Privacy policy

1. Who is responsible and how to reach us

The data controller for the processing described here is the operator that provides PG Broadcast from Türkiye — the same operator that provides QuizBroadcast (quizbroadcast.com) — (the “Operator”, “we”).

You can reach us, including for requests under the KVKK, through the contact form on pgbroadcast.com.

2. Roles for broadcaster and viewer data

PG Broadcast processes data in two different roles:

• As data controller: we decide the purposes and means of the data we process to run broadcaster accounts, provide the app and the broadcast screen, keep the service secure and answer messages sent through the contact form.
• As data processor: we process viewers’ usernames, display names, profile pictures, chat messages and gift records from a broadcaster’s LIVE broadcast on that broadcaster’s behalf, to run the cups and polls they start. As a rule, the broadcaster who runs them is the data controller for this data.

The broadcaster is responsible for telling the viewers on their broadcast about PG Broadcast and for settling requests viewers make to them; we carry out the technical steps these requests need at the broadcaster’s request. Data being publicly visible on TikTok does not in itself remove the protection of the KVKK.

3. Your account, shared with the Operator’s other services

PG Broadcast signs you in with the Operator’s one account: an account created here also signs you in to QuizBroadcast, and an account created on QuizBroadcast signs you in here. The account record, which each of the Operator’s services reads and writes, holds:

• your email address
• a one-way hash of your password; we never store the password itself
• the language you choose, the country you choose when you sign up, and your account plan, which the Operator sets
• your TikTok username, if you enter it
• your logo, if your plan lets you upload one
• when the account was created, and the time of each registration and sign-in, with the Operator’s service it was on and whether it was a single sign-on; no IP address is kept with these
• when you ask for a password reset: only a hash of the reset key, when it was issued, when it expires (60 minutes later) and when it was used
• for single sign-on: a random identifier for each sign-in, shared by the services you reach from it by single sign-on, with when it was created and, to within a day, when it was last used; and, while you pass from one of the Operator’s services to another, only a hash of a one-time code that works for 60 seconds, with the two services it is between and a check value tied to the browser that asked for it

Because the record is shared, a change you make here — to your TikTok username, your language or your logo — is the one every service of the Operator sees, and your plan is the same on all of them. Once you are signed in to one of them, single sign-on (“Continue with …” on another’s sign-in page) signs you in to that other one without your password. A sign-in that single sign-on has carried from one service to another is one sign-in: signing out of any of them ends it on all of them. A password reset, made on any of them, signs your account out of all of them, in every browser.

The password-reset email contains the reset link and a few lines of fixed text, and is sent through Amazon SES.

4. What PG Broadcast keeps for itself

Everything else PG Broadcast keeps is its own: the Operator’s other services do not read it. The first time an account signs in to PG Broadcast, PG Broadcast opens its own record for it, and keeps:

• the secret key in your broadcast link
• your idle and ticker messages, and the broadcast screen’s design: its accent colour and whether the supporter boards are shown
• the polls you save: the question, the answers, how viewers vote (by typing a letter or by sending gifts) and the timer
• a record of each cup — one track and the three races run on it, one arena and the battle fought on it, one course and the three runs rolled down it, or one sky and the three launches flown under it: the game and the kind of cup, whether it has sound, whether a car race’s track has obstacles, the gift wings setting (off, or the diamonds a racer’s gifts during a race must reach), the number of seats and the auto-start setting you chose, the track, the arena, the course or the sky (the random number it was made from, its shape and, for an arena, the wind its battle opens in, for a sky, its kind and the winds of each launch), its status, how many of its races, runs or launches were played or whether its battle was, and when it started and ended; while the cup is unfinished, also its entrants and their results, described in section 5
• each broadcast session in which PG Broadcast was connected to your live chat: the TikTok username it was connected to, the type of connection, when it connected, when it was last seen connected, when it ended and why
• the gift records of your broadcasts, described in section 5

You can delete a saved poll, clear your messages and remove your TikTok username yourself in the app; on a plan that includes the designer you can also remove your logo and reset the design to the default. You can renew the secret key in your broadcast link at any time (“Reset link” on the dashboard).

5. Viewers: chat messages and gifts

In a LIVE broadcast that uses PG Broadcast, chat and gift events arrive through the connection service Euler Stream. Each carries the viewer’s TikTok username (or, if there is none, their numeric TikTok ID), their display name, the message or the gift, the time, and the address of their TikTok profile picture. Of the broadcast’s events, PG Broadcast reads only chat messages and gifts.

