Zásady ochrany osobních údajů

2.1. Controller details

• Name: KoloPlus
• Legal contact: legal@koloplus.com
• Privacy contact: privacy@koloplus.com
• Jurisdiction focus: Ukraine / EU

2.2. EU representation

Where required by GDPR, an EU representative or equivalent compliance contact may be designated for users in the European Union.

3.1. Data you provide directly

3.2. Data collected automatically

3.3. Third-party sources

• OAuth providers — public profile data and email where you sign in through a social or identity provider.
• Payment processors — transaction status and anti-fraud signals, without storing full card details where not needed.
• Advertising / analytics partners — aggregated or pseudonymous performance data.

• to create and maintain your account;
• to deliver platform, gameplay, social, moderation, and support features;
• to protect users and detect fraud, abuse, and security incidents;
• to measure service performance and improve usability;
• to comply with legal obligations and regulator requests;
• to personalize interface language, settings, and certain content;
• to run monetization, payouts, and advertising workflows where enabled.

• Contract — when processing is necessary to provide the service you requested.
• Consent — for optional cookies, marketing preferences, and similar choices.
• Legitimate interests — for platform security, product analytics, abuse prevention, and internal administration, provided these do not override your rights.
• Legal obligation — where retention, disclosure, or verification is required by law.

• right of access to your data;
• right to rectification of inaccurate data;
• right to erasure where the law allows it;
• right to restriction of processing;
• right to data portability;
• right to object to certain processing based on legitimate interests;
• right to withdraw consent at any time, without affecting earlier lawful processing;
• right to lodge a complaint with a competent supervisory authority.

• Account data — while the account remains active and for a limited period after deletion where needed for security, legal, or dispute handling.
• Logs and security events — for a limited retention window appropriate to fraud prevention and incident response.
• Support and appeal records — until closure and any required legal retention period.
• Financial / payout records — for legally required accounting and anti-fraud periods.
• Cookies — according to their technical lifespan and your settings.

• Infrastructure and service providers — hosting, CDN, security, monitoring, and email providers.
• Payment and monetization partners — to process eligible payments or payouts.
• Analytics / advertising vendors — only as configured by your consent where required.
• Regulators and law enforcement — when disclosure is legally required or necessary to protect rights, safety, or platform integrity.

Where cross-border transfers occur, we aim to use lawful transfer mechanisms and proportionate safeguards.

• access controls and least-privilege principles;
• transport-layer security and secure session handling;
• logging, monitoring, and abuse detection;
• fraud prevention and rate limiting;
• periodic review of permissions and technical safeguards.

You can manage cookie choices through the consent banner, your account privacy settings where available, or your browser settings.

• minimum account age is 13 unless local law requires a higher age;
• for some jurisdictions, parental or guardian consent may be required for younger teens;
• we do not knowingly seek to collect personal data from children below the permitted age threshold.

We may update this Policy to reflect legal, technical, product, or operational changes. Material changes may be communicated through the platform, by email, or by consent-related prompts where needed.

• v2.0.0 — GDPR / DSA oriented revision
• v1.0.0 — initial version

• Email: privacy@koloplus.com
• Suggested subject: [Privacy Request] or [GDPR Request]
• General legal: legal@koloplus.com
• Support: support@koloplus.com