Privacy Policy
Last Updated: August 16, 2026
Emtek Grup Teknoloji Anonim Şirketi, operating under the Zycun brand (“Zycun”, “we”, “us”, or “our”), respects your privacy and is committed to protecting the information of users who access or use our websites, mobile applications, games, and related services.
This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use our websites, mobile games, applications, and related services (collectively, the “Services”).
By accessing or using our Services, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
The information we collect depends on the Service you use and how you interact with it.
Information Collected Automatically
When you use our Services, certain information may be collected automatically, including:
- Device type, model, and manufacturer
- Operating system and version
- Application or game version
- IP address
- Country or approximate geographic region
- Device identifiers and application identifiers
- Advertising identifiers, where permitted
- Language, time zone, and device settings
- Game sessions and session duration
- Gameplay events, progression, and interactions
- Crash reports and error information
- Performance and diagnostic information
- Installation and attribution information
- Advertising impressions, clicks, and related interactions, where applicable
- Purchase-related events and transaction status
We may also generate internal identifiers to distinguish installations, game sessions, devices, or users.
Information You Provide
You may voluntarily provide information to us when you contact us, request customer support, submit a privacy request, or otherwise communicate with us.
This information may include:
- Your email address
- Information included in your support request or correspondence
- Screenshots or diagnostic information you choose to provide
- Purchase or transaction information you choose to provide
- Other information you voluntarily provide to us
How Information Is Collected
Information is collected electronically through our Services — automatically via our applications, games, websites, and the technologies described in this Privacy Policy, and directly from you when you communicate with us or submit a request.
2. How We Use Information
We may use information collected through our Services to:
- Provide, maintain, and operate our Services
- Save and synchronize game progress where applicable
- Provide gameplay features and functionality
- Understand how users interact with our games and applications
- Improve gameplay, balancing, performance, and user experience
- Diagnose crashes, errors, and technical problems
- Detect and prevent fraud, abuse, cheating, and security threats
- Measure application installations and advertising performance
- Display and measure advertisements where applicable
- Process, verify, and restore in-app purchases
- Provide customer support and respond to requests
- Develop new features, games, products, and services
- Maintain the security and integrity of our Services
- Comply with applicable legal and regulatory obligations
We may use aggregated or anonymized information for analytics, research, product development, and business purposes where such information can no longer reasonably be associated with an identifiable individual.
3. Legal Bases for Processing
Where laws such as the EU/UK General Data Protection Regulation (“GDPR”) or the Turkish Law on the Protection of Personal Data No. 6698 (“KVKK”) apply, we process personal information for the following purposes and on the following legal bases:
| Purpose | Data Categories | Legal Bases |
|---|---|---|
| Providing and managing our games and applications | Gameplay and engagement data; internal identifiers; account and contact information where applicable | Performance of a contract |
| In-app purchase validation and restoration | Transaction data; device and technical data | Performance of a contract; legal obligation |
| Advertising and monetization | Advertising identifiers; IP address; advertising interaction data; consent preferences | Consent where required for personalized advertising or tracking; legitimate interests where permitted for contextual advertising, measurement, security, and advertising fraud prevention; legal obligation for records of consent |
| Analytics and product improvement | Internal identifiers; gameplay data; device and technical data | Consent where required for optional analytics; legitimate interests where permitted for service measurement, product improvement, and aggregated analytics |
| Stability and crash monitoring | Installation identifiers; device and technical data; crash and diagnostic data | Legitimate interest |
| User acquisition and marketing attribution | Advertising identifiers; installation and campaign attribution data | Consent where required for access to advertising identifiers or cross-service tracking; legitimate interests where permitted for aggregated campaign measurement and fraud prevention |
| Push notifications | Installation identifiers; notification tokens | Consent (device permission) |
| Customer support and privacy requests | Contact information; correspondence; information you provide | Performance of a contract; legitimate interest; legal obligation |
| Security, fraud, abuse, and cheating prevention | Device and technical data; internal identifiers; gameplay data | Legitimate interest; legal obligation |
You may withdraw consent at any time where processing is based on consent.
Under the KVKK, providing requested game or account functionality may rely on the establishment or performance of a contract; security, fraud prevention, crash diagnosis, and strictly necessary service measurement may rely on our legitimate interests where your fundamental rights and freedoms are not harmed; legally required records rely on compliance with legal obligations; and personalized advertising, advertising identifiers, cross-service tracking, and non-essential analytics rely on your explicit consent where no other processing condition applies.
4. Analytics, Advertising and Attribution
Our Services may use first-party and third-party technologies for analytics, advertising, attribution, crash reporting, performance monitoring, and similar purposes.
Depending on the Service and the permissions available on your device, these technologies may process information such as device identifiers, advertising identifiers, IP address, application usage, gameplay events, advertising interactions, installation information, and crash or diagnostic data.
The specific technologies and service providers used may vary between our games and applications.
Where required by applicable law or platform rules, we request permission or obtain consent before collecting or using information for advertising or tracking purposes.
