Privacy Policy
How your personal data is processed when you play Okey Arena, explained under the Turkish Personal Data Protection Law No. 6698 (KVKK).
Contents
This is an English translation provided for convenience (for example, for app store and ad network reviewers). The Turkish version is the governing text.
In short
- You can play as a guest, sign in with Facebook or (on iOS) sign in with Apple; we never ask for your phone number.
- Payments are handled by Google Play and the App Store; your card details never reach us.
- Table chat and private messages are delivered in real time; their content is not stored on our servers.
- We do not sell your personal data.
- You can delete your account from inside the game at any time.
1.Data controller
Under the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by GKA Games (Gürkan Ataman) as the data controller. For any matter concerning your personal data, contact us at destek@gkagames.com.
This policy covers the Okey Arena – Online Okey Oyunu mobile app published on Google Play and the App Store (the “Game”), the Game’s servers and our support channels, and serves as the privacy notice required by Article 10 of the KVKK.
2.Personal data we process
Account and sign-in data
- Guest sign-in: When the Game is first opened, a random device identifier is generated on your device and stored in the Game’s own storage. It is not your phone’s hardware ID, IMEI or advertising ID; it is sent to our server only to match your guest account to that device. Your account is given a player number (the ID starting with “OA-” in Settings) and an automatic username.
- Facebook Login: We receive only your public profile information from Facebook: your app-scoped Facebook user ID, your name and a link to your profile picture. Your name is used to create your initial username and your picture as your avatar. We do not access your email address, friend list or posts, and we never post on Facebook on your behalf. If you later link your guest account to Facebook, this information is added to the same account.
- Sign in with Apple (iOS): Your app-scoped Apple user ID provided by Apple and, if you choose to share them, your name and email address (or the relay address created by Apple if you selected “Hide My Email”). Your name is used to create your initial username.
- Session data: So that you do not have to sign in every time, your player number, username and sign-in method, and for Facebook sign-in a time-limited session token, are stored on your device.
- Legacy accounts: For accounts created with an email address in an early version of the Game, the email address and an irreversible hash of the password.
Profile and gameplay data
Username; avatar (an image chosen from the built-in avatars, your Facebook profile picture or, in versions that support it, a small image uploaded from your device); avatar frame; level and experience points; chip and diamond balances; table themes you own and use; game statistics (hands played and won, streaks, scores); tables you played and their results; monthly win count and leaderboard rank; mission progress; login streak, daily reward, chip chest and wheel records; upcoming features you asked to be reminded of; account creation, last login and last seen times.
Social features and community safety
- Friend requests and your friend list; table invitations.
- Gifts you send and receive at the table (sender, recipient, gift type, chip price, table and time).
- Players you block; reports you submit (the reported player and the reason you selected or wrote).
- Table chat and private messages: Your messages are relayed through our server to the recipient in real time; their content is not stored in our database or server logs. Messages are not delivered between players who have blocked each other.
- Visible to other players: your username, avatar and frame, level, game statistics, chip balance at the table, online status and leaderboard rank.
- Enforcement records: restrictions applied for rule violations (duration and reason) and a log of administrative actions (e.g., granting gifts, adjusting refunded purchases).
Purchases
For in-app purchases made through Google Play or the App Store: product ID, the store’s purchase receipt and transaction ID, order number, platform, the amount of chips and diamonds added to your account, date and refund status, if any. Receipts are verified on our server using the Google Play Developer API and Apple signature verification to prevent fraudulent or duplicate purchases. Payments are processed by Google or Apple; your card number, billing address and other payment details are never shared with us.
Notifications (Android)
If you allow notifications: the notification token generated by Firebase Cloud Messaging for your device, platform and app version; your notification preferences (Invites & friends, Gifts & rewards, Announcements); and a record of notifications sent to you (whether it was delivered, opened, and whether you returned to the Game within 24 hours). You can turn off notification permission in your phone’s settings and individual notification types in the Game under Settings › Notifications at any time.
Advertising (Android)
The Game shows optional rewarded ads (for example, for an extra wheel spin) through Google AdMob or Unity Ads; our server decides which ad network is used. Watching an ad is entirely your choice.
- Processed by Google: To serve and measure ads and prevent ad fraud, Google processes data such as your device’s advertising ID, IP address, device and operating system information, app information and your interactions with ads, under its own privacy policy.
- What Unity processes: For ads served through Unity Ads, Unity Technologies processes your device’s advertising ID, IP address, device and app information and your ad interactions under its own privacy policy to deliver and measure ads and prevent fraud. Your personalized-ads preference is also passed to Unity.
- Non-personalized by default: We request non-personalized ads by default, so ads are not targeted based on your interests. Even for non-personalized ads, Google uses limited data for frequency capping, aggregated reporting and fraud prevention.
- Consent: In regions where consent is legally required, such as the European Economic Area, the United Kingdom and Switzerland, a consent form built with Google’s User Messaging Platform (UMP) is shown before ads are loaded. You can change your consent choice and your personalized-ads preference at any time from the ad privacy options in the Game’s Settings.
- On our server: To credit the reward to the correct account, we create a single-use reward ticket; your player number and this ticket are passed to the ad network (Google or Unity) with the ad request. When the ad is completed, the verification data the ad network sends to our server (transaction ID, ad network, ad unit) is stored together with the reward granted and the time.
- You can reset or delete your advertising ID in Android settings (Google › Ads). More information: How Google uses information from sites or apps that use its services and My Ad Center.
