DISP WORLD Platform
This Consent to the Processing of Personal Data (the “Consent”) is a standalone document prepared in accordance with the requirements of the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 dated 2 July 2019, separately from the User Agreement and other documents confirmed by the User when registering on the DISP WORLD platform, available on the Internet at: https://dispworld.com/ (the “Platform”).
I (the “User”), by using the Platform owned by “GR ATTRACTOR” Limited Liability Company, registered in the Republic of Uzbekistan, TIN 313127023, legal address: 254, 1st Passage, Usta Shirin Street, Miskin CSG, Almazar District, Tashkent, Republic of Uzbekistan (the “Operator”), in fulfilment of the requirements of the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 dated 2 July 2019, freely, of my own will and in my own interest, give the Operator my voluntary, specific, informed and unambiguous consent to the processing of the following personal data on the terms set out in this Consent.
1. LIST OF PERSONAL DATA AND PURPOSES OF PROCESSING
1.1. In connection with registration on the Platform and the conclusion and performance of the User Agreement:
List of personal data: email address; name (nickname); date or year of birth; country of residence; password in encrypted form; other information voluntarily specified by the User in the profile (first name, surname, profile photograph, telephone number).
Purposes of processing: creating and maintaining the User’s account; identifying and authorizing the User when signing in to the Platform; ensuring account security; restoring access to the account; verifying compliance with the Platform’s age requirements; providing access to Platform functionality in accordance with the selected role; performing the User Agreement and the Operator’s other contractual obligations.
Legal basis: performance of a contract to which the User is a party, as well as this Consent.
1.2. In connection with payment for Tariff Plans:
List of personal data: email address; data required to initiate a payment transaction through a payment provider (to the extent determined by the provider’s interface); payment history (date, amount and transaction status).
Purposes of processing: processing payments for Tariff Plans through a payment provider; generating payment history and issuing payment documents; resolving possible payment-related disputes; complying with accounting and tax legislation requirements.
Legal basis: performance of a contract, requirements of the laws of the Republic of Uzbekistan, as well as this Consent.
Note: full bank card details are not stored on the Operator’s servers and are not processed by the Operator; they are processed by the payment provider.
1.3. In connection with identity verification (KYC) for the roles of Organizer, Mentor and Judge:
List of personal data transferred to an external verification provider: first name, surname; identity document (type, series and number, to the extent required by the verification provider); other data requested by the verification provider to conduct the verification in accordance with its procedures.
List of personal data stored by the Operator: final verification status (“verification not started”, “verification in progress”, “identity confirmed”, “verification rejected”, “repeat verification required”); verification identifier assigned by the provider (where required for audit purposes); date of verification.
Purposes of processing: confirming the identity of a User applying for a commercial role (Organizer, Mentor or Judge); complying with legal requirements concerning the identification of Platform participants.
Legal basis: this Consent.
Important condition: copies of identity documents, biometric data, photographs of documents and other source data provided by the User directly to the verification provider during KYC are not stored on the Operator’s servers. They are processed by the verification provider in accordance with its own privacy policy.
1.4. In connection with legal entity verification (KYB) for the role of Advertiser:
List of personal data: company name; taxpayer identification number (TIN) or another company registration number under the laws of the country of registration; country of company registration; first name, surname and position of the company representative; representative’s email address; representative’s telephone number; company website address (if any); business sector (where completed).
Purposes of processing: verifying the legal status of the advertiser company; confirming the representative’s authority to act on behalf of the company; granting access to the Platform’s advertising tools; complying with legal requirements concerning legal entity verification.
Legal basis: this Consent.
1.5. In connection with ensuring the technical operation of the Platform:
List of personal data: IP address of the User’s device; HTTP request headers; technical cookie data (session authentication identifiers); information about the User’s browser and operating system (User-Agent string); dates and times of access to Platform pages; addresses of requested Platform pages; technical event logs.
Purposes of processing: ensuring the technical operation of the Platform; maintaining the active session of an authenticated User; ensuring connection security; detecting and preventing unauthorized access attempts; diagnosing technical faults.
Legal basis: performance of a contract and the Operator’s legitimate interest in ensuring the security of the Platform.
