Privacy and Data Protection

Last updated: 14 October 2026

Controller and scope

Ömer Balaban / Ömer Balaban Fight Academy operates Balaban FIGHT Arena account, ticket, broadcast and support processes. Personal-data requests: balabanomer73@gmail.com; written requests: Kırkkonaklar, Şemsettin Günaltay Cd. No:308 D:F, 06610 Çankaya/Ankara. This notice covers account registration, purchases, entry checks, viewing and support.

Data and purposes

• Account/verification: Username, email, password-verification information, verification status and code attempt/send records support the account, email ownership and abuse prevention. Passwords are not presented as readable account fields. A verification code is valid for ten minutes; this is not the retention period of the whole account.
• Order/payment: Name, contact/billing information, product, category, quantity, price, accepted agreement version, payment reference, status and refunds support performance, accounting/consumer duties and disputes.
• Venue entry: Order-linked ticket code, event/category, use and cancellation/refund status support one valid entry and duplicate-use prevention.
• Viewing/security: Account entitlements, content/session information, playback position/completion and last-played time support access, resume, account security and service troubleshooting. IP and browser/device request information may be processed by the server and broadcast infrastructure for connection/security.
• Support: Messages and error details you supply are used to answer requests and resolve problems. Do not include a full card number, password or OTP.

Collection and legal grounds

Information is collected through site forms, payment notifications, account/player requests, entry checks and email/telephone/written requests. Necessary contract formation/performance is considered under KVKK Article 5(2)(c); legal record/disclosure duties under 5(2)(ç); establishing/exercising/protecting rights under 5(2)(e); necessary security and fraud prevention that does not harm fundamental rights under 5(2)(f). Any separate processing requiring explicit consent must obtain specific, informed and freely given consent. Reading this notice is not itself consent.

Recipients and external services

Necessary information is sent to hosting infrastructure, transaction-email services, iyzico for payment and Cloudflare Stream for viewing, to the extent needed for the process. Authorized public authorities and persons acting for legal duties/disputes may also receive information. In the standard iyzico form, card details are entered with the payment provider; a full card number or CVV is not stored in your platform account.

WordPress’s default emoji support may fetch an image from s.w.org when necessary; connection/browser information reaches that image service with the request. This function is not used to create a personal advertising profile. If iyzico’s buyer-protection component is displayed, its connection requests may also reach iyzico infrastructure.

Connecting to Cloudflare’s player sends IP/browser and playback requests to that service. Global email/broadcast infrastructure may process data outside Turkey. International transfers are subject to the separate conditions of KVKK Article 9; acceptance of this notice or the sales agreement does not itself create a transfer safeguard or general transfer consent. Request information about recipients and the transfer mechanism through the contact channel.

Retention and security

Account/service records are retained while needed for account use and service operation. Agreement, payment, refund and request records are retained as needed for applicable duties and protection of rights. Each data category’s purpose and legal need is assessed separately. When the basis ends, deletion, destruction or anonymization should apply; closing an account does not mean legally required order records are erased immediately. Token/code lifetimes are not data-retention periods.

The service uses access permissions, verification, signed broadcast links and security limits. Do not share passwords or ticket codes. This notice does not guarantee unlimited security or that every service processes data exclusively in Turkey.

Your rights and requests

Under KVKK Article 11 you may inquire about processing, purposes and recipients; seek correction, conditional erasure/destruction and notice to recipients; object to an adverse result produced solely by automatic analysis; and seek compensation for unlawful processing. Send requests in writing or from an email address registered in the system, with the request and information needed for secure identity verification. Only necessary verification information is requested. Requests are resolved as soon as practicable and within thirty days. KVKK complaint rights remain available if the response is insufficient or absent.