To provide our streaming services, we only collect the information that is necessary:
1.1 Account Information
- Registration: phone number or email address (one required).
- Credentials: encrypted password hash. We cannot recover your original password.
1.2 Payment Information
- Transaction records: title/plan purchased, amount (in MNT ₮), time, and order number.
- Payment channel: transaction identifiers generated by HiPay. We do not store your bank card numbers, payment passwords, or other sensitive payment credentials.
1.3 Viewing History
- Titles and times of content you have watched, used for entitlement verification and session management.
1.4 Device and Access Information
- IP address, browser type and version, operating system.
- Access logs: request time and response status, for security auditing and troubleshooting.
We do not proactively collect your device GPS location, contacts, camera, or other device permissions unrelated to our services.
Information we collect is used solely for the following purposes:
- Service delivery: Processing registration and login, providing video playback, processing payments, and managing membership benefits.
- Security: Identifying and preventing security risks, detecting unusual login activity, and preventing fraud and account abuse.
- Notifications: Sending membership expiry reminders, order status updates, and benefit notifications.
- Customer service: Responding to your inquiries, complaints, or refund requests.
- Legal compliance: Complying with applicable laws and regulations and cooperating with lawful requests from law enforcement.
We will not use your personal information for purposes unrelated to the above.
We commit to never selling or renting your personal information. We may share your information only in the following limited circumstances:
- Payment providers: Sharing the minimum information necessary to complete transactions with payment partners such as HiPay.
- Infrastructure providers: Sharing necessary operational information with partners providing server hosting, CDN, and other infrastructure services, who are bound by confidentiality obligations.
- Legal requirements: When we receive court orders, prosecution requests, or other legally binding government directives, we disclose the required information as mandated by law and notify you where legally permitted.
- With your consent: In other specific cases where you have given explicit consent.
All sharing follows the principle of data minimization — we only share the minimum information necessary to achieve the purpose.
We take the following measures to protect your personal information:
- Site-wide HTTPS (TLS) encryption to prevent data interception during transmission.
- Passwords are stored using irreversible hashing — even if the database is compromised, original passwords cannot be exposed.
- Strict data access controls — only essential technical staff can access user data, and all access is logged.
- Regular security assessments and prompt patching of known vulnerabilities.
- In the event of a data security incident, we will notify affected users as soon as possible and report to the relevant authorities.
Nevertheless, no absolute security guarantee exists online. We recommend using a strong password and avoiding saved login sessions on public devices.
This platform uses the following types of cookies:
- Essential cookies: Used to maintain your login status and session information. Required for the platform to function and cannot be disabled.
- Functional cookies: Used to restore your previous settings on return visits, improving your experience.
This platform does not use advertising tracking cookies or third-party analytics cookies. You can manage or delete cookies through your browser settings, but disabling essential cookies will prevent you from staying logged in.
Regarding your personal information, you have the following rights:
- Right of Access: You can view personal information we hold about you in your account center, including account details and transaction records.
- Right of Correction: If you find errors in your account information, you can correct them in the account center or contact customer support.
- Right to deletion (account cancellation): You may request deletion of your account and personal data by contacting customer support. After cancellation, your data will be deleted within a reasonable period; records required by law (such as payment records) will be retained for the legally mandated period before deletion.
- Right to withdraw consent: For information processed based on your consent (such as non-essential notifications), you can withdraw consent at any time in your notification settings. Withdrawal does not affect the lawfulness of prior processing.
- Data Export: You may request a copy of your personal data (including account info and order records). Contact support to submit a request — we will process it within 30 business days in a structured format.
To exercise any of these rights, please contact us using the information at the end of this policy. We will respond within 15 business days respond to your request.
- Account Information: Deleted within 30 days of account cancellation (recoverable during grace period), then permanently deleted.
- Transaction records: Retained for 5 years as required by financial regulations, then deleted.
- Access logs: Retained for no more than 6 months for security auditing, then rolled over and deleted.
- Remaining data after cancellation: Except for the legally mandated records above, all remaining personal data is deleted after the grace period.
Our services are intended for adult users. We do not knowingly collect personal information from minors under 14.
- If we discover that a minor's information was collected without parental consent, we will promptly delete it.
- If you are a parent or guardian and discover your child has provided personal information without authorization, please contact us.
We may update this Privacy Policy periodically based on business developments and legal changes. Updates will be published on this page with the latest update date.
- For changes that expand data collection or reduce user rights, material changes that expand data collection or reduce user rights, we will provide advance notice via in-app notification with at least 7 days\' public notice.
- During the notice period, you may choose to stop using the service or contact us regarding your account.
- Continued use of the platform after the notice period constitutes acceptance of the updated policy.
If you have any questions, feedback, or rights requests regarding this Privacy Policy, please contact us:
- Platform: Mongol-Kino
- Website: mongol-kino.com
- Email: [email protected]
We will respond to your request within 15 business days . For urgent issues (such as suspected account theft), please include“Urgent Security Issue” in the email subject for priority handling.
