My TOlbox, LLC ("MTB," "we," "our," "us") offers a variety of product and services, including My TOlbox, a web based experiential platform, and the My TOlbox website, located at www.mytoibox.com.

We respect your privacy and are committed to protecting it. This Policy describes the personal information we process, for example when you visit the Platform, our practices for processing that information, how and why we process such information, and your rights and choices.

Please read this Policy carefully, and review it from time to time, to understand our processing of personal information and options you may have. This Policy may change from time to time (see Privacy Policy Changes and Updates).

PERSONAL INFORMATION DEFINITION

PERSONAL INFORMATION WE COLLECT AND PROCESS

MTB collects information about you in a number of ways. We collect information directly from you, such as when you create an account. We collect information automatically from you, for example, through the use of Cookies and Similar Technologies when you use our services or when you engage with our marketing emails. MTB may also collect information about you from others, such as those you engage with on our Platform, from public sources, or social media sites. For example, if you interact with us on social media sites, we may glean information about you from your profile. We may also make inferences about you, such as the types of services that may interest you in the future, based on information we collected previously. The information we process includes:

• Identifiers, such as your name, account name, email address, social media handles, or phone number.
• Authentication information, such as your credentials if you create an account.
• Demographic information, such as information about your gender or general geography.
• Professional, employment-related, and education information, such as your current employer, job title, and educational background when you apply for a job at MTB.
• Geolocation information, such as your state or metropolitan area.
• Commercial information, including information products or services you've used, purchased, or considered on our Platform.
• Financial account information, such as the credit card information you provide for payments.
• Your preferences, interests, affiliations, and other inferences, such as those indicated when you attend our events or engage with certain types of services or content. For example, we may infer you are interested in certain types of games based on your interactions on our Platform.
• User contributions, such as information, messages, photos, or other content you provide to be published or displayed on the Platform or, at your direction, elsewhere. Your contributions may be visible to others, depending on the context of your contribution and your settings. Other people may use our services to share information about you or use your contributions. We cannot control the actions of other users who may view or access your contributions. To learn more, please review our Community Guidelines.
• Communications, such as when you send us email or engage with us on social media platforms.
• Audio and visual information, including voicemail recordings and photographs taken at our events.
• Internet and Electronic Network Activity, and Interactions, such as the information we automatically collect about your browser, device, or connection when you use the Platform, our websites or otherwise engage with MTB using Cookies and Similar Technologies. Such information may include:
  • Unique identifiers, such as those used by cookies and similar technology,
  • Date, time, and duration of your visit or interactions,
  • Your traffic patterns and clickstreams,
  • Type of web browser used, device and operating system used,
  • Your IP address, device ID, or other identifiers.
  • The website from which you linked to our website, and
  • Other similar information about your use of our products or services, or otherwise engage with MTB.

To learn more about information automatically collected on the Site, please see Cookie and Similar Technologies section below.

HOW WE USE YOUR INFORMATION

MTB collects and processes your information for various purposes, including to provide our services, to improve and create new services, to engage in advertising and marketing, and to conduct business generally. For example, we use your information to:

• Operate, maintain, test, secure, troubleshoot, and improve the services;
• Give you access to the services or restrict your access;
• Understand where you access the services from, so that we can tailor your experience accordingly;
• Personalize and improve the services, our content, or our communications with you;
• Allow you to manage your account information and update your account settings.
• Facilitate your requests or carry out actions you initiate, such as when you make purchases;
• Communicate with you about the services (product changes, feature updates, etc.);
• Administer prizes, points, promotions, etc.
• Market MTB and our services;
• Provide technical support or customer service;
• Deliver advertising for our services that may be relevant to your interests;
• Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activity, and prosecute those responsible for that activity;
• Conduct research, such as by researching technological development and demonstration;
• Develop new products or services;
• Identify and repair errors that impair existing intended functionality;
• Audit interactions, transactions, and other compliance activities;
• Operate our business, for example, by analyzing our growth, meeting our obligations, hiring and staffing, and managing our facilities
• Protect the integrity, safety, or security of the services, our users, our employees, and the public, as necessary; comply with legal obligations; enforce compliance with our Terms of Use and other restrictions placed on your use of the services; protect our property, our rights, and those of others, as necessary.

In carrying out these purposes, we combine information we collect from different contexts and sources. For example, we may combine information we collect about you on the Platform with information we glean about you through our interactions on social media sites, and use that information to infer you may be interested in gaining access to pre-release games. We do not sell or share Personal Information, including that of consumers under 13 years of age.

