Privacy Statement for

Visitor data

Visitor data is processed for the implementation and support of the contractual relationship or the pre-contractual relationship, as well as contact requests and communication, mainly on the basis of Art. 6 (1) (a) — (c) GDPR and in the case of Sensitive Data, only with explicit consent in accordance with Art. 9 (2) (a) GDPR.

In order to correctly display the website and to provide visitors with functions that are not unique for registered users, we collect and process some information through cookies (see “Cookies”). This includes without limitation IP address, browser type and version, location, time and date, preferred language, and similar data.

Minors are prohibited from using this website.

Visitors of the www.bongacash.com website can use the website in general without prior registration.

Affiliate account

There are functions and content on our website that are only accessible after registration. For this you can create an Affiliate account (alternatively: “account”) to get access to the referred parts of the website.

The following information is mandatory:

• A username defined by you.
• A password defined by you.
• An email defined by you.
• Full name.
• Address (Country, region, city, zip).
• Identity number.
• Messenger type and ID.
• Traffic source (your website).

In order to provide our services to you, you will be required to provide your payment information:

• Payment method.
• Payment ID.

For the safety of your account and personal data, we highly suggest all registered users to enable 2-Step Verification. There are two options available:

• Voice or Text message (you phone number is required).
• Authenticator app (Google or Microsoft authenticator apps).

The processing of your data takes place mainly on the basis of Art. 6 (1) (a) — (c) GDPR and for Sensitive Data only with explicit consent according to Art. 9 (2) (a) GDPR.

For registered Affiliates, we use personal data from your account information to send you contractually relevant information about our services, promotions, and news. In addition, you will receive notifications of your activities on www.bongacash.com, such as notifications of incoming messages, pending requests and promotional information.

Website usage

During the usage of our Website, we will collect and process statistical and personal data, including but not limited to:

• Account information.
• Correspondence.
• Income generated.
• Log data.

The legal basis for such processing is our legitimate interest and legal obligations according to Art. 6 (1) (a) — (c) GDPR and Art. 6 (1) (f) GDPR.

Processing of the abovementioned data helps us to optimize the performance of the Website and provide new features for you to utilize within the services of our website. We also use this information to prevent fraudulent activity and unauthorized access to your account.

Log data

We automatically collect log data and information regarding your device (computer, phone, etc.) and usage of the website. This can include:

• IP address.
• Date and time.
• Location.
• Pages visited.
• Used functions of the website.
• Internet browser.
• Operating system.
• Device and browser language.
• Identifiers associated with cookies.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to your device. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage of this data also serves statistical purposes in individual cases. Any other use or disclosure to third parties will not take place. We reserve the right to check the listed data subsequently if there is a suspicion of illegal use of our website.

The log files are stored to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our systems. These purposes are also our legitimate interest in data processing according to Art. 6 (1) (f) GDPR.

Payments

In order to receive payouts generated from the use of our services, we will request from you billing information, including:

• Your billing address.
• Your payment method’s information.

As the payouts can be made through several methods, we would like to point out that the relevant processes are made by the service provider (the one you choose) and the data protection information and conditions of the relevant service provider are applied. For the purpose of this processing, we may share specific information with the payment processor. We can assure you that every payment service provider is contractually obliged to process personal data according to our instructions and all applicable data protection laws. The processors will only share your personal data with us and no other entities or organizations. They will also ensure that necessary technical and organizational measures are taken to process your data securely and will only store your personal data for as long as we have instructed them to do so.

If you wish to change your payout information, you can contact us via email or contact form indicated on the “Contacts” webpage. Your account will be assigned with the Personal Manager and all available contact methods (Skype, email, Telegram) will be provided to you on the abovementioned page.

The processing of your data takes place mainly on the basis of Art. 6 (1) (a) — (c) GDPR and for Sensitive Data only with explicit consent according to Art. 9 (2) (a) GDPR.

In certain circumstances, we are required by law to transfer and share personal data with third parties. For example, in the context of legal proceedings.

Consents

As part of our legal obligations, we collect and store your given consent to cooperate with Art. 7 (1) GDPR. This includes any permissions, consents or preferences given by you to the website and can be used as proof that any relevant consent was given.

Storage duration

The personal data stored by us will be deleted in accordance with legal requirements. We delete the data as soon as it is no longer required for the processing purpose, a given consent is revoked or other permissions cease to apply. Data that must still be stored, e.g. for reasons of commercial or tax law, legal obligations or whose storage is still required for the assertion, exercise or defense of legal claims, will be deleted as soon as it is no longer required for aforementioned cases.

