Estado de Privacidade para

Privacy Policy

LAST REVISION: 24.07.2026

This Privacy Policy explains how (the “Company”, “we”, “us” or “our”) collects, uses, discloses, retains and otherwise processes Personal Data in connection with www.bongacash.com, the BongaCash affiliate programme, related websites, communications and services (collectively, the “Services”). It applies to visitors, Affiliates and other persons whose Personal Data we process. This Privacy Policy supplements the Terms of Service (the “Terms”). It does not limit any right or remedy available to the Company under the Terms or applicable law, and does not exclude or restrict any data-protection right that cannot lawfully be excluded or restricted.

The Company does not knowingly collect personal data from children. If you are under the age of eighteen (18) or the age of majority in your jurisdiction (Age of Majority), please do not give us any personal data. If you have reason to believe that anyone under the Age of Majority has provided personal data to the Company, please contact us, and we will endeavor to delete that information from our databases.

DATA PROTECTION

The subject of data protection is personal data. According to Art. 4 (1) GDPR (General Data Protection Regulation), all information relating to an identified or identifiable natural person is considered as Personal Data and according to 1798.140. (v) (1) CCPA (California Consumer Privacy Act) all information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household is considered as Personal Information.

As for this document, both Personal Data and Personal Information will be referred to as Personal Data.

Data Controller

The data controller of your personal data is , .

Data Protection Officer

If you have any questions regarding data protection you can contact our data protection officer via email: dpo@bongacash.com.

We process Personal Data in accordance with applicable data-protection law. The legal bases, processing purposes, recipients, retention periods and rights described below apply only to the extent relevant to the particular processing activity and the individual concerned.

We implement technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No security measure, transmission method or information system is entirely secure or error-free. Accordingly, except where liability cannot lawfully be excluded or limited, we do not warrant that the Services, systems or Personal Data will be immune from cyberattack, unauthorised access, interception, loss, corruption or other security incident. Where applicable law requires notification of a Personal Data Breach, we will assess and respond to the incident in accordance with that law.

Processing of your personal data — purposes and legal bases

We process Personal Data only where and to the extent that a valid legal basis applies. Depending on the circumstances, this may include performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR); compliance with a legal obligation (Article 6(1)(c) GDPR); our or a third party’s legitimate interests, where those interests are not overridden by your rights and freedoms (Article 6(1)(f) GDPR); protection of vital interests where applicable (Article 6(1)(d) GDPR); or your consent (Article 6(1)(a) GDPR). We may process Personal Data for account administration, referral attribution, traffic-quality analysis, payment and tax administration, security, fraud prevention, support, compliance, enforcement of the Terms and the establishment, exercise or defence of legal claims.

Personal Data provided by you, including account, contact, tax, payout, identity, website, traffic-source, messenger and support information, and other information that you choose to provide.
Personal Data generated through use of the Services, including traffic, referral, conversion, transaction, account activity, correspondence, technical and security data, and fraud-prevention, compliance and audit information.
Log data, such as IP address, date and time, location, pages visited, used functions of the website, internet browser, operating system, device and browser language, identifiers associated with cookies.
Personal Data received from third parties, including payment providers, security and fraud-prevention providers, hosting and analytics providers, public authorities and other lawful sources.
Cookies and other technologies — see “Technology” and “Cookies” in this Privacy Policy.

Visitor data

Visitor Data may be processed where necessary to provide and secure the Website, respond to a request, comply with legal obligations or pursue our legitimate interests in operating, protecting and improving the Services. Where consent is required by applicable law, we will request it through the relevant consent mechanism.

In order to correctly display the website and to provide visitors with functions that are not unique for registered users, we collect and process some information through cookies (see “Cookies”). This includes without limitation IP address, browser type and version, location, time and date, preferred language, and similar data.

Minors are prohibited from using this website.

Visitors of the www.bongacash.com website can use the website in general without prior registration.

Affiliate account

There are functions and content on our website that are only accessible after registration. For this you can create an Affiliate account (alternatively: “account”) to get access to the referred parts of the website.

The following information is mandatory:

A username defined by you.
A password defined by you.
An email defined by you.
Full name.
Address (Country, region, city, zip).
Identity number.
Messenger type and ID.
Traffic source (your website).

In order to provide our services to you, you will be required to provide your payment information:

Payment method.
Payment ID.

For the safety of your account and personal data, we highly suggest all registered users to enable 2-Step Verification. There are two options available:

Voice or Text message (you phone number is required).
Authenticator app (Google or Microsoft authenticator apps).

