Terms of service and use

Note: This is a courtesy translation. In case of any discrepancy, the Turkish version is legally binding.

Last updated: 9 October 2026

1. Parties

This Service and Use Agreement (the "Agreement") is entered into, upon the Customer's approval given electronically, by and between, on the one hand, the party whose details are set out below

Trade name

Erşan Dayankaç – Kilitkutu Teknoloji Çözümleri

Address

Hacı Abdi Mah. Sofa Sk. No:40/7 Battalgazi / Malatya

Phone

+90 (422) 333 01 12

Email

[email protected]

KEP address (Turkish registered electronic mail)

—

Tax office / Tax number

— / —

MERSİS no. (Central Registry System number)

—

("Kilitkutu" or the "Provider"), and, on the other hand, the natural or legal person who creates an account through the customer panel, places an order or otherwise uses Kilitkutu services (the "Customer"). Kilitkutu and the Customer are together referred to as the "Parties".

2. Definitions

Service

Each of the domain name registration/transfer/renewal, web hosting (shared, cPanel/Plesk), reseller hosting, VPS, VDS, game server, dedicated (physical) server, SSL certificate, business email and trademark registration consultancy services offered by Kilitkutu.

Reseller hosting

A web hosting service that enables the Customer to create separate web hosting accounts within the disk, traffic and account quota allocated to it and to offer them to third parties under its own brand.

VPS (Virtual Private Server)

A virtual server created using virtualisation technology, whose operating system and administrator access belong to the Customer, and whose processor (vCPU) resources are used on a shared basis with other virtual servers on the same physical server.

VDS (Virtual Dedicated Server)

A virtual server created using virtualisation technology, whose processor, memory and disk resources specified in its package are provided to the Customer on a dedicated basis.

Game server

A game-oriented VDS service configured for hosting multiplayer game servers, with network and hardware features designed for game traffic.

Dedicated (physical) server

A physical server whose hardware is leased in its entirety to a single Customer and which is hosted within Kilitkutu's data centre infrastructure.

Server Services

All of the VPS, VDS, Game Server and Dedicated (Physical) Server services.

Customer panel

The online management panel, operating at an address separate from the website, through which orders are placed, invoices are viewed, services are managed and support requests are submitted.

Service period

The billing period (monthly, annual, etc.) selected in the order and for which the fee has been paid.

Registrar / Registry operator

The ICANN-accredited registrar through which the domain name is registered and the registry operator of the relevant extension; for .tr extensions, TRABİS (the .tr Network Information System).

Registrant

The natural or legal person in whose name the domain name is registered.

Scheduled maintenance

Work carried out for the purpose of updating, securing or improving the infrastructure, announced in advance by email.

Abuse

Any use in breach of the Acceptable Use Policy set out in Article 13 of this Agreement.

3. Subject and scope of the Agreement

The subject of this Agreement is to determine the rights and obligations of the Parties with respect to the provision of the Services ordered by the Customer. The technical specifications, resource limits and prices of the Services are set out on the relevant service page and in the order summary; these form an integral part of the Agreement. The Agreement applies to all domain name, web hosting, reseller hosting, Server Services (VPS, VDS, Game Server and Dedicated Server), SSL certificate, business email and trademark registration consultancy services; special terms relating to specific services are set out in Articles 7 to 11. Where the Customer is a consumer, the Distance Sales Agreement and the Preliminary Information Form also apply; in the event of a conflict between those documents and this Agreement, the provision more favourable to the consumer shall apply.

Software development, mobile application, custom web-based software, corporate website and e-commerce website design, and digital marketing (advertising management) services are outside the scope of this Agreement; the scope, delivery schedule, fee, payment plan, acceptance process, transfer of source code and intellectual property rights, confidentiality and maintenance terms of these services are determined by a separate project or service agreement signed by the parties. In the digital marketing service, advertising expenditure is paid directly by the Customer to the relevant advertising platform; Kilitkutu does not guarantee any particular sales or results. The provisions of this Agreement additionally apply to software, website, domain name and email services hosted on Kilitkutu infrastructure within the scope of a project.

