C.     DATA PURPOSES

We may use these types of data for the following purposes:

• Service Provision and Support: Using your personal, contact, account, profile, and usage data to deliver services, facilitate contests, manage preferences, provide support, and communicate important information about your purchases and subscriptions.

• Personalization and Communication: Employing personal, contact, account, profile, usage, and location data for social sharing, targeted advertising, content recommendations, and service updates.

• Operational Excellence and Safety: Applying personal, contact, account, profile, usage, device, browser, and location data to enhance service operations, safeguard against fraud, enforce policies, conduct audits, and ensure a secure and fair environment.

• User Experience and Performance: Analyzing usage data, device and browser data, and interaction data (such as eye tracking, gestures, and movement) to refine game dynamics, improve VR compatibility, and optimize performance for a seamless gaming experience.

• Customization and Community Engagement: Personalizing gameplay, supporting community interactions, enabling in-game communications, and fostering content creation based on gameplay data and player preferences.

• Development and Content Updates: Utilizing feedback and usage data to guide iterative development, expand content, and manage virtual economies, ensuring ongoing engagement and a balanced gaming experience.

4.     DATA DISCLOSURES

A.     DATA TRANSFERS

We may need to transfer your personal data to third-party recipients located outside of the jurisdiction in which you reside or the jurisdiction where the data was originally collected, for the purposes outlined in this Policy. When we transfer your data to recipients located in other jurisdictions, we will take steps to ensure that your data is protected in accordance with applicable data protection laws.

If you are in the European Economic Area or the United Kingdom, please note that transfers of personal data to international recipients located outside of these territories will only be made in accordance with applicable data protection laws, including the use of appropriate safeguards such as standard contractual clauses (SCCs) approved by the European Commission or other appropriate measures.

B.      DISCLOSURE EVENTS

With your consent: We may disclose your data to other recipients with your express consent, unless otherwise described below. For example, you may agree to us sharing your data with a certain company or organization to hear about their products, services, or promotions. These recipients will process the data you agree to share according to their respective privacy notices.

To protect us or others: We may access, preserve, and disclose any data we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement or national security requests and legal process, such as a court order or subpoena; protect your, our or others’ rights, property, or safety; enforce our policies or contracts; may collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

To cooperate in the event of merger, sale, or other asset transfer: In the event of a reorganization, divestiture, merger, sale, or bankruptcy, we may transfer all data we may collect to the relevant third-party and will obtain your consent to do so if required by law or contract.

C.      RECIPIENT CATEGORIES

Authorized Agents: If you authorize an agent to make rights requests on your behalf, we may disclose your personal data to them. This may include any data we hold about you. To ensure the security of your personal data, we require identity verification and your explicit authorization that the agent is authorized to request data deletion on your behalf.

Affiliates and Business Partners: We may share personal data with our Affiliates and Business Partners who co-offer our services. These partners may include other businesses or individuals who receive your data for the purpose of assessing the effectiveness of the partnership and may receive data related to their partnership with us.

Vendors and Service Providers: We may share your personal data with vendors and service providers to help us operate our business and provide you with our services. These service providers may include website hosting providers, email marketing platforms, customer relationship management providers, and other similar service providers. We require that any service provider processing your personal data only do so on our behalf and for purposes consistent with this Privacy Policy.

Law Enforcement / Courts: We may disclose personal data to law enforcement agencies, courts, or other government bodies as required by law or legal process, or to protect our rights or the rights of others. This may include responding to legal requests from jurisdictions outside of the United States where we have a good faith belief that the response is required by law in that jurisdiction, affects users in that jurisdiction, and is consistent with internationally recognized standards. We may also disclose personal data to third parties if we believe that disclosure is necessary to prevent or investigate possible wrongdoing, such as fraud or identity theft, or to enforce our Terms of Use or other agreements. Additionally, we may share personal data with third parties if we believe that such sharing is necessary to protect the safety, property, or other rights of our users or the public, or to respond to an emergency.

5.      DATA STORAGE & RETENTION

When we store and process your data we utilize technical, physical, and administrative safeguards to meet data transfer requirements set by various privacy laws.

