1. Introduction

2. Notice

3. What Information We Collect About You

4. Mobile IDs, Cookies, and Other Tracking Technologies

5. How We Use Your Information

6. How We Disclose Your Information

7. What Choices Do You Have Regarding Our Use of Your Personal Information?

8. UK, EEA and Swiss Data Protection Rights

9. California Privacy Rights

10. Retention of Personal Information

11. Location of Personal Information

12. Security of Your Personal Information

13. Effective Date; Policy Changes

14. Contact Us

Mystic Play Games, its partners, parent companies, subsidiaries, licensees, licensors and affiliates. (collectively, the "Company", "we" or "us") develop, publish, market and commercialize a variety of games for use on various platforms, including mobile devices (our "Applications") through which we offer relating game play and social gaming services, including the ability to make purchases through the Applications (collectively, the "Services").

We respect your privacy and are committed to protecting personal information that you provide in connection with your use of the Services.

We recommend that you read this Privacy Policy in full to ensure you are completely informed about your personal information.

This Privacy Policy is intended to provide notice of the Company’s information practices, including the types of personal information gathered, how personal information is used and safeguarded, and how you may control the maintenance and sharing of your personal information. This Privacy Policy applies to personal information we collected through our Services and applies to all users of our Services globally.

We may collect information about you in the following ways: (1) directly from you, (2) automatically through your use of our Services, or (3) from third parties. The information we receive depends on factors such as the Service you’re using, third parties we partner with or you integrate with, and your privacy settings.

Information that you provide directly

We collect personal information directly from you when you choose to provide us with this information online and through your other

interactions with us (such as data collected via social media and any surveys, customer service communications, competitions or other promotional programs in which you may participate). Certain parts of our Services ask you to provide personal information when you engage with the following services: Account creation, customer service information and purchase of goods/services.

Information that we collect indirectly

We collect your personal information indirectly, including through automated means from your device when you use our Services. Some of the information we collect indirectly is captured using cookies and other tracking technologies, as explained further in the "Mobile IDs, Cookies, and Other Tracking Technologies" section below.

Information from third parties

We also collect your personal information from third party sources, for example:

We do not collect any special categories of personal information, as defined by the GDPR, about you, such as health-related information or information about your race or ethnicity, or sexual orientation. We do receive the following “sensitive personal information,” as defined by certain U.S. state privacy laws: communications information, which are the content of your communications when you use our Services to send messages to others.

When you are asked to provide personal information, you may decline. And you may use web browser or operating system controls to prevent certain types of automatic data collection. But if you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

We may use cookies, including Flash cookies, transparent GIFs (also called “web beacons”), mobile analytics and advertising IDs,server log analysis and other tracking technologies (collectively, "Cookies"), currently existing and as they are developed, to operate our Services, enhance your experience with our Services, and to help collect information, such as information about your use of our Services, identifiers, and device information.

Mobile analytics and advertising IDs are generated by operating systems for mobile devices (iOS and Android) and can be accessed and used by apps in much the same way that websites access and use cookies. Our apps contain software that enables our third-party analytics and advertising partners to access the mobile IDs.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use the personal data we collect for purposes described in this privacy statement or otherwise disclosed to you. For example, we use personal data for the following purposes:

-To deliver Applications and provide our Services to you, to communicate with you about your use of our Applications and Services, to respond to your inquiries, to fulfill your orders, and for other customer service purposes.

-To tailor the content and information that we may send or display to you, to offer location customization, and to otherwise personalize your experiences while using the Site, Applications, or our Services.

-Where permitted by law, and in accordance with all applicable terms and conditions, for marketing and promotional purposes. For example, we may use your information, such as your email address, to email you news and newsletters, special offers, and promotions, or to otherwise contact you about products or information we think may interest you. We may also use the information that we learn about you to determine where to assist us in advertising our Applications and Services.

-To better understand how users access and use our Applications and Services, both on an aggregated and individualized basis, in order to improve our Applications and Services, analyze player traffic and activity, respond to user desires and preferences, and for other research and analytical purposes. -As required or permitted by law.

We also use your information for communication, such as to respond to Customer Support inquiries, keep you informed of your in- game activity through the Applications and let you know about in-game status and promotions. While we do not retain personal information for longer than is necessary for either our purpose or to comply with legal requirements or recommendations, the length of time we retain your information generally depends on why we collected it and how we use it.

We may disclose or publish aggregated information (information about you and other players collectively that is not intended to specifically identify you) and other non-personal information about our players for industry analysis, demographic profiling, marketing, analytics, advertising, and other business purposes.

In addition, we may share your information (which may include personal information) with third parties or allow third parties to collect this information from our Site, Applications or Services under the following circumstances:

-to third party vendors, service providers, contractors or agents who perform functions on our behalf, such as payment processors, game play analysts, services hosts, customer service providers and marketing companies;

-with your consent;

-as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets;

-in order to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena;

-to other users of the Applications and Services in any post you make in any public forum offered by us or through the Applications;

-to protect us or our users to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Service or this Privacy Policy, or as support or evidence in any dispute or litigation in which we are involved.

