Effective date: April 30, 2023

If you are a California or Virginia resident who has provided Personal Information (as defined below) to us or a California or Virginia resident who believes we collected your Personal Information, you may exercise your rights as explained in this Notice.

Categories of Personal Information Collected or Disclosed:

In the past 12 months, we may have collected and/or disclosed the following categories of personal information:

Purposes of collecting and/or disclosing:

In the past 12 months, we may share your non-personally identifiable, aggregated, and/or public information with third parties. Additionally, we may share your game play data, customer service and/or unique identifiers specific to your device with third parties for the purpose of adjusting and improving our Services. We direct all such third-party service providers to maintain the confidentiality of the information disclosed to them and not to use your information for any purpose other than to provide services on HisarGames’ behalf.

Your Rights Regarding Your Personal Information.

You have the right under the CCPA to submit a verifiable request of the following in writing:

How to Exercise Your Rights

To exercise any of these rights, please feel free to e-mail us at operation@hisargame.cn. In the written request, please specify (a) which right you wish to exercise and (b) the scope of your request. We will confirm receipt of your request within 10 business days. We may require specific information from you, which may include personal information about you or information about your past purchases or use of our products or services, in order to help us verify your identity and allow us to properly understand, evaluate, and respond to your request. Your request may be denied if we are unable to verify your identity.  You may only make a verifiable consumer request for access or data portability twice within a 12-month period.

If you request deletion of your personal information, please contact us at operation@hisargame.cn. We may retain personal information necessary to: (a) protect our business, systems and users from fraudulent activity, (b) to address technical issues that impair existing functionality, (c) allow us or others to exercise their free speech or other rights, (d) comply with law enforcement requests pursuant to lawful process, (e) support our own internal purposes reasonably related to your relationship with us, (f) to comply with legal obligations, (g) for scientific or historical research, or (h) otherwise as permitted by law and disclosed to you when we respond to your request.

Do Not Sell or Share My Personal Information

You may request to opt-out certain of your personal information from sale or share by contacting us at operation@hisargame.cn. You do not need to create an account with us to exercise your right to opt-out. However, we may ask you to provide additional personal information so that we can properly identify you and to track compliance with your opt-out request. We will only use personal information provided in an opt-out request to review and comply with the request. If you chose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems and authenticate you as authorized to receive the information.

Once you make an opt out request, you may change your mind and opt back in to personal information sales at any time by contacting us at operation@hisargame.cn.

Authorized Agent

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent in writing.  To designate an authorized agent to exercise your rights and choices on your behalf, please provide written proof of your agent’s permission to do so. A request from an agent may be denied if such agent does not submit written proof that the agent was authorized by the user to act on the user’s behalf, and/or the agent’s identity could not be verified.

Limit the Use of My Sensitive Personal Information

We do not collect any SPI. You may request to get know about this by contacting us at operation@hisargame.cn. However, we may ask you to provide additional personal information so that we can properly identify you and to track compliance with your request. We will only use personal information provided in a request to review and comply with the request. If you chose not to provide this information, we may only be able to process your request to the extent we are able to identify you in our data systems and authenticate you as authorized to receive the information.

Minors Under Age 16

We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.

Financial Incentives

We may offer incentives in exchange for the retention or sale of personal information:

Definition.

For purposes of this section, “Personal Information” means information that identifies, relates to, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device. Personal Information does not include: de-identified or aggregated consumer information; health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) or the California Confidentiality of Medical Information Act; or information covered by certain sector-specific privacy laws including the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or the California Financial Information Privacy Act.  Deidentified Information and Aggregate Consumer Information shall be excluded.

Deidentified Information” means information that cannot reasonably identify to particular consumer, provided that a business uses deidentified information 1) has implemented technical safeguards that prohibit the reidentification, 2) has implemented business process that prohibit reidentification, 3) has implemented business process to prevent inadvertent release of deidentification information, and 4) makes no attempt to reidentify.

Aggregate Consumer Information” means information relates to a group or category of consumers, from which individual consumer identities have been removed, and that is not linked or reasonably linkable to any consumer or household, including via a device.

“Sensitive Personal Information” (SPI) means:

(1) Personal information that reveals:

(A) Your social security, driver’s license, state identification card, or passport number.

(B) Your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account.

(C) Your precise geolocation.

(D) Your racial or ethnic origin, religious or philosophical beliefs, or union membership.

(E) The contents of your mail, email, and text messages unless the business is the intended recipient of the communication.

(F) Your genetic data.

(2)

(A) The processing of biometric information for the purpose of uniquely identifying a consumer.

(B) Personal information collected and analyzed concerning your health.

(C) Personal information collected and analyzed concerning your sex life or sexual orientation.