4. Commencement of service and account security

1. The Service is activated once the order has been placed and receipt of payment into Kilitkutu's accounts has been confirmed. For payments made by bank transfer/EFT, the invoice or order number must be entered in the description field; bank account details are provided on the Bank Accounts page.
2. The Customer agrees that the information provided during ordering and registration is accurate, up to date and complete, and that it will promptly update such information through the customer panel in the event of any change. The Customer is responsible for the consequences of inaccurate or incomplete information.
3. The Customer is responsible for keeping confidential the passwords for the customer panel, hosting control panel, server administrator (root/administrator), FTP, email and databases. The use of strong passwords and, where offered, the activation of two-factor authentication is recommended.
4. All transactions carried out through the Customer account are deemed to have been carried out by the Customer. If unauthorised access is suspected, the Customer must notify Kilitkutu immediately.
5. For Server Services, the operating system, software updates, firewall configuration and server security are the Customer's responsibility unless a management service is purchased separately (see Article 9).
6. For the purposes of service and billing security, Kilitkutu may request identity or authorisation verification from the Customer and may put the transaction on hold until verification is completed.

5. Fees, payment and renewal

1. Unless otherwise stated, prices on the website exclude VAT ("+VAT"). The total amount including taxes is shown in the order summary and on the invoice.
2. Payments are made by bank transfer/EFT to Kilitkutu's bank account listed on the Bank Accounts page or, where offered in the customer panel, by credit/debit card. Card payments are collected through licensed payment institutions; card details are not stored by Kilitkutu.
3. Unless otherwise selected, Services are renewed at the end of the period for the same duration. The renewal invoice is issued to the customer panel before the service expiry date, and renewal reminders are sent to the Customer's registered email address. The Customer may cancel through the customer panel, before the end of the period, any service it does not wish to renew.
4. Kilitkutu may change its prices prospectively. Price changes do not affect a period that has already been paid for; the new price for the renewal period is shown on the renewal invoice. For domain name, SSL and licence fees, price increases originating from the registry operator, certificate authority or licence provider, as well as exchange rate fluctuations, may be reflected in the renewal price.
5. The following schedule applies to overdue invoices:
   • Due date: A reminder email is sent for the unpaid invoice.
   • 7th day after the due date: The Service is suspended (access to the account is disabled; data is retained).
   • 30th day after the due date: The Service is terminated and all data in the account is irreversibly deleted. The Customer is notified by email before suspension and deletion.
   This schedule does not apply to domain names; upon expiry, domain names are subject to the registry operator rules set out in Article 7.
6. A suspended Service is reactivated upon payment of the outstanding amount. Recovery of deleted data is not guaranteed.

6. Service level (SLA) and scheduled maintenance

1. Kilitkutu commits to a target of 99.9% availability (uptime) on an annual basis for web hosting, business email and server services.
2. Scheduled maintenance announced in advance by email is not taken into account in calculating this rate. Where urgent security updates are required, advance notice may not be possible; in such cases the Customer is informed as soon as possible.
3. Interruptions arising from the Customer's own software, configuration, content or resource overuse; from operations carried out on the Customer's instructions; from suspension due to a breach of the Acceptable Use Policy; from problems in third-party networks, DNS providers or the Customer's internet connection; and from force majeure are not included in the availability calculation.
4. In the event of a hardware failure on physical servers, the time required to replace the faulty part is subject to the response terms stated on the relevant product page.

