RG Technology

PERSONAL DATA PROTECTION LAW NO. 6698 · 27 AUGUST 2026

KVKK Information Notice

This notice explains who processes your personal data, for which purposes and legal grounds, by which methods, and the rights available to you.

1. Identity of the data controller

Data controller: RG RESTORANT GIDA VE PAZARLAMA LİMİTED ŞİRKETİ(RG Technology). MERSIS No: 0735230059900001, Trade Registry No: 1102427. Address: Habibler Mah. A-1 Cad. B No: 21-23 İç Kapı No: 13, Sultangazi / Istanbul / Türkiye.

This notice covers website visitors, support/data-subject applicants and users of the World Of Lighta mobile game.

2. Categories of personal data

Identity and profileName if shared in communication; player display name, Unity/platform player ID, avatar, country/flag and declared age.
ContactEmail, support/application subject, message, attachments and correspondence history.
Player and gameProgress, stars, score, rank, challenge group/period, preferences, in-game balance, boosts, rewards, entitlements and game activity.
Customer transactionProduct ID, transaction status, purchase verification, restoration and complaint records.
Transaction securityIP, approximate location, device/browser, operating system, access time, app version, session, error, crash, security and abuse-prevention records.
Advertising and analyticsDevice/advertising and Firebase installation/app-instance identifiers, ad impressions/interactions, privacy choice, screen/feature use and advertising-fraud signals.
Legal transactionData-subject requests, authorised-authority correspondence, disputes, evidence and request-management records.

RG Technology does not directly receive payment-card or bank-account details.

3. Purposes of processing

  • Providing the website, mobile game, player account and cross-device cloud save.
  • Operating Weekly/Global Challenge, score, rank, rewards, in-game economy and store functions.
  • Verifying purchases, delivering products/entitlements and handling restoration requests.
  • Receiving, verifying and answering support, account/data deletion and other data-subject requests.
  • Serving ads through Google AdMob and Unity Ads, applying choices, measuring and preventing advertising fraud.
  • Measuring service use with Google Analytics for Firebase and resolving errors/crashes with Firebase Crashlytics.
  • Maintaining information security, service continuity and prevention of cheating, fraud and abuse.
  • Meeting legal obligations and establishing, exercising or protecting legal rights.

4. Legal grounds

Depending on the activity, personal data is processed under Article 5/2 of the KVKK where expressly provided by law, directly related to entering into or performing a contract, necessary for the controller's legal obligation, necessary for establishment/exercise/protection of a right, or necessary for a legitimate interest without harming fundamental rights. Processing that legally requires consent is not started without consent, and consent may be withdrawn.

5. Collection methods

Data is collected automatically or partly automatically through the mobile app and local device storage; Unity Authentication/Cloud Save/Leaderboards/Cloud Code; Google Play Games and store infrastructure; Google AdMob/Mobile Ads/UMP; Unity Ads; Google Analytics for Firebase; Firebase Crashlytics; web-server and security logs; support/account-deletion forms; Google Apps Script and corporate email; and by non-automatic means through written applications.

6. Recipients and transfer purposes

Unity Technologies

Operation of Authentication, Cloud Save, Leaderboards, Cloud Code, Unity IAP and Unity Ads.

Google

Play Games, Play/Billing, AdMob, Mobile Ads, UMP, Firebase App Hosting/Google Cloud, Analytics, Crashlytics, Apps Script and email services.

Apple and stores

Distribution, platform account, purchases and payment verification on the relevant platform.

Authorities and advisers

Legal obligations, audits, information-security incidents and dispute management.

Transfers are relevant, limited and proportionate to their purpose. Providers are not authorised to use data for unrelated purposes, and contractual, technical and organisational controls are applied.

7. International transfers

Systems used by Unity, Google, Firebase, Google Play, AdMob, Unity Ads, Apple and related infrastructure may be located outside Türkiye. To the extent necessary to provide the service, data may be transferred under an adequacy decision; an appropriate safeguard such as a standard contract, binding corporate rules or a Board-approved undertaking; or an applicable incidental situation under Article 9 of the KVKK. Applicable notification and security obligations are taken into account.

8. Retention and disposal

Account and cloud saveWhile the account is active; removed after deletion or a valid request, subject to legal exceptions.
Leaderboard and reward recordsFor the period needed for challenge/reward verification; player-linked records are purged when the account is deleted.
Local game dataUntil in-game deletion, clearing app data or uninstalling the app.
Crashlytics recordsGoogle's service schedule provides a 90-day retention process for crash records and associated identifiers.
Support and legal recordsFor request resolution and applicable limitation, evidence or legal-obligation periods.

Data is deleted, destroyed or anonymised when the period ends. Limited records required for tax, payment, fraud prevention, security or disputes are retained only for the relevant period.

9. Account and data deletion

In World Of Lighta, go to Settings → General Settings → Delete My Account and Datato permanently delete the Unity Authentication account, Cloud Save profile, progress and player-linked live leaderboard records. Local data on that device is also cleared. Users who cannot access the game can submit a request through the Account and Data Deletion page. This does not delete the Google account or the store's own transaction records.

10. Data-security measures

Access is limited according to need; secure connections, secret management, access/incident logging, current software, backups, provider controls and incident response are applied. Administrative credentials are not stored in the app package. Potential breaches are assessed and legally required notifications are made.

11. Your rights under Article 11 and how to apply

  • Learn whether your data is processed and request information if it is.
  • Learn the purpose, whether data is used accordingly and the recipients.
  • Request correction and, where conditions apply, deletion or destruction.
  • Request that correction and deletion/destruction be notified to recipients.
  • Object to an adverse result produced exclusively by automated analysis.
  • Request compensation for damage caused by unlawful processing.

Send your application with “Personal Data Request” in the subject to info@rgtechnology.com.tr or in writing to the company address. Include your name, request, preferred response channel and proportionate information needed for verification; do not send identity documents unless necessary. Applications are concluded as soon as possible and no later than 30 days. A fee under the Board tariff may apply if additional cost arises.