Privacy Policy

When you create an account, we collect your email address, your username, and, optionally, the city information you choose to provide. This information is necessary to identify your account, communicate with you, and maintain trust on the platform.

When you post a listing, place an offer, or complete an order, transaction records and wallet balance movements are kept. Basic records relating to the payment methods you use via bank transfer or crypto (USDT/BTC/ETH/LTC/XRP) are retained so that the escrow process can be verifiable.

For security purposes, we record the IP address from which you connect and the functional session cookie that maintains your session. If you choose to link your Discord account, only the Discord user identifier needed for us to send notifications is stored; this connection is entirely optional.

We primarily use the data we collect to provide the service: managing your account, matching listings and offers, processing escrow and order flows, and forwarding video delivery proofs to the relevant party are among the foremost of these.

We also use the data to ensure security and prevent fraud; for example, detecting unusual session activity, multiple-account attempts, and suspicious transactions falls within this scope.

We also use this information to deliver transactional notifications to you, such as order status, offer notifications, and escrow updates. We do not sell data to third parties for marketing purposes.

We use only a functional session cookie; this cookie is marked as httpOnly, meaning it cannot be read by scripts on the browser side and serves no purpose other than securely maintaining your session.

In addition, we keep small preference cookies to remember the interface language and currency preference you select. Our site contains no third-party advertising networks, behavioral advertising trackers, or cross-site tracking cookies.

We use the Discord infrastructure to send notifications; we establish the Discord connection only when you approve it, and the information we pass to this service is limited to what is necessary for the notification. On the payment side, we work with providers such as Binance Pay and WebMoney, and these providers are subject to their own privacy terms.

For crypto payments, transactions take place on public blockchain networks. For this reason, the crypto addresses you send to or receive from and the transaction records are public by their nature and remain permanently visible on the network beyond our control.

To keep and display prices in USD while providing current rates, we make use of an external exchange-rate API service; no personal data is passed to this service, only the currency information we wish to convert.

We never store your password in plain text; passwords are kept hashed with bcrypt. Your sessions are managed with unpredictable, opaque session tokens, and we apply rate limiting at login and sensitive endpoints to reduce abuse.

We retain your account and transaction data for the period necessary to provide the service and to keep records against escrow disputes. While transaction and escrow records are kept for a reasonable period for possible disputes and legal obligations, data that is no longer needed is periodically deleted or anonymized.

You have the right to access the personal data we store, to correct it, or to request its deletion. You can submit such requests through our support channel; we would like to note that some transaction records may need to be retained due to escrow disputes or legal obligations.

You can remove your Discord connection at any time, thereby stopping notifications through this channel. You can also change your language and currency preferences at any time via your account or interface settings.

Game in Shop is not a platform aimed at minors, and we do not knowingly collect data from minors. To use the platform, you must be of the legal age of majority in your jurisdiction.

If we become aware that a minor has provided us with data, we take the necessary steps to delete that data within a reasonable time. If you notice such a situation, please inform us through support.

We may update this privacy policy from time to time. When significant changes occur, we update the update date at the top of the page and, where necessary, notify you within the platform.

For your questions, requests, or concerns regarding privacy, you can reach us through our 24/7 live support channel. We would like to remind you once again that this text is for informational purposes and does not replace legal advice.

The party responsible for your personal data (the data controller) is TG INTL TEKNOLOJI, located at Atatürk Mahallesi, Ahrandı Sokak No 6, Ödemiş, İzmir, Türkiye. This means that TG INTL TEKNOLOJI decides why and how your personal data is processed when you use Game in Shop (gameinshop.com). If you have any questions about this Privacy Policy or about how your data is handled, you can contact us through our support center or by email at [email protected], using the channels listed on the platform.

We only process the data we actually need to run the marketplace, keep it secure, and deliver your orders. Depending on how you use Game in Shop, this may include the following categories.

Account data. The information tied to your account, such as your name, email address, a securely hashed version of your password, and your preferences for language and currency.

Identity verification (KYC) data. The legal name and country that you declare during verification. We deliberately keep identity-related personal data to a minimum and rely on external verification where checks are required, rather than storing more document data than necessary.

Transaction and wallet data, IP and device information. Records of your orders, your escrow activity, and your wallet balance, together with technical details such as your IP address and device information. We use this category mainly to keep accounts secure and to prevent fraud and abuse.

Connected account integrations. If, and only if, you choose to connect them: Discord, Telegram, and WhatsApp (used to send you notifications, and always optional) and Steam (used for inventory display and delivery, based on a SteamID that has been verified through OpenID). We do not access any of these connected accounts unless you link them yourself.

We rely on the following grounds to process your personal data.

Performance of a contract. Most of our processing exists so that we can provide the service you ask for: creating and maintaining your account, handling your orders, and operating the escrow system that protects both sides of a trade.

Legitimate interests. We process certain data to protect our users and our platform, in particular to prevent fraud and abuse and to keep accounts and transactions secure.

Legal obligation. In some cases we must process data to meet legal requirements, such as identity verification and anti-money-laundering (AML) checks above the applicable thresholds, and keeping the records we are required to retain.

We do not sell your personal data. We share it only with the service providers that are necessary for the platform to function, such as payment, email, and infrastructure providers, and only to the extent they need it to perform their role for us.

In order to provide the services offered through gameinshop.com, personal data belonging to users may be processed on servers and with hosting providers located within the European Union, in particular in Finland. This infrastructure supports the instant delivery of products such as in-game currency, virtual items, accounts, e-pins and boosting services following payment, as well as the operation of the escrow and dispute-resolution processes.

For users resident in Türkiye, this operation constitutes a transfer of personal data abroad within the meaning of Article 9 of the Turkish Personal Data Protection Law (Law No. 6698, KVKK). Such transfer is carried out on the legal ground that it is necessary for the performance of the contract between the user and the operator, TG INTL TEKNOLOJİ, and within the framework of the appropriate safeguards required by the applicable legislation.

Because the data is hosted within the European Union, it remains subject to the level of protection afforded by the General Data Protection Regulation (GDPR). Personal data is transferred only to the extent required by the service, limited to the specified purposes, and in accordance with the contract and applicable law; no transfer is made beyond this scope.

Under data protection laws such as the GDPR and the KVKK, you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request its deletion, to restrict or object to certain processing, and to receive your data in a portable format. To exercise any of these rights, please contact us through our support center using the channels listed on the platform, and we will help you with your request.

We keep your personal data only for as long as it is needed. In practice, this means we retain it for the periods required by applicable legal retention rules, or until your account is deleted where there is no open order or outstanding obligation that still requires us to keep it.

In order to prevent fraud and to comply with legal obligations arising from applicable anti-money laundering (AML) legislation, users' identity verification (KYC) data may be processed. Within this scope, identity, contact and transaction information is used to detect suspicious activity, safeguard account security and meet statutory audit obligations.

Such data is retained only for the period necessary for the purposes for which it was processed and for the statutory retention periods required by the relevant legislation. Once these periods have expired, the data is deleted or irreversibly anonymised.

Where a user account is deleted, self-declared data is removed without delay. However, records subject to a legal retention obligation may continue to be stored for the period prescribed by the relevant legislation, solely to the extent required by that obligation and on a limited basis.