This version is only applied to districts out of Taiwan.

Lightracer - Privacy Policy Template 20210506

[[Lightracer] Privacy Policy

Last Updated: [May 21. 2020]

Welcome to [Lightracer] (the “Game”). The Game is provided, operated and controlled by ByteDance Pte. Ltd., whose registered address is at 8 MARINA VIEW, #43-00, ASIA SQUARE TOWER 1, SINGAPORE 018960 (“company”, “we” or “us”).

You are reading the Privacy Policy, which explains how we collect, use and disclose your personal data when you download the Game from Apple App Store or Google Play, access the Game, and the rights you may have under applicable privacy laws. If you do not agree with this policy, you should not play the Game.

If you have any questions about how we use your personal data, please contact lightracer@ohayoogames.com.

Below is a summary of key points in our Privacy Policy.

This privacy policy consists of a main body and a jurisdiction-specific section. The jurisdiction-specific section might include additional information required under local data protection laws and/or render certain aspects of the body policy to be inapplicable or amend them accordingly due to local data protection laws.

SUMMARY

1. What data do we collect about you?

We collect and process your data when you create an account and play the Game, including your contact details and other data you provide when you register for an account or play the Game. We also collect data you share with us from third parties (such as Facebook, Apple, Google etc.) if you choose to log in to the Game via your account with such third party networks, and technical and behavioral data about your use of the Game. We may also collect data about you automatically through your use of the Game.

2. How and for what purpose will we use the data about you?

We use your data to provide the Game to you and to improve, develop and administer it. We may also use your data to, among other things, ensure your safety. We may also use your personal data to serve you targeted advertising and promote the Game and other products and services (in each case, if required under applicable law, where we have your consent).

3. Who else will access and collect your personal data and who do we share your data with?

The third party developer of the Game will have access to your data. Your data may also be collected by/shared with other companies in the same group as the company, payment providers, and advertising service providers. Where required or permitted by law, we will share your data with law enforcement agencies or regulators and with third parties pursuant to a legally binding court order.

4. Your rights

In certain circumstances, you have rights in relation to your data such as the right to access and the right to correction. Depending on your jurisdiction, you may have additional rights - please see the jurisdiction-specific section at the end of this Privacy Policy.

5. How long do we keep hold of your data?

We retain your data for as long as it is necessary to provide you with the Game service so that we can fulfill our contractual obligations and rights in relation to the data involved. Where we do not need your data in order to provide the Game to you, we retain it only as long as we have a legitimate business purpose in keeping such data or where we are subject to a legal obligation to retain the data. We will also retain your data if necessary for the establishment, exercise or defense of legal claims.

6. How will we notify you of any changes to this Privacy Policy?

We will generally notify all users of any material changes to this policy through a notice within the Game when you log in. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it.

***************************************

1. The types of personal data we use

Unless otherwise stated in this policy, the personal data we collect from you or about you is required so that we can perform our contract with you to provide the Game to you as detailed in our Terms of Service. The provision of certain data is mandatory for the purposes of your access to the Game, and if you do not provide certain types of data, we may not be able to grant you access to the Game, provide certain aspects of the Game or certain functionalities may be lost. However, you have control over certain kinds of personal data that you can choose to share or to withhold from us, and still be able to access the Game, as detailed in this policy.

We collect and use the following data about you:

Data You Provide to Us, Including Your Profile Data. You give us data when you register an account to play the Game via the application directly or if you choose to register using your social network account details (e.g. Facebook, etc.),including your name, username, password, age, language, email address, country, data you disclose in your user profile, character name or nickname, and data you voluntarily elect to provide in order to customize game play, such as gender. We link your data with your activity on our Game across all your devices, using your email or other log-in or device data.

We also collect data in correspondence you send to us.

Behavioral and Use Data.

Gameplay

We process data regarding your use of the Game including login history, purchase history, how you engage with the Game, the preferences you set, the amount of time spent in the Game, your gameplay and activity, your Game progress, your interactions with other players in the Game, and other pieces of data in connection with your various activities within or through the Game or otherwise (including when you capture a screenshot in the Game) that are sent by your device or computer system when you access the Game, which are automatically tracked and recorded by our servers. We also link your subscriber data with your activity on our Game across all your devices using your email address or similar data that you have provided.

Feedback

We also collect data and content of messages you provide to us through your feedback such as product reviews you write, or questions and data you provide for customer support. In this case, we may collect and store your contact data that you give them (i.e. your name and email address), your social network or service user ID number. When you contact us, such as for customer support, phone conversations or chat sessions with our representatives may be monitored and recorded.

Data from Third Parties. You may choose to share certain data with us from third parties or through your use of the Game. We have set out further details on the data we receive from third parties below:

Social Networks

If you choose to register to use the Game using your social network account details (e.g. Facebook, etc.), you will provide us or allow your social network to provide us with your username and public profile (including your name, profile picture, gender, networks, user IDs, list of friends, followers and accounts you follow, date of birth, email address, and any other data you have set to public on your account).

Advertising Service Providers

We use the data collected from you and your interaction with the Game to infer your likely interests to provide you with more relevant advertising. We will obtain your consent to do this where required by applicable law. This data tells us about purchases you have made so that we can predict what else might interest you in the future and assess how effective the advertising on our Game is. We collect this data by the use of Cookies and similar technologies in our Game and from similar data received from third parties who advertise through our Game and whose sites you visit.

Technical Data we collect about you. We automatically collect certain data from you when you use the Game. Such data includes your IP address, time zone settings, language, data regarding the device or hardware you are using to access the Game such as the model of your device, mobile device’s unique identifier (UDID) or serial number, cellular information, WiFi network, identifier for vendor (IDFV), source of user (where you use your account on a third party platform to log in), IMEI number, device screen resolution, mobile carrier, network type, device ID, operating system, Android ID, Google Advertising ID as well as other types of data sent by your device when you access the Game. Where you log-in from multiple devices, we will be able to use your profile data to identify your activity across devices.

Buy virtual items. If you buy virtual items and advantages via in-app purchases, your purchase will be made via your Apple iTunes or Google Play account. When you play the Game or access any of our other services on connected third-party applications or platforms (like Facebook, Apple, Google, etc.), any purchases you make will be processed by that third-party application and subject to that third-party application’s terms of service and privacy policy. We do not collect any financial or billing data from you in relation to such a transaction but may receive non-financial data related to your purchase, like your name and approximate physical location, and the items purchased. Please review the relevant app store's terms and notices in respect of the handling of such data. So that we can credit your account with the correct value in virtual items, we keep a record of the virtual assets/items you own, purchases you make, the time at which you make those purchases and the amount spent.

Other. Company may also receive either non-personal or public data from third parties in connection with market and demographic studies and/or data that company may use to supplement personal data provided directly by you. Company may ask some third-party service providers to supplement the personal data that you provide to company for its own marketing and demographic studies, so that company can consistently improve its services and related advertising to better meet its visitors' needs and preferences. To enrich its understanding of individual customers, company may tie this data to the data you provide to it.

2. Cookies

We, our vendors and service providers use cookies and other similar technologies (e.g. pixels, web beacons etc.) (collectively, “Cookies”) to enhance your experience using the Game. We will obtain your consent to the use of Cookies where required under applicable law.

(a) What is a Cookie?

Cookies are used to collect data, including personal data, from you. Cookies are small files which, when placed on your device, enable the Game to provide certain features and functionality. Web beacons are very small images or small pieces of data embedded in images, also known as “pixel tags” or “clear GIFs,” that can recognize Cookies, the time and date a page is viewed, a description of the page where the pixel tag is placed, and similar data from your computer or device.

Cookies are stored on your browser by website or apps that you visit. When you return to that website or app (or visit websites or apps that use the same cookies) these platforms recognize the Cookies and your browsing device.

b) Categories of Cookies

Cookies do many different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improving the user experience. Cookies can tell us, for example, whether you have visited the Game before or whether you are a new player. They can also help to ensure that adverts you see online are more relevant to you and your interests.

There are different categories of Cookies, including:

· First-party Cookies: First-party Cookies are small amounts of text which are served by us directly to your device.

· Third-party Cookies: Third-party Cookies, which are served by a third party on our behalf. We use third party Cookies for essential, functionality, analytic and performance, targeting or advertising and social media purposes.

