← Back to Home

KVKK Information Notice

Last Updated: January 26, 2026

Information Notice for Data Subjects under Turkish Personal Data Protection Law No. 6698 (“KVKK”)

1. Identity of the Data Controller

Under the KVKK, your personal data may be processed by Rocky Affiliates as data controller within the scope described below.

Data ControllerRocky Affiliates
Websiterockyaffiliates.com
Emailinfo@rockyaffiliates.com
Business ActivityiGaming solutions and services

2. Personal Data and Purposes

CategoryDataPurpose
IdentityFull nameCommunication, verification, and service delivery
ContactEmail, phone, and addressCommunication, notices, and service delivery
Customer TransactionsRequests, complaints, and support recordsCustomer service and issue resolution
Transaction SecurityIP address, cookies, and logsSecurity, fraud prevention, and system protection
CommercialCompany and business informationPartnership evaluation and proposals
FinancialPayment and invoice informationPayments, accounting, and invoicing
LegalContract details and signaturesContract management and legal procedures

3. Conditions for Processing

Your data is processed on one or more grounds set out in Articles 5 and 6 of the KVKK.

3.1. Explicit Consent

3.2. Expressly Provided by Law

3.3. Contractual Necessity

3.4. Legitimate Interests

4. Transfers of Personal Data

In line with Articles 8 and 9 of the KVKK, data may be shared where necessary with service providers, business partners, judicial or regulatory authorities, and auditors. International transfers rely on adequate protection, appropriate safeguards, regulatory approval, or explicit consent as applicable.

Important: Data may be transferred to the United States and European Union countries through services such as Google Analytics.

5. Collection Methods

6. Your Rights under the KVKK

RightDescription
ConfirmationLearn whether your personal data is processed
AccessRequest information about processed data
PurposeLearn the purpose and whether data is used accordingly
RecipientsLearn the third parties to whom data is transferred
CorrectionRequest correction of incomplete or inaccurate data
Deletion/DestructionRequest deletion or destruction where legal conditions are met
NotificationRequest notification of corrections or deletion to recipients
ObjectionObject to an adverse result produced solely by automated analysis
CompensationClaim compensation for damage caused by unlawful processing

7. Application Procedure

You may exercise your rights by signed secure email, the website contact form, a notary, or registered mail. Include your full name, identity or passport number, contact address, and the subject of your request.

Applications are concluded within 30 days at the latest. A fee based on the authority’s tariff may apply if the request creates an additional cost.

8. Data Security

9. Breach Notification

If personal data is obtained unlawfully by others, affected individuals and the Turkish Personal Data Protection Authority will be notified without undue delay.

10. Retention and Disposal

Expired data is securely and irreversibly deleted from digital systems or destroyed through appropriate physical disposal methods.

Data TypeRetentionBasis
Commercial records10 yearsTurkish Commercial Code
Invoices and financial records10 yearsTax Procedure Law
Contact records2 yearsPeriod required by the purpose
Cookie data2 hours – 2 yearsDepending on cookie type
Web logs1 yearInformation security

11. Changes

This notice may be updated due to legal or policy changes. The current version is published on this page.

12. Contact

For questions or requests under the KVKK: info@rockyaffiliates.com