Privacy Policy

1. Who controls your information

TOV “AHRO-YUA” (Ukrainian: ТОВ «АГРО-ЮА»), a limited liability company incorporated under the laws of Ukraine, company identification code 32779854 is the controller responsible for Cazovia and this Privacy Policy. Our registered office is 7 Tsentralna Street, Troitske Settlement, Lozivskyi District, Kharkiv Region, 64113, Ukraine.

Privacy questions and requests may be sent to [email protected]. This Policy applies to cazovia.com, Cazovia accounts, games, promotions and related support services (the “Platform”).

2. Information you provide

We may collect your email address, username, protected password credential, age or eligibility confirmation, preferences and information in support, privacy or responsible-play requests.

If you use Google sign-in, we receive the identifiers and basic profile information you authorize, such as your email address and name or avatar. We never receive your Google password.

3. Gameplay and account records

We process account identifiers, Gold Coin balance and ledger entries, bonuses, referrals, VIP tier and XP, level progress, game sessions, virtual stakes and wins, feature usage, favorites and responsible-play restrictions.

These records let us operate your account, maintain an authoritative balance, prevent duplicate rewards, restore progress and investigate errors, fraud or abuse.

4. Device, location and usage data

Our systems may receive IP address, browser and device details, operating system, language, approximate country or region derived from IP, referring page, pages viewed, timestamps, diagnostics, cookie identifiers and security logs. We do not request precise GPS location in the current product.

5. Data we do not currently request

The current Platform does not process purchases or withdrawals and is not designed to collect card or bank details, government identification, biometric templates or special-category information such as health, religion or sexual orientation. If the product changes, we will update this Policy and any required consent interface before collecting new categories.

6. Purposes and legal bases

We process information to register and authenticate users; provide games and virtual rewards; maintain balances and progress; operate bonuses, referrals and responsible-play controls; personalize the interface; communicate with you; secure and troubleshoot the Platform; prevent fraud and automation; enforce our Terms; meet legal duties; and establish or defend legal claims.

Depending on applicable law, our legal bases are performance of our agreement, legitimate interests in operating and securing the Platform, compliance with legal obligations, protection of vital interests, and consent. Where we rely on consent, you may withdraw it for future processing at any time.

7. Cookies, analytics and advertising

Strictly necessary cookies and similar storage support authentication, security, preferences and core functionality. Optional analytics, personalization or advertising technologies are used only after any consent required in your region.

Subject to your choices, we use Google Tag Manager to manage Google Analytics 4 and Microsoft Clarity for analytics, and Google Ads, Meta Pixel, TikTok Pixel and Snapchat Pixel for campaign measurement and advertising. These providers may process device and browser information, online identifiers, approximate location, referral and campaign information, pages viewed and interaction or registration events. Details and controls are provided in our Cookie Policy.

To evidence your choice and produce aggregate acceptance statistics, we store a random browser identifier, selected action, category states, notice version and timestamps. This consent record does not include an IP address or device fingerprint. You may change or withdraw optional consent at any time through Cookie Settings.

8. When we disclose information

We may give limited information to processors that provide hosting, databases, authentication (including Google sign-in), security, email, analytics, customer support and game technology. They may use it only for contracted purposes and under applicable safeguards.

We may also disclose information in response to valid legal process, to protect users or the Platform, investigate wrongdoing, or support a merger, financing, reorganization or business transfer subject to confidentiality and applicable law.

9. Sale, sharing and targeted advertising

Cazovia does not sell personal information for money. When you grant advertising consent, advertising providers may process online identifiers and activity information for campaign measurement, audience creation or personalized advertising where permitted. Some laws may define this disclosure as “sharing” or “targeted advertising” even when no money is exchanged.

You may reject or withdraw Advertising and Personalization through Cookie Settings. We honor Global Privacy Control for advertising and advertising-personalization choices where applicable and provide the same core free service when optional consent is declined.

10. International transfers

The Company is established in Ukraine and service providers may process information in other countries. Those countries may have different privacy laws. Where applicable law requires it, we use an adequacy decision, approved contractual clauses, binding rules, consent or another lawful transfer mechanism, together with technical and organizational safeguards.

