Privacy and Data Protection Policy

This is an informational translation. The legally binding version is the Turkish original; in the event of any discrepancy, the Turkish text prevails.

Last updated: September 28, 2026

This policy explains how the personal data of users of the iddialifutbol.com website and the iddialifutbol Android app (together, the “Service”) is processed under Turkish Personal Data Protection Law No. 6698 (“KVKK”). By using the Service you accept the practices described in this policy.

1. Data controller

Personal data is processed by the team that operates the Service, acting as data controller. Contact: [email protected].

2. Data we process

2.1. Using the Service without an account

When you simply browse the site, or use the app without signing in, we do not ask for anything that directly identifies you. Technically, your IP address, browser/device information, the pages you view and general usage statistics may be processed. Page-view counters are kept as totals; no individual user profile is built.

2.2. Membership

When you sign up, your name, email address and password are processed. The password is never stored as plain text; it is kept as an irreversible hash. An activation link is sent to your address so that the email address can be verified.

2.3. Favourite teams

The list of favourite teams you choose is stored against your account. It is used only to decide which matches you are notified about and to personalise the interface.

2.4. Notifications and device identifier

When you grant notification permission in the mobile app, a device token assigned to your device by Google Firebase Cloud Messaging is stored and linked to your account. This token is a device identifier; it contains no name, phone number or location. When you turn notifications off or uninstall the app, the record becomes invalid and we delete it.

2.5. Data we do not collect

Location, contacts, photos, microphone, camera, call history, the list of other apps on the device and the advertising ID are not collected. The app never requests these permissions.

3. Purposes of processing

We process data in order to operate and secure the Service, manage your membership account, send you match notifications about your favourite teams, measure usage statistics, improve the content and advertising experience, and meet legal obligations.

4. Cookies and advertising

The website uses cookies for functionality, measurement and advertising. Advertisements may be served through third-party providers, and those providers may use their own cookies. For details, see the Cookie Policy page.

No advertisements are shown in the mobile app and no advertising tracking takes place there.

5. Service providers

The following third parties process data only for the stated purpose and only to the extent necessary:

• Google Firebase Cloud Messaging — delivering notifications to your device (device token).
• Mailjet — sending email (email address and name).
• Google reCAPTCHA — bot protection on forms and login pages.
• Our hosting provider — server infrastructure.

Match, score and statistics data comes from an external sports data provider; your personal data is not sent to that provider.

Personal data is not sold for marketing purposes.

6. Retention period

Account data is kept for as long as your account remains open. When you delete your account, your name, email, password hash, favourite teams and device tokens are deleted. Non-identifiable aggregate statistics (for example, the total number of views of a page) may remain; that data cannot be linked back to you. Records subject to a statutory retention obligation are kept for the relevant period.

7. Deleting your account

You can have your account and the related data deleted at any time. How to do it and what gets deleted: the Account Deletion page.

8. Your rights under the KVKK

Under Article 11 of the KVKK you have the right to learn whether your personal data is being processed, to request information about it if it is, to learn the purpose of the processing, to request rectification or erasure, and to object to the processing. To exercise these rights, write to [email protected].

9. Children’s privacy

The Service is not directed at children and we do not knowingly collect personal data from anyone under 13. If we become aware that such data has been processed, we delete it.

10. Changes

This policy may be updated from time to time. The current version is always published on this page; for significant changes we notify members by email.