PRIVACY POLICY

Effective Date: 30 July, 2026

1.Introduction

Yundooo Technology International Company Limited (the “Yundooo”, “Company”, “we”, “our”, or “us”), together with its partners, parent companies, subsidiaries, licensees, licensors and affiliates (collectively, the “Affiliates”) develop, publish, market and commercialize mobile games for use on various platforms, including mobile devices (our “Applications”) through which we offer relating game play and gaming services, including the ability to make purchases through the Applications. We also operate networks and platforms related to our Applications (collectively “Networks”), web domains and subdomains (collectively “Sites”) and web forums or messaging boards related to our Applications and Sites (collectively “Forums”). Any and all of our Applications, Networks, Sites and Forums and any other related services provided by us are referred to herein as our “Services”.

2.Contact Us

If you have questions regarding data protection or requests related to your personal information, we encourage you to reach out to us primarily through the support features available in our games, as this allows us to respond to you more promptly. Alternatively, you can contact us at tech@yundooo.com.

3.Notice

We recommend that you read this Privacy Policy in full to ensure you are completely informed about your personal information.

This Privacy Policy is intended to provide notice of the Company’s information practices, including the types of personal information gathered, how personal information is used and safeguarded, and how you may control the maintenance and sharing of your personal information. This Privacy Policy applies to personal information we collected through our Services and applies to all users of our Services globally.

By clicking or checking “I agree”, “Accept” or similar statements on our Applications and Sites, or by accessing or using any part of our Applications, Sites and/or Services, you acknowledge that you have read and understood this Privacy Policy, and hereby agree and consent to our collection, use, disclosure and/or processing of your personal information as described in this Privacy Policy. If you do not agree with any terms of this Privacy Policy, please do not access or use our Services.

4.What Information We Collect About You

Personal information means any information relating to an identified or identifiable natural person, such as full name, email address, contact address, postal code, location data, personal interests. We may collect personal information about you in the following ways: (1) directly from you, (2) automatically through your use of our Services, or (3) from third parties. The personal information we receive depends on factors such as the Service you’re using, third parties we partner with or you integrate with, and your privacy settings.

4.1. Information that you provide directly

We collect personal information directly from you when you choose to provide us or our Affiliates with such personal information online and through your other interactions with us (such as data collected via social media and any surveys, customer service communications, competitions or other promotional programs in which you may participate). Certain parts of our Services may ask you to provide personal information when you engage in activities such as email association, contacting customer service and purchase or delivery of goods/services.

4.2. Information that we collect indirectly

We collect your personal information indirectly, including through automated means from your device when you use our Services. Some of the information we collect indirectly may be captured using tracking technologies, as explained further in the "Mobile IDs and Tracking Technologies" section below.

4.3. Information from third parties

We may also collect your personal information from third party sources, for example:

Social Media and Third-Party Partners. We may collect any of the below categories of information from third-party applications, including social networks, that you choose to connect or interact with through our Services.

Service providers. Third parties collect or provide any of the below categories of information in connection with work they do on our behalf or in collaboration with us. For example, we use vendors to provide customer service communications in our Applications. They may collect the content of communications, your name, username, and contact information, and any other information you provide to them.

The table below describes the categories of personal information we collect from and about you through our Services. This information will be combined with other information contained in our systems.

Personal Information Description Source
Profile information. We may collect your profile name, image, age information, date of birth, profile photo and gender. Depending on the policy of third-party partners or social media you choose to connect or interact with through our Services, we may also receive your social media handles, social media ID, and social media information. Directly from you. Third parties.
Email address. When you choose to link an email address to your account for account recovery and continuity purposes, we may collect your email address and a verification code used to verify your email address. Directly from you.
Payment information. If you make a purchase or other financial transaction, payment processors acting on our Sites and, in our Applications, collect card numbers, financial account information, and other payment details. Directly from you.
Purchase information. When you make a purchase on our Sites and in Applications and Services, we collect the information about the purchase, including the order ID, order amount, currency, ZIP code, email address or other information necessary to maintain your transaction history and to process your purchase-related activities. Automatic collection. Directly from you.
Communications information. We collect the content of your communications when you use our Services to send messages to others. Directly from you. Third parties.
Identifiers and device information. When you use our Services, our servers automatically collect certain technical information, including your Internet Protocol (IP) address and information about your device, such as device identifiers (for example, advertising IDs like IDFA or other unique identifiers, where permitted by applicable law), device type/model, operating system, software type and version, language settings, network information, and device configuration data. For more details about our use of cookies and similar technologies, please see the “Mobile IDs and Tracking Technologies” section below. Automatic collection.
Usage data. We may collect information regarding your use of and interaction with our Services, such as in-game event, game version, online status, your progress within our Services, and the date and time of your activities. We may also collect information relating to in-game notifications or messages delivered to you through the Services. Automatic collection. Third parties.
Inferences. We may generate certain inferences based on other data we collect, such as inference about general usage patterns or preferences, inferences based on survey responses or inferences received from our third party advertisers. Where applicable, such inferences may be generated using automated means. Directly from you. Automatic collection. Third parties.
Customer Support Information. We collect information you provide to us when you contact us (such as records of the issues you experience, security-related information). We use this information to improve our Services, provide troubleshooting such as addressing and remediating technical issues and bugs. Directly from you.

