PRIVACY POLICY

Last Updated: August 31, 2026

This Privacy Policy (“Privacy Policy” or “Policy”), together with our Terms of Service (available at https://playdogsoft.com/termsofservice) and any other policies, guidelines, or supplemental terms referenced herein, constitutes a legally binding agreement between you (“you,” “your,” or “User”) and Playdog Soft Co., Ltd., its subsidiaries, and affiliates (“Playdog,” “we,” “us,” or “our”) governing the collection, use, disclosure, and protection of your personal information in connection with your access and use of our games, websites, applications, and related services (collectively, the “Services”).

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Services. It applies to all games, applications, and services that Playdog makes available from time to time, regardless of platform or channel through which you access them, and applies automatically to any new game or service we later add without requiring a separate update to this Policy. It also describes your rights and choices regarding your personal information under applicable data protection laws, including the European Union General Data Protection Regulation (“GDPR”), the United Kingdom General Data Protection Regulation (“UK GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), and other applicable U.S. state privacy laws.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services. This Policy should be read together with our Terms of Service. In the event of any conflict between this Policy and the Terms of Service regarding the processing of personal information, this Policy will control.

1. Playdog Information and Data Controller

Data Controller: Playdog Soft Co., Ltd.

Registered Address:

19F, 327, Gangnam-daero, Seocho-gu, Seoul, 06627, Republic of Korea

Phone: +82 2 511 2142

Contact Email: privacy@playdogsoft.com

Data Protection Officer (DPO):

Phone: +82 2 511 2142

Contact Email: dpo@playdogsoft.com

EU Representative (Art. 27 GDPR):

UK Representative (UK GDPR):

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

European Union (EU)

United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/14592611938

2. Information We Collect

We collect information in several ways: directly from you, automatically when you use our Services, and from third-party sources. The types of information we collect depend on how you interact with our Services.

2.1 Information You Provide Directly

You may provide the following information to us voluntarily:

• Account Information: Email address (optional — guest play is available without registration). When you choose to create an account, we use your email address solely for one-time verification codes. We do not use passwords; authentication is performed via one time codes sent to your email.

• Customer Support Communications: When you contact us for support, we collect your email address, the content of your messages, and any attachments you provide.

• Purchase Information: Details about in-app purchases you make, including the item purchased, purchase amount, and time of transaction. Note: We do not directly collect or store your payment card numbers or financial account details — payments are processed by the applicable platform (Apple App Store, Google Play, Amazon Appstore, Microsoft Store, Facebook Payments, or Appcharge).

• User-Generated Content and Social Features: If you participate in social or interactive features of our Services (such as chat, friend lists, guilds/clans, leaderboards, or public profiles), we collect the content you submit and the information you choose to make available, including your username, avatar, game progress, achievements, leaderboard rankings, and chat messages. Please note that any information you share through public or social features may be visible to other users and may be collected, used, or disclosed by them. Playdog does not control how other users may use information you choose to make publicly available, and we encourage you to exercise caution when sharing personal information in public areas of the Services.

2.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information from your device and about your activity:

2.2.1 Device and Technical Information

• Device model or browser agent and manufacturer

• Operating system type and version

• Application version

• Device language, location and time zone settings

• IP address

• Device ID (IDFV on iOS, Device ID on Android)

• Advertising identifiers (IDFA on iOS, subject to App Tracking Transparency prompt; Google Advertising ID on Android)

2.2.2 Usage and Gameplay Data

• Session times and duration

• Games played and frequency of play

• Game progress, levels completed, and achievements

• Virtual currency balances and bonuses

• In-game purchases and transaction history

• Feature interactions and UI events

• Crash reports and error logs

2.2.3 Location Information

• Approximate location derived from IP address (country/region level only)

• We do not collect precise GPS location data

2.3 Information from Third Parties

We may receive information about you from the following third-party sources:

• Attribution Partners: We work with attribution partners (such as AppsFlyer) who provide us with data about how you discovered our Services, including the referring application or advertisement, install timestamp, and device identifiers.

• Social Login Providers: If you choose to log in using a third-party platform (Google, Apple, or Facebook), we receive information based on your privacy settings with that platform, which may include your name, email address, profile picture, and platform user ID.