We process Affiliate account, identity, website, traffic-source and payout information where necessary to create and administer the Affiliate account, perform the Terms, make payments, comply with legal obligations, prevent fraud and protect the integrity and security of the Programme. Where special-category data are processed, we will do so only where an applicable Article 9 GDPR condition applies.

We use account and contact information to provide service-related communications, security notices, transaction confirmations, account administration and other communications necessary for the performance or administration of the Services. Where permitted by applicable law, we may also use contact information for marketing and promotional communications on the basis of consent or legitimate interests, as applicable. You may opt out of non-essential marketing communications without affecting service-related communications.

Website usage

During the usage of our Website, we will collect and process statistical and personal data, including but not limited to:

Account information.
Correspondence.
Income generated.
Log data.

The processing is generally necessary for our legitimate interests in operating, protecting, improving and enforcing the Programme and for compliance with legal obligations. Where consent is required for a particular technology or processing purpose, we will request it separately through the relevant consent mechanism.

Processing of the abovementioned data helps us to optimize the performance of the Website and provide new features for you to utilize within the services of our website. We also use this information to prevent fraudulent activity and unauthorized access to your account.

Log data

We automatically collect log data and information regarding your device (computer, phone, etc.) and usage of the website. This can include:

IP address.
Date and time.
Location.
Pages visited.
Used functions of the website.
Internet browser.
Operating system.
Device and browser language.
Identifiers associated with cookies.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to your device. For this purpose, the user’s IP address must remain stored for the duration of the session.

We may use Log Data to operate, secure, troubleshoot, investigate and improve the Services; detect and prevent invalid traffic, fraud, abuse, security incidents and unlawful activity; enforce the Terms; and comply with legal obligations. We may disclose Log Data to service providers and competent authorities where permitted or required by applicable law. We do not undertake to monitor or investigate every activity, communication or security event.

The processing of Log Data is generally necessary for our legitimate interests in operating, securing and improving the Services and, where applicable, for compliance with legal obligations. Where consent is required for a particular technology or processing purpose, we will request it separately through the relevant consent mechanism.

Payments

In order to receive payouts generated from the use of our services, we will request from you billing information, including:

Your billing address.
Your payment method’s information.

Payment processors, banks, card networks and alternative payment-method providers may process payout-related data as independent controllers or processors, depending on the relevant service and contractual arrangements. Their processing is governed by their own privacy documentation and applicable law. We may share the data reasonably necessary to initiate, administer, secure, investigate or complete a payout, comply with payment-network, tax and regulatory requirements, prevent fraud and manage disputes or reversals.

If you wish to change your payout information, you can contact us via email or contact form indicated on the “Contacts” webpage. Your account will be assigned with the Personal Manager and all available contact methods (email, Telegram) will be provided to you on the abovementioned page.

We process payout, payment and tax data where necessary to perform the Terms, make or administer payments, comply with legal and regulatory obligations, prevent fraud and establish, exercise or defend legal claims. Where special-category data are involved, we will process them only where an applicable Article 9 GDPR condition applies, including explicit consent where required.

We may disclose Personal Data where reasonably necessary for the purposes described in this Privacy Policy, including to our Affiliates, service providers, professional advisers, payment processors, hosting and infrastructure providers, security and fraud-prevention providers, analytics providers, competent public authorities and other recipients where authorised or required by law. We may also disclose Personal Data in connection with a corporate transaction, financing, restructuring, insolvency, sale, transfer or assignment involving all or part of our business or assets, subject to applicable law.

International transfers. Personal Data may be processed in countries outside the European Economic Area, the United Kingdom or your country of residence. Where required by applicable law, we will implement an appropriate transfer mechanism, such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another valid safeguard. You may request further information by contacting the DPO, subject to the protection of confidential information and the rights of others.

Security incidents. If we become aware of a Personal Data Breach, we will investigate and take measures that we consider appropriate in the circumstances. Where notification is required by applicable law, we will notify the relevant supervisory authority and/or affected individuals within the applicable legal timeframe. Except to the extent prohibited by law, any notification does not constitute an admission of fault or liability.

Consents

As part of our legal obligations, we collect and store your given consent to cooperate with Art. 7 (1) GDPR. This includes any permissions, consents or preferences given by you to the website and can be used as proof that any relevant consent was given.

Storage duration

We retain Personal Data for no longer than necessary for the purposes for which it was collected or otherwise processed, including to provide the Services, maintain security and records, comply with legal, accounting, tax, payment-network and regulatory obligations, resolve disputes, enforce the Terms, and establish, exercise or defend legal claims. Retention periods may vary according to the nature of the data, the Service, the applicable legal basis, operational necessity and applicable limitation periods. Where deletion is not required, we may instead anonymise, aggregate or securely isolate the data.

