You may have the right to object to our processing of your personal information. If you wish to do so, pleasecontact us, and we will consider your request.

Consent Withdrawal

To the extent provided by applicable laws and regulations, you may withdraw consent you previously provided to us for certain processing activities bycontacting us . Where consent is required to process your personal information, if you do not consent to the processing or if you withdraw your consent we may not be able to deliver the expected service. Please note that the right to withdraw consent is only available if the legal basis for processing information is consent.

Announcements

We may from time to time send you announcements when we consider it necessary to do so (for example, when we temporarily suspend access to the Service for maintenance, or security, privacy or administrative-related communications). These are essential system and service-related announcements and you are not able to opt-out of these notifications, which are not promotional in nature.

Advertising

You may choose to stop receiving personalised advertising or marketing promotions from us when using the Service bycontacting us .

8.Contact

Please get in touch with us if you have any questions.You can reach us in the first instance at:

Email: dpo_ff14m@proximabeta.com

Mailing Address:

Tencent International Privacy & Data Protection Centre

30 Raffles Place #19-01

Singapore

048622

We will endeavour to deal with your request as soon as possible. This is without prejudice to any right you may have to launch a claim with a data protection authority in the region in which you live or work where you think we have infringed data protection laws.

9.Changes

If we make any changes to this Privacy Policy we will post the updated Privacy Policy here and notify you in accordance with relevant legal requirements.

10.Language

Except as otherwise prescribed by law, in the event of any discrepancy or inconsistency between the English version and local language version of this Privacy Policy, the English version shall prevail.

SUPPLEMENTAL TERMS – JURISDICTION-SPECIFIC

Some jurisdictions’ laws contain additional terms for users of the Service, which are set out in this section. If you are a user located in one of the jurisdictions below, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in ourPrivacy Policyabove.

Algeria

By using the Service, you give your consent to the collection, storage, treatment and use of your personal information, and transfer of your personal information to third parties or our affiliates to help us deliver the Service, in each case location in the jurisdictions specified inSection 4 (How We Store and Share Your Personal Information).

Argentina

If you are dissatisfied with our response to your request for access to, correction, or erasure of your personal information or your privacy complaint in respect of your personal information, you may contact the Agency for Access to Public Information at: Av. Pte. Gral. Julio A. Roca 710, Piso 2°, Ciudad de Buenos Aires (Telephone: +5411 3988-3968 or email:datospersonales@aaip.gob.ar). While we take reasonable steps to ensure that third party recipients of your personal information comply with privacy laws that are similar to those of your jurisdiction, by providing your personal information and by using the Service, you consent to the transfer of your personal information to a jurisdiction where privacy laws may not offer the same level of protection as the laws that may apply in Argentina.

Australia

We take reasonable steps to ensure that third party recipients of your personal information located outside Australia handle your personal information in a manner that is consistent with Australian privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third party recipients. You have the right to access personal information we hold about you, how we use it, and who we share it with. You have the right to correct any of your personal information we hold that is inaccurate.

If you are under the age of 18, you must not use the Service.

Where practicable, we will give you the option of not identifying yourself or using a pseudonym when using the Service. You acknowledge that if you do not provide us with your personal information, we may be unable to provide you with access to certain features or sections of the Service, including social media integration and in-Service purchases.

If you are dissatisfied with our response to your request for access to, or correction of, your personal information or your privacy complaint in respect of your personal information, you may contact the Office of the Australian Information Commissioner (Telephone: +61 1300 363 992 or email:enquiries@oaic.gov.au).

Bangladesh

By acknowledging thePrivacy Policy, you expressly state that you authorise us to collect, use, store, and process your personal data, including disclosing to third parties, to the extent provided by thePrivacy Policy. You also consent to the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, tothe jurisdictions specified in Section 4 (How We Store and Share Your Personal Information).

Brazil

Whenever we use your personal information based on your consent, you may revoke the consent that you have previously given for the collection, use and disclosure of your personal information, subject to contractual or legal limitations. To revoke such consent, you can contactus as set out inSection 8 (Contact). This may affect our provision of the Service to you.

