Privacy Policy

Version date: February 2, 2026

Introduction

At JOYPLAY, we know how important your personal information is to you. JOYPLAY PTE. LTD. and its affiliates (“JOYPLAY”, “we”, “us” or “our”) are concerned about protecting the privacy of our users. That’s why we’ve taken all reasonable steps to ensure that your personal information is safe and reliable. This Privacy Policy (“Privacy Policy”) describes how we collect, manage, store, use and protect the information, including personal information, and data that you provide or that we collect in connection with any of our game, website or application (the “Service”). By using the Service, you consent to the collection and use of your personal information as described in this Privacy Policy.

If you are under the age of 16, you may not use the Service as it is not intended for you. We do not intend to collect personal information from anyone under the age of 16. If you know that the personal information of anyone under the age of 16 has been submitted to the App, please let us know so that we can delete it.

Applicability

This Privacy Policy explains how we collect, use and protect your personal data. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

Respecting and protecting your privacy and your personal data is very important to us. This Privacy Policy, together with our Terms of Service and any other documents referred to in it, sets out the basis upon which any personal data we collect from you, or that you provide to us will be processed by us or on our behalf.

By visiting our website and using our products and services (including, but not limited to, the websites at https://www.wejoyplay.com/ and our iPhone apps, iPad apps or Android Apps and via mobile phone) you acknowledge the terms of this Privacy Policy and the use and disclosure of your personal data as set out in this Privacy Policy.

Your personal data will be held by us in accordance with applicable data protection laws. For the purposes of data protection laws, the data controller will be JOYPLAY.

Why we collect your personal data

Under data protection law, we can only use your personal data if we have a proper reason, eg:

• where you have given consent
• to comply with our legal and regulatory obligations
• for the performance of a contract with you or to take steps at your request before entering into a contract, or
• for our legitimate interests or those of a third party

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. You can obtain details of this assessment by contacting us.

The table below explains what we use your personal data for and why.

What we use your personal data for	Our reasons
Create and manage your account with us	For our legitimate interests or those of a third party, ie to be as efficient as we can so we can deliver the best service to you at the best price
Providing services and/or the functionalities of the app to you	Depending on the circumstances: To perform our contract with you or to take steps at your request before entering into a contract. For our legitimate interests or those of a third party, ie to be as efficient as we can so we can deliver the best service to you at the best price
Conducting checks to identify you and verify your identity or otherwise to help prevent and detect fraud against you or us	To comply with our legal and regulatory obligations OR For our legitimate interests or those of a third party, ie, to minimise the risk of account or identity theft or fraud that could be damaging for you, a third party or us
Processing transactions and providing purchase-related services	Depending on the circumstances: To perform our contract with you or to take steps at your request before entering into a contract; To comply with our legal and regulatory obligations; For our legitimate interests or those of a third party.
To enforce legal rights or defend or undertake legal proceedings	Depending on the circumstances: To comply with our legal and regulatory obligations In other cases, for our legitimate interests or those of a third party, ie to protect our business, interests and rights or those of others
Communications with you not related to marketing, including about changes to our terms or policies or changes to the app or service or other important notices	Depending on the circumstances: To comply with our legal and regulatory obligations In other cases, for our legitimate interests or those of a third party, ie to provide the best service to you
Protect the security of systems and data	To comply with our legal and regulatory obligations We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests or those of a third party, ie to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
Operational reasons, such as improving efficiency, training and quality control or to provide support to you	For our legitimate interests or those of a third party, ie to be as efficient as we can so we can deliver the best service to you at the best price
Statistical analysis to help us manage our business, eg in relation to our financial performance, customer base, product range or other efficiency measures	For our legitimate interests or those of a third party, ie to be as efficient as we can so we can deliver the best service to you at the best price.
Updating and enhancing customer records	Depending on the circumstances: To perform our contract with you or to take steps at your request before entering into a contract To comply with our legal and regulatory obligations Where neither of the above apply, for our legitimate interests or those of a third party, eg making sure that we can keep in touch with our customers about existing orders and new products
Disclosures and other activities necessary to comply with legal and regulatory obligations, eg to record and demonstrate evidence of your consent to our use of your personal data where relevant.	To comply with our legal and regulatory obligations
Marketing our services to existing and former customers	For our legitimate interests or those of a third party, ie to promote our business to existing and former customers See ‘Direct Marketing’below for further information.
We may need to share your personal data with members of our group and third parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvencyIn such cases information will be anonymised where possible and only shared where necessary	Depending on the circumstances: To comply with our legal and regulatory obligations In other cases, for our legitimate interests or those of a third party, ie to protect, realise or grow the value in our business and assets

Direct Marketing

We may use your personal data to send you updates by email or by Facebook Messenger or iMessage about our services, including exclusive offers, promotions or new services.

