Your rights are protected!

Company Details

Commercial Title and Main Office of the Company	İstanbul Ödeme ve Elektronik Para A.Ş.
Tax Registration Office	Zincirlikuyu
Tax Registration Number	481 061 8489
Registered in	İstanbul
Type of the Establishment	Joint-Stock Company
Committed Amount of Capital	55.000.000 TRY
Paid Amount of Capital	55.000.000 TRY
Central Registration System No	0481061848900010
Address of the General Directorate	Esentepe Mah. Büyükdere Cad. Levent Plaza No:173 10.kat No:34 Şişli/İstanbul
Telephone	0212 280 66 95
Fax	0212 280 66 96
E-mail	destek@ist-pay.com

Audit Details

Audit Authority	Türkiye Cumhuriyet Merkez Bankası A.Ş. (Central Bank of the Republic of Turkey)
Address	Hacı Bayram Mah. İstiklal Cad. No:10 06050 Ulus-Altındağ/Ankara
Contact	+90 312 507 50 00
Web	www.tcmb.gov.tr
Audit Firm	Denge Bağımsız Denetim SMMM A.Ş.
Address	Hürriyet Mah. Dr. Cemil Bengü Cad. Hak İş Merkezi No:2 Kat:1 Çağlayan- Kağıthane/İstanbul
Telephone	+90 212 296 51 00
Fax	+90 212 296 51 44
Web	www.mazars.com.tr

Shareholding Structure and the Board of Directors

Shareholders	Capital TRY Share Rate %
Chairman of the Board of Directors - Asım SARRAF	55.000.000 TRY %100
Member of the Board of Directors / General Director - Zuhal YURTSEVER
Member of the Board of Directors - Süreyya SARRAF
The Member of the Board of Directors- Assoc. Prof. Dr. İbrahim Sırma

1. USER INFORMATION

Dear User,

When using the services offered by İstanbul Ödeme ve Elektronik Para A.Ş.(İst-Pay),

• we kindly request that the Internet pages have a secure (https) connection and that the SSL certificate is valid,
• and that the following are the only official İst-Pay social media addresses, and you acknowledge and declare that you have been informed about this issue.

Facebook: https://www.facebook.com/istanbulodeme/
Twitter:  https://twitter.com/istanbulodeme/
Instagram:  https://www.instagram.com/istpay_tr/
Linkedin:  https://www.linkedin.com/company/istanbulodeme/mycompany/
Contact e-mail: info@ist-pay.com
Contact phone: +90 (212) 280 66 95 / 96

If you encounter a suspicious situation, please call our call center at 0212 280 66 95.

2. INFORMATION ON FRAUDULENT ACTIVITIES

Protect Yourself from Fraud

Scammers First Gain Your Trust, Then Steal Your Money.

Use İst-Pay only to send money to people you know. Never send money to someone you do not know personally. Scammers try all kinds of ways such as telephone, traditional mail, e-mail and internet. They gain your trust and when they trap you, they ask you for money and then run away with it. The scenarios they use to lure you into a trap constantly change.

We offer the following methods to avoid falling into the trap:

1. Phone Scams: The scammer may call you on the phone and imitate a police radio, a printer or a bank call in the background to make the call similarly convincing. Beware of people who ask you for money by introducing themselves as police, prosecutor or a public official on the phone. A public official will never ask you to transfer money over the phone.
2. Social Media Scams: It is a type of fraud that creates an environment of trust through e-mail, SMS or social media and then redirects to a fake website after clicking on the shared link and capturing security-critical information. Frauds carried out in this way are also commonly known as Phishing.

When using the services offered by İst-Pay, please pay attention that:

• The address has a https extension,
• The address is SSL.
• As İst-Pay Social Media addresses, we kindly request you to consider the following addresses as the only official address of us:

Facebook: https://www.facebook.com/istanbulodeme/
Twitter:  https://twitter.com/istanbulodeme/
Instagram:  https://www.instagram.com/istpay_tr/
Linkedin:  https://www.linkedin.com/company/istanbulodeme/mycompany/
Contact e-mail: info@ist-pay.com
Contact phone: +90 (212) 280 66 95 / 96

3. Internet and Mobile Device Frauds: A type of fraud that aims to obtain personal and financial information (internet/mobile banking/İst Pay password, mobile confirmation code transmitted via SMS, etc.) by infecting a computer or mobile phone with malicious programs such as viruses, malware, trojans, etc.

3.1. Computer and Mobile Device Malware: Malicious software designed to damage computers and mobile devices, steal information, etc. Examples include viruses, trojans, worms.

