Decree
Privacy Policy
Last updated:
This policy explains how personal data is processed through the www.worldofmobileko.com website and the WOMKO mobile game (the "Service"), in line with the Turkish Personal Data Protection Law (KVKK, Law No. 6698) and the EU General Data Protection Regulation (GDPR).
Data controller
ISTIRAP GAMES
Email: [email protected]
What we process
- Account data: account name, email address, password (kept only on the game server, never copied to the site), registration date, account status.
- Game data: character names, level, nation, clan, in-game points (NP), Cash balance, safe-device record, the device ID and model generated by the game itself.
- Technical data: IP address, browser type, login time, session ID, security and error logs.
- Contact data: the name, email and message you provide in the contact form and support tickets.
We do not process payment information; Cash is loaded only with E-pins, which are sold by third-party outlets.
Why and on what basis
| Purpose | Legal basis |
|---|---|
| Account creation, login, password reset, email verification | Performance of a contract (KVKK art. 5/2-c, GDPR art. 6/1-b) |
| Providing the game, rankings, clan and king systems | Performance of a contract |
| Preventing cheating, fraud and abuse; account security | Legitimate interest (KVKK art. 5/2-f, GDPR art. 6/1-f) |
| Answering support tickets | Performance of a contract, legitimate interest |
| Legal obligations (record keeping, official requests) | Legal obligation (KVKK art. 5/2-ç, GDPR art. 6/1-c) |
| Newsletters and promotional emails | Explicit consent (only if you opted in; revocable at any time) |
Who we share it with
- Infrastructure providers: Cloudflare (content delivery, firewall, bot protection – Turnstile), the transactional email provider, hosting.
- App store: downloads and updates through Google Play are subject to Google's own policies.
- Authorities: competent bodies where legally required.
Your personal data is never sold or handed to third parties for advertising.
How long we keep it
- Account and game data: while the account exists; deleted after the 30-day grace period following a deletion request.
- Security and access logs: at most 12 months.
- Contact and support records: 24 months after the last message.
- Records subject to statutory retention: for the period the law requires.
Your rights
Under KVKK art. 11 and GDPR art. 15-22 you may access, rectify and erase your data, restrict or object to processing, and request portability. Send requests to [email protected]; we answer within 30 days. Users in the European Union may also lodge a complaint with their supervisory authority. To delete your account and data, follow the steps on the "Account and data deletion" page.
Children
The Service is not intended for children under 13. If we learn that data of a child under 13 has been processed, we delete the account and the data.
Cookies
See the "Cookie policy" page for the cookies we use and your choices.
Security
Data travels over encrypted connections (HTTPS); access follows the least-privilege principle; passwords are never copied to the site or sent by email. Password storage is being strengthened together with the game server.
Changes
When this policy changes, the new version is published on this page with its update date. Significant changes are also announced.
— WOMKO