• Home>
  • Personal Data Processing Policy

Consent to the Processing of Personal Data
I, as a User of the ZOZI service, freely, voluntarily and in my own interest, consent to the processing of my personal data by CASHBACK HUB LLP.
Operator: CASHBACK HUB, BIN 220440025877, Republic of Kazakhstan, Almaty, Turksib District, 31 Zavetnaya Street, postal code 050011. Contact information: admin@zozi.cash
This consent applies to the processing of data that I provide when registering for and using the service, including my email address, phone number, account information, service usage data, cashback activations, tracked transactions, support requests, technical data, cookies, IP address, device and browser information, date and time of visits, as well as payment details where I provide them for the purpose of receiving payouts.
Purposes of processing: account registration and maintenance, operation of the ZOZI loyalty programme, calculation, accounting and payment of bonuses/cashback, cashback activation, affiliate transaction tracking, handling of requests, security, fraud prevention, compliance with legal requirements, sending service notifications, analytics and improvement of the service.
The Operator may perform the following operations on personal data: collection, recording, storage, updating, use, transfer, anonymisation, blocking, deletion and destruction, with or without the use of automated processing.
This consent remains valid until withdrawn, unless a longer processing period is required by applicable law, contract, the Privacy Policy, or for the protection of the rights and legitimate interests of the Operator, the User or third parties.
Consent may be withdrawn by contacting the service support team or by sending a request to admin@zozi.club.
I confirm that I have read and understood the ZOZI Privacy Policy.
Purposes of processing:
Registration and account creation
  • Purpose of processing: registration and account creation.
  • Data processed: full name, email address, phone number, nickname, encrypted password, account identifier.
  • Legal basis: consent, performance of a contract.
  • Retention period: for as long as the account remains active, followed by 1 year after account deletion.
```
Authorisation and account operation
  • Purpose of processing: user authorisation and operation of the personal account.
  • Data processed: email address, phone number, nickname, user ID, IP address, cookies, device information, authorisation sessions.
  • Legal basis: performance of a contract, legitimate interests of the Operator.
  • Retention period: for as long as the account remains active, followed by 1 year after account deletion.
Cashback accrual
  • Purpose of processing: cashback accrual.
  • Data processed: user ID, click history, store, partner, affiliate network, date and time of click, order or request ID, purchase amount, purchase category, cashback amount, accrual status, confirmation status, payout status.
  • Legal basis: performance of a contract, legitimate interests of the Operator.
  • Retention period: 5 years from the date of the relevant transaction.
Cashback payout
  • Purpose of processing: cashback payout.
  • Data processed: full name, phone number, email address, card number, account number, electronic wallet number, country, payout amount, payout date, payout status.
  • Legal basis: performance of a contract and compliance with applicable law.
  • Retention period: 5 years from the date of the payout or the last transaction.
Storage of purchase and transaction history
  • Purpose of processing: storage of purchase and transaction history.
  • Data processed: purchase history, accrual history, payout history, order statuses, amounts, dates, stores, categories, technical transaction identifiers.
  • Legal basis: performance of a contract, legitimate interests of the Operator, protection of the rights of the Operator and the User.
  • Retention period: 5 years from the date of the relevant transaction.
Handling requests and correspondence
  • Purpose of processing: handling requests and correspondence.
  • Data processed: name, email address, phone number, request content, correspondence with support, attachments, request history, technical information relating to the request.
  • Legal basis: consent, performance of a contract, legitimate interests of the Operator.
  • Retention period: 1 year after account deletion, unless a longer period is required for dispute resolution or compliance with applicable law.
Fraud and abuse prevention
  • Purpose of processing: prevention of fraud and abuse.
  • Data processed: IP address, cookies, device information, login history, click history, transaction history, suspicious activity, technical logs, indicators of multiple accounts.
  • Legal basis: legitimate interests of the Operator, protection of the rights of the Operator and Users.
  • Retention period: up to 5 years from the date the relevant transaction or violation is identified.
Technical support of the Service
  • Purpose of processing: technical support and maintenance of the Service.
  • Data processed: IP address, cookies, browser information, device information, operating system, errors, logs, actions performed on the website and in the application.
  • Legal basis: legitimate interests of the Operator, performance of a contract.
  • Retention period: up to 1 year, unless a longer period is required for security purposes or dispute resolution.
Analytics and improvement of the Service
  • Purpose of processing: analytics and improvement of the Service.
  • Data processed: cookies, IP address, actions performed on the website, referral source, pages viewed, events, technical device and browser parameters.
  • Legal basis: consent, legitimate interests of the Operator.
  • Retention period: for the lifetime of the relevant cookie or until the purpose of the analytics processing has been achieved.
Informational messages
  • Purpose of processing: sending informational messages.
  • Data processed: email address, phone number, push notification token, user ID.
  • Legal basis: performance of a contract, legitimate interests of the Operator.
  • Retention period: for as long as the account remains active, followed by 1 year after account deletion.
Advertising messages
  • Purpose of processing: sending advertising messages.
  • Data processed: email address, phone number, push notification token, advertising consent, date and method by which consent was obtained.
  • Legal basis: separate consent of the User.
  • Retention period: until consent is withdrawn, followed by the period necessary to demonstrate that consent was obtained and subsequently withdrawn.
Compliance with legal requirements
  • Purpose of processing: compliance with applicable legal requirements.
  • Data processed: full name, contact details, transaction data, payout data, requests, documents and information that the Operator is required to retain by law.
  • Legal basis: compliance with obligations imposed by applicable law.
  • Retention period: for the periods required by applicable law.
Detailed terms governing the processing of personal data are set out in the ZOZI Privacy Policy: https://zozi.cash/policy/
```