WHEN WE SHARE OR DISCLOSE YOUR INFORMATION

Please note that MTB has not and does not sell Personal Information about you to third-party companies for their independent purposes. MTB may share or disclose your information for legitimate business purpose, as necessary to conduct business, and to comply with law. For example, we may share or disclosure your information as follows:

With your consent or at your direction:

• We share or provide access to your information with your consent, at your direction, or to complete any transaction or request you have authorized. For example,
  • If you make a purchase, we may share your information with banks or others who provide you with financial services.
  • If you access a third-party service through our Platform, we may share information with such third-party service at your direction.

Services Providers

MTB shares your information, with our third-party agents, contractors, or service providers who are hired to perform services on MTB's behalf, or who may themselves collect your information on MTB's behalf. These providers may operate or support certain functions of the services. Below is a list of functions for which we may use third-party service providers, and the names of the providers we may use to perform these functions:

• Payment processing and shipping (e.g., PaySafe, Authorize.net , Ship Station, Google, Pay Pal, Quick Books etc.); and
• Authentication and analytics services (e.g. Google, Amazon, Looker Studio.); and
• Customer Support (e.g. ZenDesk); and
• Hosting & Content Delivery: (e.g. AWS, Digital Ocean, Instagram, YouTube, etc).

These third-party service providers are only allowed to use personal information they process on our behalf for the specific tasks they've been hired to do and for no other purposes. They are not permitted to sell or share the personal information MTB transfers or makes available to them. MTB takes steps to ensure that all service providers with access to personal information are capable of protecting the information we share with them.

Creators

The creators of the experiences you access will be provided your username, display name, game metrics, user ID, and the regional location you are based in. We offer creators a tool that allows them to review the regional location of origin of players to enable them to determine their player base, so they can adjust their experiences to the legal requirements of the respective regional location. For this purpose, we will determine the user's regional location of access to the MTB website based on the IP address. We will not share your IP address with the creators.

Legal Disclosures

We may disclose your information as required or permitted by law and/or comply with a judicial proceeding, court order, or legal process served on us in relation to our services. To the extent permitted by applicable law, we also may disclose personal information in response to a request from law enforcement agencies, regulators, or other public agencies (including schools or children services), or if we believe in good faith that such disclosure may prevent a crime, facilitate an investigation related to public safety or protect the safety of a child using our Services, protect the security or integrity of our Services, or enable us to take precautions against liability or to protect our rights.

Business transfers

Information about our users, including personal information, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, sale of assets, or similar transaction, or in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets.

De-identified information

We may share aggregated or otherwise de-identified information with third parties for various purposes, including (i) compliance with reporting obligations; (ii) for business or marketing purposes; (iii) to assist us and other parties in understanding our users' interests, habits and usage patterns for certain programs, content, services, advertisements, promotions and/or functionality available through the Services

COOKIES AND SIMILAR TECHNOLOGIES

We, along with our providers and third-party partners, use cookies and similar technologies to enhance your experience, deliver essential functionality, personalize content, and perform analytics and advertising.

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They help us remember your actions and preferences (e.g., login info, language, font size), enabling a more convenient experience.

Types of cookies we use include:

Cookies can also be categorized by duration:

• Session cookies: Deleted when you close your browser.
• Persistent cookies: Remain on your device for a specified period.

We may also use pixel tags (web beacons) and similar technologies to record interactions such as ad clicks or page visits.

Technologies we use may collect information including your browser type, referring website, IP address, device ID, OS, and usage data. This helps us recognize returning users, maintain preferences, analyze performance, and detect suspicious activity.

Examples of services used:

• Google Analytics: Collects aggregated data for service improvement. Opt-out: https://tools.google.com/dlpage/gaoptout
• Facebook Pixel: Tracks ad effectiveness and delivers relevant ads.
• Firebase: Supports session continuity and login persistence.
• Other Partners: Zendesk (support), PayPal/Authorize.net (payments), AWS/YouTube (hosting), OpenAI (content).

For a full list of cookies and their purposes, please refer to our Cookie Policy.

You can manage your cookie preferences through your browser or the Privacy Settings section in your Account Settings. Note: Blocking essential cookies may limit functionality or prevent login.

Learn more about cookies: https://www.allaboutcookies.org/

SECURITY

The security of your personal information is important to us. We use appropriate technical and organizational measures to protect personal information against unauthorized access, use, disclosure, loss, and alteration. No method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot ensure or warrant the security of any information you provide to us.