A chat message made only of numbers is an entry: in a car race, two to five numbers build the viewer’s car; in an artillery duel or a tower duel, two numbers — an angle and a power — aim the viewer’s tank, and in a tower duel the word red or blue, in English or in the show’s language, picks the viewer’s side; in an archer duel, one number from 0 to 100 sets how far the viewer’s arrows fly, and the same word red or blue picks their side; in mini-golf, the same two numbers swing at the viewer’s ball; in a marble run, two to five numbers make the viewer’s marble; in a rocket launch, two to five numbers build the viewer’s rocket; in a walker race, two to five numbers build the viewer’s walker. For each viewer who types an entry during a cup, PG Broadcast keeps their TikTok username (or numeric TikTok ID), their display name, the numbers of their latest entry, when they first typed one and so their place in the typing order, whether the broadcaster removed them, and the address of their profile picture. All of it is held in the server’s memory while the cup runs. So that a cup survives a restart of the server, all of it but the picture’s address is also written into the cup’s record, with each race’s distances — a demolition derby’s points, a hill climb’s heights, a cargo run’s crate-metres — the battle’s points, the health each tank was left with and the volley it was knocked out in, and in a tower duel each tank’s side and the damage it dealt, or in an archer duel each player’s side and the damage their arrows dealt, or the hole’s points, the strokes each ball took into the cup or how far from it each ball lay, or each run’s points, the time each marble took to the bottom and how far down it got, or each launch’s heights or distances and how each rocket’s flight ended, or each walk’s distances, how many times each walker fell and how each walk ended, and removed from it when the cup ends — after its third race, run, launch or walk, its battle or its hole, when the broadcaster ends it, or when it has waited twenty minutes in its lobby or between its races, runs, launches or walks, paused or not, with the broadcaster doing nothing. Until then, a cup that is paused, or waiting to be resumed after a restart, keeps it there. A picture’s address is never written to the database.

In a tower duel, PG Broadcast also keeps which side each viewer is on: the one they typed or, the first time they aim or send a gift during the cup without having typed one, the side with fewer viewers — so a viewer who only sends a gift is given a side too. An archer duel keeps it the same way before its battle; a viewer who first joins once the battle has started, by typing a number or sending a gift, is put on a side drawn at random. It is held in the server’s memory, written into the cup’s record with the rest and removed from it when the cup ends.

Any other chat message is not saved. Each message heard while a cup or a poll is running is passed live to the management screen’s chat feed, and kept nowhere else on the server.

To show a viewer’s picture on the broadcast screen, the server downloads it from TikTok the first time a screen asks for it — only while that viewer’s car, tank, ball, marble, rocket or walker, an archer duel’s boxes, or a tower duel’s thanks for their gift, is on that broadcaster’s screen, and in an archer duel only for the first 200 players to join it — and serves it to the screen itself, so the picture’s address never reaches a screen. A downloaded picture is served from the server’s memory for up to ten minutes and may be kept by the screen’s browser for as long; the server drops it when it is next asked for after that, when it needs the room, and when it restarts, and never writes it to disk. A screen shows the first letter of the viewer’s display name instead of a picture it cannot get.

During a poll, viewers vote by typing a letter or by sending gifts. Who chose which answer is held only in the server’s memory while the poll is open and is forgotten when it closes; only the totals stay on screen, and no vote is saved. A gift sent as a vote is recorded like any other gift.

What we do save is a record of each gift sent to the broadcaster: the sender’s TikTok username (or numeric TikTok ID) and display name, the gift and its name, how many were sent, the value of one in diamonds as TikTok reports it, when it arrived, the cup it arrived during, if any, and an identifier of the gift event, so that it is not counted twice. A gift sent to someone else in the LIVE — the other side of a match, for example — is not recorded.

In a tower duel’s battle, a gift also acts in the game. From its value the server works out what it does — the bricks it lays in the tower of the sender’s side, the shot power of the sender’s tank, how far it fills that side’s airstrike meter and whether it brings the sender’s knocked-out tank back — and holds the coins each viewer has sent in the battle in its memory until the battle ends; none of it is saved beyond the gift record. PG Broadcast never draws at random what a gift does. Each such gift is thanked on the broadcast screen for six seconds with the sender’s display name, profile picture and side and what the gift did, never what it was worth; the thanks is held in the server’s memory only while it shows.