3.2. Site Traffic Redirection (Pharming): Pharming is a type of fraud that occurs when, despite typing the correct internet address in the address bar (for example, www.ist-pay.com.tr), scammers corrupt the DNS (Domain Name System) settings and redirect the web page to a fake web page.

Scammers sometimes encourage people to transfer money. Do not transfer money to someone who asks you to send money to them for the following purposes:

• An emergency situation that you have not confirmed.
• Internet shopping.
• Anti-virus protection.
• Real estate deposit or payment.
• Claiming to win a sweepstakes or prize.
• Tax payment.
• Charity donation.
• Appointment as a mystery shopper.
• Business opportunity.
• Credit card or loan charges.
• Rental property fraud.
• Forged Check fraud.
• Relationship Fraud.
• Resolution of an immigration related issue.

4. Never share the reference number, password, personal data, information, amount, recipient and similar information regarding the transfer with third parties.

5. If you are told that there is a prize that you have won and you are asked to pay tax or commission to receive the prize, be careful as this may be a fraud attempt. Beware of so-called raffle, prize or sweepstakes company representatives who claim that because you have won a prize, you need to wire money to claim it. This may be an organization that runs fraudulent contests that require you to wire money to win a prize but give you nothing in return.

6. If you have inherited money from your relatives living abroad but are asked to pay taxes or commissions to receive this inheritance, be careful as this may be a fraud attempt.

7. Always keep information regarding your money transfer transactions confidential. If you think someone is trying to scam you, please contact the law enforcement authorities and İst Pay.

8. If you transfer money, the person you send it to receives the money quickly. Once the money has been paid, İst-Pay may not be able to refund you even if you are the victim of fraud, except in limited circumstances.

9. If you believe that you are a victim of fraud, call the police/police and our call center at 0212 280 66 95.

For your information,

İstanbul Ödeme ve Elektronik Para A.Ş.

İSTANBUL ÖDEME VE ELEKTRONIK PARA A.Ş.

CUSTOMER CLARIFICATION TEXT WITHIN THE SCOPE OF

PERSONAL DATA PROTECTION LAW NO: 6698

As per the Personal Data Protection Law No: 6698 ("KVKK") in the processing of personal data; we, İstanbul Ödeme ve Elektronik Para A.Ş. ("İst-pay" or "Company"), acting in the capacity of the data controller, would like to inform you in accordance with Article 10 "Obligation of the Data Controller to Inform" of the Law.

Ist-pay shows utmost care to ensure the confidentiality and security of personal information received from its customers ("physical channels and wallet service users") and/or legal/voluntary representatives of customers. This Clarification Text has been prepared in order to inform our customers about the personal data processed within the scope of KVKK and the methods of collection of the personal data, the legal grounds and purposes of personal data processing, the persons/institutions to whom personal data are transferred and the purposes of transfer, the rights of natural persons whose personal data are processed and to prevent, manage and execute fraud.

Title	İstanbul Ödeme ve Elektronik Para A.Ş.
Address	Esentepe Mah. Büyükdere Cad. No: 173 1. Levent Plaza A Blok Kat:10 Şişli / İstanbul
Central Registration System No/Trade Registry No	0481061848900010 / 51970-5
Telephone Number	0850 480 99 99 Ext:105

Processed Personal Data of the Sender and Recipient and Method of Collection

We need your personal data in order to fulfil our legal obligations within the scope of our company's activities and to provide you with high quality, complete and better service. Your personal data are collected verbally, in writing or electronically or by automated, semi-automated or non-automated methods specified in the Law, during the registration process that you make face-to-face or online in order to benefit from the service to be provided, through web-based applications and via all kinds of information and documents that you have submitted to İst-pay or obtained from third parties before, during and after the establishment of the payment service relationship in order to provide the payment service within the legal framework and to enable our Company to fulfil its obligations arising from the contract and the Law in a complete and accurate manner.