7. Special terms for domain name services

1. Kilitkutu provides domain name services as a reseller of an accredited registrar. Domain name registration, transfer and renewal are subject, for .tr extensions, to the regulations of the Information and Communication Technologies Authority (BTK) and the TRABİS rules and, for generic top-level domains (gTLDs), to ICANN policies and the rules of the relevant registry operator. The Customer is deemed to have accepted these rules.
2. Domain names are registered on a "first come, first served" basis. Receipt of payment does not guarantee that the domain name has not previously been registered by someone else or will not be rejected by the registry operator; if registration does not take place, the amount paid is refunded.
3. The Customer is responsible for ensuring that the registrant and contact details are accurate and up to date. Verification of this information may be required under ICANN rules; if verification is not completed in time, the domain name may be suspended by the registrar. Registrant details may be published in Whois/RDAP systems in accordance with the applicable rules.
4. The domain name is registered in the name of the person shown as the registrant. If the Customer requests registration in the name of another person, the Customer confirms that it has obtained the necessary authorisation from that person.
5. Domain name disputes are resolved, for gTLDs, under the ICANN Uniform Domain-Name Dispute-Resolution Policy (UDRP) and, for .tr extensions, under the dispute resolution policy established within the framework of TRABİS, before authorised dispute resolution service providers and judicial authorities. Kilitkutu is not a party to such disputes and is obliged to implement the decisions rendered.
6. The Customer is responsible for ensuring that the domain name does not infringe any trademark or other rights of third parties.
7. Expired domain names may remain on hold for a period in accordance with the rules of the relevant registry operator and may then enter a redemption period. Recovery of the domain name during this period is subject to an additional redemption fee set by the registry operator. Once the redemption period has also elapsed, the domain name is released and may be registered by someone else; Kilitkutu cannot be held liable for this.
8. Domain name transfers are subject to the transfer lock periods and authorisation (EPP/transfer) code requirements stipulated in the applicable rules. The Customer has the right to transfer the domain name to another registrar at any time in accordance with the rules.

8. Special terms for SSL certificate, licence and trademark registration services

1. Paid SSL certificates are issued by Sectigo; the terms of the free SSL certificates included in hosting packages are set out within the scope of the package. Issuance of a certificate depends on the Customer completing the certificate authority's validation processes (domain, organisation or extended validation). The certificate may be revoked in the event of a breach of the certificate authority's rules.
2. Control panel and operating system licences (cPanel, Plesk, etc.) are subject to the licence provider's terms of use; if the licence terms change, Kilitkutu notifies the Customer of the changes.
3. Within the trademark registration consultancy service, Kilitkutu provides services relating to preliminary research, preparation of the application file, filing of the application with TÜRKPATENT (the Turkish Patent and Trademark Office) and monitoring of the process. The decision on trademark registration rests with TÜRKPATENT; Kilitkutu does not guarantee that the trademark will be registered or that no opposition or refusal decision will be issued. Official fees are separate from the consultancy fee and are borne by the Customer.
4. The information in the trademark application (applicant, trademark specimen, classes of goods and services) becomes final upon the Customer's approval. The Customer is responsible for the consequences arising from the information in an application filed with the Customer's approval.

