Privacy policy
Last updated: September 30, 2026
This notice is provided under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Data controller
Undefined Games. Contact: privacy@undefinedgames.com.
Data we process
- Account data: email, player name and tag, region, password hash (argon2id; the password itself is never stored).
- Security data: session records, masked IP, device information, two-factor status.
- Game data: match results, reports and bug reports.
- Site data: necessary cookies and, only with your consent, measurement data.
Purposes and legal bases
| Purpose | KVKK | GDPR |
|---|---|---|
| Creating your account and providing the game service | Art. 5/2-c performance of contract | Art. 6(1)(b) |
| Account security and anti-cheat | Art. 5/2-f legitimate interest | Art. 6(1)(f) |
| Legal obligations | Art. 5/2-ç | Art. 6(1)(c) |
| Measurement cookies | Art. 5/1 explicit consent | Art. 6(1)(a) |
Retention
Account data is kept while your account is open, security records for 12 months and bug reports for 24 months; afterwards they are deleted or anonymised.
Transfers
Data is shared with our service providers (hosting, email) only as far as the service requires and under contract. International transfers follow KVKK Art. 9 and GDPR Chapter V safeguards.
Your rights
Under KVKK Art. 11 and GDPR Art. 15-22 you have the right to access, rectify, erase, restrict, object and port your data. Send your request from your registered email to privacy@undefinedgames.com; we reply within 30 days. You may also complain to the Turkish Personal Data Protection Authority or the supervisory authority of your country.