KVKK Data Notice

1. Data controller

Under Article 10 of Turkish Personal Data Protection Law No. 6698 ("KVKK") and the related communiqué on the duty to inform, your personal data is processed by the following data controller:

Odax Teknoloji Limited Şirketi (PINFOX) — Hanspaces, Koza Mah. 1638. Sk., Esenyurt / İstanbul · pinfox.tech · Email: [email protected]

2. Personal data processed

Chat messages between friends and real-time game sync data are not recorded or stored.

• Identity/contact: name (display name on your Google account), email address.
• Visual: URL of your Google profile picture.
• Account/user transaction: Google account identifier, your invite code, friend connections, session cookie.
• Game/transaction security: match records (game, opponent, score, result, date), match counts, player rating and ranking, online status.
• Transaction security: IP address, browser/device information and access logs.
• Marketing/analytics: visit statistics and ad preferences obtained via cookies and similar technologies (Google Analytics, Google AdSense).

3. Purposes of processing

• Account creation and authentication (Google sign-in),
• Providing friends list, invitation, chat and multiplayer game services,
• Calculating and displaying match history, statistics, ratings and rankings,
• Ensuring information security and preventing cheating and abuse,
• Analyzing site usage and improving the service,
• Displaying ads (Google AdSense),
• Complying with legal obligations and protecting rights in potential disputes.

4. Legal grounds (KVKK Art. 5/2 and 6)

• Processing is directly related to the establishment or performance of a contract (account, friends and game services — Art. 5/2-c),
• Compliance with a legal obligation (Art. 5/2-ç),
• Necessary for the establishment, exercise or protection of a right (Art. 5/2-e),
• Legitimate interests of the controller, provided fundamental rights are not harmed — security, anti-cheat, debugging (Art. 5/2-f),
• Your explicit consent for analytics and advertising cookies (Art. 5/1).

5. Transfer of personal data

To the extent necessary to provide the service, your data may be transferred to Google LLC / Google Ireland Limited (authentication provider), Google Analytics and Google AdSense (statistics and ads), our hosting/infrastructure providers, and authorized public authorities (upon request, within the legal framework). Other users you add as friends can see your data only to the extent described in Section 6 of the Privacy Policy (name, picture, online status, match results).

Through Google services your data may be transferred to servers abroad; such transfers are carried out in accordance with KVKK Art. 9, relying on your explicit consent or lawful transfer mechanisms where required. Your data is not sold or transferred to third parties for marketing.

6. Method of collection

Your data is collected automatically in electronic form through information sent by Google during sign-in, your use of the site (adding friends, playing games), cookies and server logs.

7. Retention period

Account data is kept while your account exists; when you delete your account, your profile, friend connections and match records are permanently deleted. Access logs are kept for the period required by law and reasonable security periods.

8. Your rights under KVKK Art. 11

As a data subject you have the right to:

• Learn whether your personal data is processed,
• Request information about processing if it has been processed,
• Learn the purpose of processing and whether it is used accordingly,
• Know the third parties to whom data is transferred in Türkiye or abroad,
• Request correction if data is incomplete or inaccurate,
• Request erasure or destruction under KVKK Art. 7 and request notification of this to third parties to whom data was transferred,
• Object to a result against you arising from exclusively automated analysis of your data,
• Claim compensation for damages caused by unlawful processing.

9. How to apply

You can send requests regarding the rights above to [email protected] by email, stating information identifying you and the subject of your request. Your request will be concluded free of charge within thirty (30) days at the latest depending on its nature; if the process requires a cost, the tariff determined by the Personal Data Protection Board may apply. You can also delete your account data yourself with the "Delete my account" button on your profile page. You also have the right to lodge a complaint with the Personal Data Protection Board.