9. Special terms for Server Services

1. Unmanaged service principle: Server Services are provided on an unmanaged basis unless a management service is purchased separately. Root/administrator access to the server belongs to the Customer. Installation, configuration and licensing of the operating system and software, application of security updates, management of the firewall and user permissions, and the security of all services running on the server are the Customer's responsibility.
2. Kilitkutu's responsibility is to keep the hardware, the virtualisation layer, the power and cooling infrastructure and the server's network connection in working order. At the Customer's request, Kilitkutu may provide setup support for installation or reinstallation of the operating system and basic configuration; whether this support is chargeable and its scope are communicated on the relevant service page or to the Customer before the work is carried out. Provision of such support does not transfer responsibility for server management to Kilitkutu.
3. IP addresses: IP addresses allocated with Server Services are under Kilitkutu's management, and the Customer is granted only a right of use for the duration of the service. The Customer may not claim any ownership or transfer rights over these IP addresses and may not move them to another provider. IP addresses are reclaimed upon termination of the service for any reason. In the event of technical necessity or a decision of a competent authority, an IP address may be changed, with prior notice wherever possible. For requests for additional IP addresses, a justification of use may be requested in accordance with IP address allocation policies.
4. DDoS protection: The DDoS protection provided is based on reasonable efforts; it is not guaranteed that attacks of every type and size will be blocked. In the case of attacks that exceed the protection capacity or threaten the infrastructure or other customers, Kilitkutu may temporarily disable access to the targeted IP address for the duration of the attack by means of null-routing (dropping the traffic at network level) and informs the Customer. This period is not included in the availability calculation under Article 6.
5. Prohibited uses: In addition to the Acceptable Use Policy in Article 13, the following are prohibited through Server Services: port or network scanning directed at other systems; sending unsolicited bulk email (spam); operating an open relay or an open DNS resolver; IP address spoofing; using the server as an open proxy or VPN service that enables anonymised unlawful activities; or operating such services in a manner open to abuse. VPN or proxy services set up by the Customer for its own use and with controlled access are not covered by this prohibition.
6. Resource usage: Since processor (vCPU) resources in VPS services are shared with other virtual servers on the physical server, sustained and excessive processor usage that affects other customers may be restricted under Article 12. In VDS, Game Server and Dedicated Server services, the resources allocated under the package are reserved for the Customer's use.
7. Hardware failure on physical servers: Replacement of failed hardware components on dedicated (physical) servers is Kilitkutu's responsibility, and no additional fee is charged for failures not caused by the user. The replacement time is subject to the response terms stated on the relevant product page. RAID configuration and data recovery are not guaranteed against data loss that may occur during disk failure or replacement.
8. Data backup: For Server Services, backing up data is the Customer's responsibility unless a backup service is purchased separately. The Customer is obliged to keep an up-to-date backup of its data in an environment outside the server.
9. Upon termination of the service, the data on the server disks is deleted and the disk space is prepared for reuse before being allocated to other customers.

10. Special terms for game servers

1. Since the Game Server service is a game-oriented VDS service, the provisions of Article 9 also apply to this service.
2. The following uses of the Game Server service are prohibited:
   • Operating private servers and game server emulators without the permission of the game's rights holder,
   • Hosting or distributing pirated, unlicensed or modified game files, client or server software without the rights holder's permission,
   • Developing, hosting, distributing or selling cheat, bot or exploit software,
   • Any use that breaches game publishers' end user licence agreements (EULAs) and terms of use,
   • In-game or game-related gambling and illegal betting activities.
3. The Customer is the content provider with respect to the content hosted on its server. If Kilitkutu receives a duly made notification from the rights holder or competent authorities under Law No. 5846 on Intellectual and Artistic Works and Law No. 5651, it forwards the notification to the Customer. Pursuant to Additional Article 4 of Law No. 5846, the Customer is obliged to remove the infringing content within three days upon the rights holder's application. If the infringement is not remedied in time, if the infringement is manifest, or if there is a decision of a competent authority, Kilitkutu may remove the relevant content, block access to it or suspend the service.
4. The player capacity stated in the packages is an estimated value and does not constitute a guarantee. Actual capacity varies depending on the type and version of the game, the mods, plugins and maps used, world size, player behaviour and the Customer's configuration.
5. Latency (ping) values experienced by players are not guaranteed, as they depend on the players' own internet connections and locations. Incompatibilities arising from game publishers' software updates, licence terms or infrastructure changes are beyond Kilitkutu's control.

11. Reseller services

1. For Customers who resell reseller hosting or other Services to third parties under their own brand, the Reseller Agreement applies in addition to this Agreement. In the event of a conflict between the two texts, the provisions of the Reseller Agreement prevail in matters relating to the reseller relationship.
2. A Customer who directly orders a reseller hosting package is deemed a reseller with respect to obligations relating to its End Users (Reseller Agreement, Article 5), even if it has not separately applied for the reseller programme.
3. A Customer using the reseller hosting service is responsible for ensuring that the sub-accounts it creates and the third parties using those accounts comply with this Agreement and the Acceptable Use Policy. If Kilitkutu detects a breach in a sub-account, it will first suspend only the relevant sub-account and inform the Customer.
4. Kilitkutu is not a party to agreements concluded by the Customer with third parties.