Feedback form and support emails
When you use the in-game feedback form, the topic you select (bug, suggestion, payment, other), your message, the email address you optionally enter and your player number are stored. When you email us, your email address and the content of the correspondence are processed.
Technical data
- When you connect to our servers, your IP address and connection times appear in short-lived server logs, used to prevent abuse (rate limiting) and to troubleshoot. These logs may also contain your player number, username, guest device identifier and technical details of in-game actions.
- App version and platform (Android or iOS).
- Crash reports: The Game does not use a separate analytics or crash-reporting SDK. If you have allowed it in your device settings, Google Play and the App Store collect crash and performance reports (device model, OS version, error details) under their own policies and provide them to us in anonymous or aggregated form.
3.How we collect data
Your personal data is collected electronically: automatically through the app and our servers while you use the Game, from the Facebook and Apple services you use to sign in, from Google Play and the App Store for purchases, from Google for ads, and directly from you through the feedback form and email.
4.Purposes and legal bases
- Creating your account, signing you in and providing the Game; storing your progress, balance and virtual items; running friends, chat, invitation and gift features
- Necessary for the conclusion or performance of a contract (KVKK Art. 5/2-c).
- Verifying purchases and crediting them to your account; handling refunds and disputes
- Performance of a contract (Art. 5/2-c), compliance with our legal obligations (Art. 5/2-ç) and the establishment, exercise or protection of a right (Art. 5/2-e).
- Preventing cheating, fraud and abuse; reviewing reports and enforcing rules; keeping systems secure
- Our legitimate interests, provided your fundamental rights and freedoms are not harmed (Art. 5/2-f), and the establishment, exercise or protection of a right (Art. 5/2-e).
- Answering support requests and feedback; improving the Game
- Our legitimate interests (Art. 5/2-f); performance of a contract where your request relates to it (Art. 5/2-c).
- Sending game-related notifications (invites, gifts, rewards)
- Performance of a contract (Art. 5/2-c). Announcement and campaign notifications are sent only with your phone permission and according to your notification preferences, based on your explicit consent (Art. 5/1).
- Showing rewarded ads and verifying rewards
- Performance of a contract (Art. 5/2-c) and our legitimate interests (Art. 5/2-f). Personalized ads only with your explicit consent (Art. 5/1).
- Responding to requests from competent authorities and meeting legal obligations
- Expressly provided for by law (Art. 5/2-a) and legal obligation (Art. 5/2-ç).
6.Retention periods
- Account, profile and gameplay data: until your account is deleted.
- Notification tokens and preferences, ad reward records: until your account is deleted. When you uninstall the app, the notification token becomes invalid and is no longer used.
- Purchase records: for the periods required by tax, commercial and consumer legislation (up to 10 years); they are kept for this period even if you delete your account.
- Enforcement and administrative action records: for the applicable limitation periods, to prevent abuse and handle possible disputes.
- Feedback messages and support emails: for as long as necessary for possible disputes after your request is resolved. When your account is deleted, your feedback messages are unlinked from your player number.
- Server logs: kept for a short time and deleted regularly.
Data whose retention period has expired is deleted, destroyed or anonymized.
7.Deleting your account and data
You can delete your account instantly in the Game: Settings (bottom right of the main screen) › the red Hesabımı Sil (Delete my account) button at the bottom of the window › Kalıcı Olarak Sil (Delete permanently). If you cannot access the app, email destek@gkagames.com; your request will be completed within 30 days at the latest.
What is deleted and what is retained due to legal obligations is explained in detail on the Account and Data Deletion page (Turkish). Uninstalling the app does not delete your account.
8.Your rights under the KVKK
Under Article 11 of the KVKK, you have the right to:
- learn whether your personal data is processed,
- request information about the processing,
- learn the purpose of processing and whether data is used in line with that purpose,
- know the third parties to whom your data is transferred in Türkiye or abroad,
- request correction of incomplete or inaccurate data,
- request deletion or destruction of your data under the conditions of Article 7 of the KVKK,
- request that correction, deletion or destruction be notified to third parties to whom the data was transferred,
- object to a result against you arising from analysis of your data exclusively by automated systems,
- claim compensation for damages arising from unlawful processing.
How to apply
Send your request by email to destek@gkagames.com, stating the username and player number you use in the Game. We may ask for additional information to verify your identity and that the account belongs to you. We will respond free of charge as soon as possible and within 30 days at the latest (KVKK Art. 13). If your request is rejected, you find the answer insufficient, or we do not respond in time, you may file a complaint with the Turkish Personal Data Protection Board (KVKK Art. 14). If you live outside Türkiye, you may also exercise the rights granted by your local law through the same address.
9.Security
All communication between the app and our servers is encrypted with TLS (HTTPS/WSS). Session tokens are time-limited; purchases and game results are verified server-side; access to the database and admin tools is restricted to authorized personnel. Although no system is entirely risk-free, we take reasonable technical and organizational measures to protect your data. In the event of a data breach, we will notify the Personal Data Protection Board and affected individuals as required by the KVKK.
10.Age requirement
Okey Arena is intended for users aged 18 and over. We do not knowingly process personal data of anyone under 18; if we become aware of such an account, we will delete it. If you believe a user under 18 is using the Game, please let us know at destek@gkagames.com.
12.Changes
We may update this policy as we add features to the Game or as legislation changes. The current version is always published on this page, and the “Last updated” date above will change. We will also announce significant changes in the Game.
13.Contact
GKA Games · Email: destek@gkagames.com · Web: gkagames.com