You may contact us for information about the mechanism relevant to your data. A transfer mechanism will be stated as in use only after the corresponding agreement or safeguard is actually in place.

11. Retention

We keep data only as long as necessary for the purposes described here. Active account and balance records are retained while the account operates. After closure, core account data is deleted or de-identified after a reasonable wind-down period unless longer retention is needed for security, fraud prevention, disputes, legal claims or law.

Authentication sessions are kept for their configured lifetime; support records for the period needed to resolve and evidence a request; and security and ledger records for a proportionate period based on risk and legal requirements. We periodically review retention and securely delete or anonymize information no longer needed.

12. Security and incidents

We use reasonable administrative, technical and organizational measures such as access controls, protected credentials, server-side authorization, validation, backups and monitoring. No internet system is completely secure.

If a personal-data incident occurs, we will investigate, mitigate harm and notify affected people and authorities when applicable law requires it. Protect your device and contact [email protected] promptly if you suspect account misuse.

13. Your privacy choices and rights

Depending on your location, you may request access, confirmation, correction, deletion, portability, restriction or objection; withdraw consent; opt out of sale, sharing or targeted advertising; limit certain sensitive-data uses; ask about automated decisions; appeal a denied request; or complain to a supervisory authority.

Send requests to [email protected]. Describe the right you wish to exercise and the account involved. We may request proportionate information to verify identity or authority. We will respond within the period required by applicable law, will not discriminate for exercising a right, and will explain any lawful limitation or appeal route.

14. Regional information

EEA and Norway. Users in Austria, Bulgaria, Czech Republic, Denmark, Finland, France, Germany, Greece, Hungary, Ireland, Latvia, Lithuania, Netherlands, Norway, Portugal, Romania, Slovakia, Spain and Sweden receive GDPR rights and may complain to their local data-protection authority. United Kingdom and Switzerland. Comparable local access, correction, deletion, objection and complaint rights apply under UK and Swiss law.

Brazil. LGPD rights may include confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of certain automated decisions and withdrawal of consent. Australia, Canada and New Zealand. Applicable rights include transparent notice, access and correction, complaint handling and safeguards for overseas disclosures.

United States. Residents of California and other states with applicable privacy laws may have rights to know, access, correct, delete, obtain a portable copy, opt out of sale, sharing, targeted advertising or certain profiling, limit certain sensitive-data uses, appeal and receive equal service. We do not sell personal information for money. Optional advertising disclosures occur only with the choice described in sections 7 and 9 and may be withdrawn through Cookie Settings.

Other target regions. Users in Colombia, Israel, Japan, Mexico, Mozambique, Nigeria, Peru, Serbia and South Africa may exercise the rights provided by their applicable data-protection law through the same contact channel. We apply the most protective relevant response where practical, without reducing mandatory local rights.

15. Children and age restriction

The Platform is intended only for users aged 18 or older and the higher legal age required locally. It is not directed to children. We do not knowingly collect information from an ineligible child. If we learn that this occurred, we will take reasonable steps to delete the information and close the account. A parent or guardian may contact us at [email protected].

16. Supervisory complaints

Please contact us first so we can investigate. You may also complain to the privacy or data-protection authority in your country or region. EEA users may contact the authority where they live, work or believe an infringement occurred; UK users may contact the ICO; and other users may contact their competent local regulator.

17. Third-party services and links

Independent services, including Google authentication and external links, have their own privacy notices. This Policy does not control information a third party processes for its own purposes. Review its notice before providing information.

18. Changes and contact

We may revise this Policy when the Platform, providers or law changes. The “Last updated” date identifies the current version. We will highlight or communicate material changes and request renewed consent when required.

Email: [email protected]. Postal address: TOV “AHRO-YUA”, 7 Tsentralna Street, Troitske Settlement, Lozivskyi District, Kharkiv Region, 64113, Ukraine. Ukrainian registered name: ТОВ «АГРО-ЮА». Company identification code: 32779854.