For some websites, apps, or services provided by us, we may collect additional information beyond the above listed information. We will develop individual privacy notices to inform you how we process your personal information when you use the specific services. Such individual privacy notices will prevail in terms of the personal information processed for such individual services. When you are asked to provide personal information, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow our collection, use, disclosure or processing of personal information that is necessary for certain services or features, those services or features may not be available or fully functional.

5.Cookies and Similar Technologies

Cookies and other similar technologies (“cookies”) are small data files stored on your browser or device to enhance your experience on our Site and to prevent fraud when you use our websites. When you visit our Site, one or more cookies may be sent to your browser. Our third-party partners may also place cookies and, in some cases, act as independent controllers of your personal data, as further described in the “Who May Access Your Personal Information” and “Third-Party Partners” section below.

Please note that the necessary cookies will always remain active on your device. Where required by law, we seek your consent before using non-essential cookies or sharing cookie data with third parties. You may reject or delete cookies in your browser settings, as described in the “Your Rights and Choices” section below. You may also email your request to tech@yundooo.com. However, please note that if you reject or delete certain cookies, some parts of the Services may not be available or may not function properly.

6.How We Use, Disclose or Process Your Information

We may use, disclose or process the personal information we collect for purposes described in this Privacy Policy or for purposes that we explain to you at the time we collect your information. Where we process the personal information of EU and UK users, depending on our purpose for collecting your personal information, we rely on one of the following legal bases:

Contract‐we require certain personal information in order to provide and support the Services you purchase or request from us;

Consent‐in certain circumstances, we may ask for your consent (separately from any contract between us) before we collect, use, or disclose your personal information, in which case you can voluntarily choose to give or deny your consent without any negative consequences to you;

Legitimate interests‐we will use or disclose your personal information for the legitimate business interests of either us or a third party, but only when we are confident that your privacy rights will remain appropriately protected. If we rely on our (or a third party's) legitimate interests, these interests will normally be to: operate, provide and improve our business, including our Services; communicate with you and respond to your questions; improve our Services or use the insights to improve or develop marketing activities and promote our products and services; detect or prevent illegal activities (for example, fraud); and/or to manage the security of our IT infrastructure, and the safety and security of our employees, customers and vendors. Where we require your data to pursue our legitimate interests or the legitimate interests of a third party, it will be in a way which is reasonable for you to expect as part of the running of our business and which does not materially affect your rights and freedoms. We have identified below what our legitimate interests are; or

Legal obligation‐there may be instances where we must process and retain your personal information to comply with laws or to fulfil certain legal obligations.

The following table provides more details on our purposes for processing your personal information and the related legal bases. The legal basis under which your personal information is processed will depend on the data concerned and the specific context in which we use it.

