Personal data notice

Last updated: 28 October 2026

This notice explains how personal data is processed through the TigerTrade website and panel, in line with Turkish Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).

Data controller

Your personal data is processed by TigerTrade as data controller. Contact: [email protected]

Data we process

• Identity and contact: full name, email address, phone number, Telegram username.
• Account: username, an irreversible hash of your password, your two-step verification key, your CoinW user ID (UID).
• Trading: your bot settings and records of the trades your bots open and close.
• Connection: your CoinW API key (stored encrypted).
• Security: IP address, login times, failed login attempts.
• Requests: the content of messages you send through the contact form.

Purposes

• Reviewing your sign-up application and creating your account,
• Running bots on your CoinW account with the settings you choose and showing you the results,
• Keeping accounts and systems secure and preventing unauthorised access,
• Responding to requests sent through the contact form,
• Meeting legal obligations.

Legal bases

We process your data because it is necessary to enter into or perform a contract with you, to comply with legal obligations, for our legitimate interests provided they do not override your fundamental rights, and, where required, on the basis of your explicit consent (KVKK Article 5; GDPR Article 6).

How we collect data

Electronically, through the forms on the website (sign-up, login, contact), the actions you take in the panel and automatic system logs.

Sharing

We share personal data only as far as needed to provide the service, with:

• Netcup GmbH (Germany): server hosting,
• Cloudflare, Inc.: domain, secure connections and bot protection,
• Google LLC: sending email and serving fonts,
• CoinW: so your bots can trade, through the API key you create.

Some of these providers are located abroad, so your data may be transferred internationally in accordance with KVKK Article 9 and applicable GDPR safeguards. We never sell your data or share it for marketing. We may disclose it to competent authorities where the law requires.

Retention

We keep your data while your account is open and for any period required by law, then delete, destroy or anonymise it. Contact form messages are kept for up to two years after your request is resolved.

Your rights

You have the right to learn whether your data is processed, request information about it, learn the purpose of processing and whether it is used accordingly, know the third parties it is transferred to, request correction, deletion or destruction, request that these actions be notified to third parties, object to outcomes against you arising solely from automated analysis, and claim compensation for damage caused by unlawful processing (KVKK Article 11; GDPR Articles 15–22).

Send your requests to [email protected]. We respond free of charge within 30 days at the latest.