Compliance and legal

KVKK — Türkiye's personal data protection law (Kişisel Verilerin Korunması Kanunu). Equivalent in scope to GDPR. See: 08.
GDPR — The EU's General Data Protection Regulation. Applies to EU residents' data regardless of where Yumo Yumo operates. See: 08.
MASAK — Türkiye's financial intelligence unit (Mali Suçları Araştırma Kurulu). Relevant for AML and crypto-specific reporting. See: 08.
MiCA — Markets in Crypto-Assets Regulation, the EU framework for crypto-asset issuance and service provision. Applies from 2024 onwards. See: 08.
Howey Test — The US Supreme Court test (SEC v. Howey, 1946) used to determine whether an asset is an "investment contract" and therefore a security. Relevant to INT's US classification. See: 08.
VAT / KDV — Value-added tax (Türkiye: Katma Değer Vergisi). Detected on receipts and used as a reconciliation signal. See: 02.