KVKK Disclosure Text
Effective Date: 14.08.2026
Pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data, this text is an information notice provided by RegoPlay in its capacity as the data controller. The scope of this text is created based on the modules, widgets, and integrations currently active on this site; explanations regarding unused activities are not included herein.
2. Categories of Processed Personal Data
- Identity and contact data: first name, last name, email, phone
- Transaction security data: IP, session and access logs, device/browser information
- Request/complaint management data: messages and attachments you submit to us
The following sections list additional data categories belonging only to the services active on this site.
3. Processing Purposes
- Execution of communication and request management activities
- Execution of information security processes
- Execution of activities in accordance with legislation and informing authorized persons/institutions
- Improvement of service and ensuring business continuity
4. Legal Grounds (KVKK Art. 5 and Art. 6)
- Art.5/2-c — being directly related to the establishment or performance of a contract
- Art.5/2-ç — fulfillment of a legal obligation by the data controller
- Art.5/2-e — establishment, exercise, or protection of a right
- Art.5/2-f — legitimate interest, provided that it does not harm the fundamental rights and freedoms of the data subject
- Art.5/1 — explicit consent (only for processing based on consent)
5. Collection Method
Your personal data is collected by fully or partially automated means through forms and account transactions on the site, email and phone correspondence, cookies and similar technologies, and integrations active on the site.
6. Membership Data
Within the scope of membership registration, identity and contact data as well as customer transaction data are processed based on the legal grounds of the establishment and performance of the membership agreement (Art. 5/2-c) and the execution of information security processes (Art. 5/2-f).
7. Order and Customer Transaction Data
Customer transaction data (order, invoice, return, and request records) and financial data are processed based on the performance of a distance selling contract (Art. 5/2-c) and legal obligations arising from tax and commercial legislation (Art. 5/2-ç), and are retained for the periods specified in the relevant legislation.
8. Payment and Financial Data
Financial data is processed on the grounds of performance of a contract (Art. 5/2-c) and legal obligation (Art. 5/2-ç). It is transferred to the payment institution for the purpose of carrying out the payment transaction; card information is not stored in the data controller's systems.
9. Transfer of Delivery Data
Identity, contact, and address data are transferred to cargo and logistics companies due to the fulfillment of the delivery obligation (art. 5/2-c).
10. Form Data
The personal and contact information collected via the form is processed for the purpose of managing requests/complaints and conducting pre-contractual discussions, based on the legitimate interest (Art. 5/2-f) and, if requested, for the establishment of a contract (Art. 5/2-c).
11. Transfer
Your data may be transferred to our hosting and IT infrastructure providers, financial and legal advisors, and legally authorized public institutions, strictly limited to the relevant purpose. Transfers required by the services active on the site are explained in the relevant sections above. In the event of transfer abroad, the requirements of Article 9 of the KVKK are complied with.
12. Storage and Disposal
Your personal data is retained for the period stipulated in the relevant legislation or required for the purpose for which it is processed; upon expiration of the period, it is deleted, destroyed, or anonymized.
13. Rights of the Data Subject (KVKK Art. 11)
Under Article 11 of the Law, you have the right to learn whether your personal data is processed, request information if it has been processed, learn the purpose of processing and whether it is used in accordance with its purpose, know the third parties to whom your data is transferred, request the correction of data if it is incomplete or incorrectly processed, request its deletion or destruction when the relevant conditions are met, request that these operations be notified to third parties to whom the data has been transferred, object to any outcome against you resulting exclusively from analysis through automated systems, and demand compensation for damages incurred.
