Mas4games

Privacy notice (KVKK)

Last updated: October 2026

This English text is provided for your information. If it differs from the Turkish text in any way, the Turkish text prevails.

Under Personal Data Protection Law No. 6698 (the "Law", known as KVKK), this notice explains how we process your personal data on mas4games.com. It applies to our members, to people who shop, to people who write to us by live chat or support request, and to everyone who visits our site.

1. Data controller

Your personal data is processed by MAS İLETİŞİM TEKNOLOJİ LTD STİ ("Mas4games") as the data controller.

  • Address: FATİH MAH. KAMURAN YILMAZER CAD. AÇELYA APT NO: 7 İÇ KAPI NO: 8 ŞEHİTKAMİL/ GAZİANTEP
  • MERSİS No.: 0612154005200001

2. Which data we process

  • Identity: first name and surname; where needed for invoicing, your Turkish ID number or tax ID number.
  • Contact: e-mail address, phone number and the address you give for invoicing.
  • Customer transactions: if you apply to become a dealer, your company's name, tax number, phone, website and estimated purchase volume; your orders, the products you add to your cart while signed in, the player ID and game account details you give for in-game top-ups (such as server and username), the codes delivered to you, balance movements, coupon and referral program use, your product reviews, your support conversations and the files you send.
  • Finance: payment records and the payment institution's transaction numbers, your bank transfer or EFT notices and receipts, refunds. We do not see or store your card details: card payments are taken directly on the secure payment screen of our partner payment institution.
  • Transaction security: IP address, browser and device information, session and sign-in records, records of changes to your account. Your password is stored in a form that cannot be reversed; nobody can see the password itself.
  • Legal transactions: the agreements and pre-information form you accepted (with the time of acceptance and IP address), complaint and dispute records.
  • Marketing: your permissions and preferences for commercial electronic messages; if you opened the sign-up page from a campaign link or another site, the name of that link or site; if you gave consent, usage data collected by analytics and advertising cookies.

We do not process special categories of personal data (such as health, religion or biometric data). Please do not share such information in support conversations either.

3. Purposes and legal grounds

  • Creating and managing your membership, taking your orders, delivering codes, making in-game top-ups, handling balance and refunds: processing is directly related to the formation or performance of a contract.
  • Issuing invoices, keeping accounting and tax records, keeping agreement and pre-information records, answering the requests of competent authorities: it is expressly provided for by law and is our legal obligation.
  • Protecting your account and payments, preventing fraud and the misuse of coupons or campaigns, reviewing risky orders: our legitimate interest, provided that it does not harm your fundamental rights and freedoms.
  • Answering your support requests and measuring the quality of our service: performance of the contract and our legitimate interest.
  • Keeping your cart and the theme you chose (dark or light) while you are signed in, so that they appear when you sign in on another device too and your e-mails are sent in the same theme: processing is directly related to the formation of a contract.
  • Publishing your review on the site: at your request, with only your first name and the initial of your surname or anonymously; verifying that the review is based on a real purchase: our legal obligation.
  • Protecting our rights in disputes, payment disputes and fraud complaints: processing is necessary for the establishment, exercise or protection of a right.
  • Assessing your dealer application and telling you the result: processing is directly related to the formation of a contract.
  • Measuring which promotional channels work (which campaign link or site members came from): our legitimate interest, provided that it does not harm your fundamental rights and freedoms.
  • Sending commercial electronic messages about campaigns and offers (including reminding you by e-mail of products left in your cart): the separate consent you give under Law No. 6563. Your permissions are recorded in the Message Management System (İYS) and can be withdrawn at any time.
  • Analytics and advertising cookies: only with your explicit consent. The details are in the Cookie policy.

4. Whom we share your data with

We share your data only for the purposes above, only as far as necessary, with these recipients:

  • Payment institutions and banks: making payments and refunds, reviewing payment disputes.
  • The e-invoice integrator and the Revenue Administration: issuing your invoices.
  • Our suppliers and game publishers: only the player ID and game account details, to make in-game top-ups.
  • Companies providing us with servers, backups, protection against automated attacks (the security check on the sign-in and sign-up forms), and e-mail and SMS sending: running and securing our systems and sending you notices (including e-mail confirmation and password links, order notices and the codes delivered for your order).
  • Identity verification, analytics and advertising service providers: for sign-in, if you choose to sign in with a social account; for analytics and advertising measurement, if you gave consent.
  • The Message Management System (İYS): recording your commercial message permissions.
  • Financial advisers, lawyers and auditors: for our legal obligations and the protection of our rights.
  • Competent public institutions and judicial authorities: on their lawful requests or in applications we make to protect our rights.

The servers of some of these recipients are abroad (such as game publishers, analytics and advertising services, and some cloud and e-mail services). Transfers abroad are made in accordance with the conditions laid down in the Law.

5. How we collect your data

We collect your data electronically: from the forms you fill in when you register, order, send a payment notice or open a support request; from the relevant service provider when you choose to sign in with a social account; automatically while you use our site (IP address, browser information, cookies); and from the transaction results the payment institution sends us.

Your membership, order and balance records in the e-commerce platform we used before have been transferred to our new system so that the service continues without interruption.

6. How long we keep it

  • Order, payment, invoice, refund and agreement records: 10 years (as required by commercial and tax legislation).
  • Membership details: for as long as your membership lasts. When the membership ends, everything except what is linked to the order and invoice records we must keep by law is deleted or anonymised.
  • Commercial message permission and refusal records: 3 years from the end of the permission.
  • Sign-in and transaction security records (IP address, device information): 2 years.
  • Products you left in your cart while signed in: 30 days from the cart's last change; deleted at once when you empty the cart.
  • Support conversations and their attachments: 2 years from the request's closing.
  • Records of the e-mails sent to you (recipient address, subject, time and result of sending; the content of the e-mail is not kept): 2 years.
  • Cookies: the periods stated in the Cookie policy.

Data whose period has ended is deleted, destroyed or anonymised.

7. Your rights

Under the Law, you have the right to:

  • Learn whether your personal data is processed.
  • Request information about it if it has been processed.
  • Learn the purpose of processing and whether it is used in line with that purpose.
  • Know the third parties to whom it is transferred in Turkey or abroad.
  • Ask for it to be corrected if it is incomplete or wrong.
  • Ask for it to be deleted or destroyed within the conditions of the Law.
  • Ask for correction, deletion or destruction to be notified to the third parties to whom the data was transferred.
  • Object to a result against you that arises solely from analysis by automated systems.
  • Claim compensation if you suffer damage because of unlawful processing.

8. How to apply

You may send your requests, with information that lets us verify your identity, in writing to our address above, by registered electronic mail (KEP), or from the e-mail address registered in our system to {{email}}. We conclude your application free of charge within 30 days at the latest; if the process requires an additional cost, the fee set by the Personal Data Protection Board may be charged. If your application is refused, if you find our answer insufficient, or if we do not answer in time, you may complain to the Personal Data Protection Board.

We may update this notice when needed; its current version is always on this page.