BMY GAMES
Privacy Policy
Last updated: 20 October 2026
This Privacy Policy explains how BMY Games handles personal data when you visit bmygames.com (the “Website”) or write to us by email, and the rights you have over that data.
1. Who we are
The Website is operated by Yekta Beştepe, an individual based in Istanbul, Türkiye, who makes mobile games under the name BMY Games (“BMY Games”, “we”, “us”, “our”).
Yekta Beştepe is the data controller for the personal data described in this policy under the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and, where it applies, the EU General Data Protection Regulation and the UK GDPR (together, the “GDPR”).
- Email: info@bmygames.com
- Website: bmygames.com
2. What this policy covers
This policy covers the Website and emails you send to us. It does not cover our games. Letter Saga has not been released yet. It will have its own privacy policy, published on this Website before release, describing what the app processes.
Websites and services run by others, such as app stores or your email provider, are covered by their own privacy policies.
3. Personal data we collect
3.1 When you visit the Website
Like any website, the server that delivers our pages automatically records technical information about each request in its log files:
- your IP address;
- the date and time of the request;
- the page or file requested and the server’s response;
- the referring page, if your browser sends it;
- your browser type and operating system (the “user agent”).
We do not use this information to identify you and we do not combine it with other data.
3.2 When you email us
If you write to us, we receive your email address, your name if it appears in your message, the content of your message and any attachments.
3.3 What we do not collect
The Website has no accounts, sign-up, contact forms or payments. It does not use cookies, browser local storage, analytics, advertising or tracking pixels, social media plugins or embedded third-party content. Fonts and images are served from our own server.
We do not ask for special categories of personal data, such as health information or identity documents. Please do not include them in your emails unless we ask for them to process a request under section 10.
4. Why we use it and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Delivering the Website, keeping it secure, and detecting and preventing abuse and attacks | Server log data | Our legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Reading and answering your emails | Email data | Our legitimate interests in responding to enquiries (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)). Where you ask us about entering into an agreement, steps taken at your request (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Complying with legal obligations and lawful requests from authorities | Server log and email data | Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
| Establishing, exercising or defending legal claims | Server log and email data | Our legitimate interests (GDPR Art. 6(1)(f)); necessity for establishing, exercising or protecting a right (KVKK Art. 5(2)(e)) |
We do not use your personal data for marketing, advertising or profiling. We make no decisions about you based solely on automated processing.
5. Cookies
The Website does not use cookies or similar technologies. Our Cookies Policy explains this in more detail and tells you what we will do if this ever changes.
6. Who we share it with
We do not sell or rent your personal data, and we do not share it for advertising. We share it only with:
- Our hosting and email provider, TürkTicaret.net, based in Türkiye. It hosts the Website and our business email and processes data on our behalf to provide those services.
- Public authorities, courts and enforcement offices, only where the law requires it and limited to what is requested.
- Professional advisers, such as lawyers, if needed to establish, exercise or defend a legal claim. They are bound by confidentiality.
7. Where your data is processed
The Website and our email are hosted in Türkiye, and we process your personal data in Türkiye. We do not transfer it to other countries.
If you visit from outside Türkiye or write to us from abroad, your data reaches us in Türkiye. If you are in the European Economic Area or the United Kingdom, Türkiye is not covered by an adequacy decision. We collect this data directly from you as the controller and protect it as described in this policy.
When you write to us, your own email provider also processes your message, possibly in another country. That processing is covered by your provider’s privacy policy.
8. How long we keep it
- Server logs are kept by our hosting provider for security and to meet its legal obligations. Under Turkish Law No. 5651, hosting providers keep traffic data for at least one and at most two years.
- Emails are kept for as long as needed to deal with your enquiry and any follow-up, and no longer than two years after our last exchange, unless we need them longer to comply with the law or to establish, exercise or defend a legal claim.
At the end of these periods, personal data is deleted, destroyed or anonymised.