This marketing may relate to:

• products and services we (or permitted third parties) feel may interest you;
• information about other goods and services we offer that are similar to those that you have

already used or enquired about;

• upcoming events, promotions and new products/services or other opportunities as well as those

of selected third parties; and

• information regarding any applicable loyalty programs (including points earned and free, bonus

and promotional points).

If you no longer wish to receive marketing communications when using our apps, you may:

• contact us at support@wejoyplay.com for direct marketing opt-out; or
• using the “unsubscribe” link in emails, or let us know you intent to opt-out in our phone calls to you.

How we collect your personal data and what we collect

We collect personal data about you in the following ways when you use our products and services. We collect information in the following circumstances:

• when you use our Game apps;
• when a user account is created and managed;
• when you connect your user account to your Facebook;
• when you participate in any interactive features of the Service; or
• when you otherwise communicate with us or via the Service.

When you access to our websites and our apps , we won’t collect your legally-sensitive data (i.e. race, ethnicity, religious or philosophical beliefs, trade union membership, genetics, biometrics, health, sexuality and/or criminality) and other sensitive data (i.e. child data, social security numbers, bank account or payment card details).

We may also employ third party ad-serving(including but not limited to Google, Facebook, Mopub and its affiliates) and/or analytics technologies(including but not limited to Tableau, Kibana and its affiliates) that may use various methods to collect information through our software and the Service. These technologies may be embedded within our software and the Service and may collect, amongst other things, the information below.

We may collect user’s data from you, which includes:

• Registration & Account Information: username, character name, password; username (or “Social ID”), profile, and the email address associated with third party accounts (e.g., Facebook / Apple Game Center / Google Play).
• Marketing related Information: Email address for receiving promotional emails (requires your explicit consent). You can unsubscribe at any time.
• Payment related Information: Know Your Customer (KYC) information processed by third party payment service providers (subject to your consent to the provider’s privacy policy); payment metadata synchronized by payment service providers to us for fraud detection, compliance, and dispute resolution (e.g., partial or hashed account identifier, partially obscured email address, country of purchase origin, IP address); email address for invoice delivery (shared with payment service providers only as necessary).
• Internet & Device Information: IP address, device type, network data, operating system, device ID, advertising ID, language, time zone information (IDFA will not be collected for iOS 14+ users without prior opt in consent).
• Usage & Game Data: Timestamps of actions, game level / progress / scores / achievements / logs, user interaction records. In game performance data may be made available to previously matched users (e.g., leaderboard displays, match history)
• General Location Information: Country or city level location automatically derived from your IP address (we do not collect precise GPS location).
• Interaction Data: Data from your interactions with us (e.g., in app support communications).
• Social Media Information: With your prior consent, information from your social media account (e.g., Facebook, Google Play, Apple Game Center) when signing into Services, including user ID, nickname, profile picture, and/or friend list.

Depending on the type of personal data in question and the grounds on which we may be processing it, should you decline to provide us with such data, we may not be able to fulfill our contractual requirements or, in extreme cases, may not be able to continue with our relationship. We will inform you if your failure to provide any requested personal information is going to result in these consequences.

For California Consumer Privacy Act of 2018 (CCPA) Consumers (Notice of Collection of Information)

We collect the categories of personal information about California consumers identified in the chart below. As further set forth in the chart below, in the past 12 months we have disclosed and “sold” (as defined in the CCPA) California consumers’ personal information to third parties for business or commercial purposes.