Cookies can remain on your computer or mobile device for different periods of time. Some Cookies are 'session cookies', meaning that they exist only while your browser is open and are deleted automatically once you close your browser. Other Cookies are 'permanent cookies', meaning that they survive after your browser is closed. They can be used by the platform to recognize your computer when you open your browser and browse the Internet again.

c) What types of Cookies do we use and how do we use them?

The types of Cookies and similar technologies used by us and our partners in connection with the Game can be classified into one of five categories, namely 'essential Game Cookies', 'functionality Cookies', 'analytics and performance Cookies', 'targeting and advertising Cookies', and 'social media Cookies'. Cookies do a lot of different tasks to ensure you enjoy your use of the Game, for example, they are used to remember your preferences on sites you visit, to help you navigate between pages more efficiently and to make sure the adverts you see on our Game are relevant to you and your interests. We have set out some further information about each category, and the purposes of the Cookies we and third parties set in the following table.

Cookies that are necessary for essential purposes

These Cookies are essential to provide you with the Game and to use some of its features, such as to enable you to log in. Without these Cookies, we would not be able to provide you with a secure log in account. We use Cookies to uniquely identify you. Each time you log in to the Game, a Cookie containing a unique identifier that is tied to your account is placed on your browser. These Cookies allow us to uniquely identify you when you are logged into the Game and to process your online transactions and requests.

Functionality Cookies

Functionality Cookies record information you have entered or choices you have made. These Cookies also enable you to optimize your use of the Game after logging in so that we can personalize our content for you, greet you by name and remember your preference. These Cookies can also be used to remember settings you have applied. These Cookies mean that when you continue to use or come back to the Game, we can enable you to start the Game from where you left off.

Analytics and Performance Cookies

We use analytics/performance Cookies to analyze how you use the Game, including your level in the Game, measure any errors that occur and test different design ideas. The information is used to report and evaluate your activities and patterns as a user of the Game to provide services in accordance with these activities. These Cookies do not collect information that individually identifies you and all information these Cookies collect is aggregated and anonymous. We also use third-party analytics tools to help us measure traffic and usage trends for the Game (with your consent if required under applicable law).

Targeting or Advertising Cookies

Analytics: As you use the Game, you will notice that it features advertising. We allow third party companies, including advertising companies, to place Cookies in the Game to track the performance of our advertisements (with your consent if required under applicable law). As an example, these Cookies remember which users have used the Game. The information provided to third parties does not include personal information but it may be associated with personal information after they receive it.

Marketing: We may also (with your consent, where required under applicable law) contract with third-party advertising networks that collect IP addresses and other information from the Game, from third party websites and apps. Ad networks follow your online activities and collect information through automated means (such as through the use of Cookies, again, with your consent, if required under applicable law). Ad networks use this information, mainly to serve adverts about products and services that are likely to interest you. We may also partner with third parties to provide certain features in the Game or display advertising based on your web browsing activity. We may also use information from one device to help personalize your experience on another device. For advertising purposes, we may collect your Google Ad ID, Android Ad ID or (where applicable) your IDFA (IDFA stake the place of Cookies in mobile advertising delivered to iOS devices).

Social Media Cookies

Third parties whose applications are connected to the Game by you will set their own Cookies in order to customize their applications for you. Because of how Cookies work, we cannot access these Cookies, nor can the third parties access the data in Cookies used by us. If you are logged in to your account with the third party, the third party will be able to link information about you with your actions via Cookies.

3. How and for what purpose we use your personal data

We may use the data we collect about you in the following ways:

• In accordance with, and to perform our contract with you, we may use your data to:
• allow you to play the Game;
• notify you about changes to the Game and send Game-related communications to you;
• provide you with user support;
• enforce and notify you of changes to our terms of service, conditions and policies;
• administer the Game including troubleshooting;
• enable you to participate in the virtual items program; and
• communicate relevant information (such as updates and security alerts) and provide support to you.
• In order to comply with our legal obligations, we may use your data to help us detect abuse, fraud and illegal activity in the Game;
• In accordance with our legitimate interests to provide an enjoyable and safe Game experience, we may use your data to:
• ensure your safety and security;
• ensure the Game is presented in the most effective manner for you and your device;
• improve, promote, update and develop the Game and your experience, and protect the Game from any cyber-attacks;
• better understand customer behavior and improve our products and services through analytics;
• carry out data analysis and test the Game to ensure its stability and security and data about installed packages and running apps or processes in order to ensure the security of the Game network and prevent the spread of viruses and malware;
• allow you to participate in social and interactive features of the Game; and
• provide you with personalized advertising and promotional emails (with your consent, if this is required by law), namely by sending messages regarding new products, features, enhancements, special offers, upgrade opportunities, contests and events of interest.
• We may also take measures to ensure that you are old enough to play the Game, as required by law.

4. Who else will access your personal data and how we share your data

Third Party Game Developer

We work with third party game developers, and the third party developer of the Game will have access to your technical data and other data.

Social Networks

If you choose to register to use the Game using your social network account details (e.g. Facebook, etc.), you will provide us or allow your social network to provide us with your user name and public profile (including your name, profile picture, gender, networks, user IDs, list of friends, date of birth, email address, and any other data you have set to public on your account).

If you access third-party services, such as Facebook, to log in to the Game, these third-party services may be able to collect data about you, including data about your activity on the Game, and they may notify your connections on the third-party services about your use of the Game, in accordance with their privacy policies.

Facebook's privacy policy may be found at: Facebook Privacy Policy.

Google’s privacy policy may be found at: Google Privacy Policy.

Apple s privacy policy may be found at: Apple Privacy Policy.

To manage the data company receives about you from a third-party application, such as Facebook, you will need to follow the instructions for the third-party application for updating your data and changing your privacy settings. You can also manage some aspects of data collection and use by visiting the “settings” page of your mobile device and reviewing the permissions of each application or “app.” Once company receives your data from a third-party application or your mobile device, that data is stored and used by company in accordance with this Privacy Policy. You may access and update that data as described herein.

Payment Provider

If you choose to buy virtual items, we will share data with the relevant payment provider to facilitate this transaction. We share a transaction ID to enable us to identify you and credit your account with the correct value in virtual items once you have made the payment.

Advertising Service Providers

We may share and/or advertisers and third party measurement companies may collect some of your personal data, for example to show how many and which users of the Game have viewed or clicked on an advertisement. We may also share and/or they may collect non-personal and personal data e.g. IDFA, IP address, time zone settings, browser type, language, operating system, network connection type and speed, and data regarding the device or hardware you are using to access the Game such as the model and make of your device. You may refer to the advertisers' privacy policies for more information:

• Facebook's privacy policy may be found at: Facebook Privacy Policy.
• Google’s privacy policy may be found at: Google Privacy Policy.
• Unity’s privacy policy may be found at: Unity Privacy Policy.
• Vungle’s privacy policy may be found at: Vungle Privacy Policy.
• Applovin’s privacy policy may be found at: AppLovin Privacy Policy.
• Ironsource’s privacy policy may be found at: Ironsource Privacy Policy.
• Mintegral’s privacy policy may be found at: Mintegral Privacy Policy.
• Pangle’s privacy policy may be found at: Pangle Privacy Policy.

Please note, after clicking on a third party advertisement, you may no longer be on a site hosted by company or the social network through which you are playing the Game. If you no longer want to receive tailored in-Game advertisements from third parties, you may adjust your privacy settings.

Our third-party analytics providers use this data to help us serve targeted adverts which may be of interest to you (if you have chosen to receive personalized advertising from us and/or our partners). For more data about how our analytics providers collect data from the Game, please see the above section on Cookies.

Our Corporate Group

We may also share and/or other members, subsidiaries, or affiliates of our corporate group may collect, your data to provide the Game including improving and optimizing the Game, preventing illegal use, and supporting users.

Law Enforcement

We may share your data with law enforcement agencies, public authorities or other organizations if legally required or permitted to do so, or based on our legitimate business interests if such use is reasonably necessary to:

• comply with a legal obligation, process or request company is not required to question or contest the validity of any legal process, search warrant, subpoena or other similar governmental request that it may receive);
• enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
• detect, prevent or otherwise address security, fraud or technical issues; or
• protect and defend the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging data with other companies and organizations for the purposes of fraud protection and credit risk reduction).

