Privacy & Data Protection Notice

This notice explains how MYSAKIN LIMITED (United Kingdom, company number 17373450, address Suite 11078, 5 Brayford Square, London, E1 0SG, United Kingdom) processes personal data on GrandTheftTürkiye. We are the data controller. This is an information notice under Turkish Law No. 6698 (KVKK) for Turkish users and a privacy notice under applicable UK GDPR/GDPR rules.

1. Data we process

Accounts: username, display name, email, irreversible password hash (Argon2id), chosen avatar or uploaded photo.
Optional profile details: bio, website, GitHub username and Discord handle.
Linked accounts: SteamID and public Steam name; Discord identity and name. We do not receive or store your provider password or access tokens.
Content: threads, replies, likes, votes, bookmarks, follows, reports and support tickets.
Security and activity: IP address, browser information, login/registration attempts and timestamps, last seen time.
Advertising: ad text, image, destination, payment amount/status and Stripe payment identifiers. Stripe receives card details; we do not.
Rewards: ranking, score and ad credit usage. New rewards do not collect IBAN or bank account holder information.

2. Purposes and legal grounds

Providing accounts and forum services: performance of a contract (KVKK Article 5/2-c; GDPR Article 6/1-b).
Security, spam/abuse prevention, rate limiting and moderation: legitimate interests and legal obligations (including applicable Law No. 5651 requirements).
Advertising and reward ad delivery: contract performance; accounting and tax records: legal obligations.
Steam/Discord linking and role synchronisation: performance of the service you request.

We do not send marketing email or sell data or share it with advertising networks. No third-party analytics, tracking or advertising cookies are used.

3. Recipients and international transfers

Stripe: information needed for advertising payments and refunds.
Discord: identity for linked roles and summaries of forum events sent to our channels.
Hosting/infrastructure providers: server, backups and any CDN, to operate the service.
Public authorities: where disclosure is legally required.

Some providers operate outside Türkiye; the controller is incorporated in the UK and Stripe/Discord infrastructure may be abroad. International transfers must meet applicable KVKK Article 9 and other relevant safeguards.

4. Retention

Account details remain while the account is open. On deletion, personal details are deleted or anonymised; posts remain under “Deleted member”.
Security, payment, invoice and accounting records are retained for the periods required by applicable law.
Bank details from legacy cash requests are removed when the reward is paid or cancelled. New rewards do not collect these details.

5. Your rights

Subject to applicable law, you may request information about processing, access, correction or deletion, learn recipients and purposes, object to automated decisions or processing, and seek remedies. Additional rights under applicable UK GDPR/GDPR may include portability and restriction. Contact [email protected]. Identity verification may be required; requests are handled within applicable statutory periods.

6. Cookies and local storage

The essential session cookie keeps you logged in and secures requests. The gtt-lang cookie remembers your language for up to one year. Theme preference and the daily advertising popup setting use browser local storage. These are not used for cross-site tracking. You can clear them through your browser settings.

7. Security

We use HTTPS, Argon2id password hashing, reprocessed uploads, audit logs and rate limits. No system can be guaranteed completely secure; breaches are handled according to applicable notification requirements.

8. Under-18 users

The site serves a general audience. You must be at least 18 to purchase advertising.

9. Contact and updates

We may update this notice and announce material changes on the site. Contact [email protected].