• Payment Platforms: We receive transaction confirmations and transaction IDs from the Apple App Store, Google Play, Amazon Appstore, Microsoft Store, Facebook Payments, and Appcharge. We do NOT receive your payment card numbers or full financial account details from these platforms.

3. RULES OF CONDUCT

We use your personal information for the purposes described below. For users in the EEA, UK, and Switzerland, we have identified the legal basis for each processing purpose under the GDPR.

Where we rely on legitimate interests, we have conducted balancing tests to ensure that our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interests at any time (see Section 12 below).

4. How We Share Your Information

We do not sell your personal information in the traditional sense. However, some sharing of information with advertising and analytics partners may constitute a "sale" or "share" under certain U.S. state privacy laws (see Section 13 — United States Residents below). We share your information with the following categories of recipients:

4.1 Service Providers

We engage third-party service providers who process personal information on our behalf to help us operate and improve our Services. These include:

• Cloud hosting and infrastructure providers (e.g., Amazon Web Services)

• Email delivery services

• Customer support platforms

• Payment processing facilitators

• Data analytics providers

Our service providers are contractually required to use your information only for the purposes of providing services to us and in accordance with this Privacy Policy.

4.2 Advertising and Analytics Partners

advertisements and to understand how users interact with our Services. Find the full, current list of our partners at https://playdogsoft.com/partners

Information shared may include device identifiers, advertising identifiers, IP address, gameplay data, and ad interaction data. This sharing may constitute a "sale" or "share" of personal information under the CCPA/CPRA and other U.S. state privacy laws.

4.3 Disclosures Required or Permitted by Law

We may disclose your personal information to third parties where we reasonably believe such disclosure is necessary or appropriate:

• To comply with applicable laws, regulations, legal processes, or enforceable governmental requests, including lawful requests by public authorities to meet national security or law enforcement requirements

• To protect the rights, property, safety, or security of Playdog, our users, or the public, including to prevent or stop activity that we consider to be, or poses a risk of being, illegal, unethical, or legally actionable

• To enforce our Terms of Service, this Privacy Policy, and other agreements, including investigation of potential violations thereof

• To detect, prevent, or otherwise address fraud, security, or technical issues, including to protect against harm to the rights, property, or safety of Playdog, our users, or the public as required or permitted by law

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or other corporate transaction, your personal information may be transferred as part of that transaction. We will notify you (for example, via a notice within our Services or by email) of any change in applicable data controller and any choices you may have regarding your information.

4.5 Third-Party Links and Integrations

Our Services may contain links to third-party websites, applications, or services that are not operated by us. This Privacy Policy does not apply to information collected by third parties through such external services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing any information to them.

5. Cookies and Tracking Technologies

5.1 Website Cookies

Our website uses strictly necessary cookies only. These cookies are essential for the website to function and cannot be switched off. They are usually set in response to actions you take, such as setting your privacy preferences, logging in, or filling in forms.

5.2 Mobile SDKs and Tracking Technologies

Our mobile applications use software development kits (SDKs) from advertising, analytics, and attribution partners. These SDKs may collect device and usage information as described in Section 3 above. Find the specific SDKs and their purposes at https://playdogsoft.com/technologies

5.3 Advertising Identifier Controls

iOS (Apple): We request your permission to track via Apple's App Tracking Transparency (ATT) framework before accessing your IDFA. You can change your choice at any time in your device Settings > Privacy & Security > Tracking.

Android (Google): You can reset or delete your Google Advertising ID in your device Settings > Privacy > Ads. On newer Android versions, you can opt out of ad personalization entirely.

6. Do Not Track and Global Privacy Control

Our Services do not respond to Do Not Track (DNT) browser signals, as there is no industry-standard technology for recognizing or honoring DNT signals in mobile applications.

Global Privacy Control (GPC): We honor Global Privacy Control signals. If we detect a GPC signal from your browser when you visit our website, we will treat it as a valid opt-out of the sale/sharing of your personal information for that browser.

7. Advertising and Opt-Out Choices

Our Services are supported in part by advertising. We work with third-party advertising partners to serve ads within our games. Some ads are personalized based on your interests, and some are contextual (based on the content of the game rather than your personal profile).

7.1 Personalized Advertising

With your consent (where required by applicable law), our advertising partners may use your advertising identifier, gameplay data, and other information to build a profile of your interests and serve ads that are more relevant to you. On iOS, personalized advertising requires your affirmative opt-in via the ATT prompt.