Identity Details	Name, surname, middle name, TR ID No, Foreigner ID No, identity document number, father's name, mother's name, date of birth, place of birth, passport number, residence permit number, temporary identity document number, driver’s license number, nationality, signature,
Contact Information	e-mail address, telephone number, residential address
Customer’s Transaction Details	Records for the use of products and services and information such as customer's instructions and requests required for the use of products and services, information such as profession, relationship between recipient and sender, purpose of money transfer, transaction reference, invoice details, customer satisfaction/complaint information.
Financing Details	Personal data processed in relation to information, documents and records showing all kinds of financial results created according to the type of legal relationship established with the personal data subject/owner (information such as transfer amount, history of sending and receiving money) Invoice, IBAN, Account Activities, Customer Card Number, Payments Made and Received, Receipt, Shopping History, payment instruction information, balance, transaction limit, bank name.
Physical Space Security, Audio and Visual Records	Camera records, employee and visitor entry and exit records,
Risk Management	Information processed for the management of commercial, technical and administrative risks.
Legal transaction details	Information in correspondence with judicial authorities, information in the case file, parent/guardian information
Transaction Security	Device information, IP address information, log records, password information, security question, certificate, encryption key, user name and surname, CVV2, CVC2 code, etc.

Method of Collection

As Ist-pay, we collect your personal data mentioned above in written, verbal and visual format through automated, partially automated or non-automated means using electronic and physical methods.

(i) Methods of Obtaining Your Personal Data from You

Through Non-Automated Means:

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Identity, Contact Details, Customer Transaction, Finance	Verbally, by filling out forms and documents received for the digital wallet customers in money sending and receiving transactions in which you take part as a sender and/or recipient.
Identity, Contact Details, Customer Transaction, Finance, Legal Transaction	Your written applications / submissions / instructions made in person, via mail, social media, courier services and your verbal applications made through the call center (information acquisition, complaint etc.)

Through Semi-Automated Means:

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Identity, Contact Details, Customer Transaction, Finance, Legal Transaction	Electronic correspondence and sending instructions for the acquisition of information, complaints and similar purposes (e.g. via registered electronic mail, electronic notification, electronic mail methods, web page),

Through Automated Means:

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Physical Space Security, Audio and Visual Records	Transactions at the branch or representative offices

(ii) Method of Obtaining Your Personal Data from Ist-pay Information Processing System

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Customer Transaction, Finance, Legal Transaction, Risk Management	Data obtained as a result of using the products and services offered by İst-pay (Information such as transaction reference, transfer amount, money sending and receiving history etc.)

(iii) Methods of Obtaining Your Personal Data from Third Parties

Your personal data are collected by automated means through the following organizations:

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Identity, Contact Details	Through intermediary institutions/financial institutions with which we are business partners in money transfer transactions
Identity	Public institutions and bank databases where your identity details are registered (e.g., database of the General Directorate of Civil Registration and Citizenship Affairs)

We may collect your personal data by non-automated methods through the following institutions and organizations or persons:

DATA CATEGORY	RELEVANT ACTIVITY TO OBTAIN DATA
Identity, Contact Details, Legal Transaction, Customer Transaction, Finance	Persons/legal-voluntary representatives appointed to act on your behalf (e.g. attorney, guardian)
Identity, Contact Details, Legal Transaction, Customer Transaction, Risk Management, Finance	Judicial Authorities
Identity, Contact Details	Mail, cargo or courier companies
Identity, Risk Management	Publicly available sources such as media reports

If you provide us with personal data about other people (such as your family) or ask us to share their personal data with third parties, you should confirm that they are duly informed about this Clarification Text with respect to the use of their personal data and that they understand the information contained herein.