In an archer duel, a gift before the battle gives a viewer who has no box yet one on the side with fewer players. During the battle a gift acts in the game: from its value the server works out what it does — a boost to the sender’s arrows for the next three volleys, refilling or doubling the health of their boxes, extra boxes and a repair of their side’s tower or, for a player whose boxes have all fallen, how far it brings them towards a comeback, the cost the broadcaster chose — and holds the coins each viewer has sent in the battle, and how far each knocked-out player is towards a comeback, in its memory until the battle ends; none of it is saved beyond the gift record. PG Broadcast never draws at random what a gift does, and the broadcast screen shows only what it did, never what it was worth.

From these records PG Broadcast keeps two supporter boards: the biggest gifters of the show in progress, held in the server’s memory until nothing is on air and no gift has arrived for six hours, and the biggest gifters across all of the broadcaster’s broadcasts, read from the saved gift records.

The gift records also decide who gets a seat in a cup’s races, its battle, its hole, its runs, its launches or its walks. Of the viewers who typed an entry in the cup, any who are among the three biggest gifters of the show in progress come first, then those who sent a gift since the previous cup ended, each by the diamonds they sent, then everyone else in the order they first typed. A seat taken for a cup’s first race, run, launch or walk is kept for all three, and one taken for a battle or a hole for the whole of it, unless the broadcaster removes the viewer. In a tower duel each side holds up to half the seats, given in that order among its own viewers. An archer duel has no seat limit: every viewer who joins plays, and the gift records decide nothing about who does.

In a car race whose cup has gift wings on, the gifts a racer sends while a race on a track is run count toward wings: once they add up to the diamonds the broadcaster set, 10 unless they chose otherwise, that racer’s car flies ahead of the field as the broadcaster’s Wings button flies it, and the count starts again. The count is held in the server’s memory for that race alone and never saved; a demolition derby gives no wings.

PG Broadcast never saves the text of any other chat message, or who wrote it. It does not collect payment for gifts and has no access to viewers’ payment details.

6. What the screens show

The broadcast screen is part of your stream, so everyone watching sees what it shows: your messages, your logo on a plan that includes one, a poll’s question and totals, and the cup. For each viewer with a seat it shows their display name — their TikTok username, if they have no display name — their profile picture, the numbers they typed and the car, the aimed tank, the ball, the marble, the rocket or the walker those numbers make; of the next ten waiting for a seat, their display names alone. It shows each race with every car carrying its driver’s picture and display name and, for six seconds as each car goes out of a race, its driver’s picture and display name and how it went out — flipped, stuck, off the track or its load lost — then the distances, the cup’s standings and, at the end, its top three and whoever drove its longest single race, with their picture and display name. In a hill climb it shows heights in place of distances, and whoever climbed highest in a single race in place of the longest. In a demolition derby it shows points in place of distances and no longest race, and, as each car goes out, in place of its card, the display name of the driver whose car knocked it out beside its own, and how many cars each driver has knocked out. In a cargo run it shows the crates on each car’s roof and, in place of distances, its metres once for every crate still aboard and how many are still aboard. In an artillery duel it shows the battle with every tank over its driver’s picture and, while the arena has room, under their display name, its gun — and, while the chat aims, a line along it — at their latest aim, its health and a mark once its driver has aimed for the coming volley, beside a board of the tanks by their drivers’ display names, latest aims and health; then, at the end, the cup’s standings by each tank’s points — with the tanks still standing level at first if you called a draw — and its top three, with their picture and display name. In mini-golf it shows the hole with every ball drawn as its player’s picture and, while the green has room, display name, beside a board of the leading balls by their players’ display names, the swing each takes next and how far each lies from the cup; then, at the end, the cup’s standings by each ball’s points, with the strokes it took into the cup or how far from it it lay, and its top three, with their picture and display name. In a tower duel it shows the battle as an artillery duel’s, every tank in its side’s colour beside its side’s tower, with each side’s name and airstrike meter, a mark on a tank whose viewer’s gifts raised its shot power, and a board of each side’s tanks; for every gift sent during the battle it shows, for six seconds, the sender’s display name and picture, their side and what the gift did — building the tower, the shot power it reached, an airstrike, a tank back in the battle — never the gift or what it was worth; then, at the end, the side that won, the cup’s standings by side and by the damage each tank dealt, its top three and the winning side’s top gunner, with their picture and display name. In an archer duel it shows the field: each side’s tower and its health, and a box for every player, with their picture — for the first 200 to join; later players have the first letter of their display name — its health, a bow, and, as it arrives, their display name; every volley’s arrows and the damage each hit does, the wind, the arrows’ speed and how many arrows the towers fire; for three seconds, the display names of the players a volley knocked out; and under the field, by display name, each side’s five players who have dealt the most damage. What a gift did shows on the boxes — a ring of fire on a boosted player’s boxes, a box coming down on a parachute, IS BACK over a player brought back — never the gift or what it was worth; then, at the end, the side that won, the cup’s standings by side and by the damage each player’s arrows dealt, its top three and the winning side’s top archer, with their picture and display name. In a marble run it shows each run with every marble carrying its viewer’s picture and display name, beside a board of the leading marbles by their viewers’ display names, with how far down each is or the time it took to the bottom; then each marble’s points, the cup’s standings and, at the end, its top three, with their picture and display name. In a rocket launch it shows the sky’s winds, then each launch with every rocket carrying its driver’s picture and, when there are few enough rockets, display name, beside a board of the leading rockets by their drivers’ display names and how high or far they have flown; then each rocket’s height or distance, the cup’s standings and, at the end, its top three and, in a range cup, whoever flew its longest single launch, with their picture and display name. In a walker race it shows each walk with every walker carrying its viewer’s picture and, over it, their display name and how many times it has fallen, beside a board of the leading walkers by their viewers’ display names, how far each has walked and its falls; then each walker’s distance, the cup’s standings and, at the end, its top three and whoever fell the most over the cup, with their picture and display name. A viewer you remove is taken off the screen for the rest of the cup; a car of theirs already racing stays in that race to its end with no name or picture, a marble of theirs rolls on to the run’s end with none, a tank of theirs fires its last shell with none and leaves the battle when it lands, a ball of theirs already rolling rolls to rest with none and leaves the hole, a rocket of theirs already flying finishes its flight with none, a walker of theirs walks on to the walk’s end with none, and an archer duel’s boxes of theirs leave the field.