12. Backups, resource usage and fair use

1. Backups taken by Kilitkutu in its hosting services are a service convenience for disaster recovery purposes; the existence or completeness of backups, or the ability to restore to a particular date, is not guaranteed. The obligation to take and keep an up-to-date backup of the data ultimately rests with the Customer. For Server Services, no backups are taken unless a backup service is purchased separately.
2. Shared hosting services are provided within the resource limits specified in the relevant package (processor, memory, concurrent processes, disk, inodes, email sending limit, etc.) in order to protect the quality of service for other customers using the same server. Features advertised as "unlimited" are provided for ordinary website use and are subject to the fair use principle.
3. If excessive resource usage that jeopardises the overall performance of the server is detected, Kilitkutu may inform the Customer and request that usage be reduced or that the Customer move to a suitable package; in emergencies affecting other customers, it may temporarily restrict the relevant process or account.
4. Hosting accounts may not be used as file storage, backup archive or file sharing space.
5. For the business email service, the mailbox quota, number of accounts and sending limits are specified in the package. Spam filters may also flag legitimate messages; Kilitkutu cannot be held liable for messages that cannot be delivered due to filtering or the policies of recipient servers. Upon termination of the service, mailboxes and their contents are deleted.

13. Acceptable use policy

The Customer agrees to use the Services in compliance with the legislation of the Republic of Türkiye, international rules and public morality. The following uses are strictly prohibited:

• Sending unsolicited bulk email (spam) or commercial electronic messages in breach of Law No. 6563 (on the Regulation of Electronic Commerce), or operating an open relay,
• Phishing, fake websites, fraud and identity theft content,
• Hosting or distributing malicious software (malware, viruses, ransomware, botnet command-and-control servers),
• Hosting content in breach of Law No. 5846 on Intellectual and Artistic Works, distributing pirated software/media, and trademark infringement,
• Denial-of-service (DoS/DDoS) attacks, port scanning, unauthorised access attempts and other cyber attacks,
• Cryptocurrency mining and similar resource-intensive operations,
• Content constituting a criminal offence under Law No. 5651, as well as child abuse, obscenity, gambling and illegal betting content,
• Unlawful collection, processing or publication of personal data,
• Any use that disrupts the services of other customers or third parties.

14. Hosting provider obligations under Law No. 5651

1. With respect to its hosting services, Kilitkutu is a hosting provider within the meaning of Law No. 5651 (on the Regulation of Publications on the Internet) and the related legislation. A hosting provider is not obliged to monitor the content it hosts or to investigate whether any unlawful activity is taking place.
2. The Customer is responsible, in its capacity as content provider, for the hosted content.
3. If Kilitkutu is notified of unlawful content in accordance with the Law, it removes the content or blocks access to it to the extent technically possible, and implements decisions of competent authorities.
4. Kilitkutu is obliged to retain traffic information relating to the hosting services it provides for the periods stipulated in the legislation (not less than 1 year and not more than 2 years) and to ensure the accuracy, integrity and confidentiality of such information. This information is shared only upon request by competent authorities.

15. Personal data

Kilitkutu processes the Customer's personal data in accordance with Law No. 6698 on the Protection of Personal Data (KVKK). Detailed information is provided in the KVKK Privacy Notice. With respect to personal data contained in content that the Customer hosts on hosting, business email, server or software services hosted on Kilitkutu infrastructure, the Customer is the data controller; Kilitkutu accesses such data only for the technical provision of the service, for fulfilling a support request or where legally required, and takes the necessary technical and organisational measures.

16. Limitation of liability

1. Kilitkutu provides the Services with the diligence of a prudent merchant. It is not guaranteed that the Services will be uninterrupted or error-free, or that they will be fit for any particular purpose of the Customer.
2. Kilitkutu is not liable for damage arising from the Customer's content or software, the Customer's failure to ensure password security or to take backups, attacks by third parties (provided that the necessary reasonable precautions have been taken), or the acts and decisions of registry operators, certificate authorities, licence providers and public authorities.
3. To the extent permitted by law, Kilitkutu has no liability for indirect damage, loss of profit, loss of data or loss of reputation, and Kilitkutu's total liability in connection with any service is limited to the fee paid by the Customer for the service giving rise to the damage during the 12 months preceding the date of the damage.
4. This article does not limit Kilitkutu's liability arising from its wilful misconduct or gross negligence, nor the rights of consumers under mandatory legislation.