7.2 Opting Out of Personalized Advertising

You can opt out of personalized advertising through the following mechanisms:

• iOS: Decline the ATT prompt, or go to Settings > Privacy & Security > Tracking and disable tracking for our app

• Android: Go to Settings > Privacy > Ads and opt out of ad personalization or delete your advertising ID

• In-App: Settings > Your Privacy Choice or Privacy Choices or a similarly named button, depending on your game, and opt out of ad personalization

• Industry Opt-Out Tools: Visit the Digital Advertising Alliance (DAA) at www.aboutads.info/choices or the Network Advertising Initiative (NAI) at www.networkadvertising.org/choices

Please note that opting out of personalized advertising does not mean you will stop seeing ads — you will continue to receive non-personalized (contextual) ads.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. The specific retention periods depend on the type of information and the purpose for which it was collected:

8.1 Account Deletion

You may request deletion of your account at any time. Upon receiving your request:

• Your account will be deactivated immediately

• A 90-day grace period applies during which you may reactivate your account

• After the grace period, your personal information will be permanently deleted or anonymized, except where retention is required by law

• Formal deletion requests submitted as privacy rights requests will be processed within 45 days, which may be extended to 90 days with notice where permitted by applicable law

9. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS/SSL) and at rest

• Access controls and authentication requirements for personnel

• Regular security assessments and vulnerability testing

• Employee training on data protection and security practices

• Incident response procedures and breach notification protocols

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of individuals, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (per GDPR Article 33)

• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms (per GDPR Article 34)

• Comply with applicable U.S. state breach notification laws

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security of your data.

10. Children's Privacy

Our Services are not directed to children, and we do not knowingly collect personal information from children. The applicable age thresholds are:

• United States: Under 13 years of age (per the Children's Online Privacy Protection Act, COPPA)

• EEA/UK: Under 16 years of age (or such lower age as may apply in a specific EEA Member State, which may not be below 13)

• Republic of Korea: Under 14 years of age (per the Personal Information Protection Act, PIPA)

If we become aware that we have inadvertently collected personal information from a child below the applicable age threshold without verified parental consent, we will take steps to delete that information as soon as possible. If you believe that we have collected information from a child, please contact us at privacy@playdogsoft.com

11. Automated Decision-Making and Artificial Intelligence

We may use automated tools, algorithms, and artificial intelligence (“AI”) technologies in connection with our Services, including for: (a) fraud detection and prevention — analyzing account activity and transaction patterns to detect cheating, unauthorized access, and fraudulent transactions; (b) content moderation — detecting and removing content that violates our Terms of Service or community guidelines; (c) personalization and advertising — inferring your interests and preferences to deliver relevant content and advertisements (where based on your consent or our legitimate interests); and (d) game development — creating visual assets, audio, and non-player character behaviors. Where AI generated content could reasonably be mistaken for human-generated content, we will label it as required by applicable law.

No automated decision-making process used by Playdog produces legal effects concerning you or similarly significantly affects you without the opportunity for human review. For users in the EEA and UK, you have the right under GDPR Article 22 not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. If you believe an automated decision has adversely affected you, please contact us at privacy@playdogsoft.com

12. International Data Transfers

Playdog Soft is headquartered in the Republic of Korea. Your personal information may be transferred to, and processed in, countries other than your country of residence, including the United States and other countries where our service providers and partners operate. These countries may have data protection laws that are different from those in your jurisdiction.

12.1 Transfers from the EEA, UK, and Switzerland

When we transfer personal information from the European Economic Area (EEA), United Kingdom, or Switzerland to countries that have not received an adequacy decision from the European Commission or UK Government (as applicable), we implement appropriate safeguards to protect your information, including:

• Standard Contractual Clauses (SCCs): We enter into the European Commission's Standard Contractual Clauses (as supplemented where necessary) with recipients of EEA personal data in third countries.

• UK International Data Transfer Agreement (IDTA) / Addendum: For transfers from the UK, we use the UK's approved International Data Transfer Agreement or the addendum to the EU SCCs.

• Transfer Impact Assessments: We conduct transfer impact assessments to evaluate whether the legal framework in the recipient country provides adequate protection for personal data.