If your plan includes the designer and you switch the supporter boards on — they are off by default — the broadcast screen also shows the display names and diamond totals of the five biggest gifters of the show in progress while a cup is on screen, and of all your broadcasts between cups. It never shows the text of a chat message.

The mobile screen, which you share while you go live from a phone, shows the broadcast screen and its own controls, and nothing more from the chat.

Your management screen also shows the latest chat messages and gifts as they arrive, each with its sender’s display name, and the supporters of the show in progress. For the cup it lists each entrant’s display name and TikTok username, their numbers and car, aim, swing, marble, rocket or walker — in a tower duel their side and shot power too, and in an archer duel their side, how many boxes they have, the damage their arrows dealt and, once knocked out, how far their gifts have brought them towards a comeback — their seat or place in the queue, and the diamonds they sent in the show and since the previous cup, with each race’s, the battle’s, the hole’s, each run’s, each launch’s or each walk’s results and the cup’s standings. It is yours alone unless you show it to someone.

7. Contact form

The contact form is on the website, at pgbroadcast.com/contact/. When you write to us through it, we save:

• your name, email address and message
• the page language and the time it was sent
• a shortened hash of your IP address made with a secret key — for an IPv6 address, of the network it belongs to (its first 56 bits); the IP address itself is not kept in this record
• a hash of the message text, to notice when the same message is sent again

We use this data to answer your message and to prevent abuse of the form. The message is kept beside the shared account records described in section 3, marked as sent to PG Broadcast; we read messages on the Operator’s status page, which shows the five newest sent to PG Broadcast, and in the Operator’s administration tool, and reply by email from the Operator’s Google Workspace account. We are not notified by email when a message arrives, and the server logs record only that one did, not what it says.

The contact page sets no cookies, keeps nothing in your browser, loads nothing from other sites and uses no analytics; its requests are recorded in the server logs like any other (section 8). When you start filling in the form, it asks PG Broadcast’s server for a signed ticket — the time it was issued, and nothing about you — which the form sends back with your message, so that messages sent by automated scripts can be told apart. Messages the form’s checks take for automated ones are discarded without being saved.

