Privacy Policy

Updated Date: December 8 , 2023

Welcome to Yalla Match Platform (hereinafter referred to as the "Platform" or “Yalla Match”). Yalla Match is provided and controlled by Yalla Technology FZ-LLC (“Yalla”, “we” , or “us”). We respect and protect the personal information and privacy of all Yalla Match users in accordance with the applicable privacy laws worldwide.

To provide you with more accurate and personalized services as well as a more secure Internet environment, we have defined our principles for the collection/use/provision of your personal information in accordance with international and relevant local laws, regulations and technical specifications, and further elaborated your rights related to your personal information.

This policy is closely related to your use of our products or services. When you download, install, start, browse, register, log in or use our products or services (hereinafter collectively referred to as "using our products and services"), we will process and protect your personal information in accordance with this policy. We try our best to explain to you the technical terms covered by this policy in a clear and concise manner so that you can understand them. We have used bold font to distinguish the terms in this policy that are (possibly) significantly related to your rights and interests. Please read them carefully.

In particular, we would like to draw the attention of underage users (especially children under the age of 13) and their guardians. We have specified Section 9. Age restrictions and parental/guardian controls on the protection of underage users (in bold). Please read it carefully.

We hereby remind you:

lease carefully read and fully understand this policy before using, or continuing to use our Products and Services, and make appropriate choices in accordance with the guidelines set out in this policy when necessary. If you do not agree with the content of this policy, it may cause our products or services to fail to function properly, or fail to achieve the intended effect of our services. You should immediately stop accessing/using our products and services.

YOU KNOW AND CONFIRM THAT IF YOU CHECK "AGREE" TO THIS PRIVACY POLICY AND USE YALLA MATCH, YOU AGREE THAT WE WILL PROCESS YOUR PERSONAL INFORMATION IN ACCORDANCE WITH THIS PRIVACY POLICY.

Please be aware that this policy only applies to the information collected by us to provide services to you through the Platform, and does not apply to the information collected by third parties that access the Platform to provide you with products or services.

To improve the readability and user-friendly interaction of the privacy policy, we present it through the table of contents.

1. How do we collect and use your personal information
2. How do we share, transfer and publicly disclose your personal information
3. How do we store and protect your personal information
4. How do you manage your personal information
5. How do you delete your account
6. Special instructions for the use of third-party products and/or services
7. How do we use cookies and other similar technologies
8. Special terms for jurisdictions
9. Age restrictions and parental/guardian controls
10. How do we update our privacy policy
11. How to contact us
12. Miscellaneous

We will follow the principles of what is rightful, legal and necessary to collect and use the personal information that you voluntarily provide in the process of using our services or that is generated as a result of using our products and/or services for the following purposes as stated in this policy. If we want to use your personal information for other purposes not specified in this policy, or use the information we have collected for other purposes based on a particular purpose, we will notify you in a reasonable manner and seek your consent again before using it. In addition, we will control the read frequency within a reasonable range.

Most of this data comes directly from you or your device, such as device information, country and region, and game play information. We use this data to provide our games and Services to you, including for the purposes of optimisation, preventing fraud, customising in-game offers and verifying purchases.

(1) Registration and login

When you first time use our Platform, we will collect your Open ID、Ad ID、IP address、device information code、 device information series ID、Android ID、XID and give you a randomly generated unique identifier which we will associate with a Yalla Match account known as Your Account. Your Account will not be personally identifiable unless you choose to add your personal information to it, such as your name,or other information.

You also have the option to link your account with third-party platform accounts (such as Facebook, Apple ID, Google account) for convenient logins, in which case you will need to authorize us to access the user information (username, profile picture) from that third-party account. The handling of your personal information by third-party platforms will be subject to their respective privacy policies.

You can modify any automatically filled information after logging in.

Where we make this available, you can choose to log in to Your Account using your account details with the aforesaid third party network. If you do this, you will be able to use your account to log in on multiple devices and synchronise progress across those devices. Where available, you will also be able to see which of your friends are playing the same game and their progress through the games (and they will be able to see you and your progress), or access other functionality we make available in our games and other Services if available.

You can also choose to fill in or change Your Account according to your own needs, but if you do not provide such information, it will not affect your use of the product and related services (except for the user name, which is required for registration).