On Apple devices, activities that are considered tracking under Apple’s App Tracking Transparency framework will only occur where the required permission has been obtained.
You may also be able to restrict certain advertising or tracking activities through your device settings and privacy controls, including resetting or deleting your advertising identifier on iOS and Android.
5. In-App Purchases
Our games and applications may offer in-app purchases.
Payments are processed by the platform through which you obtained the application, such as the Apple App Store or Google Play. Zycun does not directly receive or store your complete payment card information.
We may receive limited transaction information, such as transaction identifiers, product identifiers, purchase status, and related information necessary to verify purchases, provide purchased content, restore purchases, prevent fraud, and provide customer support.
6. Third-Party Service Providers
We may use third-party service providers to help us operate, maintain, analyze, secure, monetize, and improve our Services.
These providers may perform services including:
- Cloud hosting and infrastructure
- Analytics and performance measurement
- Crash reporting and diagnostics
- Advertising and advertising measurement
- Mobile attribution
- Authentication
- Push notifications
- Customer support
- Purchase processing and verification
- Fraud prevention and security
Depending on the features enabled in the relevant game or application, our current service providers include:
- Google LLC — Firebase (including Firebase Analytics, Authentication, Cloud Firestore, Remote Config, and Cloud Messaging, and Crashlytics where enabled) — see Google’s Privacy Policy and Firebase Privacy and Security
- Apple Inc. — App Store distribution, in-app purchases, and related platform services — see Apple’s Privacy Policy
- Google Play — application distribution, in-app purchases, and related platform services — see Google’s Privacy Policy
The specific providers vary by game and application. Where a game uses additional partners — for example advertising networks, mediation platforms, or attribution providers — those partners are disclosed where required, including in the relevant app store listing (such as the Google Play Data safety section or the Apple App Store privacy details) or in notices presented within the game.
These service providers may process information on our behalf or, in some circumstances, according to their own privacy policies and terms.
7. How We Share Information
We may disclose information:
- To service providers that help us operate and improve our Services
- When required by applicable law, regulation, legal process, or governmental request
- When reasonably necessary to protect the rights, property, security, or safety of Zycun, our users, or others
- To investigate or prevent fraud, abuse, cheating, security incidents, or illegal activity
- In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar corporate transaction
- With your consent or at your direction
We do not sell personal information in exchange for monetary payment.
However, certain advertising or analytics activities may be considered “selling”, “sharing”, “targeted advertising”, or similar concepts under privacy laws in certain jurisdictions. Where applicable, we provide users with the rights and choices required by those laws, including the opt-out choices described in Section 12.
8. International Data Transfers
Emtek Grup Teknoloji Anonim Şirketi is based in Türkiye. Our Services, infrastructure, and service providers may operate in Türkiye and other countries.
As a result, information may be transferred to, processed in, or stored in countries other than the country in which you reside. Data protection laws in those countries may differ from those in your jurisdiction.
We transfer personal information internationally only where permitted by applicable law. Where a transfer requires additional safeguards, the applicable mechanism may include an adequacy decision, standard contractual clauses, a binding corporate arrangement, an approved certification, or another transfer mechanism or exception recognized under applicable law, including the KVKK’s rules on cross-border transfers.
9. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing our Services, maintaining security, preventing fraud, complying with legal obligations, resolving disputes, and enforcing our agreements.
Retention depends on the purpose of processing, the Service involved, whether an account remains active, provider settings, and applicable legal requirements. In general:
- Account and game progression data: retained while needed to provide the relevant Service and for a reasonable period after inactivity, unless deleted earlier at your request or retained longer where permitted or required, for example to preserve account-linked purchases.
- Purchase and transaction records: retained for the period required by applicable accounting, tax, consumer protection, and commercial legislation, and then deleted, anonymized, or archived with restricted use.
- Analytics, crash, and diagnostic data: retained according to the settings of the relevant Service and provider and only for as long as reasonably necessary for measurement, security, troubleshooting, and product improvement, after which it is deleted or anonymized.
- Support correspondence and privacy requests: retained as long as needed to respond, document the request, resolve disputes, and comply with applicable legal obligations.
- Other personal information: only for the time strictly necessary to achieve the relevant purpose or to comply with our legal obligations.
Aggregated or anonymized information that can no longer reasonably identify an individual may be retained for longer periods.
10. Data Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.
However, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure.
11. Children’s Privacy
Our Services are generally offered to a broad audience. Some games may be suitable for different age groups based on their content and the age rating assigned by the relevant application store.
We do not knowingly collect personal information from children in violation of applicable law, and we do not knowingly serve personalized advertising to users we know require parental consent unless the legally required permission and safeguards are in place.
Where a Service is directed to children or we know that a user is below the applicable digital consent age, we may restrict data collection, disable personalized advertising or tracking, apply an age gate, obtain verifiable parental permission where required, or provide an age-appropriate version of the Service.
If you are a parent or legal guardian and believe that a child has provided personal information to us inappropriately, please contact us. We will investigate the request and take appropriate action, including deletion where required.