Legal Grounds and Purposes of Processing Personal Data

PERSONAL DATA CATEGORY	PURPOSES OF PROCESSING	LEGAL GROUNDS
Identity, Contact Details, Finance, Customer Transaction, Risk Management,	· Fulfilment of obligations and responsibilities regarding payment services provided within the scope of field of activity of our Company,	· It is directly related to the conclusion or performance of the contract, · It is mandatory for the fulfilment of our legal obligations.
	· Identification and confirmation of your identity and demographic information, · Ensuring that payment service user information is verified and up-to-date, · Prevention of counterfeiting / fraud, · Storing and reporting the information requested by public institutions such as MASAK, CBRT, RA and similar public institutions that we are obliged to provide information, and meeting the information and document requests of these institutions, · Validly Conclusion of the Payment Service Agreement (Framework Agreement) · Opening and maintenance of user account, · Conversion of the payment account into a verified account and contracted account, · Transferring and loading money to the account, · Refunding money to the user, · Notification and promotion of campaigns and products within the scope of the services offered by the organization, advertising activities, customer relationship management activities for these purposes, · Conducting business models and marketing analysis studies and business development activities,	· It is explicitly stipulated in the laws, · It is directly related to the conclusion or performance of a contract, · It is mandatory for the fulfilment of our legal obligations.
Identity, Contact Details, Finance, Customer Transaction, Risk Management, Legal Transaction, Physical Space Security	· Conducting risk analyses, · Management of risk management and information security processes, · Carrying out Internal Audit / Investigation / Intelligence activities, · Carrying out storage and archiving activities,	· It is explicitly stipulated in the laws, · It is mandatory for the fulfilment of our legal obligations.
	· Following up legal affairs, · Following up requests and complaints, · Management of legal affairs, · Obtaining parental/legal representative consent for minors.	· If data processing is mandatory for the establishment, exercise or protection of a right.
	· Designing the business processes and activities of the company, planning and executing the operational processes and purchasing operations, · Management of relationships established with support service/external service providers, business partners or suppliers, executing after sales support/external services,	· Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, · It is mandatory to process the personal data for the legitimate interests of the Company without prejudice to the fundamental rights and freedoms of the data subject.
Finance, Identity, Contact Details, Customer Transaction	· Fulfilment of budget and financial reporting processes.	· It is mandatory to process the personal data for the legitimate interests of the Company without prejudice to the fundamental rights and freedoms of the data subject.
Finance, Identity, Contact Details, Customer Transaction, Physical Space Security	· Receiving and evaluating suggestions for the improvement of business processes, · Increasing the quality of the products and services we offer to our customers, · Carrying out customer satisfaction studies with respect to the processes of our company.	· It is mandatory for the fulfilment of our legal obligations, · It is mandatory to process the personal data for the legitimate interests of the Company without prejudice to your fundamental rights and freedoms.
Finance, Contact Details, Identity, Customer Transactions	· Conducting analyses during the execution of strategy studies in order to meet the expectations of our customers and improve our services,	· It is mandatory to process the personal data for the legitimate interests of the Company without prejudice to your fundamental rights and freedoms.
Identity, Contact Details	· In domestic money transfer transactions (sending / receiving), sharing information with our business partners, banks, intermediary institutions / financial institutions to ensure the realization of the transaction, · In foreign money transfer transactions (sending / receiving), sharing information with our business partners, banks, intermediary institutions / financial institutions to ensure the realization of the transaction.	· Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, · It is mandatory to process the personal data for the legitimate interests of the Data Controller without prejudice to the fundamental rights and freedoms of the data subject.

Transfer of Personal Data

In cases required by the legislation and permitted by you, your personal data may be shared with and disclosed to third parties and organizations for the purposes set out in this Clarification Text by ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security as per KVKK and other relevant legislation. Although these persons and organizations may change depending on the changes to be made in the relevant legislation, they are generally the following parties. Your personal data are transferred to the following parties for the following purposes and legal grounds:

PERSONS/ORGANIZATIONS TRANSFERRED	PURPOSE OF TRANSFER	LEGAL GROUNDS
Public institutions and organizations and judicial authorities legally authorized to receive information	For legal reasons such as legal reporting, carrying out regulatory and auditing activities, handling complaints and legal processes etc.	· It is explicitly stipulated in the laws, · It is mandatory for the fulfilment of our legal obligations.
Foreign intermediary institutions/financial institutions (You can find detailed information on contracted foreign organizations and which personal data are subject to transfer to abroad in line with existing agreements from the list included at the end of the Clarification Text).	Sharing information to ensure the realization of the transaction in foreign money transfer transactions (sending/receiving)	· In case of existence of your explicit consent
Support service/foreign service corporations, suppliers, law firms, service provider business partners authorized as data processors, public and private financial institutions, banks.	Providing support and consultancy services to the company, Realization of transactions made through the domestic wallet (money transfers from the wallet, money transfers to the wallet).	· It is mandatory for the fulfilment of our legal obligations, · Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract.

Your Rights

As per the provisions of KVKK, you may exercise the following rights by applying to İst-pay:

• to learn whether personal data are processed or not,
• to demand for information if personal data have been processed,
• to learn the purpose of the processing of personal data and whether these personal

data are used in compliance with the purpose,

• to know the third parties to whom the personal data are transferred at home or abroad,
• to request the rectification of the incomplete or inaccurate data, if any,
• to request the erasure or destruction of the personal data,
• In case of correction, deletion or destruction of personal data, to request notification of these transactions to third parties to whom personal data are transferred,
• to object to the occurrence of a result against himself/herself by analyzing the data processed solely through automated systems,
• to claim compensation for the damage arising from the unlawful processing of the personal data.

