The applicant’s client portal is provided by Qazaqstan Investment Capital Management Ltd. (QICM Ltd.), registered in the Astana International Financial Centre (AIFC) and regulated by the relevant AIFC authorities.
Your data is processed jointly by Qazaqstan Investment Capital Management Ltd. (AIFC) and Qazaqstan Investment Corporation JSC (QIC) (Republic of Kazakhstan). We are joint controllers of your data.
The information system is operating in pilot mode. Under AIFC requirements, this processing is classified as high-risk activity. The Company takes all appropriate technical and organisational measures to secure your data in accordance with AIFC standards.
What data we collect
When registering and submitting an application through the Client Portal, we may collect:
Receiving and reviewing investment applications, structuring transactions:
- full name, position and contact details of the applicant’s representatives, including but not limited to;
- identification data (IIN/passport etc., including but not limited to);
- information about the company and project (details, financial statements, ownership structure, including but not limited to);
- data on beneficiaries and key persons for KYC/AML and risk assessment, including credit bureau information and other financial data;
- technical information on Client Portal use (IP address, login and activity logs) for security and audit purposes.
Technical support for the Client Portal, monitoring Group investment activity and preparing corporate reporting.
How we use the data
Your data is used for:
- registering and managing your Client Portal account;
- receiving, reviewing and structuring your application;
- conducting KYC/AML and other compliance procedures;
- preparing and executing agreements and transactions;
- complying with regulatory and legal requirements;
- ensuring security and proper operation of our systems.
Legal bases for processing
We process your data based on:
Necessity to review your application
Compliance with legal obligations (KYC/AML and other regulatory requirements)
Our legitimate interests in risk management and rights protection, balanced against your rights
Your consent
Who we share data with
Your data may be transferred to:
- our parent company Qazaqstan Investment Corporation JSC, which provides IT infrastructure and support for the Client Portal; Baiterek NIH JSC as the recipient of Group reporting; and QICM Ltd. partners;
- banks, auditors, legal and financial advisers, and other partners involved in transaction structuring;
- government bodies and regulators where required by law.
Data storage
Data will be stored on the servers of Qazaqstan Investment Corporation JSC. Your data is stored during the application review and potential transaction process and then for the periods required by legislation and our internal archiving rules.
Please note that data is transferred to Qazaqstan Investment Corporation JSC, located in the jurisdiction of the Republic of Kazakhstan (outside the AIFC). Since the Republic of Kazakhstan is recognised as a third country without adequate protection status in the AIFC, the transfer is carried out using appropriate safeguards in line with AIFC Data Protection Regulations.
Your rights
You have the right to:
- request access to your personal data;
- request correction or blocking of inaccurate or outdated data;
- request deletion or restriction of processing in applicable cases;
- object to certain processing based on legitimate interests;
- withdraw your consent where processing is based on consent;
- file a complaint with the AIFC Commissioner of Data Protection;
- receive written confirmation on the method, purposes and categories of data processing upon request;
- other rights under applicable law.
To exercise your rights, contact us:
info@qicm.kz