Sale or Merger

We will also disclose your data to third parties:

• in the event that we sell or buy any business or assets (whether a result of liquidation, bankruptcy or otherwise), in which case we will disclose your data to the prospective seller or buyer of such business or assets; or
• if we sell, buy, merge, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, user data may be among the transferred assets.

5. International data transfers

For the purpose of performance of our contract with you, the personal data that we collect from you may be transferred to, and stored at, or otherwise accessed from or processed in a destination outside of your jurisdiction of residence (including Singapore and the United States of America) that has laws and regulations that may not guarantee the same level of security and protection of personal data as your jurisdiction. However, we will take reasonable and necessary steps to ensure that we handle personal data in accordance with this Privacy Policy and provide a standard of protection that it is comparable with the protection under the laws of your jurisdiction, regardless of where your personal data is transferred to or accessed from.

We will separately obtain your consent for international data transfer if this is required under applicable law.

6. Your rights

You may have the following rights under applicable laws:

• The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
• The right to request proper rectification or removal of your personal data or restriction of the processing of your personal data; and
• The right to object to processing your personal data for the purposes of sending you promotional messages.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Depending on your jurisdiction, you may have additional rights. Please see the jurisdiction-specific section at the end of this Privacy Policy.

Please send an e-mail to lightracer@ohayoogames.com if you would like to exercise any of your rights. We will respond to your request consistent with applicable law and subject to proper verification.

In addition:

• You can change your preferences by using the toggle features in the Game's cookie settings or by adjusting your browser settings. Because each browser is different, please consult the instructions provided by your browser. Please note that you may need to take additional steps to refuse or disable certain types of Cookies. For example, due to differences in how browsers and mobile apps function, you may need to take different steps to opt out of Cookies used for targeted advertising in a browser and to opt out of targeted advertising for a mobile application, which you may control through your device settings or mobile app permissions. In addition, your opt-out selection is specific to the particular browser or device that you are using when you opt out, so you may need to opt-out separately for each browser or device. If you choose to refuse, disable, or delete Cookies, some of the functionality of the Game may no longer be available to you.
• You may opt out of receiving advertising and/or marketing communications by following the instructions in such communications or by using options provided in the game settings.
• Your mobile device may include a feature that allows you to opt out of some types of targeted advertising (“Limit Ad Tracking” on iOS and “Opt out of Interest-Based Ads” on Android).
• Some browsers transmit “do-not-track" signals to websites. Because of differences in how browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.
• If you have registered for an account, you may access, review, and update certain personal data that you have provided to us by logging into your account and using available features and functionalities.
• If you want to remove your contacts stored by us, follow the instructions provided in the game to request that we remove them from our systems. If you need to enter a password to allow us to access your address book, we will not store that password.

7. The security of your personal data

We take steps to ensure that your data is treated securely and in accordance with this policy. We understand the importance of keeping your personal data safe and private, and we are committed to protecting your personal data from being lost, stolen or misused.

You are also responsible for keeping your personal data safe. Also, you are responsible for keeping your account details (if any) confidential.

We will, from time to time, include links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Because company cannot control the activities of third parties, it cannot accept responsibility for any use of your personal data by such third parties, and it cannot guarantee that they will adhere to the same privacy and security practices as company. Please check these policies before you submit any data to these websites.

8. How long do we keep your personal data

We retain your data for as long as it is necessary to provide you with the service so that we can fulfill our contractual obligations and rights in relation to the data involved. However, there are occasions where we are likely to keep this data for longer in accordance with our legal obligations or where it is necessary for the establishment, exercise or defense of legal claims.

9. Data relating to children

The Game is not directed at children under the age of 13 and we do not knowingly collect or solicit personal data from children under 13. If you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.

10. Complaints

In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at lightracer@ohayoogames.com and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to lodge a claim with the relevant data protection authority.

11. Changes

We will generally notify all users of any material changes to this policy, through a notice provided via the Game and providing any other notice required by applicable law. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it. If you do not agree to the updated policy, you must stop accessing or using the Game.

12. Contact

Questions, comments and requests regarding this policy should be addressed to lightracer@ohayoogames.com.

Supplemental Terms – Jurisdiction-Specific

In the event of a conflict between the provisions of the Supplemental Terms –Jurisdiction-Specific that are relevant to your jurisdiction from which you access or use the Services, and the rest of policy, the relevant jurisdictions’ Supplemental Terms – Jurisdiction-Specific will supersede and control.

EUROPEAN JURISDICTIONS

Germany

Questions, comments and requests regarding this policy should be addressed to lightracer@ohayoogames.com.

In the Summary, under How will we notify you of any changes to this Privacy Policy? the following sentence shall be deleted:

By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it.

Section 11 (Changes) is modified to delete the sentence:

Your continued access to or use of the Game after the date of the updated policy constitutes your acceptance of the updated policy.

EEA, UK and Switzerland

In Section 2 (Cookies), the following shall be added:

We will only make use of Cookies to obtain and share your data if you provide your express consent. You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

In Section 3 (How we use your data), the following shall be added:

• With your consent, we will use your data (including ad identifiers, age, region, gender, language, data related to your use of the Game and interactions with others, messages including content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication, username and public profile) to:

￮ conduct surveys as outlined in the body section of this privacy policy including telling you about services and opportunities;

￮ collect and process, which includes scanning and analyzing, data you provide in the context of composing, sending, or receiving messages through the Game messaging functionality. That data includes the content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication;

￮ monitor and record customer support communication, phone conversations or chat sessions with our representatives;

￮ access posts to your social media walls, posts in your news feed and access your social network data at any time, including any of your favorite websites, friend data or fan pages and any other data included in your application, social network or online profile, even if you are not using the social network or you chose not to make that data public;

￮ provide you with personalized advertising. Please see the section entitled “Advertising Service Providers" for more information. You can manage ‘Personalized Ads’ via your Game settings;

￮ collect and process certain technical data, namely list of installed packages and running apps or processes and third-party apps you have on your device;

￮ collect data about your location. In certain jurisdictions, with your permission, we will collect Global Positioning System (GPS) data and mobile device location data based on your SIM card;

￮ find other users and invite your friends in your preferred social networks as outlined in the body section of this privacy policy and to show descriptions of your game activity and game profile to other players on the social network, regardless of whether they are your social network friends or not;

￮ supplement personal data provided directly by you with either non-personal or public data from third parties in connection with market and demographic studies and/or data that company may use, or to ask third-party service providers to supplement the personal data that you provide to company for its own marketing and demographic studies, and to tie individual customer data to data you provide to company.

￮ to send you direct marketing via email or SMS; and

￮ use cookies as outlined under section 2.

You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

The following shall be added to section 5 - International data transfers:

The personal data that we collect from you will be transferred to, and stored at, a destination outside of the European Economic Area (“EEA”).

Where we transfer your personal data to countries outside the EEA, we do so under the Commission’s model contracts for the transfer of personal data to third countries

(i.e. standard contractual clauses) pursuant to 2004/915/EC or 2010/87/EU (as appropriate). For a copy of these Standard Contractual Clauses, please contact us at lightracer@ohayoogames.com.

The following shall amend section 6 - Your Rights:

• Right to request access to your personal data: You have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes - inter alia - the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.

You have the right to obtain a copy of the personal data undergoing processing free of charge. For further copies requested by you, we may charge a reasonable fee based on administrative costs.

• Right to request rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

• Right to request erasure (right to be forgotten): You have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.

• Right to request restriction of processing: You have the right to obtain from us that we restrict the processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.

• Right to data portability: Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible;

• Right to withdraw consent: Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time without impact to data processing activities that have taken place before such withdrawal;

• Automatic decision making: You have the right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorized by EU or EU Member State law or this is necessary for the performance of a contract;

• Right to Object: You have the right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing; and

• Right to complaint: You have the right to lodge complaints before the competent data protection authority.

These rights might be limited under applicable national data protection law.

Please send an e-mail to lightracer@ohayoogames.com if you would like to exercise any of your rights. We will respond to your request consistent with applicable law and subject to proper verification.

Section 8 (How long we keep your personal data) is modified to add:

Where we do not need your data in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose or other valid legal basis for keeping such data.