BY ACCEPTING THIS PRIVACY POLICY, YOU EXPRESSLY STATE THAT YOU AUTHORISE US TO COLLECT, USE, STORE, AND PROCESS YOUR PERSONAL INFORMATION, INCLUDING, DISCLOSING TO THIRD PARTIES, TO THE EXTENT PROVIDED BY THIS PRIVACY POLICY.

Canada

If you are located in Canada and wish to obtain written information about our policies and practices with respect to our service providers located outside Canada, you may contact usas specified inSection 8 (Contact). Where we use service providers who might have access to your personal information, we require them to have privacy and security standards that are comparable to ours. We use contracts and other measures with our service providers to maintain the confidentiality and security of your personal information and to prevent it from being used for any purpose other than as provided in thisPrivacy Policy.

Colombia

Your authorization to process personal information for the Service may be expressed (i) in writing, (ii) orally or (iii) through unequivocal conduct that allows us to reasonably conclude that your authorization has been granted, such as the act of accepting the Privacy Policy. We may keep evidence of said authorizations, while respecting the principles of confidentiality and privacy of information.

As a data subject you have certain rights, including (i) to access, update and rectify your personal data; (ii) to request a copy of the consent you have given us; (iii) to be informed about how we have processed your personal data; (iv) to file claims before your country’s data protection authority; (v) to revoke the consent you have given us to process your personal data, unless the processing is based on compelling legitimate grounds or is needed for legal reasons; (vi) to ask for the suppression of your personal data (right to erasure); and (vii) to freely access your information. You can contact us to exercise any of these rights, using the informationspecified inSection 8 (Contact)

Egypt

By clicking “accept” or by proceeding with the sign up process, you acknowledge that you have read, understood, and consented to this Privacy Policy. You are acknowledging your consent to the processing, storage, and cross-border transfer of your personal data. The cross border transfer may be to any country in which we have databases or affiliates, in particularto the jurisdictions specified inSection 4 (How We Store and Share Your Personal Information) .

You also acknowledge your consent to receiving marketing messages from us through emails or other such means.

If you are a new user, you have seven days to inform us of any objection you may have to this Privacy Policy.

As an Egyptian data subject, you have certain rights under the Egyptian Personal Data Protection Law.

France

Instructions for the processing of your personal data after your death.You have the right to provide us with general or specific instructions for the retention, deletion, and communication of your personal data after your death. The specific instructions are only valid for the processing activities mentioned therein and the processing of these instructions is subject to your specific consent. You may amend or revoke your instructions at any time.

You may designate a person responsible for the implementation of your instructions. This person will be informed of your instructions in the event of your death, and be entitled to request their implementation from us. In the absence of designation or, unless otherwise provided for, in the event of the death of the designated person, the heirs will have the right to be informed of your instructions and to request their implementation from us.

When you wish to make such instructions, please contact usas set out in Section 8 (Contact).

Hong Kong

As a Hong Kong data subject you have legal rights in relation to the personal information we hold about you (to the extent permitted under applicable laws and regulations). You are entitled to make a subject access request to receive a copy of the data we process about you, a data correction request as well as a right to reject to the use of your personal data for direct marketing purposes.A fee may be chargeable by us for complying with a data access request.

India

Where we permit any third parties to collect and use sensitive personal information, we shall use reasonable measures to ensure that the third parties do not further disclose such information to the extent required by applicable laws.

To the extent provided by applicable laws and regulations, you may withdraw any consent you previously provided to us for certain processing activities by contacting usas set out in Section 8 (Contact) . Where consent is required to process your personal information, if you do not consent to the processing or if you withdraw your consent, we may not be able to deliver the expected service.Where the processing of your personal data is not based on consent, our processing is based on certain legitimate uses as permitted under law and in compliance with applicable law.

Indonesia

By accepting and consenting to this Privacy Policy, you agree that we may collect, use and share your personal information in accordance with thisPrivacy Policy, as revised from time to time. If you do not agree to thisPrivacy Policy, you must not access or use our services and we have the right to not provide you with access to our services.

If you are under the age of 18, you must not use the Service.

