Personal Information Processing Policy for South Korea Users

Effective: July 25, 2024

We have created this notice specifically for users in the Republic of Korea. Users in the Republic of Korea have certain privacy rights as specified under Republic of Korea law. The privacy controls we offer to all users are in line with these laws—this notice makes sure we cover the Republic of Korea-specific requirement. Unless otherwise set forth in this Korean Notice all other terms and principles in Mistplay’s Global Privacy Policy continue to apply.

1. COLLECTION OF PERSONAL INFORMATION

Please refer to the Information We Collect About You and Use of Personal Data section of the Mistplay User Privacy Notice (“Notice”) to understand what information we collect. Certain service providers and/or Mistplay affiliates located inside and outside Korea may have access to your personal information as needed for Mistplay to provide you with the Services and for Mistplay to market the Services to others, as described in the Use of Personal Data section and Annex B of the Notice. In addition, when you elect to install a game that you have discovered in the Services, your personal data is collected directly by Game Partners through their mobile analytics and measurement partner tools as listed in the table below. This data collection by Game Partner upon a new game selection is necessary in order for Mistplay to verify, calculate, and reward you for discovering a new game in the Services.

2. USE OF PERSONAL INFORMATION, INCLUDING BEHAVIORAL DATA FOR PERSONALIZED CONTENT AND ADVERTISING

In order for you to receive the Services and participate in the Mistplay loyalty rewards program, you consent to receiving customized content, promotions, and advertisements of games as part of the Services. Mistplay uses device and behavioral information about you, such as Device Data, Gameplay Data, and Usage Data, as defined in the Notice, to customize content, advertisements, and promotions displayed to you. As part of the loyalty rewards program, Mistplay collects Gameplay Data about you from Game Partners. If you do not wish to Mistplay to collect, and process your information to operate the loyalty rewards program and provide you with customized content, promotions, and advertisements as part of the Services, then you may stop using the Services and exercise your right to opt-out of such processing as set forth below. Note, however, that Mistplay will be impaired from providing you with the loyalty rewards program if you elect to opt out of such data processing practices. In such case where you do not consent to such processing of behavioral data, you may elect to receive alternative services signing up for Mistplay game discovery email newsletter without loyalty rewards program.

3. DISCLOSURE OF PERSONAL INFORMATION

Mistplay will not share personal information about you with third parties without your consent or other valid basis for operation of the Services, as described in the Notice, unless otherwise permitted by law. Your personal information will be processed by Mistplay Inc. which is based in Canada, its affiliate in the United States, Game Partners, and service providers as described in the How We Share Personal Information About You section in the Notice.

By using our Services, including your voluntary participation in the Mistplay loyalty rewards program, you acknowledge and agree to such data sharing, transfers, receipt of customized content and advertising, and processing, including to and in Canada, the United States, and other countries. Your consent to the Terms followed by your review of the Notice, this Personal Information Processing Policy, and later submission of such information by using the Mistplay Services represents your agreement to international data transfer of your personal data. You have the right to refuse the overseas transfer of your personal information by contacting Mistplay at Privacy@Mistplay.com. However, if you refuse overseas transfer of your personal information, you will not be able to use our Services, as the provision the Service necessarily requires Mistplay to carry out such transfer.

4. YOUR RIGHTS

We want you to be in control of your information, so we provide you with a number of rights regarding your personal information. Please refer to the Exercising Your Rights section of the Notice.

5. RETENTION

If required to retain personal information pursuant to applicable Korean laws, to the extent we collect such personal information, we will retain it solely for the retention periods and those purposes. Otherwise, we retain personal information as described in the Data Retention section of the Notice.

6. CHILDREN’S PRIVACY

For Korean residents only, we restrict the use of our Services to individuals age 14 and above, and for new users, age 18 and above. We do not knowingly collect, maintain, or use personal data from children under the age of 14. If we learn we have collected or received personal information from a child under 14 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 14, please contact us at Privacy@Mistplay.Com.

7. CONTACT US

You may contact the Data Privacy Officer at privacy@mistplay.com for any privacy-related inquiries, complaints and questions about damage relief that occur while using Mistplay’s services. Please refer to Mistplay’s Global Privacy Policy for more contact details.