12. Your Privacy Rights
Depending on your country or region, applicable privacy laws may provide you with certain rights regarding your personal information.
These rights may include the right to:
- Request access to personal information we process about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal information
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
- Request information about how your personal information is processed
- Request a copy or portability of certain personal information
- Opt out of certain advertising, sharing, or tracking activities where applicable
The availability of these rights depends on the laws applicable to you.
To exercise a privacy right, please contact us at info@zycun.com. We may request reasonable information to verify your identity and locate the relevant information before processing your request. We respond within the timeframes required by applicable law.
Where applicable law permits, you may also submit a request through an authorized agent acting on your behalf. We may require proof of the agent’s authorization and may still need to verify your identity directly.
You can stop receiving push notifications at any time through your device’s notification settings, and you can opt out of any marketing communications by using the opt-out mechanism included in the communication or by contacting us.
You also have the right to lodge a complaint with a supervisory authority. In the EEA and the UK, this is your local data protection authority; in Türkiye, it is the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
Residents of US States
If you reside in a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Virginia, Texas, or Utah), you may have the right to know, access, correct, and delete personal information, to obtain a portable copy, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising.
We do not sell your personal information in exchange for money. However, disclosing identifiers and device information to advertising partners to provide personalized advertising may be considered a “sale”, “sharing”, or “targeted advertising” under certain US state privacy laws. You can opt out through:
- The settings or consent prompts of our games and applications, where available
- Your iOS or Android device advertising settings (for example, Apple’s App Tracking Transparency prompt, or deleting or resetting your advertising identifier on Android)
- The cookie controls described in our Cookie Policy for our websites
- Emailing us at info@zycun.com with the subject line “Do Not Sell or Share My Personal Information”
We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit under California law. If this changes, we will provide the required notice and controls. We do not knowingly sell or share the personal information of consumers under 16 years of age.
You will not be discriminated against for exercising your rights. If we deny your request, you may appeal our decision by replying to our response or by contacting us at info@zycun.com with “Privacy Appeal” in the subject line. We will review your appeal and respond within the timeframe required by applicable law. If your appeal is denied, we will provide information on how to contact the relevant state Attorney General where required.
13. Additional Information for Türkiye (KVKK)
For users in Türkiye, Emtek Grup Teknoloji Anonim Şirketi acts as the data controller (veri sorumlusu) within the meaning of the Law on the Protection of Personal Data No. 6698 (“KVKK”).
Your personal data is collected through the electronic channels described in Section 1 and processed for the purposes described in Section 2, based on the legal grounds set out in Article 5 of the KVKK as summarized in Section 3. Your personal data may be transferred to the recipients described in Sections 6 and 7, including abroad in accordance with the KVKK’s rules on cross-border transfers.
Under Article 11 of the KVKK, you have the right to learn whether your personal data is processed; to request information about such processing; to learn the purpose of processing and whether the data is used in line with that purpose; to know the third parties to whom the data is transferred, in Türkiye or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction of the data under the conditions set out in the KVKK; to request that these actions be notified to third parties to whom the data has been transferred; to object to a result that arises against you through the analysis of the data exclusively by automated systems; and to claim compensation for damages arising from unlawful processing.
You may submit your KVKK requests in writing to our address in Section 18 or through another application method permitted by the Communiqué on the Procedures and Principles of Application to the Data Controller. You may contact us at info@zycun.com for assistance; where permitted by the Communiqué, an application may also be submitted electronically using an email address previously notified to and registered with us or another accepted electronic method. We will respond as soon as possible and no later than thirty (30) days from receipt of the request, as required by Article 13 of the KVKK. Applications are generally handled free of charge, but a fee may be charged where the response creates an additional cost and the applicable tariff permits it. If your request is refused or you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).
14. Data Deletion
You may request deletion of personal information associated with your use of our Services.
Instructions for submitting a deletion request are available on our Data Deletion page.
You may also contact us directly at info@zycun.com.
Some information may be retained where required or permitted by law, including for security, fraud prevention, dispute resolution, financial recordkeeping, or compliance purposes.
15. Cookies and Similar Technologies
Our websites may use cookies and similar technologies to provide website functionality, remember preferences, understand website usage, maintain security, and improve our Services.
For more information about how we use cookies and the choices available to you, please see our Cookie Policy.
16. Third-Party Links and Services
Our Services may contain links to websites, applications, stores, advertisements, or services operated by third parties.
We are not responsible for the privacy practices, security, or content of third-party services. We encourage you to review their privacy policies before providing personal information or using their services.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, technologies, legal requirements, or business practices.
When we update this Privacy Policy, we will revise the “Last Updated” date at the top of this page. Where required, we may provide additional notice of material changes through our Services or by other appropriate means.
18. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, you can contact us at:
Emtek Grup Teknoloji Anonim Şirketi (Zycun)
Zübeyde Hanım Mah. Fatih Cad. No:31/219
Altındağ, Ankara
Türkiye
Email: info@zycun.com
Website: www.zycun.com