In the event we fail to maintain the confidentiality of your personal information in the Service, we will notify you through the contact information provided by you or via the Service, to the extent required by local laws and regulations.

Youare responsible for making sure that any personal details which you provide to us are accurate and current. In order to confirm the accuracy of the information, we may also verify the information provided to us, at any time. You hereby represent that you have secured all necessary consent(s) before providing us with any other person’s personal information (for example, for referral promotions), in which case we will always assume that you have already obtained prior consent, and as such, you will be responsible for any claims whatsoever from any party arising as a result of the absence of such consent(s).

Japan

If you are under the age of 18, you must not use the Service.

By accepting this Privacy Policy, you consent to the transfer of your personal information to third parties (if any), which may include the cross-border transfer of your information to any country where we have databases or affiliates and, in particular,to the jurisdictions specified inSection 4 (How We Store and Share Your Personal Information).

The categories of personal information specified into the jurisdictions specified in Section 4 (How We Store and Share Your Personal Information) may include "special care-required personal information" (i.e., sensitive information as detailed under applicable law), and you consent to the collection of such information.

You may request us to notify you about the purposes of use of, to disclose, to make any correction to, to discontinue the use or provision of, and/or to delete any and all of your personal information which is stored by us, to the extent provided by the Act on the Protection of Personal Information of Japan. When you wish to make such requests, please contactus as set out inSection 8 (Contact).

Kazakhstan

If you are under the age of 18, you must not use the Service.

By accepting this Privacy Policy, you consent to the collection, use, disclosure, transfer, export (to the extent permitted by applicable laws), sharing and storage of your personal information as described in this Privacy Policy. The transfer of your personal information to third parties, which may include the cross-border transfer of your information to any country where we have databases or affiliates and, in particular, to Singapore.

In the event of any discrepancy or inconsistency between the English version and the Kazakh version of this Privacy Policy, the Kazakh version shall prevail.

Your Rights

Kingdom of Saudi Arabia

You consent to the collection, use, disclosure, transfer, export (to the extent permitted by applicable laws) and storage of your personal information as described in this Privacy Policy including (without limitation) for the purposes of showing you personalised advertising when you use the services.

Kuwait

By accepting this Privacy Policy, you expressly state that you authorise us to collect, use, store, and process your personal data and to disclose this data to third parties whether inside or outside of Kuwait, in line with the provisions of thisPrivacy Policy.

Macau

You have the right not to provide your personal information. However, as a result, we may not be able to provide the Service to you. As a Macau data subject you have legal rights in relation to your personal information (to the extent permitted under applicable laws and regulations). You are entitled to make a subject access request to request a copy of the data we process about you, to make a data correction request, and have the right to oppose the use of your personal information for marketing or any other form of commercial prospecting, or on any grounds of personal nature. A fee may be chargeable by us for complying with a data access request.

Malaysia

Minors are not permitted to use the Service.

Right of access:You have the right to request access to and obtain a copy of your personal information that we have collected and is being processed by or on behalf of us. We reserve the right to impose a fee for providing access to your personal information in the amounts as permitted under law. When handling a data access request, we are permitted to request for certain information to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data access request.

Right of correction:You may request for the correction of your personal information. When handling a data correction request, we are permitted to request for certain information to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data correction request.

Right to limit processing of your personal information: You may request to limit the processing of your personal information by using the contact details provided above. However, this may affect our provision of theService to you.

To protect your personal information and handle complaints relating toyour personal information, we have appointed the following department responsible for managing and protecting your personal information.

l Our data protection officer, responsible for the management and safety of your personal information

¡ Telephone: +603-22872388

¡ Email: as set out in Section 8 (Contact)

Mexico

Some of the purposes of processing specified inSection 3 (How We Process Your Personal Information)are voluntary, which may include to show you personalised recommendations or advertising. We may also use your personal data for the voluntary purpose of sending information to your email that we may consider relevant to you.

In general, we do not require your consent to carry out the transfers detailed inSection 4 (How We Store and Share Your Personal Information). In any case, by using the Service and providing us with your personal data, you agree to the data transfers detailed therein that require your consent.