Data subject rights

Data subjects have the following rights with regards to their personal information:

• The right to be informed about the collection and the use of their personal data (Art. 15 GDPR).
• The right to have inaccurate personal data rectified, or completed if it is incomplete (Art. 16 GDPR).
• The right to erasure (to be forgotten), unless exceptions apply as to why we are still storing the data, for example, retention obligations or periods of limitation (Art. 17 GDPR).
• The right to restrict processing of personal data (Art. 18 GDPR).
• The right to object to processing in the public or legitimate interest (Art. 21 GDPR).
• The right to revoke consent to data processing at any time (Art. 7 (3) GDPR).
• The right to data portability, which allows the data subject to obtain and reuse their personal data for their own purposes across different services (Art. 20 GDPR).
• The right to lodge a complaint with a data protection supervisory authority if you are dissatisfied with us processing your data (Art. 77 GDPR).

Information for Residents of California

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), including any other rights in this Privacy Policy:

• Consumers’ Right to Delete Personal Information (1798.105. CCPA).
• Consumers’ Right to Correct Inaccurate Personal Information (1798.106. CCPA).
• Consumers’ Right to Know What Personal Information is Being Collected (right to access Personal Information) (1798.110. CCPA).
• Consumers’ Right to Know What Personal Information is Sold or Shared and to Whom (1798.115. CCPA).
• Consumers’ Right to Opt Out of Sale or Sharing of Personal Information (1798.120. CCPA).
• Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information (1798.121. CCPA).
• Consumers’ Right of No Retaliation Following Opt Out or Exercise of Other Rights (1798.125. CCPA).

We would like to point out that we do not “sell” your Personal Data. The term “sell” is defined in 1798.140. (ad) (1) CCPA.

You can exercise your rights by sending an e-mail to the responsible office: , ; email: dpo@bongacash.com.

Alternatively, you can contact BongaCash Managers via contacts listed on the “Contacts” webpage.

SSL Encryption

This site uses SSL encryption to ensure the security of data processing and to protect the transmission of confidential content, such as login data. You can recognize an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

Cloudflare Turnstile

We use Cloudflare Turnstile on this website. The provider is Cloudflare Inc. (“Cloudflare”), 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare Turnstile is a service that helps distinguish between interactions performed by humans and those generated by automated programs, enhancing the security and functionality of our website.

When Cloudflare Turnstile is used, the following information is collected and transmitted to Cloudflare to assess the nature of the interaction:

• Referrer URL (the website or page requesting CAPTCHA validation)
• User-agent string (information about your browser and operating system)
• Browser characteristics (e.g., screen resolution, browser capabilities, and whether JavaScript is enabled)
• Mouse movements or other interaction events (to determine human activity)
• Network information (e.g., IP address, Autonomous System Number (ASN), or geolocation)
• TLS/SSL handshake data (to verify the security context of the connection)
• Timestamp of the request

If you have provided consent for the use of Cloudflare Turnstile, the processing of personal data is based on Art. 6(1)(a) GDPR. Additionally, we have a legitimate interest in ensuring the security and functionality of our website, which serves as an alternative legal basis under Art. 6(1)(f) GDPR.

The personal data collected is retained only as long as necessary to achieve the processing purpose. Data will be deleted when it is no longer required for this purpose, in accordance with applicable regulations and Cloudflare’s policies.

The data collected may be transferred to servers located in the United States. Such transfers are safeguarded by Standard Contractual Clauses (SCCs), which ensure compliance with GDPR and protect your data rights.

For more details about Cloudflare’s data processing and privacy practices, please refer to their Privacy Policy.

General information about cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone or similar) when you visit our website.

Information is stored in the cookie that results from the connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves to make the use of our website more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which changes to settings you have made so that you do not have to change them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for you for the purpose of optimization. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. The cookies set in this way are automatically deleted after a defined period of time. The respective storage period of the cookies can be found in this Privacy Policy.

We therefore use the data obtained via cookies exclusively to optimize overall performance of the website for the end user and for statistical analysis in order to better adapt our services to the interests of our users.

Legal basis for the use of Cookies

The legal basis for the processing of personal data using cookies for analysis purposes is — based on the consent given by the user — Art. 6 (1) (a) GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

Essential cookies

Analysis/Statistics

Changing the cookie settings

You can adjust or revoke the cookie settings you have already made at any time by calling up the cookie box.

If you do not agree to the use of essential cookies, you can usually disable the storage and use of cookies in your web browser.

Most browsers are set by default to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you when cookies are sent.

We would like to point out that as a result of such settings, you may only be able to use our website with restrictions.

Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland (“Google”). In this context, pseudonymized usage profiles are created and cookies (see “Cookies”) are used. The information generated by cookies about your use of this website such as

• browser type/version,
• operating system,
• referrer URL (the previously visited page),
• host name of the accessing computer (IP address) and
• time of the server request,

is transferred to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and internet usage. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that this assignment is not possible (IP masking).

You may decline the use of cookies by selecting the appropriate settings in your browser, however we would like to point out that if you do this you may not be able to use the full functionality of this website.

These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 (1) (a) GDPR.

You can read the data protection provisions of Google Analytics here: https://support.google.com/analytics/answer/6004245