Section 9 (Information relating to children) shall be replaced with the following:

The Game is not directed at children under the age of 16 and we do not knowingly collect or solicit personal data from children under 16. If you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.

ASIA-PACIFIC JURISDICTIONS

Australia

The following definition shall apply to the Privacy Policy:

"Personal data" means "personal information" as defined in the Privacy Act 1988 (Cth), i.e., information or an opinion, whether true or not, and whether recorded in a material form or not, about an identified individual, or an individual who is reasonably identifiable.

The following shall be added to Section 5 - International data transfers:

The personal data that we collect from you will be transferred to, and stored at, a destination outside of Australia, in particular in Singapore and the United States of America.

The following shall replace Section 12 - Contact:

If you have any questions about the Privacy Policy, or would like to complain about a breach of the Australian Privacy Principles, or are concerned about the handling of your personal data, please contact the privacy officer lightracer@ohayoogames.com. You have the right to access your personal data and seek correction of it. Please contact the privacy officer on the details provided in this Privacy Policy if you wish to access your personal data and/or seek correction of your personal data. If you are not satisfied with the response or do not receive a response within a reasonable time frame, you may have the right to take your complaint to the Office of the Australian Information Commissioner (OAIC). Current contact details for the OAIC are available on the OAIC's website at www.oaic.gov.au.

New Zealand

The following sentence should be added to the end of Section 5 (International Data Transfers):

Where we send your personal data to a jurisdiction outside of New Zealand, we will ensure that your personal data will be protected by security safeguards comparable to New Zealand law while in that foreign jurisdiction. If your personal information will not be protected by security safeguards comparable to New Zealand law while in that foreign jurisdiction, we will inform you that this is the case, and only transfer your personal information with your consent.

Hong Kong

Section 3 (How we use your personal data) is modified to add:

We intend to use your personal data (name and email address) for promotional marketing purposes, namely to send you messages concerning new products, features, enhancements, special offers, upgrade opportunities, contests and events of interest in relation to the Game. We require your express consent (for use) and written consent (for transfer) before we do so.

We will not transfer your personal data to other parties for gain.

Japan

The following shall be added to Section 5 - International data transfers:

The personal data that we collect from you will be transferred to, and stored at, a destination outside of Japan, in particular in Singapore and the United States of America.

Macau

In Section 1 (The types of personal data we use), the first sentence of the second paragraph is modified to read: "You expressly consent that we will collect and use the following data about you:".

In Section 3 (How and for what purpose we use your personal data), the first sentence is modified to read: "You expressly consent that we may use the data we collect about you in the following ways:"

In Section 4 (How we share your personal data), the first sentence is modified to read: "You expressly consent that we will share your data with the following selected third parties:"

Section 5 (International data transfers) shall be modified as follows:

You expressly consent that the personal data that we collect from you may be transferred to, and stored at, or otherwise processed in a destination outside of your jurisdiction of residence. These jurisdictions include Singapore and the United States of America. The list of jurisdictions may be supplemented from time to time in accordance with Section 11 of this Policy.

In Section 6 (Your rights), the following sentence: "The right to object to processing your personal data for the purposes of sending you promotional messages" shall be deleted and replaced with the following:

• "The right to object prior to and during our usage of your personal data for direct marketing purposes."

South Korea

Section 3 (How we use your personal data) is modified as follows:

We intend to use your personal data (name and email address) to send you promotional messages concerning new products, features, enhancements, special offers, upgrade opportunities, contests and events of interest in relation to the Game. We require your express consent before we do so.

Section 4 (How we share your personal data) shall be modified as follows:

We share your data with the following selected third parties:

Service Providers

We provide data and content to service providers who support our business, such as cloud service and data storage providers, and technical support providers who enhance game operations, improve the Game experience, conduct debugging, and provide general support services. Details of the service providers are as follows:

*

Section 8 (How long we keep your personal data) shall be replaced with the following:

In principle, we will promptly destroy your personal data in our possession once we achieve the purpose of collection and use of your personal data.

Procedure and Method for Destruction of Personal Data

In principle, we will promptly destroy your personal data in our possession once we achieve the purpose of collection and use of your personal data.

Your personal data will be destroyed after storage for a certain period pursuant to our internal policy or applicable laws and regulations (please refer to the provisions on retention and use period). Personal data stored in electronic file format will be deleted by using technical means that will not allow data recovery.

Section 9 (Data relating to children) shall be replaced with the following:

The Game is not directed at children under the age of 14 and we do not knowingly collect or solicit personal data from children under 14. If you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.

For children under the age of 14, their legal guardians have the right to exercise the rights of their children with respect to data protection.

Taiwan

Section 5 (International data transfers) shall be modified as follows:

"The personal data that we collect from you may be transferred to, and stored at, or otherwise processed in destination outside of your jurisdiction of residence, including Singapore and the United States."

The following wording shall be added to Section 6 - Your rights:

• "The right to request the cessation of the collection, processing or use of your personal data."

Singapore

The following shall be added to Section 5 (International data transfers):

“We shall ensure that any personal data transferred to a jurisdiction outside of Singapore will be provided a standard of protection to personal data so transferred that is comparable with the protection under the Personal Data Protection Act 2012.”

Section 6 (Your Rights) shall be deleted and replaced as follows:

“You may have the following rights under applicable laws:

• The right to request (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained for a reasonable fee;

• The right to request proper rectification of your personal data;

• The right to withdraw consent to processing of your personal data, including the use of your personal data for the purposes of sending you promotional messages. We may continue to process your personal data if we are permitted to do so without your consent under applicable law.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Please send an e-mail to lightracer@ohayoogames.com if you would like to exercise any of your rights. We will respond to your request consistent with applicable law and subject to proper verification.”

Malaysia

The following sentence shall be added in the second paragraph of the Privacy Policy before "If you do not agree with this policy, you should not play the Game":

"By accessing the Game or providing us with your personal information, you consent to your personal data being collected, stored, used, processed and disclosed asset out in this policy, including the transfer of your personal data outside of Malaysia."

The following shall be added to Section 5 (International data transfers):

"You hereby expressly consent that the personal data that we collect from you may be transferred to, and stored at, a destination outside of Malaysia. For the places where the personal data is transmitted, retained or processed outside of Malaysia, we will take reasonable measures to protect that personal data."

The first paragraph of Section 6 (Your rights) before "Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details" shall be deleted in its entirety and replaced with the following:

"You may have the following rights under applicable laws:

• The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;

• The right to request proper rectification or removal of your personal data or restriction of the processing of your personal data, including personal data relating to other persons who may be identified from that personal data; and

• The right to object to processing your personal data for the purposes of sending you promotional messages."

Section 12 (Contact) shall be deleted in its entirety and replaced with the following:

"Questions, comments and requests regarding this policy should be addressed at lightracer@ohayoogames.com."

Philippines

The following is added to the "Summary":

• If you are a resident of the Philippines, the applicable privacy laws shall include the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and issuance of the National Privacy Commission.

The following is added to Section 6 (Your Rights):

• Right to complaint: You have the right to lodge complaints before the National Privacy Commission.

The following shall replace Section 12 (Contact):

If you have any questions about the Privacy Policy, or would like to complain about a violation of the Data Privacy Act of 2012, or are concerned about the handling of your personal data, please contact the data protection officer (DPO) at lightracer@ohayoogames.com. You have the right to access your personal data and seek correction of it. Please contact the DPO on the details provided in this Privacy Policy if you wish to access your personal data and/or seek correction of your personal data. If you are not satisfied with the response or do not receive a response within a reasonable time frame, you have the file a complaint with the National Privacy Commission (NPC). Current contact details for the NPC are available on the NPC's website at www.privacy.gov.ph.

Vietnam

Section 3 (How we use your personal data) is modified to add:

“We intend to use your personal data for promotional marketing purposes, including to send you promotional messages concerning new products, features, enhancements, special offers, upgrade opportunities, contests and events of interest in relation to the Game. We require your express consent to do so.”

Section 4 (How we share your personal data), the first sentence is modified to read: "You expressly consent that we may share your data with the following selected third parties:"

Section 5 (International data transfers), the first sentence is modified to read: "You expressly consent that the personal data we collect from you may be transferred to, and stored at, or otherwise processed in a destination outside of your jurisdiction or residence."

