Legal
Privacy Policy & Disclosure
Prepared to satisfy our disclosure obligation under Law No. 6698 (KVKK) regarding the personal data BitBid processes.
Last updated: June 10, 2026
This is an informational English translation. The Turkish-language version of this document is the legally binding text; in case of any conflict, the Turkish version prevails.
Your personal data is processed by the data controller whose identity and contact details appear above. BitBid acts as an intermediary service provider under Law No. 6563 on the Regulation of Electronic Commerce.
- Identity and contact data (name, email, phone)
- Membership and transaction data (username, bids, orders)
- Payment and invoice data (via iyzico; card data is not stored by us)
- Delivery data (address details)
- Transaction security data (IP, session, logs)
Data is processed to provide membership and services, run auction and order processes, payment and delivery, security, compliance with legal obligations, and—within your consent—communications.
Legal grounds under KVKK Art. 5/6 include performance of a contract, legal obligation, legitimate interest, and explicit consent where required.
- iyzico — payment services
- Resend — transactional email
- DeepL — server-side translation (listing content only)
- Hosting and infrastructure providers
Transfers are made to deliver the service and meet legal obligations, with appropriate safeguards.
Where infrastructure or service providers are located abroad, transfers are made in line with KVKK Art. 9 (explicit consent or prescribed safeguards).
Personal data is retained for the periods prescribed by law and as long as the processing purpose requires; it is then deleted, destroyed, or anonymized.
- Learn whether data is processed and request information
- Learn whether it is used for its purpose
- Request rectification, erasure, or destruction
- Rights regarding restriction and objection
- Request compensation for damages
To exercise your rights, contact us at our KVKK contact email. Your request is answered within 30 days at the latest. If unsatisfied, you may file a complaint with the Personal Data Protection Board.
What are my rights under KVKK?
You may learn whether your data is processed, request access/information, rectification, erasure, object to processing, and request compensation (KVKK Art. 11).
How long until my request is answered?
Requests are concluded within 30 days at the latest.