Terms of Service

1.1 Introduction

This regulation has been prepared to provide clear guidelines for government, educational, military and security institutions in the Republic of Iraq on how to register and use the Iraqi domain name within the specified secondary extensions (mil.iq and gov.iq). The main objective is to enhance transparency, professionalism and reliability of government websites in cyberspace.

This regulation applies to all state, educational, military and security institutions in the Republic of Iraq that wish to obtain an Iraqi domain name or already own a domain within the specified secondary extensions (.gov.iq, .edu.iq, .mil.iq). This regulation covers the entire process, from application and approval, including support and management of the Iraqi .IQ domain name.

The target institutions are all ministries, authorities, government institutions, universities, schools, and security and military institutions in Iraq that need an online presence within the specified secondary extensions (edu.iq, mil.iq and gov.iq).

1.2 Definitions and Interpretations

1.3 Domain Types

1.4 Eligibility and Application

To obtain any of the specified domains, the institution must be part of the Iraqi government, a recognized educational institution in Iraq, or a security or military entity. The institution must have a real and physical presence in Iraq and be able to prove this presence upon request.

Application Procedures:

• The institution must submit an official application including institution information, the desired domain and providing institution registration information.
• The applicant must designate a person or group of persons as official authorized contacts to control the domain.
• The authorized contact information must include full name, address, phone number, and email with all supporting documents.
• In case of changing the authorized contact, the institution must update the information in the records as soon as possible.

Verification and Review:

Each application will be reviewed by the Iraqi Domain Department at the Commission to verify the submitted information and check the institution's eligibility. The institution will be contacted if more information is needed. The final decision will be communicated upon completion of the review.

1.5 Domain Management and Technical Support

• Management of government domains is the exclusive responsibility of the Commission. The Commission ensures they are used correctly according to the specified standards. Commission tasks include updating records, renewing domains and handling any technical issues.
• Maintaining the specified domains requires ongoing support efforts including verifying domain validity, renewing them upon request and ensuring associated information is up-to-date and accurate.
• Compliance with this regulation will be reviewed periodically to ensure all domains are used correctly and beneficiary institutions comply with the specified standards.

1.6 Support and Assistance

• Technical support is available to institutions to help them manage and use their domains via email, phone or online support. This includes assistance in resolving technical issues and updating information.
• Training and awareness is provided to institutions to ensure their understanding of the regulations and domain procedures through workshops, training courses and educational materials.

1.7 Usage Policy

• Institutions must comply with the rules and guidelines governing the use of domains, including refraining from using the domain for illegal or unethical purposes, keeping contact information updated, and complying with information security standards.
• In case of usage violation, the Commission may take measures including investigation and providing guidance to correct the violation. In serious cases, the domain may be cancelled.
• Domains must be used in a way that reflects official and professional purposes. Publishing inappropriate, racist content or content that violates intellectual property rights is prohibited.
• The security of domains and associated information must be maintained by applying best security practices such as using strong passwords and updating them regularly.
• Domains must be used in a way that complies with all applicable laws and regulations, including compliance with any new laws that may be implemented in the future.
• Using domains for illegal or misleading purposes is prohibited. Usage must always be within the framework of the institution and its official functions.
• Institutions must maintain accurate and up-to-date records of their domains including the date of acquisition, authorized contact and any changes. These records must be kept for at least five years.
• If institutions encounter problems or potential violations, they must immediately report them to the Commission to ensure effective and immediate handling.

1.8 Obligations and Responsibilities

• Institutions must commit to using the domain professionally and ethically, maintaining and updating the domain, and complying with all regulations and procedures related to the Iraqi domain name.
• The Commission's responsibilities include ensuring compliance, providing technical support, updating and maintaining domains, and conducting periodic audits and reviews.
• Institutions must report any social media accounts that have been verified using the official email associated with the institution's domain.
• In case of non-compliance, consequences may include domain withdrawal, fines and any other appropriate consequences based on laws, regulations or Commission instructions.

1.9 Digital Security and Privacy

• Digital security requires specific security measures to protect domains and information using modern security technologies such as encryption and multi-factor authentication, and regularly updating software and systems.
• Institutions must respect and protect the privacy of domain-related information and take all necessary measures to ensure personal and institutional information remains private and secure.

1.10 Policy Review

The Commission reserves the right to amend these procedures in accordance with regulations, legal developments and best practices, with reasonable notice to stakeholders of any changes or amendments.

1.11 Government Domain Pricing Appendix

2.1 Choose Your Domain Name

The domain name must be available and unregistered. To check if a domain name is available for registration, you can use the WHOIS service. Domain names must comply with technical and procedural requirements. It is essential that there is consistency between the domain name and content.