Section 6 (Your Rights), the following shall be added:

• The right to object to the processing of your personal data by third parties.

Section 9 (Data relating to children) shall be replaced with the following:

The Game is not directed at children under the age of 16 and we do not knowingly collect or solicit personal data from children under 16. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 16, you hereby declare that such user is above the age of 13 and that you have read and acknowledged company Privacy Policy and Terms of Use and agree to the use by your child of the game and registration for an account. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”.

THE AMERICAS

Canada

The following shall be added to Section 5 - International data transfers:

The personal data that we collect from you will be transferred to, and stored at, a destination outside of Canada, in particular in Singapore and the United States of America for the purposes stated under this Privacy Policy. We may disclose your personal data to foreign law enforcement and national security authorities in such jurisdictions in accordance with this Privacy Policy.

The following shall replace Section 12:

Contact

If you have any questions, comments and requests regarding this policy, or would like to obtain written information about the organization's policies and practices with respect to service providers outside of Canada, please contact lightracer@ohayoogames.com.

USA

Data relating to children

Section 9 (Data relating to children) is modified to add:

Company respects the privacy of parents and children, and is committed to complying with the Children’s Online Privacy Protection Act (“COPPA”). If a parent believes that his or her child under the age of 13 has submitted personal data to company, he or she can contact us via email: lightracer@ohayoogames.com.

Supplemental California Disclosures

In this section, we disclose information about our data processing practices as required by the California Consumer Privacy Act of 2018 (“CCPA”). These disclosures are addressed only to residents of the State of California. These disclosures do not reflect our collection, use or disclosure of California residents’ personal information where an exception under the CCPA applies.

For the purpose of these supplemental disclosures, personal data as used in the Privacy Policy, shall have the same meaning as “personal information” under the CCPA.

A. Right to Know about Personal Information Collected, Disclosed or Sold

You have the right to request that we disclose what personal information we collect, use, disclose and sell about you specifically (“right to know”). To submit a request to exercise the right to know, please submit an email request to lightracer@ohayoogames.com and include “California Request to Know" in the subject line. Please specify in your request the details you would like to know, including any specific pieces of personal information you would like to access.

We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. We will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.

B. Our Personal Information Handling Practices over the Past 12 Months

We have set out below categories of personal information we have collected about California residents in the preceding 12 months. For each category of personal information we have collected, we have included the reference to the enumerated category or categories of personal information in California Civil Code § 1798.140(o)(1) that most closely describe such personal information.

*

We collect such information from you or your device. If you choose to provide us with information through your social network account, we also collect information about you from the provider of that social network. We may also collect information about your interests, preferences and characteristics from advertising networks and publicly available sources for the purposes of targeting advertising at you. We use your personal information for the purposes set forth in Section 3 of the Privacy Policy above.

In the past 12 months, we disclosed the above categories of personal information to our affiliated and unaffiliated service providers for the purposes listed in our Privacy Policy. If you direct us to share your personal information with other specified third parties, we may disclose information about you with these third parties for the purposes described in your directions. We may also disclose personal information to the recipients described in Section 4 of the Privacy Policy above.

We do not sell, and in the preceding 12 months did not sell, California residents’ personal information. We do not have actual knowledge that we sell the personal information of minors under 16 years of age.

C. Right to Request Deletion of Personal Information

You have a right to request the deletion of personal information that we collect or maintain about you. To submit a request to delete personal information, please submit an email request to lightracer@ohayoogames.com and include “California Request to Delete” in the subject line. Please specify in your request the personal information about you that you would like to have deleted, which can be all of your personal information as required by the CCPA.

We will ask that you provide certain information to verify your identity. The information that we ask you to provide to verify your identity will depend on your prior interactions with us and the sensitivity of the personal information at issue. Once confirmed, we will respond to your request in accordance with the CCPA. If we deny your request, we will explain why.

D. Right to Non-Discrimination for the Exercise of CCPA Rights

You may not be discriminated against because you exercise any of your rights under the CCPA in violation of California Civil Code § 1798.125.

E. Right to Information about Direct Marketing Disclosures

Once a calendar year, you may be entitled to obtain information about personal information that we shared, if any, with other businesses for their own direct marketing uses. If applicable, this information would include the categories of customer information, as well as the names and addresses of those businesses with which we shared customer information for the immediately prior calendar year. To request a notice, please submit your request to lightracer@ohayoogames.com.

Uruguay

In the "Summary", the paragraph under How and for what purpose will we use the data about you? should be amended as follows:

“We use your data to provide the Game to you and to improve and administer it. We may also use your data to, among other things, improve and develop the Game and ensure your safety. You agree that we may also use your personal data to serve you targeted advertising and promote the Game and other products and services. You will be able to withdraw your consent at any time.”

In Section 1 (The types of personal data we use), the paragraph under Surveys in “Behavioral and Use Data”, the following sentence will be added:

“You will be able to exercise the right to block your personal data regarding advertising activities and withdraw your consent.”

Under Section 6 (Your rights), the first paragraph is supplemented with the following additional rights:

“You may have the following rights under applicable laws:

· Block right: You have the right to block your data from being processed for publicity or data profiling purposes, if we use your personal information for targeting, marketing, analytics and in general for advertising activities.

· The right to obtain from us the deletion of personal data concerning you and we may be obliged to delete such personal data in case of harming the legitimate interests of third parties, manifest mistake and breach of a legal obligation;”

Section 9 (Data relating to children) is amended as follows:

“The Game is not directed at children under the age of 18 and we do not knowingly collect or solicit personal data from children under 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged company Privacy Policy and Terms of Use and agree to the use by your child of the game and registration for an account. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”

Colombia

The introduction shall be amended as follows:

The following definitions shall be taken into account for Colombia:

a. Data Base: Organized set of personal data that is processed.

b. Personal Data: Any information linked or that can be associated to one or more determined or determinable persons.

c. Data Subject: all the individuals whose personal information is processed.

d. Sensitive Personal Data: Personal data that may affect Data Subjects privacy or give rise to discrimination, such as personal data associated with racial or ethnic origin, political orientation, religious or philosophical beliefs, membership of trade unions, social organizations, human rights or that promote the interests of any political party or that guarantee the rights and guarantees of opposition political parties, as well as data concerning health, sex life, and biometric data.

E. Consent: Prior, express and informed authorization granted by the Data Subject to carry out the processing of personal data.

F. Applicable Law: Law 1581 of 2012, Decree 1377 of 2013, Law 1266 of 2008 and other regulations that modify, add or repeal them.

g. Transfer: The transfer of data takes place when the Data Controller in charge of the processing of personal data, located in Colombia, sends the information or personal data to a recipient, who in turn is also a Data Controller for the processing of personal data and is inside or outside the country.

H. Transmission: Processing of personal data that implies the communication of the same within or outside the territory of the Republic of Colombia when the purpose is to carry out processing by a Data Processor on behalf of the Data Controller.

i. Processing: Any operation or set of operations on personal data, such as collection, storage, use, transmission, transfer or deletion.

J. Children or adolescent: person under the age of 18.

k. Data Access Request: “Consults” or “Requests” as mentioned in the Applicable Law.”

The following shall be added to Section 1 (The types of personal data we use):

“Sensitive Personal Data. We may collect your sensitive personal data (as defined), if you choose to register using your social network account details (e.g. Facebook, Twitter, Instagram, Google or Apple) and in the context of composing, sending, or receiving direct messages to and from other players, either directly on our websites and apps or to third party social media account and whether by words, voice, video or photos and your communications with us. Please note that according to Colombian law you may or may not consent to the processing of your sensitive personal data. However if you decide not to consent to the processing of your sensitive personal data the company will not be able to fulfill the purposes described in Section 3 (How and for what purpose we use your personal data).”

The following shall be deleted from Section 1 (The types of personal data we use) under the heading “Message Boards and Chat Rooms”:

“Any actions you perform with other players are considered public, and are solely at your discretion and you should have no expectation of privacy or confidentiality.”

“You should be aware that any personally identifiable data you submit in the course of these public activities can be read, collected, or used by other users of these forums, and could be used to send you unsolicited messages.”

The following shall be added to Section 2 (Cookies):

“We will only make use of Cookies to obtain and share your data if you provide your express consent. You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.”