(2) When you use platform services

We will automatically collect data from you, i.e. your Open ID, Ad ID, IP address, device information code, device information series ID, Android ID, XID (ID generated based on existing device information, model, manufacturer, Android ID and time zone settings), registration time, login time and records about your use of the services, such as the date and timestamp of the operation. We also collect and store your data below:

l The data you voluntarily provide to us when setting your nickname, avatar and any other user-defined information (if available) in the app.
l In order to ensure the convenience of sharing content in Yalla Match to third party network or platform, we will collect your Installed Apps to build the connection with other apps.
l Every time you interact with us, for example, when you chat with us using the in-app feedback or customer service function. We use your information, including photos that you provide directly to us in communications, to provide you with support through our customer service channels when you need it. We may also use it to contact you, for example as part of customer service or to send you updates about our Platform and Services.
l You can send messages to other user s, or to customer services. Your messages may be used and stored by us: (a)to convey your messages; and (b) to enable you and your recipients to view your message history (although please note that after 30 days your in-game chat messages will no longer be accessible). We reserve the right to review the content of your messages, including by using automatic filters, to ensure that you are complying with our terms of service and we also reserve the right to prevent your use of our chat service(s) or to block the sending of any message for any reason. We will not use the content of your chat messages for any other purpose.
l If you make any transaction through Google Play or iOS App Store, and/or other third-party payment service providers (if available), we will collect information to facilitate your transaction and maintain transaction records (including Open ID and user information fees, currency, purchased products, purchase history, IP address, transaction details as well as device details, such as operating system version, mobile phone model or device type, and Internet connection). We do not collect or retain credit card information. Our payment service providers will provide us with information about your purchases so that we know if a purchase has been successful.
l If you contact our support team to deal with the problem such as program errors, we will collect some information, including name, OpenID, device ID, app version, battery power, WiFi intensity, available space in device, network type, operating system version, browser type, platform, operator, country/area code, coupon details, e-mail address and any information you provide in the message. You can also choose to provide photos to illustrate any errors.

Safe operation. To ensure the safe operation of the software and services, we will collect your device model, device name, device ID , browser type and Settings, language Settings, operating system version, app version, network device hardware address, login IP address, network access method, network quality data, mobile network information (including operator name), and product version number. To protect your account from malicious use by other users, please understand that we will dynamically detect whether there is abnormal login in your account. Every time you switch or restart the app, we may read the information of your device ID again, and we will control the read frequency within a reasonable range.

When you use platform services, our security and anti-cheating security functions will (i) analyze user device status to identify security risks and cheating; (ii) detect whether your signature, picture ,nickname, or chat history contains malicious information.

Customer service and after-sales service functions. When you contact our customer service staff or apply for after-sales service of our products and/or services, for the security of your account and system, we may require you to provide relevant personal information to match the personal information you previously provided, so as to verify your user identity. After successful verification, we may collect the information when you chat with us (account information, order information, and picture/video/text information and relevant information provided by you to prove relevant facts), your contact information, and records when you chat with us, including the online chat records and mobile phone recording, so as to solve the problem for you as soon as possible and improve our products and/or services. At the same time, we may contact you by phone, text message, system message and other relevant means to solve your problems arising in the process of using our products and services.

To ensure that you can maintain instant messaging with the background server when using the services of Yalla Match and that you can receive personalized content push in a timely manner, we will i) obtain and invoke your boot broadcast permission to start the mobile client software of Yalla Match or its affiliates; ii) use a third-party push messaging service to generate an ID for you to identify the uniqueness of your device.

To fulfill our legal obligations and, where necessary, to protect the public interest or protect the vital interests of users and others, we may use your data to help us prevent and respond to abuse, fraud, illegal activities and other potentially harmful content.

(3) Summary of device permission invocation

During the process of providing services to you at Yalla Match, we may invoke some of your device permissions. You can choose to close some or all permissions in the device's settings. The display mode and closing mode of permissions may be different in different devices. For details about how to invoke device permissions, please refer to the Device Permission Invocation List.

(4) Exceptions to authorized consent

In accordance with relevant laws and regulations, we may collect and use some necessary personal information without your authorized consent under the following circumstances:

(1) Information related to our performance of obligations under laws and regulations;

(2) Information directly related to national security and national defense security;

(3) Information directly related to public security, public health and major public interests;

(4) Information directly related to criminal investigation, prosecution, trial and execution of judgment and related matters;

(5) Information that are hard to get your consent for the purpose of protecting your or other life, property and relevant major legal rights and interests;

(6) Your personal information that are disclosed by you to the public;

(7) Your personal information collected from legally and publicly disclosed information: from lawful news reports, government information disclosure and related channels;

(8) Information necessary under the online agreement or contract you have signed with the platform;

(9) Information necessary to maintain the safe and stable operation of our products and/or services: such information are used to detect and dispose of faults in the products or services and to deal with related problems;

(10) Other circumstances as provided for by laws and regulations.

