Skip to content
CEH360°
Leave a request
+7 985 313 90 99+7 707 762 87 92
Leave a request
← Back to home

Security

We protect the data of CEH360° clients and their buyers. This page explains how to report a vulnerability on the ceh360.kz website or in the CEH360° account portals, and how to protect your account.

How to report a vulnerability

Write to dev@ceh360.kz. Include the page address, the steps to reproduce the problem and what you saw; a screenshot helps. We will confirm that we received your message and tell you what we did.

The same address is listed in our security.txt file.

Testing rules

  • Use only your own account and your own data. If you come across someone else's data by accident, stop, do not keep or share it, and write to us right away.
  • Do not change or delete other people's data.
  • Do not put load on the website or the account portals: no mass requests, no guessing codes, no denial-of-service attacks.
  • Do not request sign-in codes for other people's numbers or send codes in bulk: every code is an SMS to a real person.
  • Do not deceive our staff or clients and do not send them phishing.
  • Do not disclose details of a vulnerability until we have fixed it.

How to protect your account

  • You sign in to the CEH360° account portals only with a code sent by SMS. We never ask for this code — not by phone, not in messaging apps, not by email. Do not share it with anyone.
  • Enter the code only when the site name is right. The site name is the start of the address bar up to the first “/”, not counting “https://”: it must be ceh360.kz or a name ending in “.ceh360.kz” — with the dot, for example team.ceh360.kz. If “ceh360.kz” appears only further on, after a “/” or “?”, the site is not ours. Names such as myceh360.kz or ceh360-login.kz are not ours either.
  • If your phone is lost or stolen, have your mobile operator block the SIM card and write or call us right away (contacts in the next point): we will block sign-in to your account and close all open sessions. Then get a replacement SIM from your mobile operator — your number stays the same. Once you have the replacement SIM, write or call us again — after verification we will unblock sign-in.
  • If your number has changed or you suspect someone else has signed in to your account, write to hello@ceh360.kz or call +7 707 762 87 92. We will block access and, after verification, help you restore it.
  • If you are an employee of one of our clients, also tell your company's management that your number has changed.

How we protect data

  • Employees of one company cannot see another company's data, and within a company access is limited by role.
  • Data is transmitted over a secure connection, and access keys to marketplace stores and employees' IINs are stored encrypted.
  • We notify the authorized body of personal data security breaches in the manner and within the time limits set by law, and the affected clients without delay. Learn more in the Privacy Policy and the Terms of Use.