The first paragraph of Section 6 (Your rights) shall be supplemented with the following rights under the Colombian Data Privacy Regime:

• The right to request for proof of the consent given for the processing of your personal data;

• The right to be informed, upon request, of the use that has been made of your personal data;

• The right to revoke your consent and/or request the deletion of the data when the processing does not respect the constitutional and legal principles, rights and guarantees; and

• All other rights established under applicable law.”

The following shall be added to Section 9 (Data relating to children):

“The Game is not directed at children under the age of 18 and we do not knowingly collect or solicit personal data from children under 18. Nevertheless, in the case of children or adolescents above 14 but under the age of 18, parents or legal guardians must consent to the processing of personal data on their behalf. The processing of personal data of children and adolescents over the age of 14 will be carried out taking into account the rights described in Section 6 (Your rights) and respecting the rights established in the Colombian Constitution. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at

lightracer@ohayoogames.com and we will ensure that it is deleted.”

The following shall be added to Section 10 (Complaints):

“Complaints will be resolved following the same procedure established in Section 6 (Your rights).”

Section 11(Changes) shall be amended as follows:

“We will generally notify all users of any material changes to this policy, through a notice provided via the Game and providing any other notice required by applicable law. However, you should look at this privacy policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it. Your continued access to or use of the Game after our notification to users of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Game.”

Argentina

The following sentence should be added to Section 1 (The types of personal data we use):

“Personal data shall have the meaning set forth by the Argentina Data Protection Law No. 25,326, as amended (“Law”). The personal data we collect and process may include sensitive data, as defined by the Law, when permitted by applicable regulations. By accepting this Privacy Policy, you grant your consent for the collection and processing of sensitive data.”

The following paragraphs should be inserted under Section 6 (Your rights):

“Company is responsible for the database where your personal data will be stored, domiciled at Singapore and the United States of America.

The Agencia de Acceso a la Información Pública (i.e. the Argentine Data Protection Authority) is the enforcement authority of the Law in Argentina.”

The following sentence should be added to Section 8 (How long do we keep your personal data):

“Your personal data will be destroyed or anonymized after the reasons to retain your personal data as referred to above no longer exist, and in accordance with this Privacy Policy or applicable laws.”

Brazil

In the "Summary", under How will we notify you of any changes to this Privacy Policy?, the following sentence shall be deleted:

“By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it.”

The following shall be added to Section 3 (How and for what purpose we use your personal data):

“With your consent, we will use your data (including ad identifiers, age, region, gender, language, data related to your use of the Game and interactions with others, messages including content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication, username and public profile) to:

· Conduct surveys as outlined in the body section of this privacy policy including telling you about services and opportunities;

· Collect and process, which includes scanning and analyzing, data you provide in the context of composing, sending, or receiving messages through the Game messaging functionality. That data includes the content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication;

· Access posts to your social media walls, posts in your news feed and access your social network data at any time, including any of your favorite websites, friend data or fan pages and any other data included in your application, social network or online profile, even if you are not using the social network or you chose not to make that data public;

·Collect and process certain technical data, namely a list of installed packages and running apps or processes and third-party apps you have on your device; and

·Find other users and invite your friends in your preferred social networks as outlined in the body section of this privacy policy and to show descriptions of your game activity and game profile to other players on the social network, regardless of whether they are your social network friends or not.

You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.”

In Section 6 (Your rights), the first paragraph is supplemented with the following additional rights:

“You may have the following rights under applicable laws:

· The right to request anonymization, restriction of processing or erasure of personal data we process about you that is unnecessary, excessive or processed contrary to applicable law;

· The right to portability of your personal data to another service provider;

· The right to request erasure of personal data that we process based on your consent;

· The right to receive information about the public and private entities with which we share your personal data;

· The right to be advised about your choice not to give consent and the corresponding consequences;

· The right to revoke your consent;

· The right to lodge a complaint with the Brazilian Data Protection Authority;

· The right to oppose to processing of personal data that is not based on your consent in the event processing fails to comply with applicable law.”

Section 9 (Data relating to children) is amended as follows:

“The Game is not directed at children under the age of 16 and we do not knowingly collect or solicit personal data from children under 16. If you are 16 years of age or above but below the age of 18, you declare that you had the consent or assistance of your parent or legal guardian to use the Services and to agree to the company Privacy Policy and Terms of Use. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and and we will ensure that it is deleted.”

In Section 11 (Changes), the following sentence shall be deleted:

“By accessing the Game, you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it.”

Section 12 (Contact) is amended as follows:

“The data protection officer for company can be contacted for questions, comments and requests regarding this policy as follows: lightracer@ohayoogames.com.”

MIDDLE EAST JURISDICTIONS

Bahrain

The following shall amend the first paragraph of Section 6 (Your Rights):

“You may have the following rights under applicable laws:

· Right to request access to your personal data: You have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access information includes - inter alia - the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipient to whom the personal data have been or will be disclosed.

· You have the right to obtain a copy of the personal data undergoing processing free of charge.

· Right to request rectification: You have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

· Right to request erasure (right to be forgotten): You have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.

· Right to request restriction of processing: You have the right to obtain from us that we restrict the processing of your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.

· Right to data portability: Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible;

·Right to withdraw consent: Where the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time without impact to data processing activities that have taken place before such withdrawal;

·Automatic decision making: You have the right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you.

·Right to Object: You have the right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing; and

·Right to complaint: You have the right to lodge complaints before the competent data protection authority.

Section 9 (Information relating to children) shall be replaced with the following:

“The Game is not directed at children under the age of 18 and we do not knowingly collect or solicit personal data from children under 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged company Privacy Policy and Terms of Use and agree to the use by your child of the game and registration for an account. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”

Israel

In the "Summary", under How will we notify you of any changes to this Privacy Policy?, the sentence "…you acknowledge that you have read this policy and that you understand your rights in relation to your personal data and how we will collect, use and process it", shall be deleted, and replaced inits entirely with the following:

"…you agree to the terms of this privacy policy".

In Section 1 (The types of personal data we use), the first paragraph (before the words "We collect and use…") shall be amended in its entirely, as follows:

"Unless otherwise stated in this policy, the personal data we collect from you or about you is required so that we can perform our contract with you to provide the Game to you as detailed in our Terms of Service. While you are not legally obliged to provide us with your personal data, the provision of certain data is mandatory for the purposes of your access to the Game. Therefore, should you choose to refrain from providing us with certain categories of personal data, as we may require, we may not be able to grant you access to the Game, and/or you may not be able to set-up an account and/or, we will not be able to provide certain aspects of the Game or certain functionalities may be lost. For example, if you do not provide your age data for account set up purposes, we will not be able to grant you access to the Game. If you do not provide your location data, we may not be able to provide certain aspects of the Game service or certain functionalities may be lost. However, you have control over certain kinds of personal data that you can choose to share or to withhold from us, and still be able access the Game, as detailed in this policy. In any event, if you choose to provide us with any categories of personal data, you do so of your own free will and consent".

In Section 1 (Data You Provide to Us, Including Your Profile Data), the following sentence shall be added after the first paragraph:

"Whenever you provide us personal data pertaining your friends, social contacts or any other third party, for any purpose (including, without limitation, when you interact with other players, invite a friend to play the Game, etc.), you are obliged to obtain all necessary and applicable consents from your friends, social contacts or such other third parties, for the transfer of their personal data to us".

In Section 3, (How and for what purpose we use your data), the following shall be added:

"With your consent, we will use your data (including ad identifiers, age, religion, gender, language, data related to your use of the Game and interactions with others, messages including content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication, username and public profile) to:

• Collect and process, which includes scanning and analyzing, data you provide in the content of composing, sending, or receiving messages through the Game messaging functionality, that data includes the content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication;
• Access posts to your social media walls, posts in your news feed and access your social network data at any time, including any of your favorite websites, friend data or fan pages and any other data included in your application, social network or online profile, even if you are not using the social network or you chose not to make that data public;
• collect and process certain technical data, namely list of installed packages and running apps or processes and third-party apps you have on your device;
• find other users and invite your friends in your preferred social networks as outlined in the body section of this privacy policy and to show descriptions of your game activity and game profile to other players on the social network, regardless of whether they are your social network friends or not;
• to send you direct marketing via email or SMS; and
• provide direct-mailing services to other parties, by way of transferring lists, labels and data to third parties (including advertising service providers) for their own purposes, that was analyzed and personalized based on your belonging to a group of the population by virtue of one or more characteristics.”