(1) Sharing:

We will not share your personal information with any other company, organization or individual unless one or more of the following circumstances exist:

l where we have your consent to do so (including as set out in this Privacy Policy ;

l as reasonably necessary in order to provide the Services to you (for example, by providing your personal information to our business partner we may use to fulfil the Services or to communicate with you);

l where it is necessary to carry out your instructions (for example, to process a payment instruction we must provide your personal information to our payment processors);

l as we reasonably believe is permitted by law or regulation or as is necessary to comply with any legal obligation, or in order to enforce or apply our terms and conditions and/or any other agreement with you;

l to protect the rights, property, or safety of Yalla , our users, or others; and

l if there is a sale of the assets of Yalla or corporate restructuring, or as a result of a change of control of Yalla or one of its group companies, or in preparation of any of these events. Any third party to which Yalla transfers of sells Yalla 's assets will have the right to continue to use the personal and other information that you provide to us in the manner set out in this Privacy Policy.

You understand and be informed that, in order to provide you with more complete and high-quality products and services, we will authorize our business partners to provide you with some services. In such cases, we may share some of your personal information with our partners, so as to provide you with better customer service and user experience. Please note that we will only share your personal information for legal, legitimate, necessary, specific and explicit purposes and will only share your personal information as is necessary to provide our services. We will conduct security assessment and processing on the output form, flow and use of information data, so as to ensure data security. At the same time, we will carry out strict supervision and management to our partners. Once we find that they are handling your personal information in violation of the rules, we will terminate our cooperation with them with immediate effect and pursue legal responsibility against them.

Currently, our partners include the following types:

Cloud service providers : To provide services for global users, we choose cloud service providers with high-quality privacy protection and data security protection capabilities, such as Amazon.

Other business partners: T hose who entrust us with promotion and advertising. You grant us the right to share the indirect user profiles formed by us using your relevant information collection with partners who entrust us to carry out promotion and advertising, so as to help them make advertising or decision-making suggestions, improve the effective touch rate of advertising, and further understand user needs. W e promise that we will not share any personal information that can identify you without your consent.

Cooperative third-party SDK providers: When you use the functions provided by a third party in Yalla Match, we may access the Software Development Kit (SDK) provided by a third party to realize the relevant functions. We will restrict the SDK service providers through cooperation agreement. However, third-party SDK providers may collect your personal information. The aforementioned service providers' collection and processing of information and other activities are subject to their own privacy terms, and do not apply to this policy. To ensure the maximum security of your information, we recommend that you review the privacy policy of any third-party SDK service before using it. To protect your legitimate rights and interests, if you find that there is a risk in this SDK or other similar apps, we suggest that you immediately stop the relevant operations and contact us in time.

Message push service: To provide you with message push, third-party push service providers may obtain your push SDK version number, necessary device information, mobile phone status information, geographic location information and network related information so as to push information you may be more interested in.

Please refer to Information Collection and Use of Third-Party SDK for details.

When you choose to participate in activities organized by us or our affiliates or third parties on the platform, you may be required to provide your name, gender, mailing address, contact information and bank account information. These are personal sensitive information. If you refuse to provide them, it may affect your participation in related activities, but it will not affect your use of other functions. We will only share these information with our affiliates or third parties with your consent, so as to ensure that you receive consistent services in experience during the activities.

Necessary sharing with our affiliates: We may share your personal information with our affiliates. We will only share your necessary personal information, and such sharing is subject to the purposes stated in this policy. If our affiliates want to change the purpose of processing your personal information, we will seek your authorization and consent again;

You may share your personal information or other information with third parties (including non-specific objects) based on the Yalla Match Platform. However, Yalla Match shall not be liable for the disclosure, use and other related situations of information caused by your sharing behavior.

