1. Scope and controller
This Privacy Policy applies to the Testimo mobile application, the website at testimo.megafortuna.co, and related products, features, support, and services (collectively, the “Services”).
The Services are operated by Mega Fortuna Teknoloji ve Yazılım Anonim Şirketi (“Testimo,” “Mega Fortuna,” “we,” “us,” or “our”), a joint stock company established under the laws of the Republic of Türkiye. Mega Fortuna is the data controller for personal data covered by this policy.
Company: Mega Fortuna Teknoloji ve Yazılım Anonim Şirketi
Address: Odunluk Mah. Akpınar (180) Cad. İşyeri (Ofisler), Green White Plaza 5/25, Bursa, Türkiye
Email: [email protected] (use “Privacy” in the subject line)
By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with it, do not use the Services.
2. Data we collect
The information we collect depends on how you use Testimo and which features are available to you.
Account and profile data
- Name, email address, phone number, display name, account credentials, and account identifiers.
- Age or date-of-birth confirmation, country, language, and account preferences.
- Optional profile details, such as gender or profile image, when you choose to provide them.
- Information received when you sign in through an available third-party sign-in provider.
Device, network, and technical data
- IP address, device model, operating system, app version, language, time zone, and network information.
- Mobile device, installation, session, advertising, or similar identifiers where permitted.
- Diagnostic data, crash logs, performance information, access dates and times, and security events.
- Approximate location derived from IP address. If a feature requests precise location, we collect it only with the permission presented on your device.
Game, mission, and checkpoint data
- Games displayed, selected, installed, opened, or played through an available Testimo journey.
- Mission enrollment, checkpoint completion, gameplay milestones, deadlines, active status, and progress history.
- Attribution and event data from game, measurement, and offer partners used to verify applicable progress.
- Interactions with game listings, recommendations, notifications, and other in-app content.
Surveys, feedback, and communications
- Answers submitted through available player surveys and any optional information included in those answers.
- Support requests, emails, feedback, reviews, contest or promotion entries, and other communications.
- Communication preferences and records of messages we send to you.
Eligibility, verification, and redemption data
- Qualifying activity, loyalty balances, redemption selections, gift-card fulfillment status, and related transaction records.
- Information used to assess eligibility, prevent duplicate accounts, detect fraud, and protect redemption activity.
- Phone, identity, or video-selfie verification data when a particular security or redemption flow requires it. The relevant flow will provide additional notice where required.
Website data
When you visit our website, we may receive basic server logs, device and browser information, referral URLs, and interactions with website pages. We may use cookies or similar technologies for essential operation, preferences, security, and analytics as permitted by law.
3. Sources of data
We obtain information from the following sources:
- Directly from you, when you register, update your profile, complete a survey, contact support, or request a redemption.
- Automatically from your device, when you use the app or website.
- Game and measurement partners, when they report installations, gameplay events, mission milestones, or attribution data.
- Survey, identity, anti-fraud, and reward partners, when they help provide an available feature.
- Third-party sign-in providers, according to the permissions and notices shown in the sign-in flow.
4. How we use data
We use personal data to:
- Create, authenticate, maintain, secure, and support your account.
- Show available games, missions, checkpoints, deadlines, surveys, and progress.
- Attribute and verify installs, gameplay events, checkpoint completion, and qualifying activity.
- Personalize the catalog and recommend content that may be relevant to you.
- Assess eligibility and provide available gift-card redemption options.
- Operate surveys, process responses, and generate aggregated insights.
- Send service messages, mission updates, security notices, and communications you have requested.
- Detect bots, duplicate accounts, manipulated events, unauthorized access, and other misuse.
- Measure, troubleshoot, research, develop, and improve the Services.
- Comply with law, enforce our Terms, and establish, exercise, or defend legal claims.
We may aggregate or de-identify information so it no longer reasonably identifies you and use that information for analytics, reporting, research, and service improvement.
5. Legal bases for processing
Where applicable law requires a legal basis, we rely on one or more of the following:
- Contract: processing needed to provide the Services and carry out our agreement with you.
- Legitimate interests: operating, securing, personalizing, measuring, and improving Testimo, provided those interests are not overridden by your rights.
- Consent: for optional permissions, certain marketing, precise location, advertising identifiers, or other processing where consent is required. You may withdraw consent at any time.
- Legal obligations: processing required to comply with applicable law or valid legal requests.
- Legal claims and public interest: where necessary to protect rights, safety, and the integrity of the Services.
7. International data transfers
We and our providers may process information in Türkiye, the European Economic Area, the United States, and other countries where we or our service providers operate. Privacy laws in those countries may differ from those where you live. Where required, we use recognized transfer mechanisms, contractual safeguards, and supplementary measures designed to protect personal data.
8. Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including while your account is active, and as needed for security, fraud prevention, dispute resolution, financial records, enforcement, and legal compliance. Retention periods vary by data type, sensitivity, purpose, and legal requirements. We may retain aggregated or de-identified data where it no longer reasonably identifies you.
When information is no longer needed, we take reasonable steps to delete, anonymize, or securely isolate it, subject to technical backup cycles and legal obligations.
9. Your choices and rights
Depending on your location, you may have the right to:
- Access, correct, update, or obtain a copy of your personal data.
- Request deletion or restriction of certain processing.
- Object to processing based on legitimate interests.
- Withdraw consent without affecting processing that occurred before withdrawal.
- Request data portability where applicable.
- Appeal a decision or complain to your local data protection authority.
Account and permission controls
- You may update available profile and communication settings inside Testimo.
- You can control notifications, location, and advertising identifiers through your device settings.
- You may opt out of promotional emails through the unsubscribe link. We may still send essential service messages.
- You may request account deletion through an available in-app control or by contacting us.
To submit a privacy request, email [email protected]. We may need to verify your identity before completing the request. Authorized agents may submit requests where applicable law permits, subject to verification of their authority.
10. Security
We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No system or transmission method is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials and notifying us promptly if you suspect unauthorized use.
11. Age restrictions
Testimo is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we learn that a person under 18 has provided personal data, we may deactivate the account and take reasonable steps to delete the data. Contact us if you believe a minor has used Testimo.
12. Updates and contact
We may update this Privacy Policy to reflect changes to the Services, our practices, or applicable law. We will revise the “Last updated” date and provide additional notice when required. Please review this page periodically.
Questions or requests can be sent to [email protected]. You may also write to Mega Fortuna Teknoloji ve Yazılım Anonim Şirketi at the address in Section 1.