Privacy Policy

This Privacy Policy explains for what purposes the personal data of visitors and members using the oyunata.com website (the "Site") are collected, how they are used, with whom they are shared, how they are protected and how long they are retained. The Policy has been prepared on the basis of Law No. 6698 on the Protection of Personal Data ("KVKK") and related legislation. The legal notice regarding the processing of your personal data is also provided in the KVKK Privacy Notice.

1. Data Controller

Your personal data are processed by the company whose details are given below, in its capacity as data controller.

Legal Name: RANTEY YAZILIM İTHALAT VE İHRACAT SANAYİ TİCARET LİMİTED ŞİRKETİ
Address: Kocasinan Mahallesi H. Ahmet Yesevi Sokak No: 1 İç Kapı No: 1, 39750 Lüleburgaz / Kırklareli
MERSIS No: 0733142725100001
E-mail: info@oyunata.com
Phone / WhatsApp: +90 850 302 46 60

2. Personal Data We Collect

Identity information: Name, surname and username. For transactions requiring identity verification, additionally the Turkish national identity number, date of birth, gender and, if requested, images of the front/back of the identity card.
Contact information: E-mail address and phone number.
Customer transaction information: Order and purchase history, balance movements, coupon and campaign usage, billing information, and the in-game username/ID and server information you provide for delivery.
Financial information: Payment method, transaction amount and date, the payment institution's transaction reference; for bank transfer (EFT) payments, the sender's name and payment description. Card information such as the card number, expiry date and security code is neither seen nor stored by us.
Transaction security information: IP address, browser and device information, session and login records, security verification results and technical findings regarding proxy/VPN usage.
Request and complaint information: Support tickets, live support and e-mail correspondence, WhatsApp conversations and images you share through these channels.
User content: Product reviews, ratings and photos you attach to reviews.
Marketing information: Campaign and giveaway participation information and your commercial message preferences.

3. How Do We Collect Data?

Your personal data are collected electronically, by automated or partially automated means, through membership, order, balance top-up, identity verification and contact forms, support tickets, live support, e-mail and WhatsApp correspondence, and through cookies and server logs while you use the Site.

4. For What Purposes Do We Use Data?

Creating your membership registration and managing your account,
Receiving orders, processing payments and balance top-ups, and delivering digital products,
Invoicing and fulfilling obligations arising from tax, commercial and consumer legislation,
Preventing fraud, fraudulent payments and account takeover attempts; identity verification,
Handling support tickets and complaint and refund processes,
Publishing reviews and displaying them in different languages,
Organizing campaigns, coupons and giveaways; sending commercial electronic messages if you give your consent,
Ensuring the security of the Site and measuring and improving its performance,
Responding to lawful requests from competent public authorities and institutions.

5. With Whom Do We Share Data?

We do not sell or rent your personal data. Data may be shared with the following recipient groups only to the extent required for the above purposes and in accordance with Articles 8 and 9 of the KVKK:

Payment institutions and banks: For carrying out card payments, bank transfers (EFT) and refunds, and for preventing fraudulent transactions.
Hosting and infrastructure service providers: For the secure hosting of the Site and the data.
AI service provider: So that live support conversations can be answered by the AI-powered assistant, the content of the conversations is processed via the OpenRouter infrastructure.
Translation service: So that product reviews can be displayed in the Site's different language versions, review texts are transmitted to Google's translation service.
Analytics service: Statistics on Site usage are measured through Google Analytics (Google LLC).
Advisors: Certified public accountants, lawyers and auditors; for fulfilling legal obligations and protecting rights.
Competent public authorities and institutions: Courts, public prosecutors' offices, law enforcement agencies and regulatory bodies; only where legally required.

6. Transfers Abroad

The servers of our AI, translation and analytics service providers may be located abroad. Transfers carried out within the scope of these services are made in accordance with the conditions set out in Article 9 of the KVKK (an adequacy decision, appropriate safeguards such as standard contracts, or cases of occasional transfer). We take care not to share with these providers any identity and contact information that is not necessary for the purpose.

7. Retention Periods

Your personal data are retained for the period required by the purpose of processing and for the periods stipulated in the relevant legislation. The main periods are as follows:

Order, invoice and payment records: 10 years under the Turkish Commercial Code and the Tax Procedure Law.
Records relating to distance contracts: at least 3 years under the relevant legislation.
Traffic and access logs (IP, session information): 2 years under Law No. 5651.
Images attached to support tickets: automatically deleted after 7 days.
Identity verification information: until the verification purpose and any related legal proceedings have ended.
Commercial message consent records: 3 years from the withdrawal of consent.
Membership information: for the duration of membership and, after membership ends, for the statutory limitation periods applicable to disputes that may arise.

When the period expires, the data are erased, destroyed or anonymized in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data.

8. Data Security

We take technical and administrative measures under Article 12 of the KVKK to protect your personal data:

All communication between the Site and your browser is encrypted with SSL/TLS.
Passwords are stored in irreversible (hashed) form; no one, including our employees, can see your password.
Login and registration forms are protected against automated attacks by additional security layers.
Access to data is limited to authorized personnel and to the extent required by their duties; access is logged.
Systems are backed up regularly and security updates are monitored.

The absolute security of any data transmission over the internet cannot be guaranteed; however, in the event of a data breach, notification is made to the Personal Data Protection Board and to the affected persons in accordance with Article 12 of the KVKK.

9. Cookies

The following types of cookies are used on the Site:

Strictly necessary cookies: Required to keep your session open, preserve your cart, remember your language and currency preferences and ensure form security (CSRF and bot protection). The Site does not function properly without these cookies.
Analytics cookies: Google Analytics cookies (_ga, _ga_*) allow us to measure statistics such as the number of visits and page usage.

No cookies are used on the Site for advertising or retargeting purposes. You can delete or block cookies through your browser settings; you can disable Google Analytics measurement with Google's browser add-on. If strictly necessary cookies are blocked, some parts of the Site may not work.

10. Children's Privacy

The Site is not intended for use by persons under the age of 18 without the permission of a parent or guardian. If you become aware that data belonging to a person under the age of 18 is being processed without the permission of a parent or guardian, please notify us.

11. Your Rights

Under Article 11 of the KVKK, you have rights such as learning whether your personal data are processed, requesting information, requesting rectification or erasure, objecting, and requesting compensation for damages. The full list of your rights and the application method are explained in the KVKK Privacy Notice. Your applications are concluded free of charge within 30 days at the latest.

12. Amendments

This Policy may be updated in line with changes in legislation or in our services. The updated text enters into force on the date it is published on the Site.

13. Contact

For questions about privacy, you can write to info@oyunata.com or use the channels on the Support and Contact page.

This is an English translation provided for information. In case of any discrepancy, the Turkish version shall prevail.

Last updated: 10 September 2026