persons have been appointed for the organization of processing and security. Every new employee directly involved in processing data is familiarized with the requirements of the legislation of the Republic of Uzbekistan and this Policy.
6. Consent of the Data Subject
The data subject hereby gives consent to the collection and processing of personal data for the purpose of the Operator providing services, as well as to the transfer and cross-border transfer of the data subject's personal data in accordance with applicable legislation.