KVKK disclosure (Türkiye)

1. Data controller

This page explains product data practices relevant to visitors in Türkiye. KVKK Article 10 calls for the identity of the data controller and other processing information. The product name alone is not a registered controller identity. For operator details and personal-data requests, use the support contact form.

2. Personal data we process

Identity and contact data: email address and display name.

Account security data: password hash (the password itself is never stored), session records, sign-in times and security logs.

Transaction data: virtual orders, positions, fills, wallet movements, balances, reward claims and streak records — all of them simulated.

Support data: the messages you send to support and whatever you choose to include in them.

Community data may include profiles, follows, reviews, comments, messages, groups, reports and notification settings.

3. Purposes of processing

We process this data to create and secure your account, to run the simulation and show your virtual wallet, to operate the leaderboard and community surfaces you choose to appear on, to answer support requests, to detect and prevent abuse of the service, and to meet legal obligations.

4. Legal grounds

Where KVKK applies, processing requires an applicable legal ground. Depending on its purpose, this may include performance of a contract (Article 5/2-c), a legal obligation (Article 5/2-ç), or legitimate interests balanced against fundamental rights (Article 5/2-f).

Explicit consent is required where no other applicable ground permits the processing. Contact support for the grounds applicable to a specific request or data use.

5. Method of collection

Data is collected electronically, by automated or semi-automated means, through the website and its APIs when you register, use the simulated desk, or contact support. There is no offline collection and no purchase of data from third parties.

6. Transfers

Service infrastructure, email delivery and enabled security or diagnostic providers may receive data needed for their functions. Public profiles and community content are visible according to their audience; messages are stored and shared with the relevant participants.

Providers may operate outside Türkiye. The actual recipients, locations and any applicable Article 9 transfer basis must be confirmed for the deployment; this notice does not assert that a transfer agreement or approval already exists.

7. Retention, deletion and anonymisation

Account, simulation and support records are retained for service operation, security and request handling. No universal deletion or anonymisation deadline is established by this page. Contact support to request deletion or information about retention.

The session cookie expires after fourteen days. Browser storage stays under your control until cleared; signing out alone does not remove it.

8. Your rights under Article 11

You may ask whether your personal data is processed; request information about it; learn the purpose of processing and whether the data is used accordingly; know the third parties it is transferred to at home or abroad; request correction of incomplete or incorrect data; request erasure or destruction; ask that a correction or erasure be notified to the parties your data was transferred to; object to an adverse result produced solely by automated analysis; and claim compensation for damage caused by unlawful processing.

Use the support contact form to submit a personal-data request and identify the account and action requested. Where KVKK applies, requests and complaints follow the procedures and time limits set out in the law, including Article 13. You may contact Kişisel Verileri Koruma Kurumu. Do not send your password.