Purposes of Use Categories of Personal information EU/UK Lawful basis for processing including basis of legitimate interest
Product and service delivery. To provide and deliver our Services, including troubleshooting, improving and optimizing those Services (including through the use of analytics), and enforcing compliance with the Terms of Service. Profile information, email address, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. California Consumer Privacy Act Sensitive Personal Information: contents of communications (“Communication information”) Performance of a contract with you. Otherwise, as necessary for our legitimate interest (to operate, provide and improve our business; to communicate with you) where our communications are not necessary to perform or enter into a contract with you.
To facilitate the purchase of virtual items while using our Services. Profile information, purchase information, identifiers and device information, customer support information. Performance of a contract with you.
Protecting the safety and well-being of our players (including to prevent spam or fraud, stop cyber-attacks and prevent illegal activities). Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Necessary for our legitimate interests (to operate and provide our business safely and to protect our business interests). Legal obligation
To protect our legal rights (including where necessary, to share information with law enforcement authorities and other governmental or regulatory authorities), for example to defend claims against us and to conduct litigation to defend our interests. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Necessary for our legitimate interests to protect our business interests.
Comply with legal and regulatory obligations to which we are subject, including our obligations to respond to your requests under relevant data protection laws. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Legal obligation.
Business operations. To operate our business, such as billing, accounting, improving our internal operations. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Performance of a contract with you. Otherwise, as necessary for our legitimate interests (to operate and provide our business and to protect our business interests). Legal obligation.
Product improvement, development, and research. To develop new Services or features, and conduct research. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Necessary for our legitimate interests (to operate, provide and improve our business).
Personalization. To understand you and your preferences to enhance your experience and enjoyment using our Services. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Consent. Otherwise as necessary for our legitimate interests (to operate, provide and improve our business).
Customer support. To provide customer support and respond to your questions. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) ‐ where our communications are not necessary to perform or enter into a contract with you.
Communications. To send you information, including confirmations, technical notices, updates, security alerts, and support and administrative messages. Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Necessary for our legitimate interests (to operate, provide and improve our business; to communicate with you) ‐ where our communications are not necessary to perform or enter into a contract with you.
Marketing. To communicate with you about new Services, offers, promotions, rewards, contests, upcoming events, and other information about our Services and those of our selected partners (see the “What Choices Do You Have” section of this Privacy Policy for information about how to change your preferences for promotional communications). Profile information, purchase information, identifiers and device information, IP address, usage data, inferences, customer support information. Communication information. Consent.

We combine information we collect from different sources for these purposes and to give you a more seamless, consistent, and personalized experience.

7.Who May Access Your Personal Information

In addition to the Company and/or its affiliates, other parties may also access your personal information in the following situations. You acknowledge that you have foreseen the occurrence of such disclosure when you provide your personal information.

Please note that some of our Services also include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal information to any of those third parties, link or bind your accounts, or allow us to share personal information with them, that data is governed by their privacy statements.

8.What Rights and Choices

We provide a variety of ways for you to control the personal information we hold about you, including choices about how we use that information. In some jurisdictions, these controls and choices may be enforceable as rights under applicable law. If you are a resident in the UK, EEA or Switzerland, or if you are a resident in the California, please see the respective subsections in the “Supplemental Terms-Jurisdiction-Specific” section below.

(1) Access, portability, correction, and deletion.

In some jurisdictions, you have the right to access, receive a copy of, correct, and delete your personal information. If you reside in one of these jurisdictions, and you wish to access, receive a copy of, correct, or delete personal information about you that we hold, you may make your request by emailing tech@yundooo.com. We may need you to provide some personal information so that we may verify your request and locate your personal information to fulfill your request.

Please note that certain records, for example those relating to payments or customer service matters, will be held for legal and accounting purposes. If you have previously received push notifications through your device, you can stop receiving push notifications by visiting your mobile device's settings for the relevant Application or in some cases, through the Application itself.

You acknowledge and agree that as a result of deleting your account, you will lose access to game related services, including the account information and game-related information linked to such account and lose the possibility to access other services through the account.

(2) Withdrawal of consent.

If we have collected and processed your personal information with your consent, you can withdraw your consent in accordance with applicable laws. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent. In many circumstances, we need to use your personal information in order for us to provide you with our Services which you require. If you do not provide us with the required personal information, or if you withdraw your consent to our use and/or disclosure of your personal information for these purposes, it may not be possible for us to continue to serve you or provide you with the Services that you require.

(3) Communications preferences.

If any promotional communication has been made to you, you may opt-out of promotional communications by following the opt-out instructions contained in the promotional communications, or by contacting us as described in the “Contact Us” section above. Please note that it may take some time for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you e-mails about your account or any Services you have requested or received from us.

(4) Data sales.

Some privacy laws define “sale” broadly to include some of the disclosures described in the “Who May Access Your Personal Information” section above. To opt-out from such data “sales”, visit our “Do Not Sell or Share My Personal Information” section below.