Storage, Protection and Destruction of Personal Data

Your Personal Data will be stored for the period required by law as long as it is appropriate for the purposes of collection. We act in accordance with the criteria that we determine for the retention periods specific to personal data categories. We take all necessary technical and administrative measures within the scope of KVKK legislation by taking measures against unauthorized access to your personal data, incorrect processing, unauthorized disclosure, unlawful alteration or deletion of the personal data. In the event that your personal data is intercepted/disclosed as a result of attacks on our company's servers and/or other systems, our company will immediately inform you and the Personal Data Protection Authority as soon as possible. If the relevant period expires, your personal data will be deleted, anonymized or destroyed.

You can submit your requests regarding your rights and the implementation of the Law by filling out the application form available at https://www.ist-pay.com or by filling out the application form that you can obtain from us or with the methods that meet the minimum requirements written below;

• Your application with wet signature via notary public to "Esentepe Mah. Büyükdere Cad. No: 173 1. Levent Plaza A Blok Kat:10 Şişli/İstanbul", by registered mail with return receipt requested or in person at your own discretion.

• By sending your application via e-mail to istanbulodeme@hs01.kep.tr using the registered electronic mail (KEP) address assigned to your name;
• By sending an e-mail to kvkk@ist-pay.com using the e-mail address notified by you to the company and registered in the company system.

If a written response is to be given, İst-pay will respond to the requests within this scope within thirty (30) days without charging a fee for the requests up to ten pages and by charging a transaction fee of 1 Turkish lira for each page for the requests exceeding ten pages. If the response to the application is given in a recording medium such as CD, flash memory, then the fee that may be requested by the Company shall not exceed the cost of such recording medium.

In the application that you are entitled to make as a personal data owner and that you will make to exercise your rights mentioned above and that includes your explanations regarding the right you request to exercise; the subject matter of your request must be clear and understandable, the subject matter that you request must be related to you in person or if you are acting on behalf of someone else, you will be required to submit your special power of attorney certified by a notary public.

As per the "Communiqué on the Procedures and Principles of the Application to the Data Controller", it is mandatory to include name-surname, signature, Turkish ID number (nationality, passport number or ID number, if any, for foreigners), residential or workplace address for notification, e-mail address, telephone and fax number, and the subject of the request in your applications. Applications that do not contain such elements will be rejected by İst-pay or directed to valid application channels.

All registered or unregistered intellectual property rights such as title, business name, trademark, patent, logo, design, information and method contained in this Website belong to the site operator and owner company or the person concerned and are under the protection of national and international laws. Visiting this Website or using the services on this Website does not confer any rights about the intellectual property rights.

The information contained on the Website may not be reproduced, published, copied, presented and/or transferred in any way. The Website may not be used, in whole or in part, on any other website without prior permission.

All İst-pay employees are equipped with awareness trainings on the Personal Data Protection Law, are periodically informed and have the notion of confidentiality. İst-pay acts with awareness and sensitivity in all activities carried out by İst-pay and in the life cycle of personal data within the Company.

İst-pay always reserves the right to make changes in this Disclosure Text for the reasons arising from the Law, secondary regulations and decisions of the Personal Data Protection Board. It is not necessary to make any prior notification before to the updates to be made from time to time due to operational requirements and it includes all services and products, pages, information and visual elements.

İSTANBUL ÖDEME VE ELEKTRONIK PARA A.Ş.

CUSTOMER CLARIFICATION TEXT AND EXPLICIT CONSENT FORM WITHIN THE SCOPE OF

PERSONAL DATA PROTECTION LAW NO: 6698

As we, Istanbul Ödeme Ve Elektronik Para A.Ş., have stated in the "Istanbul Ödeme Ve Elektronik Para A.Ş. Customer Clarification Text Regarding Money Sending and Receiving Transactions within the Scope of Personal Data Protection Law No: 6698 (KVKK) within the scope of Istanbul Ödeme Ve Elektronik Para A.Ş. within the Scope of Personal Data Protection Law No: 6698 (KVKK)" that we have presented to you regarding the processing and transfer of your personal data, some of your personal data may be transferred abroad only within the scope of your explicit consent. This text has been prepared to inform you about our personal data transfer processes within the scope of your explicit consent. First of all, we would like to state that you are not obliged to give your explicit consent for the processing of your personal data specified in the processes below. Please tick the box "I have read the Clarification Text within the scope of Law No: 6698. I hereby agree and declare that I give my explicit consent to the personal data to be transferred within the scope of my explicit consent." for matters that you give your explicit consent. Your personal data regarding the processes that you don’t give your explicit consent will not be transferred.