A.     STORAGE

When you access our services, including when available on third-party platforms, your personal data is generally collected by us directly and processed in the United States. Personal data we may collect may be subsequently stored and processed for the purposes set out in this Privacy and Cookie Policy in the United States or any other country in which we or our third-party distributors operate. By using our services, you acknowledge that your personal data may be transferred to recipients in the United States and other countries that may not offer the same level of privacy protection as the laws in your country of residence or citizenship.

B.      RETENTION

We retain the data we collect in accordance with our Retention Policy, for as long as necessary to provide our services, and we may retain that data beyond that period if necessary for legal, operational, or other legitimate reasons.

Where possible, we may also de-identify, anonymize, or aggregate the data we may collect, or may collect it in a way that does not directly identify you. We may use and share such data as necessary for our business purposes and as permitted by applicable law.

6.      DATA SECURITY

We take the security of your personal data seriously and take appropriate measures to protect it. We use a variety of physical, technical, and organizational measures to safeguard your personal data against accidental, unauthorized, or unlawful access, use, or disclosure. We also require our third-party service providers to take appropriate security measures to protect the confidentiality and security of your personal data.

Despite our best efforts, no security measure is entirely foolproof. We cannot guarantee the security of your personal data, and we cannot be responsible for unauthorized access to or theft, alteration, or destruction of your personal data. You are responsible for keeping your login credentials and passwords confidential. If you believe your account has been compromised, please contact us immediately at privacy@mysticinteractive.com.

If we become aware of a data breach that affects your personal data, we will notify you as required by applicable law. We will also take appropriate measures to mitigate the impact of the breach and prevent future occurrences.

Please note that our services may contain links to third-party websites or services. We are not responsible for the security or privacy practices of those websites or services, so we encourage you to review their privacy policies and terms of use before using or accessing them.

7.      YOUR RIGHTS & CONTROLS

We believe that respecting your privacy and providing you with control over your personal data is fundamental to our relationship with you. We understand that you have a right to make choices about how your data is used and shared. With that in mind, we strive to provide you with meaningful choices and controls when it comes to the may collection and use of your data.

A.     YOUR RIGHTS

Authorized Agents: You have the right to use an authorized agent to make a request to exercise your data privacy rights. If you choose to do so, we will require that you verify your identity based on data you have directly provided to us. If you use an authorized agent to submit a request to opt-out of the sale or sharing of your personal data for targeted marketing purposes, we will require your signed permission demonstrating that you have authorized the agent to act on your behalf. We take your privacy seriously and want to ensure that you have control over your personal data.

Right to be Informed: You have the right to know what personal data we may collect, how we use it, and who we share it with. We provide this information in our Policy and in any other relevant notices at points of collection.

Right of Access: You have the right to access the personal data we hold about you. While you have the right to submit access requests directly to us, we have provided comprehensive information about our data processing practices in this Policy to address any general questions you may have.

Right to Rectification: Depending on the services you interact with, you may have access to self-service tools that allow you to update your personal data directly. If you need further assistance, you have the right to request that any inaccurate or incomplete personal data we hold about you be corrected.

Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller. This right to data portability is intended to give you more control over your personal data and facilitate the movement of your data between different organizations.

Right to Erasure: You have the right to request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent to our processing of your data.

Right to Object to Data Processing: You have the right to object to the processing of your personal data in certain circumstances, such as when the processing is for direct marketing purposes or is based on our legitimate interests.

Right to Object to Automated Decision Making: You have the right to object to decisions made about you solely based on automated processing, including profiling, if these decisions have legal or significant effects on you. We do not engage in such automated decision-making processes that may impact you, but if we do in the future, we will provide you with additional information and an opportunity to object.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when the accuracy of the data is contested, or you object to the processing.

We take your privacy seriously and strive to provide you with the means to exercise your rights under GDPR and CCPA. We will not discriminate against you for exercising these rights. However, we may need to collect certain data from you to verify your identity and respond to your requests. We will only request data that we have already collected and can internally validate. If we are unable to verify your identity, we may not be able to process your requests. If you have any questions or would like to exercise any of your individual rights, please contact us at privacy@mysticinteractive.com.

