1. Introduction

1.1.This Privacy Policy explains how the Tutto mobile application ("App") collects, uses, and protects personal data. The App is operated by "MultiPay" LLC ("Company").

2. Data collected

2.1.The App collects the following data:

Identity data: first name, last name, phone number
myGov data: personal ID number (FIN), date of birth, gender (for identity verification only)
Payment data: card details (via payment provider, the Company does not store them)
Usage data: booking history, game statistics, ratings
Device data: device type, operating system, app version

3. Use of data

3.1.Collected data is used for the following purposes:

Account creation and identity verification
Providing booking and payment services
Sending notifications (booking, payment, game updates)
Improving service quality

4. Data sharing

4.1.Personal data may be shared with the following parties:

Venue owners: booking information (name, phone number)
Payment provider: for processing payment transactions
Government authorities: when required by law

4.2.The Company does not sell personal data to third parties for advertising purposes.

5. Data retention

5.1.Personal data is retained for the duration of the account's activity.

5.2.After account deletion, data is retained for the period required by law, then deleted.

6. Data protection

6.1.The Company implements technical and organisational measures to protect personal data.

6.2.Personal ID numbers (FIN), OTP, PIN, and card details are stored in encrypted form or not stored at all.

7. User rights

7.1.Users have the following rights:

View collected data
Request correction of data
Delete account and data

8. Contact

For privacy questions: privacy@tutto.az