In case of your explicit consent;

As Istanbul Ödeme Ve Elektronik Para A.Ş., your personal data specified to be transferred within the scope of your explicit consent in the Clarification Text for the processing and transferring your personal data will be shared with foreign intermediary institutions/financial institutions (in line with existing agreements with contracted foreign institutions) when necessary by taking all necessary administrative and technical protection measures for the purposes below:

• Sharing information with intermediary institutions/financial institutions with which we cooperate in order to ensure the realization of the transaction in foreign money transfer transactions (sending/receiving),
• Execution of service processes,

EXPLICIT CONSENT FORM

I have been duly informed by Istanbul Ödeme Ve Elektronik Para A.Ş. regarding the processing and transfer of my personal data in accordance with the Personal Data Protection Law No: 6698 and additional legislation.

Regarding the transfer of my personal data specified below, I hereby agree and declare to give my;

• Explicit consent to the transfer of my identity information,
• Express consent to the transfer of my contact details.

Identity of the Data Controller

Website : https://www.ist-pay.com/

Telephone Number : 0850 480 99 99 / 105

E-Mail Address : musteridestek@ist-pay.com

Address : Esentepe Mah. Büyükdere Cad. No: 173 1. Levent Plaza A Blok Kat:10 Şişli / İstanbul

1. Send money to your friends, family or people you know, never send money to people you don't know, to protect yourself from fraud and fraud.
2. Scammers may ask you to send money by stating that you have won a prize or by presenting themselves as a police/police chief/prosecutor on the phone. Please note that such cases will be fraud and fraudulent transactions. REMEMBER, a government official will never phone you and ask you to transfer money.
3. Fraudsters may demand money from you for the solution of a job promise/job opportunity or immigration-related issue, do not respect those who ask you to send them money for these purposes.
4. If you think you have been exposed to fraud and fraud, contact us at +90 212 280 66 95/97/98.
5. Reference number, amount, recipient/sender information, etc. for the Money Transfer transaction. Never share it with third parties. The reference number, amount, recipient/sender information regarding the Money Transfer transaction should not be shared with anyone, including the Company Personnel and the representative, except for money sending and receiving transactions, and should not be disclosed to persons other than the parties to the transaction through any means of communication. If the payment transaction is fraudulent or unauthorized due to the lack of protection of the said information by the User or due to the fault of the User, the User shall be liable for any direct and/or indirect damages arising from the said transaction.
6. Once your money transfer transaction has been paid to the recipient, no cancellation or refund can be made.
7. As Ist-Pay, no promotion or product information is sent to your e-mail address and mobile phone number. We do not ask you for personal information in any e-mail or SMS. Please do not trust such e-mails and SMS.
8. You can confirm that the service point you use is our official ist-pay representative on our website www.ist-pay.com. If you have a suspicious service point, please contact us and report it.
You can find our one-time service agreement here.
Istanbul Payment and Electronic Money Inc. Contact Information
Phone: +90 212 280 66 95/97/98
Postal Address: Esentepe Mah. Büyükdere Caddesi Levent Plaza Blok No: 173 Inner Door No: 34 SISLI/İSTANBUL
E-mail: info@ist-pay.com
Central Bank of the Republic of Turkey( CBRT) Contact Information Phone : (312) 507 50 00 Postal Address : Hacı Bayram Mah. Istiklal Cad. No:10 06050 Ulus Altindag Ankara

Dear individual customer, you have submitted a written application to our organization regarding the dispute (which is of an individual nature and therefore not within the scope of commercial activity) arising from the services we provide, within 2 years at the latest, from the date of the disputed transaction or action. and this application, within 20 days from the date of application; If no response has been received, within 60 days from the date of response, starting from the end of the 20-day period for which a response must be given, or if your application is answered negatively or if you do not find the response sufficient, Association of Payment and Electronic Money Institutions of Turkey (“TODEB”) Retail Customer In accordance with the Regulation on the Principles and Procedures of the Arbitration Committee (Link) , you have the right to apply to the TÖDEB Individual Customer Arbitration Committee.

You can download the application form to TÖDEB Retail Customer Arbitration Committee from the link below or www.todeb.org.tr available on the website. The form can be submitted electronically via www.todeb.org.tr address after filling in the relevant information and uploading the necessary documents.

https://todeb.org.tr/hakemheyetibasvuruformu/

Click here for all detailed information about applying to the TÖDEB Retail Customer Arbitration Committee ( https:// todeb.org.tr/page/bireysel-musteri-hakem-heyeti/56/ ). You can also view the Information Brochure (Link).