1.6. In connection with processing requests, complaints and technical support:
List of personal data: email address; name (nickname); content of the request and materials attached to it; history of correspondence with the User regarding that request; status and outcome of review of the request.
Purposes of processing: reviewing Users’ requests, claims and complaints; sending responses; maintaining a history of interactions with support to ensure continuity in the event of repeated requests; resolving disputes.
Legal basis: performance of a contract, the Operator’s legitimate interest in resolving disputes, as well as this Consent.
1.7. In connection with content moderation:
List of personal data: account data; content created by the User (descriptions of events and courses, advertising materials, reviews); history of complaints submitted by or against the User; history of moderation decisions.
Purposes of processing: ensuring that User content complies with the User Agreement and Role Rules; reviewing complaints; applying moderation measures; maintaining an audit log of moderation decisions.
Legal basis: performance of a contract and the Operator’s legitimate interest in ensuring the security of the Platform.
1.8. In connection with sending technical and service notifications:
List of personal data: email address; name (nickname).
Purposes of processing: sending notifications concerning the status of the account, verification, Tariff Plan, events, complaints and changes to Platform documents; notifications directly connected with performance of the User Agreement.
Legal basis: performance of a contract.
Note: this basis does not cover marketing and advertising communications, which are sent only where the User has given separate consent documented as a standalone instrument.
1.9. In connection with participation in live streams and live sessions:
Personal data: the User’s image (video image), transmitted in real time during a live stream of an event, a Mentor’s live session or another stream involving the User; the User’s voice, transmitted in real time during the specified streams and sessions.
Purposes of processing: ensuring the technical operation of a live stream or live session; transmitting the video image and voice to other participants and viewers to the extent necessary to conduct the stream.
Legal basis: this Consent, expressed by the User through the voluntary activation of the video camera and/or microphone when joining the stream or session.
Conditions of processing: the User’s image and voice are processed exclusively in real time during the stream and are not stored on the Administration’s servers after it ends, unless otherwise expressly provided by Platform functionality and by the User’s separate consent to recording the stream.
Separate basis for biometric data: if the image of the User’s face transmitted during a live stream or live session may qualify as biometric personal data within the meaning of the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 dated 2 July 2019, it is processed exclusively on the basis of the User’s express voluntary consent. The User’s voluntary activation of the video camera when joining the stream shall constitute such consent. The User may disable the video camera at any time and thereby stop the real-time processing of the User’s image.
I have been informed that participation in live streams with the video camera enabled is voluntary. Refusal to enable the video camera does not prevent participation in the stream as a viewer or listener and does not restrict access to other Platform functionality.
2. GENERAL TERMS OF PERSONAL DATA PROCESSING
2.1. Under this Consent, I grant the Operator the right to perform the following actions with my personal data: collection, recording, systematization, accumulation, storage, clarification (updating, alteration), retrieval, use, transfer (provision, access) in the cases provided for by this Consent and the Personal Data Processing Policy, depersonalization, blocking, deletion, destruction, and other actions necessary to achieve the purposes specified in Section 1 of this Consent.
2.2. My personal data may be processed both by automated means and without using automated means, in accordance with applicable law. My personal data may be processed using information systems and software required for operation of the Platform, including systems and software owned by third parties and made available to the Operator under an appropriate agreement, provided that measures to protect the confidentiality of personal data are observed.
2.3. Personal data previously provided by me in connection with use of the Platform shall be processed on the same terms as those specified in this Consent.
2.4. I give this Consent for the period required to achieve the purposes of personal data processing specified in Section 1 of this Consent, or until I withdraw it, whichever occurs first. Data that must be retained under the laws of the Republic of Uzbekistan or is required to protect the Operator’s legitimate interests, including for dispute resolution and fulfilment of tax obligations, shall continue to be retained for the periods established by the Personal Data Processing Policy even after this Consent is withdrawn.
2.5. I express this Consent electronically by ticking the relevant mandatory checkbox when registering on the Platform. The Platform system records the fact that the checkbox was ticked together with the following technical attributes: version of the text of this Consent, date and time when the checkbox was ticked, IP address of the device and the browser User-Agent string. When the text of this Consent is amended, a new version of the document is created; previously expressed consents are retained together with the historical text that was current when they were given.