Automated Technologies and Artificial Intelligence

We may use automated technologies, including artificial intelligence, machine-learning, algorithmic decision-support, traffic analysis, fraud detection, translation, cybersecurity and similar technologies (“AI Technologies”), ourselves or through service providers, for the purposes described in this Privacy Policy and Clause 14 of the Terms. These purposes may include traffic-quality analysis, detection and investigation of bot traffic, artificial registrations, click fraud, account misuse, payment abuse, prohibited marketing, security incidents and breaches of the Terms; payment and referral administration; support and translation; compliance, audit and the establishment, exercise or defence of legal claims. AI Technologies may generate flags, classifications, scores, risk indicators, recommendations or alerts. Such outputs may be inaccurate, incomplete, delayed or unavailable and are one factor that may be used in our operational, security, payment, fraud-prevention and compliance processes.

We do not use AI Technologies to make a final decision based solely on automated processing where that decision produces legal effects concerning an individual or similarly significantly affects that individual, except where such processing is authorised by applicable law. Where Article 22 GDPR or other applicable law applies, the individual may request information about the decision and, where applicable, human intervention and review through the contact channels identified in this Privacy Policy. Nothing in this section prevents us from taking proportionate temporary protective measures, including restricting access, suspending an account or payout, preserving evidence or referring a matter for investigation, where reasonably necessary to protect the Programme, prevent fraud or comply with law.

Where a law requires a disclosure, label, notice or other transparency measure in relation to an AI system, including under the EU Artificial Intelligence Act where applicable, we will provide the relevant information in the manner required by that law. We do not use Personal Data to train general-purpose AI models for our own benefit unless we provide an appropriate notice and have a lawful basis for that processing. We may use anonymised or aggregated information, where permitted by applicable law, to analyse and improve the safety, security, performance and operation of the Services. Support communications may be translated using automated or AI-assisted tools. Independent third-party providers may use their own automated or AI-based systems under their own applicable terms and privacy documentation.

Data subject rights

Subject to applicable law and the conditions, limitations and exemptions set out in that law, data subjects may have the following rights in relation to their Personal Data:

The right to receive information about the processing of Personal Data and to request access to Personal Data (Articles 13–15 GDPR).
The right to request rectification of inaccurate Personal Data and completion of incomplete Personal Data (Article 16 GDPR).
The right to request erasure where the conditions in Article 17 GDPR are met, subject to applicable exceptions, including legal obligations and the establishment, exercise or defence of legal claims.
The right to request restriction of processing in the circumstances set out in Article 18 GDPR.
The right to object, on grounds relating to the individual’s particular situation, to processing based on legitimate interests or public interest, including certain direct-marketing processing, as provided in Article 21 GDPR.
The right to withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal and may affect the availability of Services that require the relevant processing.
The right to data portability in the circumstances set out in Article 20 GDPR.
The right to lodge a complaint with a competent data-protection supervisory authority (Article 77 GDPR).

How to exercise rights. To protect Personal Data and the rights of others, we may request information reasonably necessary to verify the requester’s identity, authority and scope of the request before acting. We may refuse, charge a reasonable fee for, or decline to act on a request to the extent permitted by applicable law, including where a request is manifestly unfounded, excessive, repetitive, technically infeasible, prejudicial to the rights and freedoms of others, or subject to a legal exemption. We will respond within the period required by applicable law.

Information for Residents of California

If you are a resident of California, you have the following rights under the California Consumer Privacy Act (CCPA), including any other rights in this Privacy Policy:

Consumers’ Right to Delete Personal Information (1798.105. CCPA).
Consumers’ Right to Correct Inaccurate Personal Information (1798.106. CCPA).
Consumers’ Right to Know What Personal Information is Being Collected (right to access Personal Information) (1798.110. CCPA).
Consumers’ Right to Know What Personal Information is Sold or Shared and to Whom (1798.115. CCPA).
Consumers’ Right to Opt Out of Sale or Sharing of Personal Information (1798.120. CCPA).
Consumers’ Right to Limit Use and Disclosure of Sensitive Personal Information (1798.121. CCPA).
Consumers’ Right of No Retaliation Following Opt Out or Exercise of Other Rights (1798.125. CCPA).

We would like to point out that we do not “sell” your Personal Data. The term “sell” is defined in 1798.140. (ad) (1) CCPA.

You can exercise your rights by sending an e-mail to the responsible office: , ; email: dpo@bongacash.com.

Alternatively, you can contact BongaCash Managers via contacts listed on the “Contacts” webpage.