8. Server logs

For every request, the web server in front of the app and the website, and the app itself, record the date and time, the address requested — for the broadcast screen, an address that contains the key of your broadcast link, which the app’s own record masks — the IP address, details the browser sends such as its type, its language and the page it came from, the response status, size and duration and, when you are signed in, your account number. The app also records events such as sign-ins, password-reset requests and chat connection failures under your account number, never your email address. We use these logs to run the service, find errors and prevent abuse; they are kept in Amazon CloudWatch Logs and deleted automatically after 30 days.

Passwords, session cookies, password-reset keys, single sign-on codes and API keys are kept out of these logs, and so are viewers’ usernames, display names, messages and pictures. For rate limiting, IP addresses are also held in the server’s memory, for an hour at most.

9. Cookies and browser storage

PG Broadcast uses no advertising or analytics cookies, and none of its pages loads an analytics, advertising or tracking script. What it keeps in your browser, all of it on app.pgbroadcast.com, is:

race.sid cookie, strictly necessary

The session cookie, created when you sign in or create an account. Before you sign in, it is created only when a sign-in through another of the Operator’s services begins, and then it expires 10 minutes after its last use unless the sign-in completes. Scripts in the browser cannot read it, it is sent only over encrypted connections, and it expires 30 days after you last use it, and in any case 90 days after you signed in. The session record it points to on the server holds your account number, when you signed in and what lets a sign-out or a password reset on another of the Operator’s services end it — and, during a single sign-on, the values that check the sign-in comes back to the same browser.

race.locale local storage, preference

The interface language.

race.mobileBg local storage, preference

The mobile screen’s background.

race.startGame, race.startCup, race.startSounds, race.startObstacles, race.startGiftWings, race.startCars, race.startAuto local storage, preference

The game, the kind of cup, whether it has sound, whether a car race’s track has obstacles, the gift wings setting, the number of cars a race, tanks a battle, balls a hole, marbles a run, rockets a launch or walkers a walk and the auto start you last chose on the management or mobile screen, so that the next cup starts the same way.

race.ssoPeer local storage, preference

Once you have signed in through another of the Operator’s services, which one, so that the sign-in page can sign you in through it again without asking. It is deleted when you sign out of PG Broadcast.

race.ssoTried session storage, preference

A note that the open tab has already tried that once.

race.reloadPicks session storage, strictly necessary

When the management or mobile screen, left open for a day, reloads itself to update, the game, the kind of cup, whether it has sound, the number of cars, tanks, balls, marbles, rockets or walkers and the auto start chosen in its start box, the poll selected on it and its language, so that they survive the reload. It is read and removed straight after, and ignored once it is five minutes old.

Local storage stays in your browser until you delete it, and session storage until you close the tab. The browser does not send either to the server on its own: the start box’s choices reach the server only when you start a cup, and are then kept with it. You can view, delete or block cookies and site data in your browser settings; if you block the race.sid cookie you cannot sign in.

10. Purposes, legal bases and how we collect data

We collect personal data by electronic means: from what you enter in the app and what your browser sends while you use it, and — for viewers — from TikTok LIVE through the connection service. We process it on these legal bases:

• Establishing and performing the contract (KVKK Art. 5/2-c): opening and running your account and signing you in to the Operator’s services with it; keeping your settings, polls and cups; connecting to your live chat, reading its entries, dealing the seats and running the races, battles, runs, launches and walks, recording gifts and keeping the supporter boards; providing the broadcast, management and mobile screens, with the viewers’ cars, tanks, balls, marbles, rockets or walkers, names and pictures on the broadcast screen; applying plan features; and sending password-reset emails.
• Legal obligation (KVKK Art. 5/2-ç): responding to requests from competent authorities and answering requests under the KVKK.
• Establishing, exercising or defending a right (KVKK Art. 5/2-e): reviewing and preserving records in disputes and cases of abuse.
• Legitimate interest (KVKK Art. 5/2-f): keeping the service and accounts secure, preventing automated attacks and abuse of the contact form, finding errors, and answering messages sent through the contact form.

For viewer data we process on a broadcaster’s behalf, the broadcaster who runs the cup or poll determines the legal basis. Your right to object to processing based on legitimate interest is described in section 17.

