Privacy Policy

To provide our streaming services, we only collect the information that is necessary:

1.1 Account Information

• Registration: phone number or email address (one required).
• Credentials: encrypted password hash. We cannot recover your original password.

1.2 Payment Information

• Transaction records: name of the film or package purchased, transaction amount (in USD $), transaction time, order ID.
• Payment channel data: transaction identifiers generated when paying via Airwallex. We do not store your bank card numbers, payment passwords, or other sensitive payment credentials.

1.3 Viewing History

• Titles and times of content you have watched, used for entitlement verification and session management.

1.4 Device and Access Information

• IP address, browser type and version, operating system.
• Approximate IP-based geolocation (accurate to country/region), added by Cloudflare when forwarding requests, used for licensing geographic checks, risk control, and service quality. We do not collect precise location data such as GPS.
• Access logs: request time and response status, used for security audits and troubleshooting; retained on a 14-day rolling window.

We do not actively invoke your device's GPS location, contacts, camera, or other device permissions unrelated to our services.

Information we collect is used solely for the following purposes:

• Service delivery: Processing registration and login, providing video playback, processing payments, and managing membership benefits.
• Security: Identifying and preventing security risks, detecting unusual login activity, and preventing fraud and account abuse.
• Notifications: Sending membership expiry reminders, order status updates, and benefit notifications.
• Customer service: Responding to your inquiries, complaints, or refund requests.
• Legal compliance: Complying with applicable laws and regulations and cooperating with lawful requests from law enforcement.

We will not use your personal information for purposes unrelated to the above.

We commit to never selling or renting your personal information. To provide core platform features we share the minimum necessary information with the following infrastructure providers, who process data under their own privacy policies.

• Airwallex (payments): Used to process payments; we share only the minimum transaction information required (order amount, order ID, payment channel data). We do not share your password or viewing history.
• Cloudflare (CDN / proxy / R2 storage): Used for acceleration, DDoS protection, and video storage; processes your IP address, User-Agent, and request paths, and obfuscates email addresses against scrapers.
• Brevo (email): Used to send verification codes, order status, and expiry reminders; we share the email address linked to your account and the message body.
• Twilio (SMS): Used to send verification codes and service notification SMS; we share your linked phone number and the message body.
• Zoho SalesIQ (live chat): Provides the live-chat widget in the bottom-right corner; collects session ID, IP and browser info, and only receives chat content when you initiate a conversation.
• Google Fonts (web fonts): Used to load web fonts; when the browser fetches fonts, Google receives your IP and User-Agent. To avoid loading, block fonts.googleapis.com in your browser or extension.
• Legal requirements: When we receive court orders, prosecution requests, or other legally binding government directives, we disclose the required information as mandated by law and notify you where legally permitted.
• With your consent: In other specific cases where you have given explicit consent.

All sharing follows the principle of data minimization — we only share the minimum information necessary to achieve the purpose.

We take the following measures to protect your personal information:

• Site-wide HTTPS (TLS) encryption to prevent data interception during transmission.
• Passwords are stored using irreversible hashing — even if the database is compromised, original passwords cannot be exposed.
• Databases are deployed on access-controlled servers; only authorised operations staff can access them directly.
• We continuously monitor security updates of our dependencies and patch known vulnerabilities as soon as conditions allow.
• If a data security incident affects your account, we will notify you via in-app notification or email after confirmation and cooperate with the relevant authorities as required by applicable law.

Nevertheless, no absolute security guarantee exists online. We recommend using a strong password and avoiding saved login sessions on public devices.

This platform uses the following types of cookies:

• Essential cookies: Used to maintain your login status and session information. Required for the platform to function and cannot be disabled.
• Functional cookies: Used to restore your previous settings on return visits, improving your experience.

This platform does not use advertising tracking cookies or third-party analytics cookies. You can manage or delete cookies through your browser settings, but disabling essential cookies will prevent you from staying logged in.

Regarding your personal information, you have the following rights:

• Right of Access: You can view personal information we hold about you in your account center, including account details and transaction records.
• Right of Correction: If you find errors in your account information, you can correct them in the account center or contact customer support.
• Right to deletion (account cancellation): You may request account deletion in Profile → Security yourself. After submission, the account enters a 30-day grace period during which logging in cancels the request; once the grace period ends, the account and personal data are deleted automatically. Order records that must be retained for legal or financial compliance are kept separately for the prescribed period before deletion.
• Right to withdraw consent: For information processed based on your consent (such as non-essential notifications), you can withdraw consent at any time in your notification settings. Withdrawal does not affect the lawfulness of prior processing.
• Data Export: To obtain a copy of your personal data (account info and order records), please contact support. We will respond within a reasonable time and provide it in a readable format.

To exercise the rights above, please contact us via the contact details at the end of this policy. We will respond within a reasonable time.

• Account Information: After you initiate deletion, the account enters a 30-day grace period; logging in during this time cancels the request. After the grace period, the system automatically deletes the account and your personal data.
• Transaction records: To meet financial compliance requirements, orders and payment records are kept for at least 3 months after the order is completed, for refund verification, reconciliation, and audit purposes.
• Access logs: Web server access logs are retained on a 14-day rolling window, used for troubleshooting and security audits.
• Viewing history, risk-control and notification logs: Playback sessions are auto-purged after about 30 days, security events after 60 days, and notification drafts after 90 days; the exact periods can be adjusted by administrators in the admin panel.

This platform is intended primarily for adult users. We do not run a dedicated minor-detection mechanism, and the registration flow does not actively ask for age.

• If you are a minor, please obtain consent from a parent or guardian before using this platform.
• If you are the parent or guardian of a minor and discover that your child has used the platform or provided personal information without authorisation, please contact us via the contact details at the end of this policy and we will help handle the account and data.

We may update this Privacy Policy periodically based on business developments and legal changes. Updates will be published on this page with the latest update date.

• Material changes that expand the scope of data collection or reduce user rights material changes , we will notify you via in-app notification or email; you may choose to stop using the service or apply for account deletion.
• Continued use of the platform after the policy is updated is deemed consent to the updated privacy policy.

If you have any questions, feedback, or rights requests regarding this Privacy Policy, please contact us:

• Platform: Mongol-Kino
• Operating Company: Ikhires Limited
• Company Registration No. (CR): 80314023
• Registered address: UNIT B53, 2/F, KWAI SHING IND BLDG PHASE 1, 36-40 TAI LIN PAI ROAD, KWAI CHUNG, N.T. HONG KONG
• Website: mongol-kino.com
• Email: [email protected]

We will respond within a reasonable time. For urgent matters (e.g. suspected account compromise), please mark the email subject with“Urgent Security Issue” in the email subject for priority handling.