(5) Browser or platform controls.

Cookie controls. Most web browsers are set to accept cookies by default. If you prefer, you can go to your browser settings to learn how to delete or reject cookies. If you choose to delete or reject cookies, this could affect certain features or services of our Sites. If you choose to delete cookies, settings and preferences controlled by those cookies, including advertising preferences, may also be deleted and may need to be recreated.

Do Not Track. Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not a common understanding of how to interpret the DNT signal, our Sites do not currently respond to browser DNT signals. Instead, you can use the range of other tools to control data collection and use, including the cookie controls and advertising controls described above.

Mobile advertising ID controls. iOS and Android operating systems provide options to limit tracking using advertising IDs and/or reset the advertising IDs.

(6) Email web beacons.

Most email clients have settings which allow you to prevent the automatic downloading of images, including web beacons, which prevents the automatic connection to the web servers that host those images.

Except for the automated controls described above, if you send us a request to exercise your rights or these choices, to the extent permitted by applicable law, we may decline requests in certain cases. For example, we may decline requests where granting the request would be prohibited by law, could adversely affect the privacy or other rights of another person, would reveal a trade secret or other confidential information, or would interfere with a legal or business obligation that requires retention or use of the data. Further we may decline a request where we are unable to authenticate you as the person to whom the data relates, the request is unreasonable or excessive, or where otherwise permitted by applicable law. If you receive a response from us informing you that we have declined your request, in whole or in part, you may appeal that decision by submitting your appeal using the contact methods described at the beginning of this Privacy Policy.

9.Third Party Partners

Our partners use technologies to enhance and customize your experience, analyze usage, and prevent fraud. Please be aware that our partners may have their own privacy policies governing their use of these technologies (as illustrated in the examples below). When specific third parties are involved in collecting data and information, please refer directly to their privacy policies on their official websites and learn more about their data processing practices.

10.Retention of Personal Information

We retain personal information for as long as necessary to provide the Services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs vary for different information types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.

Details of retention periods for different aspects of your personal information are available from us on request by contacting us using the contact details provided under the “Contact Us” section above.

In the case you request to remove or delete your personal information, we will retain your data as long as necessary for applicable laws and regulations, such as to comply with our legal obligations, resolve disputes, and/or enforce the agreements between you and us. Please note that the removal or deletion of any of your data may result in the termination of some of our applicable Services.

11.Location and International Transfer of Personal Information

The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, partners or service providers process data. The storage locations are chosen to operate efficiently and improve performance. We take steps with the intent of processing and protecting personal information as described in this Privacy Policy wherever the personal information is located.

To the maximum extent permitted by the applicable laws and regulations, we may transfer information that we collect about you to our affiliated entities, partners, service providers, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. Please note that these countries and jurisdictions may not have the same data protection laws as your own jurisdiction, and we take appropriate steps to ensure adequate safeguards are in place to enable transfer of information and the use and disclosure of information about you, including personal information, as described in this Privacy Policy.

12.Security of Your Personal Information

We have implemented commercially reasonable precautions designed to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Unfortunately, the transmission of information via the internet is not completely secure. While we strive to protect your personal information, we also remind you to be aware of hacking, cyber-attacks, and other risks on the Internet.

Therefore, we strongly urge you to take every possible precaution to protect your personal information when using our Services, including but not limited to using a secure browser and/or taking other possible security measures.

Please be aware that advertisers or websites with links to and/or from our websites may collect personal information about you. This Privacy Policy does not apply to such third party services, and cannot control the activities of, those other advertisers or websites. We highly recommend that you read the privacy policy of such third-party websites which you may be directed to before providing any personal information.

13.Children’s Privacy

Under certain laws, users under the age of 13 (or other age thresholds as stipulated under local laws) may not be allowed to use our services or require parental or guardian consent. If you are 13 and above but are considered a minor in your country, under certain laws, you must have your parent or legal guardian read through this Privacy Policy with you and you represent that you have obtained the permission or consent of your parent or guardian to use our services.

If you are a parent or legal guardian of a minor in your country, please make sure that you have read this Privacy Policy before allowing your children to create their own accounts or to use the Services. You agree that you will be subject to this Privacy Policy and be responsible for your children’s activities while using the Services. You agree to supervise your children’s use of the Services and make sure that your children only view the contents that are age-appropriate to your children.