11. Who we share data with

We do not sell personal data or use it for advertising. We share data only as far as the service requires, with:

• Amazon Web Services (AWS): the server, the encrypted disk the databases are kept on, backups (Amazon S3), server logs (Amazon CloudWatch Logs) and password-reset emails (Amazon SES), all in the Frankfurt region in Germany.
• Euler Stream: the intermediary service that connects to TikTok LIVE chat. To connect, it receives the broadcaster’s TikTok username, and it passes us the chat and gift events of the broadcast, with the viewer information described in section 5.
• TikTok: PG Broadcast sends TikTok no personal data. Euler Stream connects to your LIVE on our behalf, and the server downloads viewers’ profile pictures from TikTok’s image servers, at the addresses that arrived with their events. Your broadcast, its chat and its gifts are TikTok’s service, covered by TikTok’s own terms and privacy policy.
• The Operator’s other services: the shared account record described in section 3, which QuizBroadcast uses as PG Broadcast does.
• Viewers of your broadcast: what the broadcast screen shows, as described in section 6.
• Google: only if you use the contact form, as described in section 7.
• Competent persons and authorities: courts, law enforcement and regulators, where a legal obligation, a lawful request or the defence of a right requires it.
• An acquirer: if the service is transferred or reorganised, under a duty of confidentiality and only as needed; we will inform you if a transfer happens.

12. Transfers outside Türkiye

PG Broadcast is run from Türkiye, but its data is hosted outside Türkiye: the databases, server logs, backups and password-reset email are in AWS’s Frankfurt (Germany) region. Euler Stream may process data outside Türkiye, in other countries including the United States, and so may Google if you use the contact form.

These transfers fall under Article 9 of the KVKK. You can ask through the contact form which provider data is transferred to, to which country and on which transfer basis.

13. How long we keep data

• Session cookie and the server’s session record: 30 days from last use, or 10 minutes for one opened to begin a single sign-on; expired sessions are deleted automatically.
• Account record, sign-in records, PG Broadcast’s own record, cup records and broadcast sessions: for as long as the account is open.
• Saved polls, messages, logo and design: until you delete them or the account is closed.
• Password-reset records: a reset link works for 60 minutes, and its record is deleted automatically once it has expired, the next time a reset is asked for.
• Single sign-on records: a sign-in’s identifier until you sign out, reset your password or leave it unused for 32 days; one-time codes are deleted automatically after they expire.
• Chat messages: not saved, except the numbers of an entry, below.
• A cup’s entrants — each one’s username, display name, latest numbers, place in the typing order and whether they were removed — and their results: in the server’s memory while the cup runs, and in the cup’s record until the cup ends, as section 5 describes.
• Viewers’ profile pictures and their addresses: in the server’s memory only, never saved. An address is held with the cup’s entrants until the cup leaves the screens — when the next cup or poll starts, about five minutes after it ends, or when the server restarts; a downloaded picture is served for up to ten minutes, as section 5 describes.
• Poll votes: held in memory until the poll closes.
• Supporters of the show in progress: held in memory until nothing is on air and no gift has arrived for six hours.
• Gift records: there is currently no automatic deletion period; they are kept until they are deleted on request or the broadcaster’s account is closed.
• Contact form messages: after they are answered, until the Operator deletes them.
• Server logs: 30 days.
• Backups: the databases — PG Broadcast’s and the shared account file, but not the session records — are backed up every night, and a backup is kept for about 120 days at most; deleted data can remain in older backups until that period ends.

Where there is a legal retention obligation, an ongoing investigation or a legal claim, the relevant data may be kept for as long as needed with access restricted. A deletion on TikTok does not by itself remove a record that had already reached PG Broadcast.

14. Security

We apply technical and organisational measures in proportion to the risk:

• all connections to the app are encrypted with TLS
• passwords are hashed one way; password-reset keys and single sign-on codes are stored only as hashes, and reach the server only in the body of a request, never in a web address it records
• a password-reset link works once and for 60 minutes, and completing a reset signs out every session on all of the Operator’s services
• a single sign-on code works once, within 60 seconds, and only for the service and the browser that asked for it
• the session cookie cannot be read by scripts in the page and is sent only over encrypted connections, and every sign-in starts a new session
• the databases are kept on an encrypted disk, and backups in encrypted storage closed to public access
• each broadcaster’s data is separated by account in the database queries
• the Operator’s administration tool, which reads the shared account records and contact messages, is not reachable from the internet, only through an encrypted tunnel
• the Operator’s status page, which lists broadcasters by TikTok username or, where there is none, email address, with when PG Broadcast first saw their account, how many cups they started and whether they are live, and shows the five newest contact messages with their senders’ names and email addresses, opens only for the Operator’s own signed-in account; anybody else is answered “not found”
• chat messages, the diamonds each viewer sent, the state of the chat connection and what only the management screen shows are never sent to the broadcast screen; viewers’ picture addresses never leave the server, and a picture is served only behind the key in the broadcast link, while that viewer’s car, tank, ball, marble, rocket or walker is on that broadcast’s screen
• you can renew the key in your broadcast link at any time, and the old link stops working at once
• sign-in, registration, single sign-on, password-reset and contact-form requests are rate-limited, as are the app’s other API requests

