Privacy Policy

Version dated July 23, 2026. In case of any discrepancy, the Russian version prevails.

This Policy defines how personal data of users of the GoFish service (the "GoFish" mobile application and the fishonline.kz website) is processed and protected, in accordance with the Law of the Republic of Kazakhstan No. 94-V of May 21, 2013 "On Personal Data and Its Protection".

1. What data we collect

• Account data: username (login), e-mail address, password (stored only as an irreversible hash).
• Profile data (optional): profile photo (avatar).
• Service usage data: fishing session history, catches (fish species, weight, photo), balance transactions, applied promo codes, messages in chats with the operator and support.
• Payment data: processed exclusively by the payment organisation PayLink.kz LLP and the acquiring bank on their side. We do not receive or store full bank card details — we only receive the payment result (amount, status, identifier).
• Technical data: IP address, device model, app and OS version, push notification identifier (FCM token), service logs.
• Cookies and website analytics: the website uses Google Analytics (anonymised visit statistics). Cookies can be disabled in your browser settings.

2. Purposes of processing

• providing the services: account, access to IoT rods, balance and history;
• performing the public offer agreement, accepting payments and refunds;
• communication: service notifications, push notifications about the queue and session events, support replies;
• security, fraud and abuse prevention;
• service quality improvement (anonymised statistics).

3. Legal grounds

Processing is based on: the data subject's consent given upon registration in the App; the necessity to perform the agreement (public offer); requirements of the legislation of the RoK (accounting and tax records of payments).

4. Sharing with third parties

We share data only to the extent necessary to provide the service:

• with the payment service — to process payments and refunds;
• with water body operators (rod operators) — the username and current session data, to support the fishing session and chat;
• with the push notification service (Firebase Cloud Messaging, Google) — the device token for notification delivery;
• with state authorities of the RoK — only upon a lawful request.

Data is not sold and is not shared with third parties for marketing purposes.

5. Storage and protection

Data is stored and processed on secure servers located in the territory of the Republic of Kazakhstan, in accordance with paragraph 2 of Article 12 of the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 «On Personal Data and Their Protection». Cross-border transfer of personal data is not carried out. We use: encrypted communication channels (TLS), password hashing, access control, logging, backups. Data is kept for the lifetime of the account and for 3 years after its deletion to the extent necessary for accounting and dispute resolution, after which it is deleted or anonymised.

6. Data subject rights

Under Law No. 94-V of the RoK you have the right to:

• obtain information on the scope and purposes of processing of your data;
• request correction or completion of incomplete/inaccurate data (your profile can be edited in the App);
• withdraw consent and request deletion of your data (account deletion — by request to gofish@fishonline.kz; deletion makes further provision of services impossible);
• appeal against the controller's actions to the authorised body or court.

Requests are processed within 15 calendar days.

7. Changes to this policy

The current version of this Policy is always available on this page. In case of material changes we will notify users through the App.