To understand more about and exercise your rights to “Access”, “Correction”, “Erasure”, “Objection”, “Restriction of Processing to Storage Only “, , which includes the limitation to the use and disclosure of your personal data, and “Advertising” as well as the applicable means, procedures and requirements to exercise any of your rights, please contact us as specified in Section 8 (Contact).

Morocco

We collect information for purposes strictly necessary for the proper use of the Service. By accepting this Privacy Policy, you explicitly accept that your personal data may be subject to processing by the Service.

Kindly note:

l the identity of the Data Controller is set out atthe beginning of this Privacy Policy

l the purposes of processing personal data are set out inSection 3 (How We Process Your Personal Information)

l recipients or categories of recipients are set out inSection 4 (How We Store and Share Your Personal Information)

l whether the answer to the questions is compulsory or optional, as well as the possible consequences of a lack of answer: please refer toSection 3 (How We Process Your Personal Information) andSection 7 (Your Rights)

New Zealand

We take reasonable steps to ensure that third party recipients of your personal information located outside New Zealand handle your personal information in a manner that is consistent with New Zealand privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third party recipients.

You have the right to access personal information we hold about you, how we use it, and who we share it with. You have the right to request the correction of any of your personal information we hold that is inaccurate.

If you are under the age of 16, you must not use the Service.

If you are dissatisfied with our response to your request for access to, or correction of, your personal information or your privacy complaint in respect of your personal information, you may contact the Office of the New Zealand Privacy Commissioner (www.privacy.org.nz).

While we take reasonable steps to ensure that third party recipients of your personal information comply with privacy laws that are similar to those of your jurisdiction, you acknowledge and agree that we cannot control the actions of third party recipients and so cannot guarantee that they will comply with those privacy laws.

Peru

You may exercise rights related to the protection of personal information by requesting access to your personal information or the correction, deletion or suspension of processing of your personal information, pursuant to the Personal Data Protection Law (the “Law”). You may also exercise these rights through your legal guardian or someone who has been authorised by you to exercise the right. However, in this case, you must submit a power of attorney to us in accordance with the Law.

You can also withdraw your consent or demand a suspension of the personal information processing at any time.

If you consider that your request has not been met you may file a claim with the Peruvian National Authority of Personal Data Protection.

To protect your personal information and handle complaints relating to your personal information, we have appointed the following department responsible for managing and protecting your personal information.

l Data Protection Team, responsible for the management and safety of your personal information

l Contact: as set out inSection 8 (Contact)

Philippines

You are entitled to the following rights:

l Right to be informed.You may in certain circumstances have the right to be informed whether personal data pertaining to you is being, or has been processed, including the existence of automated decision-making and profiling.

l Right to object.You may in certain circumstances have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling.

l Right to access.You may in certain circumstances have the right to seek reasonable access to, upon request, your personal information.

l Right to rectification.You may in certain circumstances have the right to dispute an inaccuracy or error in your personal information and have us correct it, unless the request is vexatious or otherwise unreasonable.

l Right to erasure or blocking.You may in certain circumstances have the right to suspend, withdraw or seek the blocking, removal or destruction of your personal information.

By consenting to this Privacy Policy, you consent to us:

l collecting and processing your personal information as described in Section 3 (How We Process Your Personal Information) ;

l sharing your personal information with companies within our corporate group, and a third party that acquires substantially all or substantially all of us or our business, as described in this Privacy Policy and for the purposes stated herein; and

l transferring or storing your personal information in destinations outside the Philippines as described inSection 4 (How We Store and Share Your Personal Information)

Qatar

If you are using the Service in Qatar, you consent (for the purposes of Law No. 13 of 2016 on the Protection of Personal Data, as may amended from time to time) to the processing of your information in accordance with thisPrivacy Policy.

Republic of Korea

Data Destruction

Personal information is retained in accordance with the data retention periods asdetailed in section“Data Retention”.With the exception of the personal information set out below,personal information, which has fulfilled the purpose for which it was collected or used, and has reached the period of time during which personal information was to be possessed, will be destroyed in an irreversible way. Personal information stored in electronic files will be deleted safely in an irreversible way by using technical methods, and printed information will be destroyed by shredding or incinerating such information.

