Privacy Policy

As knightpin.com (Alpysky Oyun Yazılım ve Teknoloji A.Ş.), the privacy of our Users and the security of their personal data are among our priorities. This Privacy Policy explains what information we collect, how we use it and how we protect it.

1. Information we collect

• At registration: Name and surname, email, phone, username, password (hashed).
• During orders/transactions: Billing address, IBAN (for withdrawals), identity verification details (including identity document and selfie images), game character/ID details.
• Automatically: IP address, browser information, device type, session logs, page view statistics, cookie data.
• From communications: The content of support requests, email correspondence, marketplace messages.

2. How we use information

• Creating and managing the membership account,
• Taking orders, carrying out payment processes and delivering products/services,
• Providing customer support services,
• Information security, fraud prevention and account security,
• Fulfilling legal obligations (tax, KVKK, legislation),
• Marketing notifications and campaign communications, where explicit consent has been given,
• Improving service quality, statistics and analytics.

3. Sharing with third parties

The Company does not share User data with third parties other than the business partners needed to provide the service (payment, SMS/email and messaging, identity verification, live support, cloud/hosting and security service providers, and product suppliers), the other Member in a Player Marketplace transaction (limited to the information needed for delivery), analytics and advertising service providers where cookie consent has been given, authorized public institutions under legal obligations, and law firms. The list of recipients is set out in the "Personal Data Protection Notice (KVKK)". Data is shared for marketing purposes only with the User's explicit consent.

4. Data security

• All data traffic is protected by SSL/TLS encryption.
• Passwords are stored using one-way hashing algorithms (bcrypt); they are never kept in plain text.
• Authorization and authentication systems, session management and suspicious login detection mechanisms are in place.
• Database backups are stored in an environment that only authorized staff can access.
• Staff access is restricted on an authorization basis.

5. Cookies

The site uses cookies to improve the user experience and to provide the service. For details, please see the "Cookie Policy" page.

6. User rights

Users have all the rights set out in KVKK Article 11 over their personal data. Details are available on the "Personal Data Protection Notice (KVKK)" page. Applications can be sent to [email protected] or through the "Data Subject Request Form (KVKK)".

7. Communication preferences

Members can change their communication preferences for campaign/promotion emails and SMS notifications in their account settings, and can withdraw their consent to commercial electronic messages at any time.

8. Children's privacy

knightpin.com does not provide services directly to users under 18 and does not knowingly collect the personal data of users under 18. If such data is detected, it is deleted without delay.

9. Policy updates

The Company may update this Privacy Policy as needed. Updates enter into force on the date they are published on this page; for significant changes, a notification is sent to your registered email address.

10. Users in the European Economic Area (GDPR)

For the personal data of Users who use our services from the European Economic Area (EEA), the following provisions apply under the EU General Data Protection Regulation (GDPR), in addition to the other provisions of this Policy:

• Controller: Alpysky Oyun Yazılım ve Teknoloji A.Ş.; contact: [email protected].
• Legal bases: The conclusion and performance of a contract (Art. 6(1)(b) GDPR), our legal obligations (Art. 6(1)(c)), our legitimate interests such as preventing fraud and keeping the service secure (Art. 6(1)(f)), and your consent for marketing communications and non-essential cookies (Art. 6(1)(a)); your explicit consent for biometric data in identity verification (Art. 9(2)(a)).
• Your rights: You have the right to access your personal data, to ask for it to be corrected or erased, to ask for its processing to be restricted, to data portability, to object to processing based on legitimate interests and to withdraw your consent at any time. Requests can be sent to [email protected] and are answered within one month at the latest.
• International transfers: Your data is processed in Türkiye, where we provide the service. Transfers to our service providers in other countries (for example email, hosting and security, identity verification, live support, analytics) rely on the appropriate safeguards provided for in Article 46 GDPR (for example the European Commission's standard contractual clauses) or on the derogations in Article 49. The Russia-based analytics service (Yandex Metrica) is not used on the English pages.
• Automated decisions: To prevent fraud, some top-ups, orders and identity verifications may be limited, held or rejected by automated rules based on criteria such as the amount, payment method, account age, country and verification result. If you are affected by such a decision, you can ask for it to be reviewed by a member of our staff, express your point of view and contest the decision.
• Retention periods: As set out in the "Personal Data Protection Notice (KVKK)".
• Right to complain: You can lodge a complaint with the data protection supervisory authority in the country where you live or work, or where the alleged infringement took place.

11. Contact

You can send any questions, requests and complaints about privacy to [email protected] or through the channels on the Contact page.