Privacy Policy
Last updated: June 10, 2026
This policy explains what personal data “Demirýollary” OJSC processes when you use the online ticket service, and why.
1. Data we collect
Account data (phone number, name), passenger data required for tickets (full name, date of birth, gender, identity document type and number), your booking and payment history, and technical data (session cookies, request logs).
2. Why we process it
To sell and service train tickets, send one-time SMS codes and service notifications, process refunds, prevent fraud and meet the requirements of the legislation of Turkmenistan.
3. Cookies
We only use cookies necessary for signing in (an httpOnly session) and for remembering your language. There are no advertising trackers.
4. Sharing
Data is shared with the carrier’s reservation system, with the payment providers and banks processing your payment, and with state bodies where the law requires it. We do not sell personal data.
5. Retention
Account data is kept for as long as your account exists; booking and payment records are kept for the periods set by law.
6. Security
Access tokens are stored in httpOnly cookies, connections are protected with HTTPS, and access to data is restricted.
7. Your rights
You can view and change your name in your account and request deletion of your account by contacting us. To change your phone number, sign in again with the new number.
8. Changes and contact
We may update this policy; the current version is published on this page. For questions, use the contact details on the official website of “Demirýollary” OJSC.