In Section 5 (International data transfers), after the sentence "The personal data that we collect from you may be transferred to, and stored at, or otherwise processed in a destination outside of your jurisdiction of residence", the following shall be added:

"…, including in jurisdictions which provide a different level of data security and protection than as provided under Israeli law".

In Section 6 (Your Rights), the first paragraph (before the words “Before we can respond to a request to exercise one or more of the rights listed above …”) shall be amended as follows:

“Please note that an Israeli data subject, may have the following rights regarding his/her personal data under Israeli law:

(i) The right to request access to the personal data we hold about you, subject to Israeli law;

(ii) The right to request to rectify or delete your personal data where it is inaccurate, incomplete, unclear or outdated; and

(iii) The right to object to our use of your personal data for direct mailing purposes (this is applicable when we engage and advertise to you with content based on your belonging to a group of the population that is determined by one or more characteristics, or to restrict the use of your personal data for direct mailing services).”

Section 9 (Data relating to children) shall be replaced with the following:

"We not do not knowingly collect or solicit personal data from children under 18 for prohibited purposes under applicable Israeli law. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged company Privacy Policy and Terms of Use and agree to the use by your child of the game and registration for an account. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”

Qatar

The following shall replace the first paragraph of Section 6 (Your Rights):

“You have the right at any time to access your personal data and, in particular to:

1- Have us notify you of the processing of your personal data and the purposes for which such processing is conducted and to notify you of any disclosure of inaccurate personal data, subject in each case to any restriction which arises in the relevant circumstances under the applicable law;

2- Obtain a copy of your personal data held by us upon payment of the service fee;

3- Withdraw your consent to the processing of your personal data subject to any overriding requirement of applicable law and provided that such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal;

4- Object to the processing of your personal data if that is found to be unnecessary to achieve the purposes for which it was collected or if it is in excess of the requirements, discriminatory, unfair or against the law;

5- Request the deletion or erasure of your personal data in cases 3 and 4 referred to above or upon the achieving of the purpose for which it was processed or if there is no reason for us to keep it; and

6- Request the correction of your personal data, subject to you providing us with reasonable evidence as to the validity of your request.

Section 9 (Information relating to children) shall be replaced with the following:

“We do not knowingly collect or solicit personal data from children under 18. If you believe that we have received personal data about or collected personal data from your child, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”

Section 10 (Complaints) shall be replaced as follows:

“In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at lightracer@ohayoogames.com and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the relevant data protection authority.

Turkey

Section 2 (Cookies) shall include the following:

“We will only make use of non-essential Cookies to obtain and share your data if you provide your explicit consent. You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.”

Section 3 (How we use your data) shall include the following:

“Based on Article 5(1) of the Turkish Data Protection Law, with your consent, we will use your data (including ad identifiers, age, region, gender, language, data related to your use of the Game and interactions with others, messages including content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication, username and public profile) to:

• conduct surveys as outlined in the body section of this privacy policy including telling you about services and opportunities;
• collect and process, which includes scanning and analyzing, data you provide in the context of composing, sending, or receiving messages through the Game messaging functionality. That data includes the content of the message and data about when the message has been sent, received and/or read, as well as the participants of the communication;
• monitor and record customer support communication, phone conversations or chat sessions with our representatives;
• access posts to your social media walls, posts in your news feed and access your social network data at any time, including any of your favorite websites, friend data or fan pages and any other data included in your application, social network or online profile, even if you are not using the social network or you chose not to make that data public;
• provide you with personalized advertising. Please see the section entitled “Advertising Service Providers" for more information. You can manage ‘Personalized Ads’ via your Game settings;
• collect and process certain technical data, namely list of installed packages and running apps or processes and third-party apps you have on your device;
• collect data about your location. In certain jurisdictions, with your permission, we will collect Global Positioning System (GPS) data and mobile device location data based on your SIM card;
• find other users and invite your friends in your preferred social networks as outlined in the body section of this privacy policy and to show descriptions of your game activity and game profile to other players on the social network, regardless of whether they are your social network friends or not;
• supplement personal data provided directly by you with either non-personal or public data from third parties in connection with market and demographic studies and/or data that company may use, or to ask third-party service providers to supplement the personal data that you provide to company for its own marketing and demographic studies, and to tie individual customer data to data you provide to company.
• to send you direct marketing via email or SMS; and
• use cookies as outlined under section 2.

You may withdraw your consent at any time and such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

References in this policy to the 'performance of contract' as a legal basis refers to the legal basis under Article 5(2)(c) of the Turkish Data Protection Law, where the processing of your personal data is necessary for and directly related to the establishment and/or performance of our contract with you.

References in this policy to 'our legal obligations' or 'legal requirements' as a legal basis refers to the legal basis under Article 5(2)(ç) of the Turkish Data Protection Law, where the processing of your personal data is mandatory for compliance with our legal obligations under applicable laws; and/or Article 5(2)(a) of the Turkish Data Protection Law, where the processing is expressly laid down in laws.

References in this policy to our 'legitimate interests' or 'legitimate business purposes' as a legal basis refers to the legal basis under Article 5(2)(f) of the Turkish Data Protection Law, where the processing of your personal data is mandatory for our legitimate interests, provided that it does not violate your fundamental rights and freedoms.

References in this policy to 'the establishment, exercise or defense of legal claims' refers to the legal basis under Article 5(2)(e) of the Turkish Data Protection Law, where the processing of your personal data is mandatory for the establishment, exercise or defense of a legal claim.”

Section 6 (Your rights) shall be amended as follows:

“You have the following rights with respect to your personal data:

• the right to learn whether your personal data is processed
• the right to request information with regard to such processing, if it is processed
• the right to learn the purposes of the processing and whether your personal data is used for such purpose or not
• the right to know the third parties within or outside of Turkey to whom your personal data is transferred
• the right to request correction of your personal data if it is incomplete or inaccurate; and the right to request notification of these actions to thirds parties, to whom your personal data is transferred
• the right to request deletion, destruction or anonymization of your personal data if the purposes of processing such data cease to exist; and the right to request notification of these actions to thirds parties, to whom your personal data is transferred
• the right to object to any consequence to detriment of yourself, as a result of the analysis of your personal data solely by automated means
• the right to claim indemnification if you suffer damages due to illegal processing of your personal data

Please send an e-mail to lightracer@ohayoogames.com if you would like to exercise any of your rights. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

We will respond to your request as soon as possible according to the nature of your request and within thirty days at the latest, free of charge. However, if your request incurs additional cost to us, then you may be charged over the tariff fee determined by the Turkish Personal Data Protection Board. ”

Section 9 (Data relating to children) shall be replaced with the following:

“The Game is not directed at children under the age of 18 and we do not knowingly collect or solicit personal data from children under 18. If you are under the age of 18, please have your parent or legal guardian read this with you. If you are reviewing these terms as the parent/legal guardian of a user who is under the age of 18, you hereby declare that such user is above the age of 13 and that you have read and acknowledged company Privacy Policy and Terms of Use and agree to the use by your child of the game and registration for an account. Further, if you believe that we have personal data about or collected from a child under the relevant age, please contact us at lightracer@ohayoogames.com and we will ensure that it is deleted.”

Section 11 (Changes) is modified to delete the sentence:

“Your continued access to or use of the Game after the date of the updated policy constitutes your acceptance of the updated policy.”

United Arab Emirates

In the “Summary” under How and for what purpose will we use the data about you?, amend the last sentence as follows:

“We may also use your personal data to serve you targeted advertising and promote the Game and other products and services (in each case, if required under applicable law or where we otherwise deem it to be necessary, where we have your consent).”

Under the heading “Surveys” in Section 1 (The types of personal data we use), amend the paragraph as follows:

We collect data through surveys, challenges and competitions in which you may participate including gender, likeness, age and preferences. We also infer your preferences, including your interests, gender and age for the purpose of serving personalized advertising (with your consent, if required under applicable law or where we otherwise deem it to be necessary). We will also process your personal data in order to tell you about services and opportunities.