The personal information detailed in section“Data Retention” are required to be retained pursuant to the following laws:

You may exercise rights related to the protection of personal information by requesting access to your personal information or the correction, deletion or suspension of processing of your personal information, etc. pursuant to applicable laws such as the Personal Information Protection Act (“PIPA”). You may also exercise these rights through your legal guardian or someone who has been authorized by you to exercise the right. However, in this case, you must submit a power of attorney to us in accordance with the Enforcement Regulations of the PIPA. You can also withdraw your consent or demand a suspension of the personal information processing at any time.

Additional Use and Provision of Personal Information

In accordance with the PIPA, we may use or provide personal information within the scope of reasonably related to the initial purpose of the collection, in consideration of whether disadvantages have been caused to data subjects and whether necessary measures have been taken to secure such as encryption, etc. We will determine with due care whether to use or provide personal information in consideration of general circumstances including relevant laws and regulations such as the PIPA, purpose of use or provision of personal information, how personal information will be used or provided, items of personal information to be used or provided, matters to which data subjects provided consent or which were notified/disclosed to data subjects, impact on data subjects upon the use or provision, and measures taken to protect subject information. Pursuant to Articles 15(3) and 17(4) of the PIPA, we consider the following factors set forth in Article 14-2 of the Enforcement Decree of the PIPA when using or providing to a third party additional personal information without your consent:

l whether the additional use/provision is related to the initial purpose of the collection;

l whether the additional use/provision is foreseeable in light of the circumstances under which personal information was collected and practices regarding processing;

l whether the additional use/provision unfairly infringe on the interests of the data subject; and

l whether the necessary security measures such as pseudonymization or encryption were taken.

Domestic Privacy Representative

Pursuant to the Article 32-5 of Network Act and Article 39-11 of the amended PIPA, the information regarding the domestic agent is as follows:

l Name: Kite Bird Korea Yuhan Hoesa

l Address: 25F, 55, Sejong-daero, Jung-gu, Seoul (Taepyeongro 2-ga), Republic of Korea

l Telephone: +82-2-2185-0926

l Email: specified in Section 8 (Contact)

Contact

To protect your personal information and handle complaints relating toyour personal information, we have appointed the following department responsible for managing and protecting your personal information.

l Data Protection Department, responsible for the management and safety of your personal information

l Telephone: +82-2-2185-0926

l Email: specifiedin Section 8 (Contact)

Remedies for Infringement of Rights and Interests

In order to seek remedies for personal information infringement, you may file an application for dispute resolution or consultation with the Personal Information Dispute Mediation Committee, the Korea Internet & Security Agency's Personal Information Infringement Reporting Center, etc. In addition, you may contact the following institutions for other reports and consultations on personal information infringement:

1.Personal Information Dispute Mediation Committee: (no area code required) 1833-6972 (www.kopico.go.kr)

2.Personal Information Infringement Report Center: (no area code required) 118 (privacy.kisa.or.kr)

Supreme Prosecutors’ Office: (no area code required) 1301( www.spo.go.kr)

4.National Police Agency: (no area code required) 182 (ecrm.cyber.go.kr)

Serbia

Our designated local representative in Serbia is Karanovic & Partners for the purposes of compliance with the Law on Personal Data Protection, and can be contacted at local.representative@karanovicpartners.com. Please include the word “Serbia” in the subject line of your email.

l Name: Karanovic & Partners o.a.d. Beograd

l Address:Resavska 23, Belgrade, 11000, Serbia

l TelephoneNumber: +381 11 3094 200

l E-mail: local.representative@karanovicpartners.com

Singapore

By clicking “accept”, you consent to the cross-border transfer of yourinformation to any country where we have databases or affiliates and, in particular, the locations specifiedin Section 4 (How We Store and Share Your Personal Information) .

You have the right to access your personal information, how we use it, and who we share it with. You have the right to correct any of your personal information that is inaccurate.

Our designated data protection officer for the purposes of compliance with the Personal Data Protection Act 2012 can be contactedas set out inSection 8 (Contact).

