Privacy And Security Policy

1. COLLECTED INFORMATION AND PURPOSES

T-Point processes the following information groups for the purpose of service delivery and system security:

• Contact Information: Email address, phone number
• Identity Verification Information: Passport image (only for name money transfer transactions)
• Usage Information: Transaction date, transaction type, transaction status
• Device Information: Application version, IP address, device model

The collected data is used only for providing T-Point services, ensuring security controls and fulfilling legal obligations.

3. DATA SECURITY MEASURES

Necessary technical and administrative security measures are taken to protect your personal data against unauthorized access, loss or disclosure.

These include:

• Server access controls
• Database encryption and authorization
• Access log records
• Data transmission security with SSL certificate

T-Point infrastructure is regularly audited and security protocols are updated.

5. DATA SHARING WITH THIRD PARTIES

T-Point may share some personal data with relevant service providers or certain third parties within the scope of legal obligations for the operation of the services it provides and the sustainability of user experience.

In this context, data is shared only in a manner limited to the transaction required by the service and for the purposes specified below:

Payment and money transfer services:

Within the scope of integrations with licensed payment institutions and electronic money companies (such as PayPorter, NKolay); necessary data may be shared in identity verification, transaction approval, virtual POS transactions and money transfer processes.

Tax refund and transaction matching processes:

In tax-free transactions, the information declared by the user to the store cash register (name-surname, country, passport number) is transmitted to T-Point only through integrated tax-free intermediary institution systems. This information is used in a limited manner for the purpose of verifying the refund record matching the user.

Cash register integrated closed-loop expenditures:

In expenditures made through store cash register systems integrated with T-Point, only transaction amount and T-Point wallet balance information is shared. Personal data transfer is not involved.

Business partnerships and service integrations:

In order to provide the service preferred by the user; necessary technical data may be shared with third parties such as digital SIM card providers (eSIM), loyalty and wallet platforms (such as MetropolCard), airport service providers (such as İGA), stores and other member businesses.

Reporting and analysis needs:

Only anonymized data is used in performance evaluations and system improvement studies conducted with business partners.

T-Point never shares personal data with third parties under any circumstances without user consent or an explicit legal obligation.

7. USER ACCOUNT DELETION

When the user wants to delete their account:

• If there is transaction history in the account, the account is only made passive.
• If there are no transactions in the account, all information is permanently deleted.

This process can be done manually upon user request or through the application interface.