Categories of Personal Information:	Categories of sources from which information is collected:	Business or commercial purposes for collection, use and sharing:	Disclosed for business purposes to the following categories of third parties:	Sold to the following categories of third parties:
Personal and online identifiers (such as unique online identifiers, IP address)	Consumers	Marketing; Advertising; Authentication; Identity resolution; Fraud detection; Fulfillment services; Facilitating transactions; Auditing related to our interactions with you; Legal compliance; Detecting and protecting against security incidents, fraud, and illegal activity; Debugging; Performing services (for us or our service providers) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services; and Other one-time uses	Affiliates; Service providers; and Government agencies	Advertising/marketing companies; Advertising networks; Social networks
Internet or other electronic network activity information (such as interactions with an application, or advertisement)	Consumers; Service Providers	Marketing; Advertising; Authentication; Identity resolution; Fraud prevention; Fulfillment services; Facilitating transactions; Auditing related to our interactions with you; Legal compliance; Detecting and protecting against security incidents, fraud, and illegal activity; Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services; and Other one-time uses	Affiliates; Service providers	Advertising/marketing companies; Advertising networks; Social networks
Commercial or transactions information (such as records of personal property or products or services purchased, obtained or considered; purchasing or consuming histories or tendencies)	Consumers; Service Providers; App store providers	Fulfillment services; Facilitating transactions; Auditing related to our interactions with you; Debugging; Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services;and Other one-time uses	Affiliates; Service providers; App store providers
Geolocation information	Service Providers	Marketing; Advertising; Fulfillment services; Facilitating transactions; Auditing related to our interactions with you; Legal compliance; Debugging; Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services; and Other one-time uses	Affiliates; Service providers	Advertising/marketing companies; Advertising networks; Data analytics providers; and Social networks
Inferences drawn from the above information about your predicted characteristics and preferences	Consumers	Marketing; Advertising; Legal compliance; Detecting and protecting against security incidents, fraud, and illegal activity; Debugging; Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics; Internal research for technological improvement; Internal operations; Activities to maintain and improve our services; and Other one-time uses	Affiliates

Who do we share your information with

We may share your personal data with the following categories of recipients:

1) Service Providers and Business Partners

We may share your personal data with third-party service providers and business partners who process data on our behalf and under our instructions for purposes such as hosting, cloud services, data storage, analytics, customer support, fraud prevention, security monitoring, payment processing, and marketing support. These third parties are contractually required to protect your personal data and to use it solely for the purposes specified by us.

2) Payment Providers

When you make purchases through our Services, your payment is processed by third-party payment providers or app marketplace operators (such as Apple, Google, or other authorized payment processors). We may receive limited transaction-related information from such providers (for example, transaction status, partial or hashed identifiers, or invoice-related contact details), but we do not receive or store your full payment card or bank account information.

3) Third-Party Platforms and Social Networks

If you choose to connect your account or interact with our Services through a third-party platform (such as Facebook, Google Play, or Apple Game Center), we may share or receive certain information in accordance with your settings on those platforms and their privacy policies. Your interactions with such third-party services are governed by their own terms and privacy practices.

4) Affiliates

We may share your personal data with our affiliates for purposes consistent with this Privacy Policy, including account management, customer support, analytics, and operational efficiency. All affiliates are required to handle your personal data in accordance with applicable data protection laws and this Privacy Policy.

5) Legal and Regulatory Requirements

We may disclose your personal data if required to do so by law, regulation, court order, or other legal process, or if we reasonably believe that such disclosure is necessary to comply with legal obligations, protect our rights or property, investigate fraud or security issues, or protect the safety of our users or others.

6) Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, financing, or similar corporate transaction, your personal data may be transferred to a successor or affiliated entity as part of that transaction, subject to applicable data protection laws. We will take reasonable steps to ensure that your personal data remains protected and used in accordance with this Privacy Policy.

7) With Your Consent or at Your Direction

We may share your personal data with third parties when you have given your explicit consent or when you otherwise direct us to do so.

We encourage you to read our partners’policies to understand their privacy practices, the legal basis for their processing of your personal data, and any options that they provide for exercising control over such processing. We are not responsible for the information practices of our partners since we are each independent controllers of your data.

Security

We will take all reasonable precautions necessary to protect your personal data from

• loss, theft, misuse and interference;
• unauthorised access, disclosure, use or modification.

Such measures will vary depending on the sensitivity, amount, format, nature and storage of the information and will involve, as applicable, physical, organizational and electronic security measures.

This includes, for example, the protection of passwords using industry standard encryption, measures to preserve system security and prevent unauthorised access and back-up systems to prevent accidental or malicious loss of data. We may use third party data storage providers to store personal data electronically. We take reasonable steps to ensure this information is held as securely as information stored on our own equipment.

Unfortunately, there is always risk involved in sending information through any channel over the internet. You send information over the internet entirely at your own risk. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted over the internet and we do not warrant the security of any information, including personal data, which you transmit to us over the internet.