We may send periodic promotional or informational emails to you. You may opt-out of promotional emails by following the opt-out instructions contained in the e-mail. Please note that it may take up some time for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you e-mails about your account or any Services you have requested or received from us. If you want to request to review, delete, or change the information we have about you; request that we no longer make active use of your information; or if you have additional questions, please send an email to us at [email protected] with your request and identifying information in the body of the email, including your first name, last name, e-mail address or login name you use to access our Application and Services. We will respond to your email as soon as possible. Please note that certain records, for example those relating to payments or customer service matters, will be held for legal and accounting purposes. If you have previously allowed us to access your precise geolocation data or receive push notifications through your device, you can stop making precise geolocation available to us or receiving push notifications by visiting your mobile device's settings for the relevant Application or in some cases, through the Application itself. In some instances you can also stop or limit the type of device IDs or cookies you allow (See our Information Mobile IDs, Cookies, and Other Tracking Technologies above).

If the processing of personal information about you is subject to UK or European Economic Area (EEA) or Swiss data protection law, you have certain rights with respect to that data:

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

If you are a California resident and the processing of personal information about you is subject to the California Consumer Privacy Act ("CCPA"), you have certain rights with respect to that information.

Right to Know. You have a right to request that we disclose to you the personal information we have collected about you. You also have a right to request additional information about our collection, use, disclosure, or sale of such personal information. Note that we have provided much of this information in this privacy statement. You may make such a "request to know" by contacting us at  [email protected].

Right to Request Deletion. You also have a right to request that we delete personal information under certain circumstances, subject to a number of exceptions. To make a request to delete, you may email us at  [email protected].

Right to Opt-Out. Note that the CCPA defines "sell" and "personal information" very broadly, and some of our data sharing described in this privacy statement may be considered a "sale" under those definitions. In the past 12 months, we have sold cookie IDs, device IDs, and IP addresses. To opt-out from "sales" of personal information, please visit our "Do Not Sell My Personal Information" page. We do not knowingly sell the personal information of minors under 16 years of age.

You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.

Further, to provide or delete specific pieces of personal information we will need to verify your identity to the degree of certainty required by law. We will verify your request by asking for your name and your email address or the username associated with your account.

Finally, you have a right to receive notice of our practices at or before collection of personal information, and you have a right to not be discriminated against for exercising these rights set out in the CCPA.

Additionally, under California Civil Code section 1798.83, also known as the "Shine the Light" law, California residents who have provided personal information to a business with which the individual has established a business relationship for personal, family, or household purposes ("California Customers") may request information about whether the business has disclosed personal information to any third parties for the third parties' direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a California Customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed. California Customers may request further information about our compliance with this law by e-mailing [email protected]. Please note that businesses are required to respond to one request per California Customer each year and may not be required to respond to requests made by means other than through the designated email address.

California residents under the age of 18 who are registered users of online sites, services, or applications have a right under California Business and Professions Code Section 22581 to remove, or request and obtain removal of, content or information they have publicly posted. To request that we remove content or information you have publicly posted, email us at [email protected]. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

We retain personal information for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs vary for different information types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations.

Details of retention periods for different aspects of your personal information are available from us on request by contacting us using the contact details provided under the “Contact Us” heading below.

The personal information we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers process data. The storage locations are chosen to operate efficiently and improve

performance. We take steps with the intent of processing and protecting as described in this Privacy Policy wherever the data are located.

Location of Processing European Personal Information. Where we transfer your personal information to countries and territories outside of the European Economic Area, Switzerland and the UK, which have been formally recognised as providing an adequate level of protection for personal information, we rely on the relevant “adequacy decisions” from the European Commission and “adequacy regulations" (data bridges) from the Secretary of State in the UK.

Where the transfer is not subject to an adequacy decision or regulations, we have taken appropriate safeguards to ensure that your personal information will remain protected in accordance with this Privacy Policy and applicable laws. The safeguards we use to transfer personal information are in the case of both our group companies and third party service providers and partners, the European Commission’s Standard Contractual Clauses as issued on 4 June 2021 under Article 46(2), including the UK Addendum for the transfer of data originating in the UK.

Our Standard Contractual Clauses entered into by our group companies and with our third party service providers and partners can be provided on request. Please note that some sensitive commercial information will be redacted from the Standard Contractual Clauses.

We have implemented commercially reasonable precautions designed to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our best efforts, no data security measures can guarantee 100% security.

You should take steps to protect against unauthorized access to your password, mobile device and computer by, among other things, choosing a robust password that nobody else knows or can easily guess and keeping your password private. You should never share your password with anyone or use the same password with other sites or accounts.

Each time you use our Services, the current version of the Privacy Policy will apply. Accordingly, when you use our Services, you should check the date of this Privacy Policy (which appears at the top of the Privacy Policy) and review any changes since the last version.

This Privacy Policy is subject to change from time to time. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you. If we make material changes to the Privacy Policy, we will provide notice or obtain consent regarding such changes as may be required by law.

To contact us with your questions or comments regarding this Privacy Policy or the information collection and dissemination practices of the Site, Applications or Services, or to contact our Data Protection Officer, please email us at [email protected].