(2) Transfer:

Transfer is the transfer of control over your personal information to another company, organization or person. We will not transfer your personal information to any other company, organization or person unless we obtain your explicit consent. However, the following circumstances are excluded:

lWe have obtained your consent in advance.

lIt is proposed by yourself.

lIf there is a merger, acquisition or bankruptcy liquidation of our company, it may involve the transfer of your personal information. In this case, we will inform you of the relevant situation and require the new company , organization and person holding your personal information to continue to be subject to this policy. Otherwise we will require it to obtain your explicit consent again.

lOther circumstances as provided for by laws and regulations.

(3) Public Disclosure:

Public disclosure is the act of releasing information to society or to a non-specific group of people. In principle, we will not voluntarily disclose your personal information to the public. However, the following circumstances are excluded:

lWe will show necessary information (appropriate desensitization) when we announce the prize winner and penalty notice;

lWe have obtained your explicit consent.

Exceptions to authorized consent of sharing, transferring and public disclosure of personal information

In accordance with relevant laws and regulations, we may share, transfer or publicly disclose your personal information without your prior authorized consent under the following circumstances:

lInformation related to our performance of obligations under laws and regulations, including disclosure of your personal information to competent authorities as required by laws and mandatory requirements of judicial or administrative authorities; In such case, we will require the disclosure request e r to present valid legal documents corresponding to its request, and to take security measures in accordance with laws and industry standards for the disclosed information;

lInformation directly related to national security and national defense security;

lInformation directly related to public security, public health and major public interests;

lInformation directly related to criminal investigation, prosecution, trial and execution of judgment and related matters;

lInformation that are hard to get your consent for the purpose of protecting your or other life, property and relevant major legal rights and interests;

lYour personal information that are disclosed by you to the public;

lYour personal information collected from legally and publicly disclosed information: from lawful news reports, government information disclosure and related channels;

lOther circumstances as provided for by laws and regulations.

Please understand that, in accordance with the current legal provisions and supervision requirements, we do not need to separately notify you and obtain your consent to share or transfer the personal information that has been de-identified, and to ensure that the recipient of the data cannot recover and re-identify the subject of personal information.

(1) Storage:

Your personal information will be processed on servers that may not be in your place of residence. Our support, development and other teams around the world have access to your information from outside of your place of residence. No matter where our servers are located, we will take appropriate measures to protect your rights in accordance with this privacy policy.

Our servers used for platform services are located in: Frankfurt, Germany

If your personal information is transmitted in different countries, we will separately inform you of the purpose and recipient of your personal information via system message or email, and we will obtain your authorized consent. We will strictly comply with the data protection laws and regulations of your country and ensure that the data recipient has adequate data protection capabilities to protect your personal information.

(2) Storage time:

We undertake to store your personal information at all times within a reasonably necessary period as required by laws. After the above period, we will delete your personal information or anonymize your personal information. (The so-called "anonymization" refers to the process in which the subject of personal information cannot be identified and the processed information cannot be recovered through the technical processing of personal information. The information obtained after anonymization of personal information does not belong to personal information. )

If we cease operation, we will stop collecting your personal information in a timely manner, notify you of our cessation of operation in the form of one-by-one service or announcement, and delete or anonymize your personal information held by us.

(3) Protection:

To ensure the security of your personal information, we will endeavor to take various security measures in accordance with industry standards to protect your personal information, so as to minimize the risk of your personal information being damaged, embezzled, revealed, accessed without authorization, disclosed and changed. We will actively establish data classification and grading systems, data security management standards and data security development standards to manage and regulate the storage and use of your personal information and ensure that no personal information unrelated to our services are collected.

Your account has security protection function. Please keep your account and password information properly. We will ensure that your information is not lost, abused or altered by backing up to other servers, encrypting user passwords and other security measures. Despite the aforementioned security measures, please note that there is no "100% security measure" on the information network. In order to prevent security incidents, we have formulated a proper early warning mechanism and emergency response plan in accordance with laws and regulations. If a security incident does occur, we will inform you of the relevant situation in a timely manner by email, letter, call, push notification and other relevant methods. When it is difficult to inform the subject of personal information one by one, we will take a reasonable and effective way to release an announcement. At the same time, we will also take the initiative to report the handling of personal information security incidents in accordance with the requirements of regulatory authorities, and closely cooperate with the government and regulatory authorities.

We take very seriously and do our best to protect your rights related to your personal information. You may ask us to stop using part or all of your data and withdraw your consent.

You have certain rights in connection with your personal information and how we handle it. You can exercise these rights at any time by contacting us via any of the methods set out in the Article 11. How to Contact Us below.