9. Security
The Website is served only over encrypted HTTPS connections, with HTTP Strict Transport Security and a strict Content Security Policy. It loads no third-party scripts. Access to the hosting and email accounts is restricted and protected by passwords. We take technical and organisational measures appropriate to the limited data we handle, but no method of transmission or storage is completely secure.
If a personal data breach occurs, we will notify the competent authority and, where required, the people affected, within the time limits set by law.
10. Your rights
Depending on where you live, you have the right to:
- learn whether we process your personal data and, if so, request information about it and a copy of it;
- learn the purpose of the processing and whether the data is used for that purpose;
- know the third parties, in Türkiye or abroad, to whom it is disclosed;
- have inaccurate or incomplete data corrected;
- have your data deleted or destroyed;
- ask that third parties who received your data are told about a correction or deletion;
- restrict or object to processing, including processing based on our legitimate interests;
- receive data you provided to us in a portable format (GDPR);
- object to a result that is to your detriment and comes exclusively from automated analysis;
- withdraw any consent you have given, without affecting earlier processing;
- claim compensation if you suffer damage because your data was processed unlawfully.
To use these rights, write to info@bmygames.com. We respond free of charge, without undue delay and within 30 days at the latest. We may ask for information to confirm your identity before acting on a request.
You can also complain to a data protection authority: in Türkiye, the Personal Data Protection Board (KVKK); in the EEA or the UK, the supervisory authority where you live or work, or where an alleged infringement took place.
11. Children
The Website is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 13, please do not send us personal information. If you are between 13 and 18, please ask a parent or guardian before you write to us.
If we learn that we have received personal data from a child under 13 without the consent of a parent or guardian, we will delete it. Parents and guardians can contact us at info@bmygames.com.
12. Information notice for users in Türkiye (KVKK)
This section is our information notice under Article 10 of KVKK and the Communiqué on Procedures and Principles to be Followed in Fulfilment of the Obligation to Inform.
- Data controller: Yekta Beştepe (BMY Games), info@bmygames.com.
- Purposes and legal grounds: as set out in section 4, based on Article 5(2)(c), (ç), (e) and (f) of KVKK.
- Method of collection: server log data is collected automatically by electronic means when you visit the Website. Email data is collected partly automatically by electronic means when you choose to write to us.
- Recipients: as set out in section 6, within the limits of Article 8 of KVKK. We do not transfer personal data abroad (Article 9 of KVKK).
- Your rights: the rights listed in Article 11 of KVKK, summarised in section 10.
How to apply. Under the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send your request to info@bmygames.com:
- signed with a secure electronic signature or mobile signature; or
- from an email address you have previously given us and that is registered in our records.
If you prefer to apply in writing with a wet signature, email us and we will give you a postal address. Your application must include your name, surname and signature (for written applications), Turkish ID number (or nationality and passport or ID number if you are not a Turkish citizen), your residence or workplace address for notifications, your email address, phone or fax number if any, and the subject of your request.
We will conclude your request free of charge as soon as possible and within 30 days at the latest. If the process involves an additional cost, we may charge the fee set by the Personal Data Protection Board. If your request is rejected, you find the answer insufficient or we do not answer in time, you may complain to the Board within 30 days of learning our answer and in any case within 60 days of your application.
You can request a Turkish version of this notice from info@bmygames.com.
13. Do Not Track and sale of personal data
The Website does not track visitors over time or across other websites, so it treats every visit the same way whether or not your browser sends a “Do Not Track” or Global Privacy Control signal. We do not sell or share personal information, as those terms are defined in US state privacy laws.
14. Links to other websites
The Website may link to websites we do not operate, such as app stores or the Personal Data Protection Board. We are not responsible for their content or privacy practices. Please read their privacy policies before giving them personal data.
15. Changes to this policy
We may update this policy when the Website, our practices or the law change. The current version is always published on this page with the date of the latest update at the top. If we make a significant change, such as starting to use cookies or a new service provider, we will also highlight it on this page.
16. Contact us
For questions about this policy or your personal data, write to info@bmygames.com.
See also our Terms & Conditions and Cookies Policy.
Back to home