Information Security and Protection of Client Data

Protecting subscribers’ personal data is a key focus for our Company, as in today’s digital era, personal information is increasingly sought after by malicious actors. Any breach of subscriber data can pose serious risks, including fraud and other forms of cybercrime.

We regularly review and update our security measures to ensure their effectiveness. The Company adheres to 

the principle of minimal access, granting employees only the level of data access required for their roles, and employs a range of technologies to safeguard personal data. These include secure network protocols, database monitoring and protection systems, regular audits, and employee training programs.

The Company places strong emphasis on advancing information security and employs highly qualified specialists certified in cybersecurity (CEH, CHFI, GIAG Reverse Engineering Malware, OSCP, OSWE, OSEP, eMAPT, JNCIE-SEC). These capabilities ensure a reliable level of personal data protection and create the conditions necessary 

to counter complex cyberattacks.

Continuous professional development and skills enhancement enabled the Kcell information security team to take first place in both Blue Team and Red Team categories at cybersecurity exercises conducted by the National Cybersecurity Coordination Center (NCCIB) among corporate information security centres in Kazakhstan. Kcell was also recognised by independent experts at the Digital Rights Center Qazaqstan as the best company in the telecom sector for upholding digital rights in 2024. Furthermore, one of our employees ranked among the Top 10 bug hunters in Kazakhstan in 2024.

We conduct round-the-clock monitoring of information security events across our infrastructure to detect emerging threats and early signs of cyberattacks. Proactive measures are taken to respond to and prevent incidents, while continuously improving our capabilities in this area.