KVKK Disclosure Statement — Protection of Personal Data

Last Updated: 14.06.2026

Under Turkish Personal Data Protection Law No. 6698 ("KVKK"), as TOKU Teknoloji Uluslararası Ticaret ve Sanayi A.Ş. ("TOKU Teknoloji" or "Company"), in our capacity as data controller, we would like to inform you about the processing of your personal data.

1. DATA CONTROLLER

Company Name: TOKU Teknoloji Uluslararası Ticaret ve Sanayi A.Ş.

Address: Aksaray Üniversitesi Teknopark, Bahçesaray Mah. Necmettin Erbakan Blv. 141/2, Aksaray, 68100

Email: info@toku.com.tr

Phone: +90 532 488 94 66

2. PERSONAL DATA PROCESSED

The following personal data is processed within the scope of the digiturnuva platform:

Data Category Data Types
Identity Information First name, last name, username
Contact Information Email address, phone number
Visual Data Profile photo
Financial Information Payment information, billing information
Transaction Security IP address, password, session information
Usage Data Platform usage statistics, tournament data

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed for the following purposes:

  • Carrying out membership operations and account management
  • Providing tournament creation, management and participation services
  • Conducting payment and billing operations
  • Providing user support services
  • Fulfilling legal obligations
  • Ensuring platform security
  • Improving service quality and conducting analysis
  • Carrying out communication activities

4. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:

  • Your explicit consent
  • Being necessary for the establishment or performance of a contract
  • Fulfillment of a legal obligation
  • Being mandatory for our legitimate interests

5. TRANSFER OF PERSONAL DATA

In line with the realization of the purposes specified above, your personal data may be shared with:

  • Payment service providers (iyzico, etc.)
  • Cloud service providers
  • Authorized public institutions and organizations
  • Legal advisors and auditors

in accordance with the conditions specified in Articles 8 and 9 of the KVKK.

6. METHOD OF COLLECTING PERSONAL DATA

Your personal data is collected through the following methods:

  • Forms filled out via the website and mobile application
  • Membership and login operations
  • Email, phone and other communication channels
  • Cookies and similar technologies
  • Login via social media accounts (Google, etc.)

7. RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of the KVKK, you have the following rights:

  • To learn whether your personal data is being processed
  • To request information if your personal data has been processed
  • To learn the purpose of processing your personal data and whether it is used in accordance with its purpose
  • To know the third parties to whom your personal data is transferred domestically or abroad
  • To request the correction of your personal data if it has been processed incompletely or incorrectly
  • To request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK
  • To request that correction, deletion or destruction operations be notified to third parties to whom your personal data has been transferred
  • To object to a result against you arising from the analysis of processed data exclusively through automated systems
  • To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data

8. APPLICATION METHOD

To exercise the rights specified above, you can apply to our company using one of the following methods:

  • Email: info@toku.com.tr (Subject: KVKK Application)
  • Mail: Aksaray Üniversitesi Teknopark, Bahçesaray Mah. Necmettin Erbakan Blv. 141/2, Aksaray, 68100

In your application, you must clearly state your identifying information and which of the rights specified in Article 11 of the KVKK you wish to exercise.

Important Information

Your applications will be concluded free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the operation requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.