COOKIE POLICY AND PRIVACY

As İSTANBUL ÖDEME VE ELEKTRONİK PARA ANONİM ŞİRKETİ (VKN: 4810618489) (“Ist-Pay” or “Company”), we pay utmost attention to protect and process the personal data of our www.ist-pay.com (“Website”) visitors in accordance with the Law no.6698 on the Protection of Personal Data and Secondary Legislations (“Personal Data Protection Legislations”). Within the scope of the disclosure obligation arising from the Personal Data Protection Legislation of Ist-Pay, we would like to inform you about the general principles to be followed within the scope of the operation of our website, the cookies that we use, and your personal data processed through cookies with this “Cookie Policy and Privacy”.

Privacy and Information Security

a. The information provided at www.ist-pay.com is provided "as is" and "as available". Ist-Pay does not guarantee the accuracy, adequacy and completeness of this information and explicitly disclaims any liability arising from errors or omissions in this information. The Company provides no implied, express or statutory warranties, including but not limited with the warranties of non-infringement of rights of third parties, warranty of ownership, suitability for a particular purpose and/or absence of computer viruses with this information.

Ist-Pay takes all necessary security precautions and all kinds of technical and administrative measures on IT systems in order to prevent any unauthorized access to this information. Ist-Pay will inform the relevant users and authorized administrative authorities, as stipulated in the legislation, in case of a malicious and unauthorized access to personal data or any technical or administrative violations.

b. Occasionally, some of our electronic service channels may provide links to certain electronic media, such as third-party websites. The commitments and principles contained in this text are valid only for electronic service channels of Ist-Pay and do not cover other third-party environments. Other electronic media to be accessed via link may have different and unique privacy assurance and terms of use and these conditions may correspond to a lower level of security than those provided by Company. Ist-Pay cannot be held responsible for this situation. The accuracy of the information provided on these sites and the qualifications of other links provided from these sites have not been investigated and verified by Company. In this respect, Ist-Pay cannot be held responsible for the use of information, ethical principles, confidentiality principles, quality and service quality of third-party electronic media, used for advertising, banners, content or any other purpose on www.ist-pay.com and any material/intangible damages and losses that may occur in these environments.

c. Except for the negligence and responsibility during the use of the Website, Company and/or its employees cannot be held responsible for any damages and losses, including but not limited to any direct or indirect damages, losses and expenses arising directly or indirectly as a result of any performance failure, error, deficiency, interruption defect, delay in operation and/or transportation, computer virus and/or line and/or system failure, including but not limited to cases that cannot be expected from Ist-Pay or force majeure cases.

d. In your activities within the Website, you agree in advance that you will not produce and share content that is contrary to general morality and decency, contrary to the law, damaging the rights of third-parties, misleading, offensive, obscene, pornographic, damaging personal rights, violating copyrights, promoting illegal activities in any part of the site. Otherwise, the Website authorities may suspend or terminate such accounts and reserve the right to initiate legal proceedings, with the responsibility for the damage solely on your side. For this reason, the Company reserves the right to share information requests from judicial authorities regarding activity or user accounts.

e. In any dispute that may arise between you and Ist-Pay regarding the use of the Website, the books, records, documents and digital records of Ist-Pay will be accepted as evidence in accordance with the Code of Civil Procedure No. 6100, and you agree that you will not object to these records.

Which Type of Cookies Do We Use?

Cookies are small data containing files formed by a website in your device and contain data in name-value format. Accordingly, the cookies we use via your visit to our Website enable the information about your visit to be kept and used in your following visits.

The cookies formed and read only by our Website are the primary cookies. The content presented on our Website is also provided through domain names other than the domain name in the access address. In such circumstances each domain name creates a specific third-party cookie. Cookies we use in our Website and their purposes are as follows:

1. Session Cookies: Session cookies are valid during your visit to the Website and keep their validity until you close your internet browser.

2. Persistent Cookies: These cookies hide in your browser and keep their validity until their date of expiry or the time you delete. The information collected by these cookies cannot be used for marketing purposes. If the use of such cookies is not allowed, various parts of the Website may not be available.

3. Compulsory/Essential Cookies: They are compulsory for the website to work properly and for you to benefit from the services or features. The information collected by these cookies cannot be used for marketing purposes. If the use of such cookies is not allowed, various parts of the Website may not be available.

4. Functional and Analytical Cookies: These cookies are used to remember your choices during the visit, provide an effective use of the site, optimize the Website according to the requests and store the data about how you use the site. In compliance with its qualifications these cookies may contain your personal data. The language preference is one of the examples to the data processed via these cookies.