2.2 Choose Your Registrar

After choosing your domain name, you must choose an accredited registrar and contact them. You will find the list of accredited registrars at the Commission's official website and domain.iq.

2.3 Review Registration Policy

The registrar must review the domain name registration policy document before starting to register your domain name. The document is available from accredited registrars or on the Commission's website Domain.iq.

2.4 Provide Required Data

You will need to provide the accredited registrar with domain registrant information and contact details (name, phone, address, email) and at least 2 DNS name servers plus an active email address.

• Fill in the registration form and ensure your information is filled in correctly.
• Agree to the accredited registrar-registrant agreement approved by the Commission.

2.5 Register the Domain

Registration is fully automated through the Iraqi domain database. Final approval is granted by the Commission after meeting registration requirements and eligibility. The registration process takes 24 hours and a maximum of 72 working hours.

2.6 DNS Activation and Publishing

The domain name is activated when the DNS server is updated, and within a specified period, the publishing process occurs worldwide through DNS systems spread around the world.

2.7 Domain Update, Deletion and Freeze

• Data Update: The domain name owner must update their domain data by contacting their accredited registrar. Domain name data updates are free of charge.
• Domain Deletion: The domain owner must contact their accredited registrar to delete their domain. It is important to inform the registrar before the domain name expiry date.
• Domain Freeze: Expired domain names are transferred to a freeze state for 50 days. During this period, the domain is inactive but can be renewed before deletion.

2.8 Domain Transfer

• The domain name belongs to its owner, not the accredited registrar. The owner has full freedom to transfer the domain from one accredited registrar to another at any time.
• The Commission charges fees for the transfer process equivalent to a new registration. The domain is renewed for one year upon transfer and renewal fees are deducted from the new registrar.
• To transfer: The new registrar submits a transfer request through the automated registration system. The request is reviewed within 3 days. The request appears on the old registrar's interface for approval or rejection.

2.9 Registrants Outside Iraq

Registrants outside Iraq have a 6-month grace period to authenticate required documents through embassies and consulates outside Iraq, otherwise the domain name will be deleted without any legal or financial liability on the Commission.

Regular Domain Pricing (Annual — IQD)

Registrar Responsibilities

• Accredited registrars must comply with all relevant data protection laws and regulations when collecting, processing and storing registrants' personal data.
• Accredited registrars must inform registrants of the purposes and legal bases for collecting and processing their personal data.
• Appropriate technical and organizational measures must be implemented to ensure the security and confidentiality of personal data.
• Personal data must only be retained for as long as necessary to fulfill the purposes for which it was collected or in accordance with legal or contractual obligations.
• Accredited registrars outside Iraq must comply with European GDPR data protection regulations.

WHOIS Information and Privacy

• WHOIS data must be collected and published in accordance with relevant data protection laws and regulations.
• Only the minimum necessary data should be collected and published in the public WHOIS database for legitimate purposes.
• Personal data of the registrant should not be published in the public WHOIS database if they are a natural person unless explicit consent is provided.

Data Subject Rights

Data Breach Notification

In the event of a data breach, the registry and accredited registrars must promptly notify affected parties and take necessary measures to mitigate and rectify the situation. Breach notifications must provide clear information about the nature of the breach, potential risks and recommended actions.

Governing Law

This policy is governed by and interpreted in accordance with Legislative Order 65 of 2004 in effect in the Republic of Iraq. Any dispute arising from it is subject to the dispute resolution policy approved by the Commission and the exclusive jurisdiction of the Appeals Council.

Types of Complaints

Domain Registration Complaints

• Registering a domain with content that violates intellectual property rights in Iraq.
• Registering a domain with a name similar to a registered institution or trademark in Iraq.
• Registering a domain for fraudulent activities or identity impersonation.
• Registering a domain to redirect traffic to another site with intent to harm or defraud.

Complaint Procedures

Access

• The Commission's official website directly: https://whois.reg.iq/
• Through port 43 to the WHOIS server: whois.reg.iq

Privacy Protection

Domain owners' privacy rights are preserved. They can choose to hide some or all personal information from the WHOIS service for an annual fee of 5,000 Iraqi Dinars.

Responsible Use

Information must be used responsibly. Illegal, unethical use or annoying promotion is unacceptable. It is strictly prohibited to copy, extract, download, transfer or collect information from this service for any of the following purposes:

• Advertising and marketing.
• Unsolicited contact using email or otherwise.
• Commercial purposes.
• Illegal purposes or any other dishonest purpose.