KVKK Privacy Notice

This Privacy Notice has been prepared to inform the visitors, members and customers using the oyunata.com website (the "Site"), pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK") and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform.

1. Data Controller

Legal Name: RANTEY YAZILIM İTHALAT VE İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ (the "Company")
Address: Gençlik Mahallesi Güneş Sokak Muradiye Apt. No: 12/A, 39750 Lüleburgaz / Kırklareli
MERSIS No: 0733142725100001
E-mail: info@oyunata.com

2. Personal Data Processed, Purposes of Processing and Legal Grounds

Identity and Contact Data

Name and surname, username, e-mail address, phone number.

Purpose: Membership registration, account management, order and delivery processes, support services, transaction notifications.
Legal ground: Establishment and performance of a contract (KVKK Art. 5/2-c); fulfillment of a legal obligation (Art. 5/2-ç).

Identity Verification Data

Turkish national identity number, date of birth, gender and, if requested, images of the identity card.

Purpose: Identity verification for certain products and transactions; prevention of fraudulent payments and fraud.
Legal ground: Performance of a contract (Art. 5/2-c); establishment, exercise or protection of a right (Art. 5/2-e); the Company's legitimate interest, provided that it does not harm your fundamental rights and freedoms (Art. 5/2-f).

Customer Transaction and Financial Data

Order and balance movements, payment method, transaction amount and reference, billing information, in-game username/ID provided for delivery.

Purpose: Payment and balance transactions, delivery of digital products, invoicing, refund processes, accounting and fiscal obligations.
Legal ground: Performance of a contract (Art. 5/2-c); legal obligation (Art. 5/2-ç); establishment, exercise or protection of a right (Art. 5/2-e).

Transaction Security Data

IP address, device and browser information, session and login records, security verification results.

Purpose: Ensuring information security, preventing abuse, obligations under Law No. 5651.
Legal ground: Legal obligation (Art. 5/2-ç); legitimate interest (Art. 5/2-f).

Requests, Complaints and User Content

Support tickets, live support and e-mail correspondence, attached images, product reviews and their photos.

Purpose: Resolving requests and complaints, improving service quality, publishing reviews.
Legal ground: Performance of a contract (Art. 5/2-c); establishment, exercise or protection of a right (Art. 5/2-e); legitimate interest (Art. 5/2-f).

Marketing and Analytics Data

Commercial message preferences, campaign and giveaway participation information, analytics cookie data.

Purpose: Sending commercial electronic messages, running campaigns and giveaways, statistically measuring Site usage.
Legal ground: Your explicit consent (Art. 5/1); performance of a contract with respect to campaign and giveaway participation (Art. 5/2-c).

3. Method of Collecting Personal Data

Your personal data are collected electronically, by automated or partially automated methods, through the membership, order, balance top-up, identity verification and contact forms on the Site, support tickets, live support, e-mail and WhatsApp channels, and through cookies and server logs.

4. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups, limited to the above purposes and in accordance with Articles 8 and 9 of the KVKK:

Payment institutions and banks (payments, refunds and fraudulent transaction checks),
Hosting and infrastructure service providers,
The AI-powered live support infrastructure (OpenRouter) and translation (Google) and analytics (Google Analytics) service providers,
Certified public accountants, lawyers and auditors,
Public authorities and institutions authorized by law, and judicial authorities.

Transfers that take place because the servers of the AI, translation and analytics service providers are located abroad are carried out on the basis of the appropriate safeguards or the cases of occasional transfer provided for in Article 9 of the KVKK.

5. Your Rights under the KVKK

Under Article 11 of the KVKK, you have the right to:

Learn whether your personal data are processed,
Request information if your personal data have been processed,
Learn the purpose of processing and whether the data are used in accordance with that purpose,
Know the third parties in Türkiye or abroad to whom your personal data are transferred,
Request rectification if the data have been processed incompletely or incorrectly,
Request erasure or destruction within the framework of the conditions set out in Article 7 of the KVKK,
Request that rectification, erasure or destruction operations be notified to the third parties to whom the data have been transferred,
Object to a result arising against you from the analysis of the processed data exclusively through automated systems,
Request compensation for damages if you suffer damage due to unlawful processing

by applying to the Company.

6. Application Method

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you may submit your requests regarding your rights:

In person or through a notary public, by a petition bearing a wet signature sent to the address above,
By sending an e-mail to info@oyunata.com from the e-mail address registered on the Site,
By e-mail, signed with a secure electronic signature or a mobile signature.

Your application must include your name and surname, Turkish national identity number (for foreign nationals, nationality and passport number), address for notification, e-mail address and phone number if any, and the subject of your request. Applications are concluded free of charge as soon as possible depending on the nature of the request and within 30 days at the latest; if the process requires an additional cost, the fee schedule determined by the Personal Data Protection Board may be applied. If your application is rejected, if you find the response insufficient, or if no response is given in due time, you may file a complaint with the Personal Data Protection Board.

For more detailed information, please see the Privacy Policy.

This is an English translation provided for information. In case of any discrepancy, the Turkish version shall prevail.

Last updated: 10 September 2026