Website

In general, the use of this website is also possible without providing personal data.

Technology

SSL Encryption

This site uses SSL encryption to ensure the security of data processing and to protect the transmission of confidential content, such as login data. You can recognize an encrypted connection by the fact that there is a “https://” instead of a “http://” in the address line of the browser and by the lock symbol in your browser line.

We use this technology to protect your transmitted data.

Cloudflare Turnstile

We use Cloudflare Turnstile on this website. The provider is Cloudflare Inc. (“Cloudflare”), 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare Turnstile is a service that helps distinguish between interactions performed by humans and those generated by automated programs, enhancing the security and functionality of our website.

When Cloudflare Turnstile is used, the following information is collected and transmitted to Cloudflare to assess the nature of the interaction:

Referrer URL (the website or page requesting CAPTCHA validation)
User-agent string (information about your browser and operating system)
Browser characteristics (e.g., screen resolution, browser capabilities, and whether JavaScript is enabled)
Mouse movements or other interaction events (to determine human activity)
Network information (e.g., IP address, Autonomous System Number (ASN), or geolocation)
TLS/SSL handshake data (to verify the security context of the connection)
Timestamp of the request

If you have provided consent for the use of Cloudflare Turnstile, the processing of personal data is based on Art. 6(1)(a) GDPR. Additionally, we have a legitimate interest in ensuring the security and functionality of our website, which serves as an alternative legal basis under Art. 6(1)(f) GDPR.

The personal data collected is retained only as long as necessary to achieve the processing purpose. Data will be deleted when it is no longer required for this purpose, in accordance with applicable regulations and Cloudflare’s policies.

The data collected may be transferred to servers located in the United States. Such transfers are safeguarded by Standard Contractual Clauses (SCCs), which ensure compliance with GDPR and protect your data rights.

For more details about Cloudflare’s data processing and privacy practices, please refer to their Privacy Policy.

Cookies

General information about cookies

We use cookies on our website. These are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone or similar) when you visit our website.

Information is stored in the cookie that results from the connection with the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves to make the use of our website more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which changes to settings you have made so that you do not have to change them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for you for the purpose of optimization. These cookies enable us to automatically recognize that you have already visited our website when you visit it again. The cookies set in this way are automatically deleted after a defined period of time. The respective storage period of the cookies can be found in this Privacy Policy.

We therefore use the data obtained via cookies exclusively to optimize overall performance of the website for the end user and for statistical analysis in order to better adapt our services to the interests of our users.

Legal basis for the use of Cookies

The legal basis for the processing of personal data using cookies for analysis purposes is — based on the consent given by the user — Art. 6 (1) (a) GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR.

Essential cookies

Publisher:

Name	Runtime	Purpose
bongacash	Session	Session cookie
remember_me	20 days	“Remember me” cookie
nrt	1 year	Used to show if there are new “News”
tm_sync	10 seconds	Used to synchronize timelines of pop-up notifications
tm_data	10 seconds	Used to synchronize timelines of pop-up notifications
tm_ping	10 seconds	Used to synchronize timelines of pop-up notifications
tm_pong	10 seconds	Used to synchronize timelines of pop-up notifications
tether_usdt_erc20_popup	1 year	Ensures that “USDT ERC20” pop-up have already been shown
tm_lastTrack	Session	Used to synchronize timelines of pop-up notifications
tm_lastEvent	Session	Used to synchronize timelines of pop-up notifications

Publisher: Cloudflare

Name	Runtime	Purpose
__cf_bm	30 minutes	Used to manage incoming traffic that matches criteria associated with bots
cf_clearance	30 minutes	Clearance Cookie stores the proof of challenge passed

Analysis/Statistics

Publisher: Google Analytics

Third-party cookies from Google Analytics are used. For more information visit: https://policies.google.com/privacy?hl=en and https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gtagjs_google_analytics_4_-_cookie_usage.

What kind of data is collected?

Origin (country and city).
Language.
Operating system device (PC, tablet or smartphone).
Browser and any add-ons used.
Resolution of the computer.
Visitor source (Facebook, search engine, or referring website).
Which files were downloaded?
Which videos were watched?
Were any advertising banners clicked?
Where did the visitor go? Did he click on other pages of the portal or did he leave it completely?
How long did the visitor stay?

Name	Runtime	Purpose
_ga	1 year	Used to distinguish users
_ga_*	1 year	Used to get session status

Changing the cookie settings

You can adjust or revoke the cookie settings you have already made at any time by calling up the cookie box.

If you do not agree to the use of essential cookies, you can usually disable the storage and use of cookies in your web browser.