Through the third-party cookies in our Website, we aim to provide you a more productive and functional internet experience. In order to secure your personal data, Ist-Pay has a privacy agreement, which is compatible with the Personal Data Protection Legislations, with all these third-party service providers.

Purposes and Legal Reasons for Processing Cookies

Cookies; It is used to perform the basic functions required for the operation of the Website (for example, if the members who log in do not need to enter their password again while visiting different pages on the Website), to analyse the Website and to increase the performance of the Website (for example, integration of different servers on which the Website is working, determining the number of visitors to the Website and making performance settings accordingly or making it easier for visitors to find what they are looking for), to increase the functionality of the Website and to provide ease of use (for example, sharing to third-party social media channels on the Website, remembering the user name information or search queries in the next visit of the visitor to the Website).

Technical cookies are used to perform the basic functions necessary for the operation of the Website. Technical cookies, in order to provide the Website to you in a working manner, processed based on legal reasons stated in Article 5/2/c of the Personal Data Protection Law No.6698 (“PDPL” or “the Law”), “it is necessary to process personal data belonging to the parties of the contract, provided that it is directly related to the establishment or execution of a contract”. Other cookies, rather than technical ones, are processed on the basis of the legal reason that “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person” specified in Article 5/2/f of the Law.

In addition, the types of cookies that require explicit consent in your cookie preferences, which are transmitted to be managed within the scope of this Cookie Policy and Privacy, are processed based on the legal reasons of your explicit consent in Article 5/1 of the Law.

Storage and Accessibility of The Cookies

The cookies formed by our Website are stored in your computer through your internet browser used to access our Website. The content of these cookies is only accessible by our Website under the domain name www.ist-pay.com and if you use the same browser remote access is also possible.

Management and Usage of the Cookies

Your internet browsers automatically accept the cookies used in the sites you generally visit. The use of cookies in order to use our Website is not mandatory, but if you set your browser to block all cookies, the quality of your user experiences may fall and may prevent you from accessing our Website or benefit the various functions provided in our Website. In particular, technical cookies enable the Website to fulfill its basic functions (for example, the information you enter in the name of signing into the Website is transferred to Ist-Pay internet servers, enabling you to log in to the Website, saving your login information if you prefer, etc.). Since technical cookies constitute the technical operation of the Website, if you turn them off, it may be possible that some functions on the Website will not work properly.

You can configure your browser to block cookies for all or specific websites, warn when a cookie is formed, block the third-party cookies, or assume all cookies as session cookies. On the other side, you can delete cookies stored on your device through your browser or view the list of these cookies and their values and follow them. You can click on the browsers listed below and get a detailed information about its cookie management.

• Microsoft Edge: Please Click Here
• Google Chrome: Please Click Here
• Mozilla Firefox: Please Click Here
• Opera: Please Click Here
• Safari: Please Click Here

In Addition;

• Click here to turn off Cookies managed by Google Analytics.
• Click here to manage the personalized advertising experience provided by Google.
• In terms of cookies used by many companies for advertising activities, preferences can be managed through Your Online Choices.
• The settings menu of the mobile device can be used to manage Cookies on mobile devices.
• For more detailed information about cookies, you can visit www.aboutcookies.org or www.youronlinechoices.eu or use the “Privacy Badger” application (www.privacybadger.org/)
• Ist-Pay uses cookies within the scope of the Data Protection Statement in addition to this Cookie Policy and Privacy and reserves the right to change the terms.

Security of Your Personal Data

Cookies are not used for purposes other than the ones stated in this Cookie Policy and all related processes are carried out in accordance with Personal Data Protection Legislations. Your personal data obtained via cookies are processed, stored, and secured by Ist-Pay in compliance with Personal Data Protection Legislations. Data Protection Statemens specific to the process regarding the non-cookie personal data processing activities will be presented to you for your review where appropriate.

Your Right to Information

You may submit your requests within the scope of Article 11 of the Law "which regulates the rights of the data subject" to Ist-Pay in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller". You can review the PDPL Application Form, provided in this context and is available on the website.

"Cookie Policy and Privacy" will be updated by the Company occasionally due to varying laws, regulations or operational requirements.

This policy was updated on 02/05/2023.

İSTANBUL ÖDEME VE ELEKTRONİK PARA A.Ş. undertakes to protect all information assets in its systems that require critical international financial services and cyber security, to work in compliance with legislation, contracts and international standards within the framework of information security, to manage risks in the information security management system, to take corrective and remedial actions and to establish a sustainable system that continuously improves in accordance with the purpose of establishment.