8. OVERSEAS TRANSFER OF PERSONAL DATA OF SOUTH KOREA USERS

By accessing and receiving the Services, you agree and consent to Mistplay’s transfer of, or collection by a third party of, your personal information overseas. The table below sets forth categories of overseas transfers of personal data of users. All transfers are required for Mistplay to deliver you the Services, unless such transfer is specifically noted below as optional.

Purpose Category Entrusted Parties Country to which data will be transferred Personal Information to be Transferred Grounds for Transfer Method and/or Retention

Company and Affiliate(s); Outsourced service providers Mistplay, Inc., Mistplay USA, Deel, Inc. Canada, USA As set forth in the “Information We Collect About You” and “How We Share Personal Information About You” sections of the Privacy Notice To provide the Services, as set forth in the sections, "Use of Personal Data" and "How we Share Personal Information About You" sections of the Privacy Notice Upon accessing and using Mistplay Services. Data will be retained for as long as you use the Services, unless additional retention is required by law or for compliance purposes.

Infrastructure, Storage, Data Analytics, Providers Amazon Web Services, Inc., DataBricks, Mixpanel, GooglePlay Services Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea As set forth in the “Information We Collect About You” and “How We Share Personal Information About You” sections of the Privacy Notice To operate the technical infrastructure for the Services, process your rewards redemption, communicate with you, and secure our platform and systems Upon accessing and using Mistplay Services. Data will be retained for as long as you use the Services, unless additional retention is required by law or for compliance purposes.

Fraud Detection Service Providers GeoComply, Maxmind, Inc., IPQualityScore LLC Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea Account Data, Personal Data from Third Party Social Networks, Device Data, Gameplay Data, Usage Data To prevent fraudulent conduct and harmful activity within the Services Upon accessing and using Mistplay Services. Data will be retained for as long as you use the Services, unless additional retention is required by law or for compliance purposes.

Platform Communication Braze Inc. Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea Account Data, Usage Data, Gameplay Data, Device Data To communicate with Mistplay users as part of the Services Upon accessing and using Mistplay Services. Data will be retained for as long as you use the Services, unless additional retention is required by law or for compliance purposes.

Service administration TangoCard, IC Group Inc., SurveyMonkey, The Rocket Science Group LLC d/b/a Mailchimp Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea Name and contact information To process gift card redemption and administer surveys, sweepstakes, and email marketing services Upon accessing and using Mistplay Services. Data will be retained for as long as you use the Services, unless additional retention is required by law or for compliance purposes.

Customer Support Providers PTW Canada Solutions, Inc., Zendesk Canada, USA, Czech Republic, India Account Data, Gameplay Data, Loyalty Tier Status To provide you with customer support, to process your support request, and to contact you. Information will be collected by email and customer support software tools.

Mobile Measurement & Analytics Partners Appsflyer, Adjust, Singular, Tenjin, Airbridge Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea mobile device identifier, advertising identifier (e.g. Google advertising ID) To credit and calculate loyalty rewards for your game discovery and engagement; and for operational purposes, including reporting, billing, and attribution. Data is transferred when you install a game discovered on Mistplay or when you click on an advertisement of Mistplay. Data is retained for as long as you have a Mistplay account.

Advertising Platforms and Networks (optional data transfer) AdAction Interactive LLC AdColony Inc. adjoe GmbH Adpick Avowtech Applovin Corporation Aragon Advertising, LLC AuraBidease Inc. Digital Turbine Media, Inc. Facebook Inc. Fluent, LLC Fyber Media GmbH Glance Google LLC HangMyAds IGAworks, Inc. InMobi Pte Ltd. IPONWEB GmbH Ironsource Liftoff Mobile Inc. Mobivity Holding Inc. Moloco, Inc. MyAppFree Play2Pay Quora Inc. Reddit Remerge Inc. Revenue Universe, LLC Snapchat Septeni Co., Ltd. Tapjoy Inc. TikTok Technology Canada Inc. Twitter tvScientific UnityTechnologies Vibe.co Vungle Inc YouAppi Inc. Canada, USA, UK, Europe, Australia, New Zealand, Japan, South Korea mobile device identifier, advertising identifier (e.g. Google advertising ID); IP address; Usage Data; Gameplay Data Grounds for transfer is consent. Data transferred will be used to market and advertise the Services; and to prevent you from receiving advertisements of Mistplay in other channels. Information will be collected upon consent. Mistplay will retain the data until you opt-out or delete account. Advertiser’s retention period is up to 40 days.