Who provides Wi-Fi authorization in Kazakhstan and how to choose

The short answer: guest Wi-Fi authorization that meets Kazakhstan's rules comes from three kinds of provider. Telecom operators sell managed Wi-Fi, cloud authorization platforms run on top of your own hardware (TheLink.kz is one of them), and integrators set up sign-in directly on the router with their own SMS gateway. Which one fits depends on whether you already have a network and who will be responsible for it. Below: how they differ and what to ask any vendor before signing.

What every service must do

The requirements are the same for everyone who gives guests internet access, so start there rather than with price. Since 12 July 2026 the communications rules allow two ways to connect a guest: a one-time password sent by SMS to the subscriber number, or sign-in through the eGov portal with a digital signature. Details are on the law requirements page.

• SMS-code sign-in. A phone number field, a "Get password" button, a one-time code. That is the minimum. A service that offers only social login, a shared password or an "I agree" button does not meet the rules
• Repeat authorization. The password is valid until the device disconnects; on a new connection the guest signs in again (clauses 113–114 of the rules)
• A session log with the number, start and end time and device identifier, exportable for any period — see guest Wi-Fi log retention
• Data stored in Kazakhstan. Guest phone numbers are personal data, and under Article 12(2) of the Law on Personal Data and Their Protection the database holding them must be located in the country. More in the article on guest personal data
• Works with your hardware. Captive portal support on MikroTik, Keenetic, TP-Link Omada and UniFi, so routers are not replaced without need — see the hardware overview

Three kinds of provider

Telecom operator, managed Wi-Fi

• How it works: the operator installs its own equipment and runs the network turnkey along with the internet line
• Good fit for: new sites with no network; those who want one contractor for everything
• What to check: lock-in to one provider, contract term, whether the login page can carry your brand

Cloud authorization platform

• How it works: connects to your router via captive portal and RADIUS; sign-in, SMS and the log live in the cloud
• Good fit for: cafes, hotels and malls with a working network, venue chains
• What to check: whether SMS is included, where data is stored, which routers are supported

Your own router setup

• How it works: an integrator or in-house admin configures the hotspot and connects an SMS gateway directly
• Good fit for: those with a network engineer on staff
• What to check: who keeps the log and answers requests, what happens when the admin leaves

TheLink.kz is a cloud platform from the second group: it connects to existing hardware and runs SMS-code sign-in, the session log and a branded login page. Its servers and the guest database are located in Kazakhstan. Industry scenarios are covered separately: cafes and restaurants, hotels, shopping malls.

Seven questions for a vendor

1. Which sign-in methods from clauses 110–112 of the rules do you support, and which will be the main one?
2. Is SMS included in the subscription, and what happens to the bill if guest traffic doubles?
3. Where is the database with guest numbers physically located?
4. How do we export the connection log for any period, and how long does it take?
5. Do routers need replacing, and if so, why exactly?
6. Who prepares the answer to an official request, and how fast do you provide the export?
7. What happens to the data and the log if we end the contract?

Red flags

• "A fine of up to 100 MCI under subclause 9-1 of Article 637" quoted as current law. That subclause was repealed back in 2017. A vendor who uses it as a scare line is unlikely to be tracking rule changes
• Sign-in "with no SMS and no code" as the only method. The automatic operator system was removed from the rules on 12 July 2026 — see what changed in the rules
• The log can only be exported through support, and it takes days
• An evasive answer to where guest data is stored

How to compare prices

Vendors rarely publish prices, so compare the cost structure rather than an advertised figure: subscription, SMS cost or message bundle, one-off setup, hardware. For a small cafe the subscription is the main line; for a mall with thousands of connections a day it is the messages. If sign-in through Aitu Passport or another digital ID is pitched as a way to save on SMS, remember that under the rules the SMS code remains the main method.

This material is for reference and is not legal advice. Check the current wording of the rules on adilet.zan.kz.