South Africa

You have the right to lodge a complaint with the Information Regulator (South Africa) by emailing it at inforeg@justice.gov.za. The Information Regulator (South Africa)’s physical address is 33 Hoofd Street Forum III, 3rd Floor Braampark, Braamfontein, Johannesburg, South Africa.

Sri Lanka

By accepting this Privacy Policy, you consent to the Privacy Policy and permit the collection, use and disclosure of your personal information. However, if you are under the age of 18, you must not use the Service.

Personalised Marketing

By accepting this Privacy Policy, you hereby consent to being shown personalised advertisements. You may choose to stop receiving personalised advertising from us by following the opt out instructions included in the Settings section of the Service or by contacting us atSection 8 (Contact).

Taiwan

We do not knowingly collect or solicit personalinformationfrom anyone under the age of 7 or knowingly allow such persons to use theService. If you are under 7 years of age, please do not attempt to use or register for ourService or send any personal informationabout yourself to us. No one under the age of 7 may provide any personalinformation to us while using the Service. In the case of users located in Taiwan, persons under the age of 20 are required to obtain parental/guardian consent prior to using the Service.

Thailand

By clicking "accept", you acknowledge that you have read, understood, and agree to the Privacy Policy. If you do not agree with the Privacy Policy, you must not use the Service.

If you are under the age of 20, youmust not use the Service.

To the extent provided for by the Thai Personal Data Protection Act (“PDPA”), you may:

Where you wish to make such requests, please contact usas set out in Section 8 (Contact).

The contact details of our designated local representative in Thailand for the purposes of compliance with the PDPA isas set out inSection 8 (Contact)andcan be contacted via email. Please include the word “Thailand” in the subject line of your email.

Türkiye

You have legal rights,which are set forth in Article 11 of the DPL,in relation to the personal information data we hold about you. As a Turkish data subject, you may have the right to apply to the data controller and (to the extent permitted under applicable laws and regulations):

l learn whether or not your personal data has been processed;

l request information about processing if your personal data has been processed;

l learn the purpose of processing of your personal data and whether they have been used accordingly;

l know the third parties in the country or abroad to whom personal data has been transferred;

l request rectification in the event personal data is incomplete or inaccurate and to demand the operations in this regard be reported to third parties your personal data has been transferred to;

l request deletion or destruction of personal data within the framework of the conditions set forth under Article 7 of the DPL and to demand the operations in this regard be reported to third parties your personal data has been transferred to;

l object the occurrence of any consequence that is to your detriment by means of analysis of personal data solely through automated systems; and

l demand compensation for the damages that you have suffered as a result of unlawful processing of your personal data.

Ukraine

By accepting this Privacy Policy, you expressly authorize us to collect, use, store, and process your personal data, including disclosing to third parties and transferring to countries or regions other than Ukraine, to the extent and for the purposes provided in this Privacy Policy.

United States

For purposes of this section, “personal information” and “sensitive personal information” have the meanings given in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (“CCPA”), and respectively include the terms “personal data” and “sensitive data” as defined in the Colorado Privacy Act (“CPA”), the Connecticut Act Concerning Personal Data Privacy and Online Monitoring (“CTDPA”), the Utah Consumer Privacy Act (“UCPA”) and the Virginia Consumer Data Protection Act (“VCDPA”), (collectively, “US State Laws“). The terms do not include information excluded from the scope of US State Laws.

Collection and Disclosure of Personal Information

Over the past 12 months, we have collected and disclosed for a business purpose the following categories of personal information, including sensitive personal information (denoted by *), from or about you or your device:

l Identifiers, such as your email address. This information is collected directly from you and your device.

l Characteristics of protected classifications under California or federal law such as national origin, gender, or age. This information is collected directly from you in the context of being our consumer.

l Internet or other electronic network activity information, such as your system (e.g. mobile model, GPU, etc.) and any other device information you choose to provide as part of the Survey as described in the mainPrivacy Policy. This information is collected directly from you.

l Location information such as your country or region location if you choose to provide this information as part of the Survey. This information is collected directly from you.

We collect and disclose your personal information for the following purposes:

l To provide you with the Service;

l To improve our services, including the functionality of theService and the Game; and

l To better understand market trends.