17. Force majeure

Events beyond the control of the Parties that cannot be prevented by reasonable measures, such as natural disasters, fire, epidemics, war, terrorism, civil unrest, strikes, general outages of energy or communication infrastructure, large-scale cyber attacks, and decisions and actions of public authorities, are deemed force majeure. The Parties' obligations are suspended for the duration of the force majeure. If the force majeure lasts longer than 60 days, either Party may terminate the Agreement.

18. Term and termination of the Agreement

1. The Agreement remains in force for the service period selected for each Service and is extended on the same terms upon renewal.
2. The Customer may terminate its service at any time by submitting a cancellation request through the customer panel. Unless otherwise requested, cancellation takes effect at the end of the period; any refund for unused time is subject to the provisions of the Refund and Cancellation Policy.
3. Kilitkutu may terminate the Agreement if the Customer acts in breach of the Agreement, in particular the Acceptable Use Policy, fails to fulfil its payment obligations or provides false information, or in the event of a decision of a competent authority.
4. If Kilitkutu decides to discontinue a service entirely, it notifies the Customer at least 30 days in advance and refunds the fee for the unused period.
5. In the event of termination of the Agreement for any reason, the Customer is obliged to retrieve its data before the termination date. After termination, the data is deleted.

19. Right of withdrawal and refunds

For Customers who are consumers, the provisions on the right of withdrawal are set out in the Distance Sales Agreement and the Preliminary Information Form. Services performed instantly in an electronic environment are excluded from the right of withdrawal pursuant to Article 15 of the Regulation on Distance Contracts. Nevertheless, for shared web hosting services (excluding reseller hosting), Kilitkutu offers a refund within 15 days of the date of purchase. Refund terms and exceptions are set out in the Refund and Cancellation Policy.

20. Notices and service of notifications

1. Notices from Kilitkutu to the Customer are sent to the email address registered in the customer panel or announced through the panel, and are deemed to have been made at the moment of sending. The Customer is obliged to keep its email address up to date.
2. Notices from the Customer to Kilitkutu are made in writing through a customer panel support request, to the email address [email protected], to the KEP address — or to the address Hacı Abdi Mah. Sofa Sk. No:40/7 Battalgazi / Malatya.
3. The addresses specified by the Parties in the agreement or in the panel are their valid addresses for service unless a change is notified in writing.

21. Evidence agreement

The Parties agree that, in disputes arising from this Agreement, Kilitkutu's electronic records, customer panel transaction logs, email correspondence and server logs shall constitute evidence pursuant to Article 193 of the Code of Civil Procedure No. 6100. This provision does not remove consumers' right to submit counter-evidence.

22. Dispute resolution

This Agreement is governed by Turkish law. The Courts and Enforcement Offices of Malatya have jurisdiction over disputes arising from the Agreement. However, where the Customer is a consumer, the right to apply, within the monetary limits determined annually by the Ministry of Trade pursuant to Law No. 6502 on Consumer Protection, to the Consumer Arbitration Committees and Consumer Courts at the consumer's place of residence or where the transaction was carried out is reserved. In commercial disputes, applying to a mediator before filing a lawsuit is a precondition for bringing an action pursuant to Article 5/A of the Turkish Commercial Code No. 6102.

23. Amendments and entry into force

1. Kilitkutu may update this Agreement in line with legislative changes, changes in service structure or security requirements. Material changes are notified to the Customer by email at least 15 days before they take effect. If the Customer does not accept the change, it may terminate the Agreement within this period; in that case the fee for the unused period is refunded.
2. The invalidity of any provision of the Agreement does not affect the validity of the other provisions.
3. This Agreement, consisting of 23 articles, enters into force at the moment it is approved electronically by the Customer. The current text of the Agreement is published on this page.