12.2 Republic of Korea

Where required under the Personal Information Protection Act (PIPA) of the Republic of Korea, we will obtain your consent or otherwise comply with applicable requirements before transferring your personal information overseas. You may request a copy of the relevant safeguards we have in place for international data transfers by contacting us at privacy@playdogsoft.com

13. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information under applicable data protection laws. This section describes your rights by jurisdiction.

13.1 Rights for EEA, UK, and Swiss Residents

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR (and UK GDPR) with respect to your personal information:

• Right of Access (Art. 15): You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data.

• Right to Rectification (Art. 16): You have the right to request correction of inaccurate personal data and completion of incomplete data.

• Right to Erasure (Art. 17): You have the right to request deletion of your personal data in certain circumstances (e.g., when the data is no longer necessary for the purpose for which it was collected).

• Right to Restriction (Art. 18): You have the right to request restriction of processing in certain circumstances (e.g., while we verify the accuracy of your data).

• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where processing is based on consent or a contract.

• Right to Object (Art. 21): You have the right to object to processing based on legitimate interests (including profiling) and to processing for direct marketing purposes.

• Right to Withdraw Consent (Art. 7(3)): Where processing is based on your consent, you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

• Right Related to Automated Decision-Making (Art. 22): You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects.

How to Exercise Your Rights

To exercise your rights, please contact us at privacy@playdogsoft.com or write to our DPO at dpo@playdogsoft.com. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a supervisory authority in the EEA Member State of your habitual residence, place of work, or place of the alleged infringement. For UK residents, you may lodge a complaint with the Information Commissioner's Office (ICO).

13.2 Rights for Other Jurisdictions

If you are located in another jurisdiction with applicable data protection laws, you may have additional rights. Please contact us at privacy@playdogsoft.com to make a request, and we will respond in accordance with applicable law.

14. SUPPLEMENTAL NOTICE FOR UNITED STATES RESIDENTS

This section applies to residents of U.S. states that have enacted comprehensive consumer privacy legislation, including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), and other states with applicable laws (collectively, “U.S. Privacy Laws”). It supplements the rest of this Privacy Policy with additional disclosures required under those laws. To the extent of any conflict between this section and the rest of the Privacy Policy, this section governs for U.S. residents.

14.1 Personal Information We Collect, Use, and Disclose

The table below describes the categories of personal information (as defined by the CCPA) that we have collected, used, and disclosed for a business purpose in the preceding twelve (12) months, the sources of that information, the purposes for which we use it, and the categories of third parties to whom we have disclosed it:

14.2 Sale and Sharing of Personal Information

We do not sell your personal information for monetary consideration. However, like many companies that operate online services supported by advertising, we make certain personal information available to advertising and analytics partners for purposes of cross-context behavioral advertising. Under the CCPA/CPRA and certain other U.S. Privacy Laws, this may constitute a “sale” or “share” of personal information.

In the preceding twelve (12) months, we may have “sold” or “shared” the following categories of personal information with our advertising and analytics partners for purposes of targeted advertising: (i) Identifiers (device identifiers, advertising IDs, IP address); (ii) Internet/electronic network activity (gameplay data, app usage, interaction data); (iii) Geolocation data (approximate location); and (iv) Inferences (interest profiles derived from gameplay and usage patterns).

These categories of personal information were disclosed to advertising networks, analytics providers, and attribution partners. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

14.3 Sensitive Personal Information

We do not collect or process "sensitive personal information" as defined under the CCPA/CPRA (e.g., Social Security numbers, financial account credentials, precise geolocation, racial/ethnic origin, religious beliefs, genetic or biometric data, health information, or contents of private communications). If we begin collecting sensitive personal information in the future, we will update this notice and provide you with the right to limit its use.

14.4 Your Rights Under U.S. Privacy Laws

Depending on your state of residence, you may exercise the following rights with respect to your personal information. We will not discriminate against you for exercising any of these rights.

Right to Know/Access. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources from which we collected it, the business or commercial purposes for collecting or selling it, and the categories of third parties with whom we shared it.

Right to Delete. You may request that we delete the personal information we collected from you, subject to certain exceptions permitted by law (e.g., where retention is necessary for completing a transaction, security purposes, legal compliance, or internal uses reasonably aligned with your expectations).

Right to Correct. You may request that we correct inaccurate personal information we maintain about you.