3. TRANSFER OF PERSONAL DATA TO THIRD PARTIES
3.1. Under this Consent, I authorize the Operator to transfer my personal data to the following categories of third parties to the extent required to achieve the purposes specified in Section 1:
3.1.1. Identity verification provider (KYC), for the purpose of carrying out verification when obtaining the roles of Organizer, Mentor or Judge. Data are transferred to the extent required to initiate the verification procedure; copies of documents and biometric data are not stored on the Operator’s servers.
3.1.2. Legal entity verification provider (KYB), for the purpose of carrying out verification when obtaining the role of Advertiser. Data are transferred to the extent required to initiate and conduct the legal entity verification.
3.1.3. Payment provider, for the purpose of processing payments for Tariff Plans (Kapitalbank e-commerce for Uzbekistan and Central Asia; Stripe for supported European jurisdictions; other providers if connected). Data are transferred to the extent required to carry out the payment transaction.
3.1.4. Cloud infrastructure and hosting provider, for the purpose of technically supporting operation of the Platform, data storage and backups. The provider acts as a data processor on the Operator’s instructions.
3.1.5. Streaming and CDN infrastructure provider, for the purpose of technically supporting live streams and delivering video content. Technical data required for operation of the streams are transferred.
3.1.6. Google Analytics 4, where the User has given separate consent through the cookie management mechanism, for the purpose of analyzing User behavior on the Platform. Data are transferred in depersonalized or pseudonymized form to the extent determined by the consent settings.
3.1.7. Competent public authorities, in response to lawful requests made in accordance with the established procedure, to the extent required to comply with the relevant requirement.
3.2. I have been informed that the Operator enters into agreements with third parties to which my personal data are transferred, containing obligations to maintain confidentiality and ensure proper protection of personal data.
4. CROSS-BORDER TRANSFER OF PERSONAL DATA
4.1. I have been informed and agree that, due to the international nature of the Platform’s activities, my personal data may be transferred to foreign countries to the extent required to ensure operation of the Platform in the regions where it is present (Türkiye, Central Asian countries and the European segment). Cross-border transfer is carried out exclusively for the purposes specified in Section 1 of this Consent and only where appropriate personal data protection safeguards are in place, whether contractual (standard contractual clauses and data processing agreements) or legal (in countries ensuring an adequate level of personal data protection).
4.2. I have been informed that, under the Law of the Republic of Uzbekistan “On Personal Data” as amended by Law No. ZRU-1125 dated 26 March 2026, only biometric data, genetic data and data of users of telecommunications operator services are subject to mandatory storage in the Republic of Uzbekistan. Other personal data may be processed and stored outside the Republic of Uzbekistan subject to the conditions established by Article 27-1 of that Law, which I have reviewed and accept.
4.3. Separate consent to the cross-border transfer of personal data. I hereby give separate consent to the cross-border transfer of my personal data in the cases provided for in Section 8 of the Personal Data Processing Policy, including transfer of data to a verification provider, payment providers and analytics services located outside the Republic of Uzbekistan. This consent to cross-border transfer is standalone and may be withdrawn separately from consent to the processing of personal data in accordance with the procedure set out in Section 6 of this Consent.
5. RIGHTS OF THE PERSONAL DATA SUBJECT
5.1. I have been informed that, in accordance with the Law of the Republic of Uzbekistan “On Personal Data” No. ZRU-547 dated 2 July 2019, I have the following rights in relation to my personal data:
– to obtain information from the Operator as to whether my personal data are being processed and, where they are, information on the purposes, categories and sources of the data, the list of persons to whom the data are transferred, and the processing and retention periods;
– to obtain access to my personal data processed by the Operator within 10 (ten) business days from the date on which the relevant request is sent;
– to require clarification, correction or supplementation of my personal data where they are incomplete, inaccurate or outdated; the Operator shall make amendments no later than 3 (three) days after the request, provided that documentary evidence of the accuracy of the new data is available; personal data that do not correspond to reality shall be corrected immediately once the discrepancy is established;
– to require deletion of my personal data in the cases provided for by law and the Personal Data Processing Policy;
– to require blocking (restriction of processing) of my personal data in the cases provided for by law;
– to withdraw this Consent at any time in accordance with the procedure set out in Section 6 of this Consent;
– to appeal against actions or omissions of the Operator relating to the processing of my personal data to the competent authority of the Republic of Uzbekistan for the protection of the rights of personal data subjects or to a court.