(1) Right of access

You have a right to know what information we hold about you and in some cases to have the information communicated to you. If you wish to exercise this right please contact us letting us know that you wish to exercise your right of access and what information in particular you would like to receive. We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any information. Please note that we may not be able to provide all the information you ask for, for instance if the information includes personal information about another person. Where we are not able to provide yo u with information that you have asked for, we will endeavour to tell you why.

(2) Right to correct personal information

We try to keep the information that we hold about you accurate and up to date. Should you realise that any of the information that we hold about you is incorrect, please c ontact us letting us know and we will correct it as soon as we can.

(3) Scope of changing or withdrawing authorization

You can also change or withdraw network access, notification and album permissions via the device's operating system. We will collect personal information according to your settings of changing or withdrawing permissions. If you withdraw the authorization, we will no longer collect your information related to these permissions, but please note that this will render some or all of the functions unavailable. At the same time, your decision to change or withdraw your authorization will not affect the processing of your personal information that we previously conducted based on your authorization.

(4) Obtaining copy of information authorization

If you need to obtain a copy of your personal information on the platform, you may appeal to us according to the contact information provided in Article 11 of this policy, and we will reply to you in time after verifying your user ID. Please note that we currently only support providing files in csv and json formats.

(5) Data deletion

You have a right to have some of the personal information that we hold about you deleted. Should you wish to have any information about you deleted, please contact us . Please note that in order to process your request you must delete the Platform from your mobile devices and clear our cookies from any device where you have played our games in a web browser. Where we delete personal information about you, we may still retain some or all of that information for other purposes such as maintaining financial records, protecting or enforcing legal rights, maintaining marketing suppression lists or for technical reasons such as maintaining technical security or our database integrity.

We may also retain your information in an anonymised form. In some instances, personal information about you that is visible through gameplay such as username, your high scores and any chat messages may be cached on other players ' devices and we may not be able to remove or update that data from those devices, for example if that device is not connected to a wifi network.

You can initiate account deletion through our official website (www.yallamatch3.com) or In-App Settings- Support- Account. After your account is deleted, your personal information will be removed from Yalla Match, except the personal information that must be retained by us as clearly stipulated by laws (such as the information related to your transactions in Yalla Match, and the data that should be retained as clearly stipulated by the government or laws).

Please refer to the Account Deletion Policy for details.

Yalla Match may include third-party products and/or services or information and/or services linked to third parties. Before using the third-party products and/or services, you need to jump to the corresponding applet or third-party page. Your use of such third-party services (including any personal information provided by you to such third party) is subject to the third party's terms of service and privacy policy (but not this policy), and you need to read the terms carefully and decide whether to accept them at your sole discretion. Please protect your personal information properly and provide them to others only when necessary. This policy only applies to the information collected, stored, used, shared and disclosed by us, but does not apply to the services provided by any third party or the rules governing the use of information by any third party. The third party shall be solely responsible for the behavior of using your information.

Use of cookies

(1) If you do not refuse to accept cookies, Yalla Match will set or access cookies on your relevant mobile device so that you can log in or use the services or functions of Yalla Match that rely on cookies. Yalla Match uses cookies to provide you with more thoughtful personalized services, including promotion services.

(2) You have the right to choose to accept or refuse to accept cookies. You can refuse to accept cookies by changing your browser settings or by setting it on your mobile device. However, if you choose to refuse to accept cookies, you may not be able to use the services or functions of Yalla Match that rely on cookies.

(3) This policy applies to the information obtained through cookies set in Yalla Match .

We do our best to comply with data protection laws and regulations worldwide to protect users' personal data.

At the same time, we are constantly updating our data protection work to ensure compliance with legislative requirements in various jurisdictions. Please give us feedback if there is any need for improvement or adaptation regarding our data protection you find in your daily use.

Some jurisdictions have their own particular requirements. If you are a user located in the specific jurisdiction set out below, the relative terms under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy.

(1) Europe Union

We will observe and comply with the requirements of the EU GENERAL DATA PROTECTION REGULATION (GDPR) to protect the rights of natural persons with regard to the processing of personal data and on the free movement of such data.