When using the services or providing personal information to us, we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Services. We comply with all applicable security breach notification laws, and as necessary and as possible, will notify you of a qualifying event consistent with such laws.

HOW LONG WE RETAIN YOUR INFORMATION

We consider the following factors when determining how long we retain and store your information:

• Our legal and contractual obligations,
• The purpose for which your information was collected or processed,
• Your requests to delete the information,
• Retention periods in applicable laws and regulation, and
• Our legitimate business purposes. We may retain your Information to the extent it is necessary to prevent fraudulent activity, to protect ourselves against liability, and to allow us to enforce our contractual or other rights and to pursue available remedies and limit any damages we might sustain.

MTB retains your information when lawful for the following purposes:

• Account information is retained to maintain and authenticate current accounts;
• Billing information and transaction histories are retained to resolve subsequent billing disputes and inquiries;
• Publicly shared content and virtual items could contain personal information, and are retained for use by the community, unless you delete such information;
• User account history is retained to support subsequent customer service inquiries and to provide, improve and develop the Services;
• To promote safety and security on the Services; and
• To resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with our legal obligations.

We retain personal information only as long as necessary for legal, business, and compliance purposes, after which it is securely deleted or anonymized in accordance with applicable laws.

EXTERNAL LINKS

Our services contain links to external sites or applications not operated by MTB, and may enable social sharing or other third-party integrations. We are not responsible for the privacy practices or the content of such sites or applications. To make clear when you are linking to a third-party site or application, we may display a warning message informing you when you are leaving our services.

CHILDREN'S PRIVACY

The Services are not intended for use by children under 13. If we are made aware that a child has accessed the services and/or that we have collected personal information from any child, we will cooperate in deleting that information, unless we have a legal obligation to keep it. To make any requests for the removal of Personal Information collected about you or your child from our Services (as applicable), or to request that we stop the further collection or use of your or your child's Personal Information in connection with the Services (as applicable), please email us at support@mytolbox.com.

STORAGE AND INTERNATIONAL TRANSFER OF YOUR PERSONAL INFORMATION

MTB is based in the U.S. We process personal information in the United States of America and anywhere where we, or our providers, do business. We take steps to process the personal Information we collect in accordance with the provisions herein and the requirements of applicable law, including those related to the cross-border transfers of personal information.

YOUR CHOICES

You can make choices about MTB's processing of your information. For example, you can:

• Use Browser Controls, as described above.
• Unsubscribe to our promotional communications.
• Mark sections within the users MyTOlbox page as public or private.

YOUR RIGHTS

MTB complies with applicable U.S. privacy laws, including the California Consumer Protection Act (CCPA), which provide consumers with various rights with respect to their personal information.

Certain jurisdictions provide individuals with specific rights regarding their personal information. Depending on the jurisdiction in which you reside, you may have some or all the following rights and choices regarding your information.

• Access to/Portability of Personal Information. You have the right to know the personal information MTB processes about you and receive a copy of your personal information in a portable format.
• Correction. You have the right to correct your personal Information where it is inaccurate or incomplete. In some cases, we may provide self-service tools that enable you to update your personal information.
• Deletion. You can request we delete personal information we process, subject to certain exceptions prescribed bylaw.
• Other Rights. You can request restriction or object to the processing of your Personal Information, and you have the right to opt in or opt out of the sale of your Personal Data to third parties, if applicable, where such requests are permitted by law.

Some of these rights can be exercised by updating your account, or to make a request, please complete our contact us at support@mytolbox.com. You may:

• Ask for a copy of all personal data associated with your account
• Request that specific types of data (e.g., usage history, tracking data, third-party sharing) be removed
• Request that all data be permanently deleted from our systems

We will process such requests in accordance with applicable laws. To protect your privacy, we will take steps to verify your identity before fulfilling your request so that we can ensure you are the owner of the account making the request.

PRIVACY STATEMENT CHANGES AND UPDATES

We may update this Privacy Policy at any time to enhance transparency, so please review it frequently to stay informed about our processing of personal information, your rights, and your choices. We may also update this Policy, as necessary or as useful, in response to (1) changes in applicable laws, regulations, or standards, (2) changes to our processing of personal information, or (3) changes to our business operations. For example, we may modify the Policy if a new applicable law requires additional disclosures, if we expand our operations into new countries, or if we intend to collect new categories of personal information. If we update this Policy, changes will be reflected on this page and we will update the "Last Updated" date posted above, and we may also provide you with additional notice.