KVKK Privacy Notice

Last updated: May 25, 2026

Pursuant to the Law on the Protection of Personal Data No. 6698 (“KVKK”), LolBypass (“we,” “the company”) hereby informs you regarding the processing of your personal data as follows.

1. Data Controller The data controller is LolBypass, which operates through the domain name https://lolbypass.com. Contact: [email protected].

2. Processed Personal Data - Identification information: first name, last name (if provided during checkout) - Contact information: email address, optional phone number - Customer transaction information: order number, order details, purchase history - Payment transaction information: payment type, order amount, billing information (we do not process card information; all payments are processed through Stripe Inc.) - Transaction security information: IP address, browser information, cookie data, session logs - Marketing information: (only with explicit consent) cookie data and campaign preferences

3. Purposes of Processing - Establishment and performance of the contract: delivery of the digital license, order tracking, invoicing - Compliance with legal obligations: tax regulations, e-Archive records, consumer rights - Provision of customer support services - Information security processes: fraud prevention, account security, log retention - Marketing activities (only with your explicit consent)

4. Legal Basis Processed under Article 5/2 (a, c, ç, e, f) and Article 6/2 of the KVKK; based on the legal grounds of the conclusion and performance of the contract, legal obligations, legitimate interests, and explicit consent.

5. Transfer Your personal data may be transferred to the following third parties: - Stripe Inc. — for payment processing - Cloudflare Inc. — for hosting infrastructure - Resend (transactional email) — for order and delivery notifications - Google Analytics (only if you consent) — website usage statistics - Legal authorities — when required by law

Transfers are made in accordance with the conditions specified in Articles 8 and 9 of the KVKK.

6. Retention Period - Order and invoice data: 10 years as required by tax legislation - Account information: as long as your account is active; 3 years after closure - Marketing data: until you withdraw your consent - Log records: 1 year

7. Your Rights (Article 11 of the KVKK) You have the following rights: - To learn whether your personal data is being processed - To request information if it has been processed - To learn the purpose of processing and whether it is being used appropriately - To know the third parties to whom your data has been transferred domestically or internationally - To request the correction of incomplete or incorrect data - To request the erasure or destruction of your data - To request that third parties to whom your data has been transferred be notified of the actions taken - Object to analysis conducted solely by automated systems - Request compensation for damages if you have suffered harm due to unlawful processing

To exercise your rights, you may submit a written request to [email protected]. Your request will be responded to within 30 days at the latest.

8. Data Security Your license keys are stored using AES-GCM 256-bit encryption. Your passwords are hashed using PBKDF2-SHA256 in a way that makes them irreversible. All traffic is encrypted using TLS 1.3.

9. Changes We may update this privacy notice. You will be notified via email of any significant changes.