For additional information about what each type of personal information is used for, seeSection 3 (How We Process Your Personal Information).

We disclose each of the categories of personal information that we collect as describedin Section 4 (How We Store and Share Your Personal Information).

In the past 12 months, we have not sold or shared personal information of California residents within the meaning of “sold” and “share” in the CCPA in the CCPA. And we have no knowledge of any sale or sharing of personal information of users under 16 years of age.

In addition, we do not use or disclose sensitive personal information for purposes other than to perform the services reasonably expected by an average consumer who requests those services or as otherwise permitted by US State Laws.

Retention of Your Personal Information

The retention period varies among the different categories of data collected. For detailed information about the retention period for any specific category of data, see this chart in the main portion of the Privacy Policy.

Rights under US State Laws:

Depending on where you live, you may have some or all of the rights listed below in relation to information that we have collected about you. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law.

l Right to Access/Know.Request we confirm whether we process information about you and give you access to that information. You may also request to receive that information in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the information to another business without impediment. If you are a California resident, you may request the following information about our collection, use and disclosure of your information:

¡ the categories of personal information about you that we collected;

¡ the categories of sources from which the personal information was collected;

¡ the business or commercial purposes for collecting personal information about you;

¡ the categories of third parties to whom we disclosed personal information about you and the categories of personal information that was disclosed (if applicable) and the purpose for disclosing the personal information about you; and

¡ the specific pieces of personal information we collected about you;

l Request to Delete.Request we delete personal information we collected about you;

l Request to Correct. Request we correct inaccurate personal information that we maintain about you;

l Right to Opt out of Targeted Advertising or Profiling. Request to opt-out of the processing of your information for the purposes of targeted advertising or the profiling of your information in furtherance of decisions that produce legal or similarly significant effects;and

l Right to Non-Discrimination. Be free from unlawful discrimination for exercising your rights including providing a different level or quality of services or denying goods or services to you when you exercise your rights under the US State Laws.

How to Exercise Your Rights

Depending on where you live, you may exercise your rights, if any, regarding other data by contacting us as specified inSection 8 (Contact). We may take steps to verify your identity before complying with your request to protect your privacy and security, and may decline your request if we are unable to verify your identity.To verify your identity, we may need the following information from you: your first name, last name, address, phone number, date of birth and email address.

Depending on where you live, you may exercise these rights yourself or you may also designate an authorized agent to make these requests on your behalf. In order for us to process the request, you must provide the authorized agent with signed written permission. We reserve the request to require the agent to verify their own identity and to confirm directly with you that you have provided the authorized agent permission to submit the request.

In addition, where applicable, we will provide you with more information about our appeal process. When you submit a request or launch an appeal, we will limit our collection of your information to only what is necessary to securely fulfil your request or process your appeal. We will not require you or your authorized agent to pay a fee for the verification of your request or appeal.

Questions

If you have questions or concerns regarding this Privacy Policy, please contact usas set out in Section 8 (Contact).

United Arab Emirates

You consent to the collection, use, disclosure, transfer, export (to the extent permitted by applicable laws), sharing and storage of your personal information, as described in the Privacy Policy, including (without limitation) for the purposes of showing you personalised advertising when you use the Service.

We may voluntarily report a cyber-security incident where it constitutes a crime under UAE law (e.g. under the UAE Cybercrime Law). The incident can be reported to the relevant authorities for the purpose of investigations. Please note that voluntary reporting of a cyber-security incident can also be made to the UAE Computer Emergency Response Team (“CERT”). CERT is a security awareness organisation that provides a process for logging incidents and advising on known cyber security threats in the UAE.

Vietnam

By accepting this Privacy Policy, you expressly agree and authorise us to collect, use, store, and process your personal information, including, lawfully disclosing and transferring it to third parties, as described in thisPrivacy Policy.

Where we permit any third parties to collect and use your personal information, we shall take reasonable measures to ensure that the third parties do not further disclose the personal information.

You have the right to access, correct, and erase the personal information we hold about you. You also have the right to withdraw your earlier provided consent to collect, store, process, use and disclose your personal information and to request us to stop providing your personal information to a third party.