Under heading “Analytics and Performance Cookies” in Section 2 (Cookies), amend the last sentence of the paragraph as follows:

“We also use third-party analytics tools to help us measure traffic and usage trends for the Services (with your consent if required under applicable law or where we otherwise deem it to be necessary).”

Under heading “Targeting or Advertising Cookies” in Section 2 (Cookies), amend the paragraphs as follows:

“Analytics: As you use the Game, you will notice that it features advertising. We allow third party companies, including advertising companies, to place Cookies in the Game to track the performance of our advertisements (with your consent if required under applicable law or where we otherwise deem it to be necessary). As an example, these Cookies remember which users have used the Game. The information provided to third parties does not include personal information but it may be associated with personal information after we receive it.

Marketing: We may also (with your permission, where required under applicable law) contract with third-party advertising networks that collect IP addresses and other information from the Game, from third party websites and apps. Ad networks follow your online activities and collect information through automated means (such as through the use of Cookies, again, with your consent, if required under applicable law or where we otherwise deem it to be necessary). Ad networks use this information, mainly to serve adverts about products and services that are likely to interest you. We may also partner with third parties to provide certain features in the Game or display advertising based on your web browsing activity. We may also use information from one device to help personalize your experience on another device. For advertising purposes, we may collect your Google Ad ID, Android Ad ID or (where applicable) your IDFA (IDFAs take the place of Cookies in mobile advertising delivered to iOS devices).”

以下繁體版本僅適用於台灣消費者

艾瑞爾網路股份有限公司「個人資料暨隱私權保護政策」聲明：

艾瑞爾網路股份有限公司（以下簡稱艾瑞爾）為保障您個人資料之安全性，特針對您個人的隱私權擬定「個人資料暨隱私權保護政策」聲明（Privacy Policy，下簡稱隱私權政策），讓您瞭解艾瑞爾對於您的隱私權之尊重與保護，並告訴您有關您個人資料之相關資訊。 本政策讓您瞭解艾瑞爾在蒐集您的個人資料時：

1. 本公司的名稱。

2. 蒐集之目的。

3. 個人資料之類別。

4. 個人資料利用之期間、地區、對象及方式。

5. 您得行使之權利及方式。

6. 若您無法提供完整的個人資料時，不提供將對您權益之影響。

7. 個人資料的安全維護

請您詳細閱讀艾瑞爾「隱私權政策」

一、適用範圍

艾瑞爾「隱私權政策」適用於您在遊戲內與其所附屬之網站活動時，所涉及的個人資料蒐集、處理、利用、國際傳遞以及保護措施。但不適用於經艾瑞爾網站而連結至第三人經營的網站或網頁。

二、資料蒐集之目的及類別

根據艾瑞爾所提供不同服務目的，艾瑞爾可能蒐集您的個人資料類別及情形如下：

· （一）進行遊戲

當您申請進入遊戲時，艾瑞爾將蒐集您的個人資料，包括姓名、暱稱、身份證字號、電話、電子信箱等相關必要資料，成為會員後，您將會獲得一個會員的帳號與密碼，並由本組帳號、密碼登入使用會員的各項服務。

艾瑞爾亦會蒐集您的電腦硬體、軟件和行動電話裝置的資料。包括您的IP位置、瀏覽器類型、登入時間以及網站地址等必要資訊。艾瑞爾會利用此等資料協助維持遊戲運作和服務品質。

· （二）線上交易

如您於遊戲中使用線上交易服務，將會依照你提出的線上交易形態，蒐集您所填寫的訂單相關資料，以確保您完成付款、儲值等消費服務。

· （三）線上活動

您若因參加艾瑞爾舉辦之線上活動或網路調查時，關於您個人資料將直接由會員資料庫提供進行核對。惟若該項活動仍需您配合補充相關資料時，請詳細登錄所需之資料。惟該此補充資料，亦一併受到隱私權政策之保護。

· （四）瀏覽網頁

當您於艾瑞爾站內或其附屬網站中瀏覽或查詢時，艾瑞爾伺服器將自動紀錄您使用連線之IP位置、時間及瀏覽相關記錄。這些資料僅供作流量統計分析及網路服務優化，以便於改善艾瑞爾的服務品質，這些資料僅作為總量上的分析，不會和特定個人相連繫。

· （五）其他

除了您直接提供的個人資料之外，您也可能在艾瑞爾合作廠商處主動提供個人資料，並在您同意或為履行契約目的前提下，將您的個人資料提供給艾瑞爾。這些資料只會在您同意或為履行契約的服務範圍內利用及處理，不會用於其他用途。

三、資料利用之期間、地區、對象及方式

· （一）利用期間

除法令另有規定者外，將於遊戲內與其所附屬網站服務完畢或至您提出停止使用之請求為止。

· （二）利用地區

台灣地區及提供艾瑞爾與其所附屬網站服務之地區。

· （三）利用對象

除法令另有規定者外，將僅供你同意之服務目的及艾瑞爾內部在相關連之範圍內使用，不會任意將您提供的個人資料轉供其他第三人或移作其他目的使用。但基於履行契約目的，將提供相關資料予合作廠商，以完成履行契約義務。

· （四）利用方式

o 1.會員資料

您在執行遊戲服務時，艾瑞爾將會自動蒐集您使用設備之相關資訊，並作為分析您個人遊戲習慣及消費行為，以作為將來提供會員所需之詳盡資料以及作為設計會員活動、遊戲內容優化時之依據。

o 2.線上交易

如您選擇使用線上交易服務，將會依照你提出的線上交易形態，蒐集您所填寫的訂單相關資料，以確保您完成付款、儲值或物流等消費服務。

o 3.線上活動及調查

您若因參加艾瑞爾舉辦之線上活動或網路調查所留下的個人資料，僅供該次活動或調查使用。這些資料將於活動或調查結束後銷毀。

o 4.統計與分析

艾瑞爾針對您申請遊戲帳號時所取得的資料，以及站內瀏覽時伺服器所產生的紀錄，將不定期進行總體會員行為分析與統計，不會針對個人行為進行分析。

四、您得行使的權利及方式

· (一)您就您的個人資料得向艾瑞爾以書面請求行使以下權利：

o 1.查詢或請求閱覽。

o 2.請求製給複製本。

o 3.請求補充或更正。

o 4.請求停止蒐集、處理或利用。

o 5.請求刪除。

· (二)權利限制

以上權利，若因您不符合艾瑞爾申請程序或法令另有規定時，將會受到限制。

· (三)酌收費用

若您就您的個人資料向艾瑞爾查詢、請求閱覽個人資料或製給複製本時，艾瑞爾將酌收必要成本費用。

· (四)權利行使之方式

上開權利之申請，應填具申請文件，艾瑞爾得向您請求提出可資確認之身分證明文件。若委託他人代為申請者，並應出具委任書，且提供本人及代理人之身分證明文件。

五、若您無法提供完整的個人資料時，不提供將對您權益之影響

若您無法提供完整且確實的個人資料，將影響艾瑞爾和您的聯繫、完成交易、提供服務、身份驗證或處理消費、交易或客訴問題。建議您應提供完整的個人資料及隨時更新。若因您未提供完整且確實個人資料，造成對您及第三人發生損害時，您應負擔一切責任，如造成艾瑞爾的損失時，艾瑞爾有權向您請求損害賠償。

六、個人資料安全維護

關於您的個人資料檔案，艾瑞爾將採行適當之安全措施，並盡力以合理之技術及措施，依相關法令辦理安全維護事項，防止您的個人資料被竊取、竄改、毀損、滅失或洩漏。

七、隱私權政策的修改

艾瑞爾有權自行修訂隱私權政策，相關修正規定將會公告於本網站，請您密切注意以保障個人權益。當您於隱私權政策任何修改或變更後繼續使用艾瑞爾網站與其所附屬之網站服務，表示您已閱讀、瞭解並同意接受隱私權政策修改或變更後之內容。

如果您不同意本隱私權政策，請您立即停止使用艾瑞爾網站與其所附屬之網站服務。

八、看法與建議

您如果對於艾瑞爾隱私權政策或與個人資料有關之相關事項有任何意見或疑問，可以和艾瑞爾客服中心聯絡。