Privacy Policy

Edition of November 5, 2026

This policy explains what data KOZYR collects about you, why, who it is shared with and how long it is kept. It forms part of the Terms of Service. By using the Service you confirm that you have read it.

01Who is responsible

The data controller is the operator of KOZYR (see “Who we are” in the Terms). For any data questions, write to [email protected].

02What we collect

From Telegram

When you open the mini app, Telegram sends us your Telegram ID, first and last name, username, interface language, profile photo link and the launch parameter (for example, a referral code). We verify the signature of this data so that nobody can log in as you. We do not receive your phone number or your chats.

Gaming and financial data

• balance, deposits, withdrawals, bets, winnings, game history and inventory;
• Provably Fair data: hashes, seeds and round numbers;
• Crypto Pay invoice and transfer identifiers, TON wallet addresses, transaction hashes and their comments;
• bonuses, promo codes, referrals, VIP level and rakeback;
• responsible gaming settings, including self-exclusion.

Technical data

• IP address and the country derived from it;
• date and time of requests, device and browser type;
• error and security logs.

Proof of consent

When you confirm your age and accept the Terms, we store the document version, the time, your IP address and country. This is the evidence that consent was given.

Identity check data

Only if we ask you to pass a check: an identity document, proof of address, a photo, information on the source of funds and wallets.

Support requests

Messages to support and staff notes on your account.

Usage statistics

Anonymous events in the mini app: which screens are opened and which buttons are tapped. We use them to find what works badly and improve the Service.

03Why we use it

• Performing the contract: running your account and balance, operating games, crediting deposits, sending withdrawals and gifts, answering support requests.
• Legal obligations: checking age and identity, preventing money laundering and terrorist financing, complying with sanctions, keeping records and answering lawful requests from authorities.
• Legitimate interest: preventing fraud, multi-accounting and bonus abuse, protecting the Service from attacks, handling disputes and improving the product.
• Responsible gaming: spotting signs of problem gambling and applying self-exclusion.
• Consent: sending news and promotions in Telegram. You can unsubscribe at any time with the button in the message or in your profile; service messages about payments and security are always sent.

We do not sell your data and do not use it for automated decisions with legal effects on you, except anti-fraud checks, which a staff member can always review.

04Who we share it with

Only as far as needed to run the Service:

• Telegram — login, bot messages, gift transfers;
• Crypto Pay — creating invoices and sending withdrawals;
• the TON network — TON transfers are public and visible to everyone on the blockchain;
• Cloudflare — attack protection and site delivery; IP addresses pass through Cloudflare;
• our hosting provider — the servers the Service runs on;
• game providers — an internal player ID and bets when you play their slots;
• identity and sanctions screening — screening services, if a check is needed;
• authorities and the regulator — on a lawful request or where we must report a suspicious transaction.

Some recipients are located outside your country. We only share data with parties that protect it.

05Cookies and trackers

The mini app does not use cookies: you log in with signed Telegram data. The website kozyr.online sets no cookies and loads no third-party analytics or advertising trackers. The staff control panel uses one technical session cookie.

06How long we keep it

• account, transaction and game data — for the life of the account and 5 years after it is closed, as AML rules require;
• identity check documents — 5 years after the account is closed;
• technical logs — up to 90 days, security logs — up to 1 year;
• anonymous statistics — without a time limit.

After that, data is deleted or anonymised.

07How we protect it

Connections are encrypted (TLS). Servers are reachable only with keys, and the database is not exposed to the internet. Secrets are stored encrypted. Staff sign in to the panel with a password and two-factor authentication, see only what their role needs, and their actions are logged. No system is perfectly secure, but if a breach affects you, we will tell you without undue delay.

08Your rights

You can ask for:

• a copy of your data;
• correction of inaccurate data;
• deletion of your data, except what we must keep by law;
• restriction of processing and objection to processing based on legitimate interest;
• your data in a machine-readable format;
• withdrawal of consent to marketing messages.

Write to [email protected] and include your Telegram ID — we may ask you to confirm the request is yours. We reply within 30 days. You also have the right to complain to the data protection authority in your country.

09Minors

The Service is not intended for anyone under 18. If we learn that an account belongs to a minor, we will close it and return deposits to the legal guardian after verification.

10Changes

We may update this policy. The new edition is published on this page with its date. We will announce material changes in the bot.