KVKK
PRIVACY NOTICE

This notice is made under Law No. 6698 on the Protection of Personal Data ("KVKK") by +90 Futbol as data controller (the service provided under the 90futbol.com domain).

Contact: 90futbol.info@gmail.com

• Identity: first / last name (optional).

• Contact: email address.

• Customer transaction: subscription status, payment dates (content is at Stripe / iyzico, we only hold metadata).

• Transaction security: IP (anonymised), session log, User-Agent.

• Marketing: email preferences (opt-in).

• Establishment and performance of the contract (membership, payment, service provision).

• Information security and prevention of abuse.

• Fulfilment of legal obligations (tax, notification to authorities on request).

• Carrying out communication activities (transactional email).

• Improving service quality (anonymous aggregate statistics).

• Establishment/performance of the contract (KVKK art. 5/2-c).

• Legal obligation (KVKK art. 5/2-ç).

• Legitimate interest of the data controller (KVKK art. 5/2-f).

• Explicit consent (for marketing email, opt-in).

Your personal data is shared with the following third parties/systems (including transfers abroad; data is transferred encrypted):

• Supabase Inc. (authentication and data storage, Australia — Sydney data centre)

• Stripe Inc. (international payments, US-based)

• iyzico Ödeme Hizmetleri A.Ş. (TR domestic payments — KVKK-compliant)

• Google LLC (Gemini LLM API, US — only match information)

• football-data.org (Europe) — match fixture and statistics data is received; no user personal data is sent; legitimate interest (KVKK art. 5/2-f).

• Understat (UK) — xG/shot statistics data is received; no user personal data is sent; legitimate interest (KVKK art. 5/2-f).

• Resend Inc. (transactional email, US)

• Google LLC (Google Analytics — site usage statistics, US; only if explicit consent to analytics cookies is given in the cookie window)

• Vercel Inc. (website hosting and content delivery — access logs: IP address, browser information; US)

• Railway Corporation (application server hosting — access logs: IP address; US)

• Functional Software Inc. — Sentry (error tracking and server performance measurement; from the browser only the browser/device type, page address and error details at the time of an error; no screen recording; data is stored in the EU — Germany)

Transfers abroad take place with explicit consent under KVKK art. 9. Membership approval covers this explicit consent.

Under KVKK art. 11, as a data subject you have the following rights:

• To learn whether your personal data is processed.

• To request information about your data.

• To learn the purpose of processing and whether it is used in line with that purpose.

• To learn the third parties to whom data is transferred in Türkiye / abroad.

• To request correction if data is incomplete / incorrectly processed.

• To request deletion / destruction within the conditions of KVKK art. 7.

• To object if a result against you arises from automated analysis.

• To claim compensation if you suffer harm from unlawful processing.

You can submit your rights applications together with documents that identify you by the following methods:

• Email: 90futbol.info@gmail.com — with "KVKK APPLICATION" in the subject line.

• Applications are answered free of charge within 30 days at the latest. If the process requires an additional cost, the tariff set by the KVKK Board applies.