5.2. To exercise the rights listed above, I must send a written request to the Operator at the email address specified in the Operator Details section of this Consent, privacy@dispworld.com, stating the name and email address of the account and the substance of the request.
6. PROCEDURE FOR WITHDRAWING CONSENT
6.1. I may withdraw this Consent to the processing of personal data at any time by sending the relevant written request to the Operator in one of the following ways:
– by sending an email to the Operator at: privacy@dispworld.com;
– by sending an email to the address for legal requests: legal@dispworld.com.
6.2. After receiving withdrawal of the Consent, the Operator shall stop processing my personal data on the basis of that Consent within 3 (three) days from the date on which the withdrawal is received and shall destroy the data within the established periods, unless there are other legal grounds for their further processing or storage. The Operator shall notify me of the termination of processing and the measures taken at the email address from which the withdrawal was received.
6.3. I have been informed that withdrawal of the Consent does not render unlawful any processing of personal data carried out before the moment of withdrawal on the basis of the Consent then in force.
6.4. I have been informed that, if the Consent is withdrawn, the Operator may continue to process my personal data without that Consent where other legal grounds provided for by the laws of the Republic of Uzbekistan apply, including for performance of the already concluded and effective User Agreement, compliance with tax and other legal requirements, and protection of the Operator’s legitimate interests in judicial and other proceedings.
6.5. I have been informed that withdrawal of consent to the processing of personal data may make it impossible to continue using some or all Platform functionality for which processing of my personal data is necessary. In particular, withdrawal of consent in relation to data required for registration and authentication means the effective termination of use of the Platform.
6.6. I have been informed that, if I refuse to provide this Consent or subsequently withdraw it, some or all Platform functionality may be restricted or unavailable to me.
7. SPECIAL TERMS FOR MINOR USERS
7.1. If I am between 13 and 17 years of age, I confirm that my parent or legal representative has reviewed the terms of the User Agreement and this Consent and has authorized my registration on the Platform and the processing of my personal data on the stated terms. I am responsible for the accuracy of this confirmation. The Operator qualifies this confirmation as consent in electronic form that makes it possible to confirm the fact of its receipt in accordance with Article 21 of the Law of the Republic of Uzbekistan “On Personal Data”. The fact of confirmation is recorded by the Platform system together with the technical attributes.
7.2. I have been informed that the commercial roles of Organizer, Mentor and Judge are available only to persons who have reached the age of majority under the laws of their country of residence and in no event before the age of 18. Execution of this Consent by a minor User grants access only to the basic non-commercial functions of the Platform.
8. GENERAL TERMS
8.1. This Consent is a standalone document and is severable from the User Agreement and from other Platform documents confirmed by the User upon registration or during use of the Platform.
8.2. This Consent has been prepared in accordance with the laws of the Republic of Uzbekistan. This Consent and relations arising in connection with its application are governed by the laws of the Republic of Uzbekistan.
8.3. Detailed information on the procedure for processing personal data, measures for their protection, User rights and data retention periods is set out in the Personal Data Processing Policy published on the Platform at: https://dispworld.com/legal/policy/. The Personal Data Processing Policy is an integral part of the User Agreement.
8.4. This Consent is publicly available on the Platform. The current version of the Consent is available at: https://dispworld.com/legal/consent/.
OPERATOR DETAILS
“GR ATTRACTOR” Limited Liability Company
254, 1st Passage, Usta Shirin Street, Miskin CSG, Almazar District, Tashkent, Republic of Uzbekistan
TIN: 313127023
Bank: JSCB KAPITALBANK, Kapital 24 Branch
BIC: 01158 | SWIFT: KACHUZ22
Email for personal data matters: Gr22Attract@gmail.com
Email for legal requests: Gr22Attract@gmail.com
Platform website: https://dispworld.com/