International transfers of data

The data that we collect from you will be transferred to, and stored at, destinations both within and outside the EEA. As mentioned above, we may disclose your personal data to our group companies and their service providers located in US and elsewhere, and to employees operating outside of the EEA who work for us or for one of our group companies or their respective service providers.

We want to make sure that your personal data is stored and transferred in a way which is secure. We will therefore only transfer data outside of the EEA where it is compliant with data protection legislation and the means of transfer provides adequate safeguards in relation to your data. For example, this could be:

• by way of an intra-group agreement between our entities, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws;
• by way of a data transfer agreement with a third party, incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by controllers in the EEA to controllers and processors in jurisdictions without adequate data protection laws; or
• by transferring your data to a country where there has been a finding of adequacy by the European Commission in respect of that country’s levels of data protection via its legislation; or
• where it is necessary for the conclusion or performance of a contract between ourselves and a third party and the transfer is in your interests for the purposes of that contract (for example, if we need to transfer your data to a benefits provider based outside the EEA); or
• where you have consented to the data transfer.

Where we transfer your personal data outside the EEA and where the country or territory in question does not maintain adequate data protection standards, we will take all reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy.

Cookies

A cookie is a small data file sent by a website to your computer that is stored on your hard drive when you visit certain online pages of our website.

We use cookies to store users’ preferences, and collect aggregated demographic data. Cookies allow the website to identify and interact with your computer (for example so we can remember your login details if you have opted to ‘stay signed in’). We do not use cookies to retrieve information that was not originally sent by us to you in a cookie.

You can set your browser to accept or reject all cookies, or notify you when a cookie is sent. If you reject cookies or delete our cookies, you may still use our websites, but you may have reduced functionality and access to certain areas of our websites or your account. You may disable or accept cookies at any time by changing your web browser’s options.

In addition to the express notice provided on our website when you first visit, your continued use of our website is your acceptance of our continued use of cookies on our website.

How long will we keep your personal data?

We will not keep your personal data for longer than is necessary for the purposes for which we have collected it, unless we believe that the law or other regulation requires us to keep it (for example, because of a request by a tax authority or in connection with any anticipated litigation) or if we require it to enforce our agreements.

In general, we will retain your personal data for as long as we provide services to you and your account is active and following that period, for as long as we provide you directly with any other service offering.

When it is no longer necessary to retain your personal data, we will delete the personal data that we hold about you from our systems. While we will endeavour to permanently erase your personal data once it reaches the end of its retention period, some of your personal data may still exist within our systems, for example if it is waiting to be overwritten. For our purposes, this data has been put beyond use, meaning that, while it still exists in the electronic ether, our employees will not have any access to it or use it again.

Your Rights Under the GDPR

Access to a copy of your personal data	The right to be provided with a copy of your personal data
Correction (also known as rectification)	The right to require us to correct any mistakes in your personal data
Erasure (also known as the right to be forgotten)	The right to require us to delete your personal data—in certain situations
Restriction of use	The right to require us to restrict use of your personal data in certain circumstances, eg if you contest the accuracy of the data
Data portability	The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To object to use	The right to object: —at any time to your personal data being used for direct marketing (including profiling) —in certain other situations to our continued use of your personal data, eg where we use you personal data for our legitimate interests.
Not to be subject to decisions without human involvement	The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you   We do not make any such decisions based on data collected by the app
Right to Complain	You have the right to lodge a complaint with our regulator, who is the Information Commissioner’s Office in the UK. You can contact them in the following ways: · Phone: 0303 123 1113 · Email: casework@ico.org.uk · Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Your Rights Under the CCPA

You have the right under the CCPA and certain other privacy and data protection laws, as applicable, to exercise free of charge:

Disclosure of Personal Information We Collect About You	You have the right to know: · The categories of personal information we have collected about you; · The categories of sources from which the personal information is collected; · Our business or commercial purpose for collecting or selling personal information; · The categories of third parties with whom we share personal information, if any; and · The specific pieces of personal information we have collected about you. · Please note that we are not required to; · Retain any personal information about you that was collected for a single one-time transaction if, in the ordinary course of business, that information about you is not retained; · Reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered personal information; or · Provide the personal information to you more than twice in a 12-month period.
Personal Information Sold or Used for a Business Purpose	In connection with any personal information we may sell or disclose to a third party for a business purpose, you have the right to know:The categories of personal information about you that we sold and the categories of third parties to whom the personal information was sold; and The categories of personal information that we disclosed about you for a business purpose.You have the right under the California Consumer Privacy Act of 2018 (CCPA) and certain other privacy and data protection laws, as applicable, to opt-out of the sale of your personal information. If you exercise your right to opt-out of the sale of your personal information, we will refrain from selling your personal information, unless you subsequently provide express authorization for the sale of your personal information. To opt-out of the sale of your personal information, visit our homepage and contact us at: support@wejoyplay.com
Right to Deletion	Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will: · Delete your personal information from our records; and · Direct any service providers to delete your personal information from their records. · Please note that we may not delete your personal information if it is necessary to: · Complete the transaction for which the personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by you, or reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform a contract between you and us; · Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; or prosecute those responsible for that activity; · Debug to identify and repair errors that impair existing intended functionality; · Exercise free speech, ensure the right of another consumer to exercise his or her right of free speech, or exercise another right provided for by law; · Comply with the California Electronic Communications Privacy Act; · Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of such research, provided we have obtained your informed consent; · Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; · Comply with an existing legal obligation; or · Otherwise use your personal information, internally, in a lawful manner that is compatible with the context in which you provided the information.
Protection Against Discrimination	You have the right to not be discriminated against by us because you exercised any of your rights under the CCPA. This means we cannot, among other things: · Deny goods or services to you; · Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; · Provide a different level or quality of goods or services to you; or · Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services. Please note that we may charge a different price or rate or provide a different level or quality of services to you, if that difference is reasonably related to the value provided to our business by your personal information.

Account Deletion

You have the right to delete the account which you have registered with us to access its products or services at any time. We will delete the account after verifying your identity information. To ensure the security of your account and property, you shall submit your account deletion request to us via one of the following ways：

• by using the contact information displayed on our official website（https://www.wejoyplay.com/delete-account）；or
• by clicking the “Account Deletion ” option provided in the APP.

Unless otherwise stipulated by laws and regulations, after account deletion, we will delete all information related to your account, including personal information and game logs, thus you will be unable to normally use the products or services provided by us. After you complete the deletion, your account cannot be retrieved and your account data cannot be recovered. Please maintain your account information properly.

Do Not Sell My Personal Information

If you wish to opt out of the use of your personal information for interest-based advertising purposes and these potential sales as defined under CCPA law, you may do so by following the instructions below.

Please note that any opt-out is specific to the browser you use. You may need to opt out on every browser that you use.

Website

You can opt out of receiving ads that are personalized as served by our Service Providers by following our instructions presented on the Service:

• From our “Cookie Consent” notice banner
• Or contact us at: support@wejoyplay.com

The opt out will place a cookie on your computer that is unique to the browser you use to opt out. If you change browsers or delete the cookies saved by your browser, you will need to opt out again.

Mobile devices

Please refer to your operating system settings, or follow instructions below:

• Android Users (version 2.3 and above)

To use the “opt-out of interest-based advertising” option, follow the instructions provided by Google here: Google Play Help.

• iOS users (version 6 and above)

To use the “Limit Ad-Tracking” option, follow the instructions provided by Apple here: Apple Support Center

Please note that these are device settings and will disable interest-based ads from all providers, and not just for us. We have decided to offer this way of opting-out, as we estimate users will either want to receive interest-based advertising or no interest-based advertising at all. The above described way is the most efficient way to achieve that goal. While we do provide the possibility to opt-out of remerge processing only, that would only mean that someone else but us would deliver the exact same advertisements.

Changes

We may update this Privacy Policy to reflect changes to our data and information privacy practices, so we encourage you to check this page periodically. We will try to notify you in advance where there are any significant or very important changes.

How to Exercise Your Rights

If you would like to exercise any of your rights as described in this Privacy Policy, please Email us at support@wejoyplay.com.

Please note that you may only make a CCPA-related data access or data portability disclosure request twice within a 12-month period.

If you choose to contact us directly by email, you will need to provide us with:

· Enough information to identify you [(e.g., your full name, address and customer or matter reference number)];

· Proof of your identity and address (e.g., a copy of your driving license or passport and a recent utility or credit card bill); and

· A description of what right you want to exercise and the information to which your request relates.

We are not obligated to make a data access or data portability disclosure if we cannot verify that the person making the request is the person about whom we collected information, or is someone authorized to act on such person’s behalf.

Any personal information we collect from you to verify your identity in connection with you request will be used solely for the purposes of verification.

Contact Us

If you have any questions or concerns about this Privacy Policy or any other issue with your personal information, please feel free to contact us at: support@wejoyplay.com