Most browsers are set by default to automatically accept cookies. However, you can deactivate the storage of cookies or set your browser to notify you when cookies are sent.

We would like to point out that as a result of such settings, you may only be able to use our website with restrictions.

Web analytics

Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland (“Google”). In this context, pseudonymized usage profiles are created and cookies (see “Cookies”) are used. The information generated by cookies about your use of this website such as

browser type/version,
operating system,
referrer URL (the previously visited page),
host name of the accessing computer (IP address) and
time of the server request,

is transferred to a Google server in the USA and stored there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and internet usage. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that this assignment is not possible (IP masking).

You may decline the use of cookies by selecting the appropriate settings in your browser, however we would like to point out that if you do this you may not be able to use the full functionality of this website.

These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 (1) (a) GDPR.

You can read the data protection provisions of Google Analytics here: https://support.google.com/analytics/answer/6004245

Other Services

Activities in social networks

In order to interact with you on social networks and to inform you about our services, we are represented there with our own pages. If you visit one of our social media pages, we will be jointly responsible for the processing operations triggered by this, within the meaning of Art. 26 GDPR, with the provider of the respective social media platform.

We are not the original provider of these pages, but only use them within the scope of the possibilities offered to us by the respective providers.

As a precaution, we therefore inform you that your data may also be processed outside the European Union or the European Economic Area. The use of social networks may therefore be associated with data protection risks for you, as the protection of your rights (to information, erasure, objection, etc.) may be more difficult and the processing in the social networks often takes place directly for advertising purposes or for the analysis of user behavior by the providers, without us being able to influence this. If usage profiles are created by the provider, cookies are often used, or the usage behavior is assigned to your own member profile on the social networks. Only if you log in to the social network under your personal account, the providers may be able to directly assign the visit to our websites to your profile on the respective social media platform.

The described processing operations of personal data are carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a timely manner or to inform you about our services. If you have to give your consent to data processing as a user with the respective providers, the legal basis refers to Art. 6 (1) (a) GDPR in conjunction with. Art. 7 GDPR.

X (formerly known as Twitter)

(Co-)responsible for data processing in Europe:
Twitter International Company, 1 Cumberland St S, Fenian St, Dublin 2, Ireland

Information about your data:
https://x.com/settings/your_twitter_data

(Co-)responsible for data processing in Europe:
Telegram Messenger Inc., Vistra (Bvi) Limited, Vistra Corporate Services Centre, Wickhams Cay Ii, Road Town, Tortola, Virgin Islands, British, VG1110

Communication

When contacting us (e.g. via contact form or e-mail), personal data is collected. The data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. In cases where the purpose of your request is concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted after final processing of your request. We will delete your data if the circumstances indicate that the matter in question has been resolved and the deletion is not contrary to any legal obligation to retain data.

We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only with the consent of the recipients or legal permission. Newsletters usually contain promotional information, advertising, description of new functions and other similar information. You can unsubscribe from receiving the Newsletter by clicking “Unsubscribe” button in the Newsletter e-mail. Alternatively, you can unsubscribe from the newsletters by sending a request to unsubscribe@bongacash.com.

Double-Opt-In and Logging

Registration for our Newsletter takes place in a so-called double-opt-in process. During the registration process, you will provide your email address in order to make use of our services. Providing email address is needed for account registration and contact requests. As part of account registration, you will be subscribed to our newsletter. The subscriptions to the Newsletter are logged in order to be able to prove the registration process according to the legal requirements.

You can cancel the receipt of our newsletter at any time, i.e. revoke your consents.

You can unsubscribe from receiving the Newsletter by clicking “Unsubscribe” button in the Newsletter e-mail. Alternatively, you can unsubscribe from the newsletters by sending a request to unsubscribe@bongacash.com.

Awareness and training

We ensure that our employees are fully aware of their legal obligations according to the law in relation to data protection. Our training program aims to raise awareness of our new and existing employees of the latest developments in data protection and practical methods used for this purpose. Recuring training is given at regular intervals to ensure that all employees are reminded of their responsibilities and duties and are informed of any new developments in data protection.

Any personal data collected about you will be maintained by us strictly for business purposes and will be kept confidential as all our employees have signed a Confidentiality Agreement in this regard.

Revision of this privacy policy

We may update this Privacy Policy from time to time where reasonably necessary, including to reflect changes in applicable law, regulatory guidance, technology, security practices, the Services, our processing activities or our business operations.

When we update this Privacy Policy, the “Last Revision” date will indicate the latest version. Where required by applicable law, we will provide additional notice of material changes and obtain consent where necessary. Continued use of the Services after an update will be subject to the revised Privacy Policy and the Terms.