If you are a parent or legal guardian and have questions about your child’s personal information, or wish to request access to, correction, or deletion of such information, please contact us at tech@yundooo.com.

14.Supplemental Terms-Jurisdiction-Specific

(1) Additional Information for the UK, EEA or Swiss residents

If the processing of personal information about you is subject to UK or European Economic Area (EEA) or Swiss data protection law, you have certain rights with respect to that data:

Please note that a number of these rights only apply in certain circumstances, and all of these rights may be limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interests or where we are required by law to retain your information.

To make such requests, contact us at tech@yundooo.com. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Our Data Protection Officer. We have appointed a Data Protection Officer (DPO), who is responsible for overseeing our compliance with applicable data protection laws. You can contact our DPO at tech@yundooo.com.

International Transfer. If we transfer your personal data outside of the EEA, UK or Switzerland to a country that is not recognized by the European Commission or relevant UK or Swiss authority (as applicable) as ensuring an adequate level of data protection, we endeavor to apply suitable measures to safeguard your personal data in accordance with applicable data protection and privacy laws. These safeguards may include data transfer agreements implementing the latest standard contractual clauses (a form of data transfer agreement pre-approved by the European Commission as providing adequate safeguards for personal data, or a form of addendum to the foregoing pre-approved by the relevant UK or Swiss authority) unless the data transfer is to a country that has been determined by the European Commission or relevant UK or Swiss authority (as applicable) to provide an adequate level of protection for individuals’ rights and freedoms for their information. If applicable, you may ask for a copy of the relevant data transfer agreement by contacting us as set out in this Privacy Policy.

(2) Additional Information for California Residents

If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act (“CCPA”), you have certain rights with respect to that information.

Notice at Collection. At or before the time of collection, you have a right to receive notice of our practices, including the categories of personal information and sensitive personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared, and how long such information is retained.

Right to Know. You have a right to request that we disclose to you the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information. Note that we have provided much of this information in this Privacy Policy. You may make such a “request to know” by contacting us at tech@yundooo.com.

Right to Request Deletion. You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to delete, you may email us at tech@yundooo.com. However, if certain personal data is necessary for us to provide you with our Services, and you refuse to provide such personal data to us or ask us to delete or stop processing such personal data, we may not be able to provide some parts of our Services.

Right to Opt-Out of Selling/Sharing for Targeted Advertising Purposes. We do not “sell,” or “share” personal information of users. We are therefore not required to provide an opt-out.

Right of Opt Out of Profiling. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Verification. To provide, correct, or delete specific pieces of your personal data, we may need to verify your identity to the degree of certainty required or permitted by applicable law. We may do this by asking you to submit your request or confirm your request from the email address associated with your account or requiring you to provide additional information necessary to verify your account, depending on the rights you request to exercise.

Right to Limit Use and Disclosure of Sensitive Personal Information. You have a right to limit our use of sensitive personal information for any purposes other than to provide the services or goods you request or as otherwise permitted by law. We collect and process the contents of your communications on our Services for the purpose of facilitating those communications, to provide customer service and respond to user complaints regarding violations of our Terms of Service. If you have any questions regarding our use of such sensitive personal information, please contact us using the contact information provided at the beginning of this Privacy Policy.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

Additionally, under California Civil Code section 1798.83, also known as the “Shine the Light” law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes (“California Customers”) may request information about whether the business has disclosed personal information to any third parties for the third parties’ direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California Customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed. California Customers may request further information about our compliance with this law by e-mailing tech@yundooo.com. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To request that we remove content or information you have publicly posted, email us at tech@yundooo.com. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

15.Effective Date; Policy Changes

Each time you use our Services, the current version of the Privacy Policy will apply. Accordingly, when you use our Services, you should check the date of this Privacy Policy (which appears at the top of the Privacy Policy) and review any changes since the last version.

This Privacy Policy is subject to change from time to time. Unless stated otherwise, our current Privacy Policy applies to all personal information that we have about you. If we make material changes to the Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law. Your continued access to or use of our Services after such notice has been given and such revised Privacy Policy has come into effect shall constitute your acceptance of the revised Privacy Policy.

16.Language

These Terms are drafted in the English language and may be translated into other languages. The English language version of these Terms shall prevail if there is a conflict or inconsistency, or clarification required with other language Game versions.