Legal

Privacy notice on the processing of personal data

Last updated: 15 November 2026

Draft: this text is awaiting legal review and may change. The Turkish version prevails.

This notice explains, under Article 10 of the Turkish Personal Data Protection Law No. 6698 ("KVKK"), how your personal data is processed when you use Omega Chess (omegachess.com.tr).

1. Data controller

Data controller: Talut Yavuz (Marmaris, Muğla, Turkey). Contact: omegachesstr@gmail.com.

2. Personal data we process

• Identity and contact: full name, email address, phone number (a parent's number if you are under 18).
• Account: an irreversible hash of your password (the password itself is never stored), your Google account ID if you sign in with Google, your language, session data (IP address, browser information, session duration).
• Profile statements: age (18+) statement and parental consent, student statement, Marmaris resident or visitor statement, dates of your consents.
• Games and tournaments: games and moves you play, move times, records of switching tabs or windows during a game, rating, tournament registrations, results, standings and badges.
• Deposit (in-person tournaments only): amount, payment method (bank transfer or cash), reference code, approval and refund records. Online tournaments are free.
• Prize handover: handover record (recipient, date) and an optional handover photo.
• Fair-play review: player reports, review notes and decisions.
• Notifications: your browser's push subscription if you turned notifications on.
• Security: IP address and request counts to prevent abuse, an audit log of administrator actions.

3. Purposes and legal grounds

• Creating and managing your account, registering you for tournaments, running games, calculating results and ratings, handing over prizes: establishment and performance of a contract (KVKK Art. 5/2-c).
• Showing your name, rating, games, results and badges publicly on tournament, leaderboard and player pages; making tournament games available to spectators and the live stream (YouTube) with a delay: performance of a contract by the nature of the tournament service (Art. 5/2-c) and legitimate interest (Art. 5/2-f).
• Fair play (move times, tab-switch records, reports) and security (IP address, rate limiting, audit log): legitimate interest (Art. 5/2-f) and legal obligation (Art. 5/2-ç).
• Deposit and refund records: legal obligation (Art. 5/2-ç) and performance of a contract (Art. 5/2-c).
• Transferring data to service providers abroad: your explicit consent (KVKK Art. 9), asked for separately on your profile page.
• Registration, payment approval, tournament reminder and result emails and notifications: performance of a contract (Art. 5/2-c).
• Tournament announcements and promotional emails: only with your explicit consent (Art. 5/1); your consent is recorded in the Turkish Message Management System (İYS). The consent text is separate and you can withdraw your consent at any time.

4. How we collect data

Data is collected electronically: from the sign-up and profile forms, from Google when you sign in with Google, from your browser during games (moves, times, tab switches), and from records entered by the tournament director for payments and prize handovers.

5. Transfers, including abroad

Data is shared with the following service providers so the service can run. Their servers may be located abroad (USA and EU):

• Cloudflare, Inc.: hosting, database and security.
• Resend: sending email (your email address and the email content).
• Google LLC: authentication, only if you sign in with Google.
• Your browser's push service (Google, Apple or Mozilla): only if you turned notifications on, encrypted notification content.
• YouTube (Google): only if you start the stream player on a tournament page.

Transfers abroad rely on your explicit consent under KVKK Article 9. Because the site runs on these providers, entering tournaments requires this consent; if you withdraw it you can delete your account. Data may be disclosed to authorised public authorities when legally required.

No personal data is shared with sponsors; sponsor reports contain aggregate numbers. If you win a cash prize in a sponsored tournament, your name and any handover photo appear in that sponsor's report as proof of the handover.

6. Retention

• Account data is kept while your account is open. If you delete your account, your personal data is deleted within 30 days; tournament results and games are kept anonymously with your name removed.
• Deposit, refund and prize handover records are kept for the periods required by law.
• Fair-play review records are kept for at most 2 years after the tournament.
• Session and security records are kept for the session and short security periods.

7. Players under 18

Players under 18 can open an account with parental consent. In that case the phone field holds the parent's number.

8. Your rights (KVKK Article 11)

• To learn whether your personal data is processed and to request information about it,
• to learn the purpose of processing and whether it is used accordingly,
• to know the third parties it is transferred to in Turkey or abroad,
• to request correction if it is incomplete or inaccurate,
• to request deletion or destruction under the conditions of KVKK Article 7,
• to request that corrections and deletions be notified to third parties it was transferred to,
• to object to a result against you that arises solely from automated analysis,
• to claim compensation if you suffer damage from unlawful processing.

9. How to apply

Send your request from the email address registered in the system to omegachesstr@gmail.com. Requests are answered free of charge within 30 days at the latest. You can also delete your account from your profile page.