B.     YOUR CONTROLS

We understand the importance of privacy and strive to create an environment that respects your personal data and are dedicated to our mission and committed to transparency. The following outlines the choices available to you and how to exercise them, enabling you to take an active role in managing your own data.

Third-Party Accounts

Our services integrate with various third-party platforms and consoles, including but not limited to social media sites like Discord, Steam, and Reddit, where you can tailor your privacy settings to control shared data. We advise reviewing these platforms' privacy policies to ensure your understanding and comfort with their data sharing practices. Additionally, our websites feature advertisements and links to third-party services; by interacting with these, you'll be navigating away from our services. It's important to consult the privacy policies of these external sites or services, as they govern your interaction and the data you may share with them.

You can review their respective policies through the links below:

Social Media Platforms:

·        Reddit: Reddit.com/Policies/Privacy-Policy

Gaming Platforms:

·        Meta Quest: Facebook.com/Privacy/Policy

·        Valve Steam: Store.SteamPowered.com/Privacy_Agreement/

·        Sony PlayStation: Playstation.com/EN-US/Legal/Privacy-Policy/

Email Communications

If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you non-promotional communications regarding us and our services regarding our services or updates to our Terms or this Privacy Policy.

“Do Not Track”

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

Advertising

If you prefer not to receive marketing messages or sponsored content, please contact us at privacy@mysticinteractive.com and we will ensure your preferences are updated accordingly.

Some third-party services we use may offer opt-out options to their data collection practices. You can find information about how to opt-out of these services by visiting the following links:

·        Google Analytics Opt-Out: Tools.Google.com/DLPage/GAOptOut

·        Meta (Facebook) Pixel Ads Preferences: Facebook.com/Ads/Preferences/

·        X (Twitter) Personalization Settings: Twitter.com/Personalization

Cookie controls

You may stop or restrict the placement of technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our services may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications. However, you may opt-out of personalized advertisements on some mobile applications by following the instructions for Android, iOS and others.

You can also opt-out of targeted advertising from data and advertising partners participating in self-regulatory programs through the websites provided by the online advertising industry. For more information on targeted advertising, consumer choice, and privacy, please visit the following websites:

·        Network Advertising Initiative: NetworkAdvertising.org/Managing/Opt_Out.asp

·        Digital Advertising Alliance: AboutAds.info/Choices/

·        European Digital Advertising Alliance: YourOnlineChoices.eu/

·        Digital Advertising Alliance of Canada: YourAdChoices.ca/Choices/

Please note that you must opt-out separately for each browser and device used.

If you have any questions or concerns regarding your privacy choices or how we handle your personal data, please contact us at privacy@mysticinteractive.com. You can also contact the support teams for each platform if you require further assistance managing your privacy settings.

8.      GENERAL PROVISIONS

A.     POLICY UPDATES

We may occasionally update this Policy. When we do, we will revise the "last updated" date at the bottom of the Policy. If there are material changes to this Policy, we will use reasonable efforts to notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification.

B.      CONTACT US

If you have questions about this Policy, please email us at privacy@mysticinteractive.com or send via carrier pigeon or postal mail to our Data Protection Team to the following address:

Attn: Data Protection Team

Mystic Interactive, LLC

508 Yale Ave N, PMB 211

Seattle, WA 98109

United States

C.      CONTACT A DATA PROTECTION AUTHORITY

If you have a concern about how we may collect and use data, please contact us.

If you are a California or EEA resident, you have the right to file a complaint with the California Attorney General's office or any other relevant Data Protection Authority (“DPA”) if you believe your data privacy rights have been violated. We encourage you to contact us first so that we can try to resolve your concerns. However, you may also contact your local DPA directly. To contact your local DPA, please refer to the links below:

To contact your local DPA, refer to the links below:

·        California - Attorney General of California

·        Europe - DPA Directory

Where appropriate, your local DPA may also forward the matter to the Department of Commerce or FTC for consideration.

Last Updated: February 2, 2024

©2024 Mystic Interactive, LLC. All rights reserved. Mystic Interactive and the Mystic Interactive logo are trademarks of Mystic Interactive, LLC and its affiliates in the U.S. and other countries. All rights reserved.