No internet system is absolutely secure. Keep your password and your broadcast link secret, and tell us straight away about any suspicious access. If we learn of a personal data breach, we make the notifications the KVKK requires.

15. Automated decisions

Within the game, two things are worked out automatically, by fixed rules that are the same for everyone: which viewers get a seat, in the order section 5 describes, and how each race, battle, hole, run, launch or walk goes. In a car race, that is how far each car drives — a physics simulation of the numbers its viewer typed, on the cup’s track, which has no finish line and grows harder from 300 metres on and, unless the broadcaster turns them off, holds up to three obstacles in its first 300 metres, each stopping the cars on one side of the number it tests — a low tunnel a tall car, a ford a low one, a weak bridge a heavy one — until the car is stuck, overturned or fallen off, or 60 seconds are up — and the cup’s winner is the viewer whose car drove furthest over its three races. In a cargo run, each car carries the crates its viewer’s sixth number asks for, from one to six, a crate that falls off is lost, and the cup’s winner is the viewer whose car scored the most metres, counted once for every crate still aboard at the end of each race, over its three races. In a demolition derby, the cars share one bowl and push each other: a car is out once it is stuck, overturned or over the bowl’s rim, the rival whose car last drove into it shortly before is named as having knocked it out, the last car still moving wins the race, and a car scores a point for every rival it outlasts — of the cars still in when the time is up, the one that knocked out more outlasts the other; the cup’s winner is the viewer whose car scored the most points over its three races, or, if every other car is removed after the first race, the viewer whose car is left. In a hill climb, the track is one hill that gets steeper and steeper, with boulders and gaps on it that every cup lays anew, a car scores the height it climbed before it stalled, slid back, stuck on a boulder, fell into a gap or the 60 seconds were up, and the cup’s winner is the viewer whose car climbed highest over its three races. In an artillery duel, it is where each tank’s shells land and what they strike — a simulation of the aims its viewers typed, in the arena’s wind — and a tank scores a point for every rival it outlasts. The cup is one battle, fought until one tank or none is left standing, and its winner is the viewer whose tank scored the most: the last one standing or, if the last tanks are knocked out together, the one of them that had the most health as they fired, and of those level on that too, the one whose viewer first typed an aim — unless the broadcaster calls the battle a draw, which names no winner and puts the tanks still standing level at first. In a tower duel, it is where each tank’s shells land and what they strike, as in an artillery duel, how the blocks of the two towers break and fall — a physics simulation — and what the gifts sent during the battle did: the bricks they laid, the shot power they gave their senders’ tanks, the airstrikes they called and the tanks they brought back. A side loses when its tower’s crown falls below half the tower’s height or off its foundation, or when its last tank is out, both sides at once being a draw; the winning side’s viewers come first, each side’s ranked by the damage their tank dealt, and of those level, the one who first joined the cup. The cup is one battle, and its winner is the winning side’s viewer whose tank dealt the most — unless the battle is a draw, or the broadcaster calls one, which names no winner. In an archer duel, it is where each arrow lands and what it strikes — a simulation of the number each player typed, the broadcaster’s arrow speed and each volley’s wind — the arrows the towers fire, at distances drawn at random, the side drawn at random for a viewer who joins once the battle has started, and what the gifts sent during the battle did: the boosts, the health, the extra boxes, the towers repaired and the players brought back. A side loses when its tower falls or its last box does, both sides at once being a draw; the winning side’s players come first, every player ranked by the damage their arrows dealt, the towers’ arrows counting for nobody, and of those level, the one who first joined the cup. The cup is one battle, and its winner is the winning side’s player whose arrows dealt the most — unless the battle is a draw, or the broadcaster calls one, which names no winner. In mini-golf, it is where each ball rolls and whether it drops into the cup — a simulation of the swings its viewer typed, struck three times at most, a ball in the water going back to where it was struck — and a ball scores a point for every rival it beats: one in the cup beats every ball out of it, the fewer strokes it took the better and, of two in on the same stroke, the first to drop; the rest are ranked by how near the cup they lie, and of those level, the one whose viewer first typed a swing comes first. The cup is one hole, and its winner is the viewer whose ball scored the most. In a marble run, it is how each marble rolls down the cup’s course — a physics simulation of the numbers its viewer typed, among the other marbles, until it reaches the bottom, has not moved half a metre in five seconds, or 60 seconds are up — and a marble scores a point for every rival it beats to the bottom, those that do not get there ranked by how far down they got; the cup’s winner is the viewer whose marble scored the most over its three runs. In a rocket launch, it is how high each rocket climbs, in an altitude cup, or how far from the pad it lands, in a range cup — a simulation of the numbers its viewer typed, in the winds of the cup’s sky, until it tops its climb or lands or 60 seconds are up — and the cup’s winner is the viewer whose rocket climbed highest, or landed furthest, over its three launches. In a walker race, it is how far each walker gets across the cup’s terrain — a physics simulation of the numbers its viewer typed, which grows harder from 50 metres on, a walker that falls over getting back up two seconds later, until it has not moved half a metre in eight seconds or 60 seconds are up — and the cup’s winner is the viewer whose walker walked furthest over its three walks; the walker that fell the most is named the cup’s clumsiest, which decides nothing. These decide a game and nothing more: any prize is the broadcaster’s alone, as the terms of use say, and the broadcaster can remove a viewer from a cup and cut short the time a volley or a stroke gives viewers to aim. A poll only adds up votes.