Right to Data Portability. You may request that we provide your personal information in a portable, readily usable format that allows you to transmit the data to another entity without hindrance, to the extent technically feasible.

Right to Limit Use of Sensitive Personal Information. If we collect sensitive personal information (as defined under the CCPA/CPRA), you have the right to direct us to limit its use and disclosure to purposes necessary to perform the Services or as otherwise permitted by law. As stated in Section 14.3, we do not currently collect sensitive personal information.

Right to Opt Out of Sale/Sharing. You have the right to direct us to stop “selling” or “sharing” your personal information for cross-context behavioral advertising. You may exercise this right by: (i) declining the App Tracking Transparency (ATT) prompt on iOS or disabling tracking in Settings > Privacy & Security > Tracking; (ii) deleting or resetting your advertising ID on Android in Settings > Privacy > Ads; (iii) clicking the “Do Not Sell or Share My Personal Information” link on our website; (iv) enabling Global Privacy Control (GPC) in your browser — we honor GPC signals as a valid opt out; or (v) emailing privacy@playdogsoft.com with the subject line “Opt-Out Request.”

Right to Opt Out of Targeted Advertising. Under Colorado, Connecticut, Virginia, Texas, Montana, Oregon, Delaware, and other applicable state laws, you have the right to opt out of the processing of your personal information for purposes of targeted advertising. You may exercise this right through the same mechanisms described above for opting out of sale/sharing (device settings, GPC signal, or contacting us directly).

Right to Opt Out of Profiling. Under certain U.S. Privacy Laws (including Colorado, Connecticut, and Virginia), you have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. As described in Section 11, Playdog does not engage in profiling that produces legal or similarly significant effects without human review. If you have concerns about automated profiling, please contact us at privacy@playdogsoft.com.

Right to Appeal. If we decline to take action on your request, you have the right to appeal our decision. To appeal, email privacy@playdogsoft.com with the subject line "Privacy Rights Appeal." We will respond within 45 days. If your appeal is denied, we will provide information on how to contact your state's attorney general.

14.5 Submitting and Verifying Requests

To exercise any of the rights described above, you (or your authorized agent) may submit a verifiable consumer request by emailing privacy@playdogsoft.com. We will acknowledge receipt of your request within 10 business days and provide a substantive response within 45 days. If we need additional time, we will notify you and may extend the response period by up to an additional 45 days.

To protect your privacy, we must verify your identity before fulfilling a request to know or delete. We verify identity by matching the information you provide in your request against information we already maintain. For requests for specific pieces of personal information, we may require a signed declaration under penalty of perjury. If we cannot verify your identity to a reasonable degree of certainty, we will notify you and explain why we cannot fulfill the request.

Authorized Agents. You may designate an authorized agent to submit a request on your behalf by providing a valid power of attorney or written, signed authorization along with proof of the agent’s identity. Even when using an agent, we may require you to directly verify your own identity.

14.6 Notice of Financial Incentive

We may offer programs through which you can receive virtual currency, bonus items, or other in game benefits in exchange for providing your email address, consenting to marketing communications, or other activities we designate (“Incentive Programs”). Participation is voluntary. The value of the personal information you provide is reasonably related to the value of the benefit offered, calculated based on the cost of providing the incentive and the revenue generated from associated activities. You may opt out of any Incentive Program at any time by contacting us at privacy@playdogsoft.com. Opting out may result in forfeiture of benefits accumulated under that program, but will not affect your ability to use the Services or exercise any other privacy right.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Privacy Policy

• Provide notice through our Services (e.g., an in-app notification or pop-up)

• Where required by applicable law, obtain your consent to any material changes in how we process your personal information

We encourage you to periodically review this Privacy Policy to stay informed about how we are protecting your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of such changes (to the extent permitted by applicable law).

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Privacy Inquiries:

Address: 19F, 327, Gangnam-daero, Seocho-gu, Seoul, 06627, Republic of Korea

Phone: +82 2 511 2142

Email: privacy@playdogsoft.com

Data Protection Officer (DPO):

Phone: +82 2 511 2142

Email: dpo@playdogsoft.com

EU Representative (Art. 27 GDPR):

UK Representative (UK GDPR):

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

European Union (EU)

United Kingdom (UK)

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/14592611938