Legal

Privacy Policy

Which personal data we process, why we process it, how long we keep it, and how you exercise your rights.

Last updated: July 28, 2026

This translation is not official

The binding version of this document is the Turkish one. The English text below is provided for information only; in any dispute the Turkish version prevails.

  1. 01Data Controller

    Under Turkish Personal Data Protection Law no. 6698 ("KVKK"), the data controller is [Ticari unvan]. Your personal data is processed within the framework set out in this policy for the services provided through 724boost.com.

    Contact: destek@724boost.com — [Açık adres]

  2. 02Personal Data We Process

    The following data is processed in order to provide the service:

    • Identity: the username you choose when registering.
    • Contact: your email address.
    • Customer transactions: order history, the game and rank details you select, order notes, support correspondence.
    • Transaction security: sign-in records, session details, IP address, browser and device information, and the irreversible hash of your password.
    • Financial: the transaction reference returned by the payment provider and the order amount. We never see or store your card number, expiry date or CVC.

    Game account credentials are processed only for as long as the order requires and are deleted once the order is complete. We recommend changing your game account password when the service ends.

  3. 03Purposes of Processing

    • Creating your membership record and keeping your session alive.
    • Taking the order, routing it to a booster and completing it.
    • Running payment and invoicing processes.
    • Handling support requests and resolving complaints.
    • Preventing fraud, abuse and unauthorised access.
    • Meeting retention and disclosure obligations arising from legislation.

  4. 04Legal Bases

    Your personal data is processed under article 5 of the KVKK on the following bases:

    • Directly related to the conclusion or performance of a contract (art. 5/2-c): membership, order and payment processes.
    • Compliance with a legal obligation (art. 5/2-ç): records required by tax and commercial legislation.
    • Legitimate interest (art. 5/2-f): security logs, detection of abuse and improvement of service quality.
    • Explicit consent: taken only for non-essential notifications and marketing messages; you may withdraw it at any time.

  5. 05Transfer of Data

    Your data is shared, on a limited basis and only in order to provide the service, with:

    • Hosting and database providers (infrastructure may be located abroad).
    • Payment institutions and banks (only the information needed to complete the payment).
    • Our live-support provider (the name, e-mail and message you send when you start a chat; its servers are located abroad).
    • The booster performing the order (only the game details the order requires; your identity and contact details are not shared).
    • Authorised public bodies (where required by legislation).

    Transfers abroad are made under article 9 of the KVKK with the necessary security measures in place. Your data is never sold to third parties for advertising.

  6. 06Retention Periods

    • Membership data: for as long as the membership lasts, plus 1 year after the account is closed.
    • Order and invoice records: 10 years, as required by legislation.
    • Session and security logs: 1 year.
    • Support correspondence: 2 years from the closure of the request.
    • Game account credentials: deleted as soon as the order is completed.

    Once the periods expire, the data is deleted, destroyed or anonymised.

  7. 07Data Security

    Your password is never stored in plain text; it is hashed irreversibly with an industry-standard key derivation function (scrypt), and comparisons are made using a method resistant to timing attacks.

    The session cookie is written httpOnly and cannot be read by JavaScript in the browser. The database holds only a hash of the session token, never the token itself.

    The site and all data traffic are encrypted over HTTPS. Access rights are kept to a minimum to reduce the risk of unauthorised access.

  8. 08Cookies

    The site uses only the session cookie that is strictly necessary for the service to work. See the Cookie Policy page for details.

  9. 09Your Rights Under the KVKK

    Under article 11 of the KVKK you have the right to:

    • Learn whether your personal data is processed and, if so, request information about it.
    • Learn the purpose of processing and whether the data is used in line with that purpose.
    • Know the third parties in Turkey or abroad to whom the data has been transferred.
    • Request correction of incomplete or inaccurately processed data.
    • Request erasure or destruction of the data within the conditions set out in legislation.
    • Request that correction, erasure and destruction be notified to the third parties to whom the data was transferred.
    • Object to an adverse outcome reached solely through automated analysis.
    • Claim compensation if you suffer loss because of unlawful processing.

  10. 10How to Apply

    Send requests relating to your rights, together with documents proving your identity, to destek@724boost.com or in writing to [Açık adres].

    Requests are concluded free of charge as soon as practicable and within 30 days at the latest. If the process incurs an additional cost, the fee set out in the Personal Data Protection Board's tariff may be charged.

  11. 11Changes to This Policy

    This policy may be updated in line with changes in legislation or in our services. The current text is published on this page and the date of the last update is shown at the top.

This document applies to the services provided through 724boost.com. For questions, write to destek@724boost.com.