16. Children

PG Broadcast accounts are only for people aged 18 or over. Younger viewers can, however, write in a TikTok LIVE chat; the broadcaster is responsible for setting age-appropriate rules for their audience and any prize. If you believe a child’s data is being processed unlawfully, tell us through the contact form.

17. Your rights

Under Article 11 of the KVKK you have the right to:

• learn whether your personal data is processed
• request information about it if it is
• learn the purpose of the processing and whether the data is used accordingly
• know the third parties in Türkiye or abroad to whom it is transferred
• ask for it to be corrected if it is incomplete or inaccurate
• ask for it to be deleted or destroyed where the conditions of Article 7 of the KVKK are met
• ask for corrections, deletions or destruction to be notified to the third parties the data was transferred to
• object to an outcome against you that results solely from analysis by automated systems
• claim compensation if you suffer damage because of unlawful processing

If you are in the European Economic Area or the United Kingdom, you may also have rights under the General Data Protection Regulation (GDPR) to access your data; to have it corrected, erased, restricted or ported; to object to processing based on legitimate interest; and to complain to the data protection authority of your country.

Where other laws require us to keep data, or a request would infringe the rights of others, we may not be able to meet a request in full or in part; in that case we explain why.

18. How to make a request, and closing your account

Send your request through the contact form, starting the message with “KVKK request”. State your name, your request, your PG Broadcast account’s email address or the relevant TikTok username if there is one, and the approximate date and broadcast the request concerns. If you apply on someone else’s behalf, a document showing your authority is needed. Do not send identity documents we have not asked for; if needed, we will tell you a secure way to verify your identity.

The app has no button to close your account yet: ask through the contact form. Your account is the same on all of the Operator’s services, so closing it closes it on all of them, and we then delete what each of them keeps for it, PG Broadcast’s records included. If you only want to stop using PG Broadcast, say so: we delete PG Broadcast’s own records and leave the account open for the others. Deleted data can remain in backups for the period given in section 13.

Requests are settled free of charge as soon as possible according to their nature, and within 30 days at the latest; if handling a request involves an additional cost, the fee in the tariff of Türkiye’s Personal Data Protection Board may be charged. If your request is refused, you find the answer insufficient, or it is not answered in time, you can complain to the Board within the periods set by the KVKK.

If you are a viewer and your request concerns a gift record from a broadcast, the fastest route is to contact the broadcaster who ran it first. If you cannot reach the broadcaster, you can contact us directly. Before disclosing broadcast data about someone, we verify that the identity, broadcast and record match.

19. Changes to this policy

We update this policy when the service, the data flows, our providers or the law change; while PG Broadcast is in early access, expect it to change with the games. The date of the last update is shown at the top of the page. We announce a change that materially affects your rights or the purposes of processing on this page, and by email where appropriate, before it takes effect.