You have the following rights regarding the processing of your data by us:

a. The right to lodge a complaint with a supervisory authority in accordance with Art . 13(2)(d) GDPR and Art. 14(2)( e ) GDPR

b. The right of access by the data subject in accordance with Art. 15 GDPR

c. The right to rectification in accordance with Art. 16 GDPR

d. The right to erasure ('right to be forgotten') in accordance with Art. 17 GDPR

e. The right to restriction of processing in accordance with Art. 18 GDPR

f. The right to data portability in accordance with Art. 20 GDPR

g. The right to object in accordance with Art. 21 GDPR

If you wish to reach the Yalla Match's Data Protection Officer, contact us at: dpo@yallamatch3.com

(2) California , US

These additional disclosures are the categories of personal information that are collected and disclosed for commercial purposes, as required by the California Consumer Privacy Act. Depending on how you interact with Yalla Match 's products, personal information that we may have collected or disclosed for commercial purposes during the past twelve months falls into the following categories as defined by the California Consumer Privacy Act:

Identifiers, such as your name, alias, address, mobile phone number, or IP address;

Personal information described in subsection (e) of section 1798.80 of the California Civil Code, such as credit card number;

If we conduct a user survey or analysis, then the features (such as age or gender) of the protected classification under California or U.S. federal law;

Business information, such as purchase activities;

Information on Internet or other electronic network activities, including content interaction information, such as content download, streaming and playback details;

Biometric information, such as your voice or appearance, for example, if you choose to participate in a presentation of a voice or image recognition service;

Geographic location data, such as the location of your device or computer, for example, if you have location services enabled to enhance your experience through the event app we provide;

Audio, visual, electronic or other similar information, including information when you communicate with us by telephone or other means;

Professional or employment-related information, such as business data that you may provide;

Inferred data, such as information about your preferences;

Your rights. Under the California Consumer Privacy Act, you may have the right to request us to provide information about the personal information you collect, or to access or delete your personal information. If you wish to perform any of the above operations, please contact us. Depending on your data selection, some of our services may be restricted or unavailable.

No personal information are sold. During the past twelve months, we have not sold any personal information of consumers, as these terms are defined under the California Consumer Privacy Act.

No discrimination. We do not discriminate against any consumer who exercises their rights under the California Consumer Privacy Act.

(3) UK

We care about the privacy of UK consumers and are committed to collecting, using, storing, protecting, disclosing and sharing your personal information in accordance with UK GDPR requirements.

Under the EU-UK Trade and Cooperation Agreement ("TCA"), data transfers between the EEA and the UK are temporarily permitted to continue without restriction during the transition period.

In addition, our business does not process personal sensitive data under the broad definition.

(4) Brazil

This article applies to the following situations : (i) T he processing operation is carried out in Brazil by us; (ii) Personal data involving the territory of Brazil ; (iii) T he personal data being processed were collected in Brazi l; (iv) T he processing activity is aimed at the offering or provision of goods or services . In the above case, the Brazilian General Data Protection Law ( Lei Geral de Proteçãode Dados , hereinafter referred to as "LGPD") applies to the processing of your personal data, and the following additional and/or modified terms apply to articles 2, 5, 6 and 9 of this Privacy Statement.

Retention Period

In accordance with Article 16 of the LGPD, we have the right to retain your personal data for the statutory limitation period in order to comply with legal or regulatory obligations (e.g. retention obligations under tax or commercial law) or the right to retain your personal data for the normal exercise of rights in judicial, administrative or arbitration proceedings.

Your Rights

In addition to the rights described in this data privacy statement, in accordance with the LGPD, you have the following rights:

To request that we anonymize, block or delete unnecessary or redundant personal data when you become aware that your data is being processed excessively or not in accordance with relevant data protection legislation; or

To request information about public and/or private entities with whom we share your personal data ;

When we ask you to consent to the processing of your personal data, be aware that you have the right not to consent to the data processing and and understand the consequences ;

Revoke your consent to process your personal data at any time after we have requested it .

Legal basis for data processing:

In accordance with the LGPD , we shall provide you with the legal basis for the processing of your personal data.

The legal basis for the processing of the relevant data is as follows:

Article 7 (V) of the LGPD (" Contract e xecution ")

Article 7 (II) of the LGPD ("Compliance with legal obligations")

Article 10 (I and II) of the LGPD ("Legitimate interests")

Article 7 (I) of the LGPD ("Consent")

International Transfers

In accordance with Article 33 of the LGPD , if it is necessary to transfer your personal data outside Brazil, we will ensure that your data is protected in accordance with the provisions of the LGPD and will comply with the relevant laws and the relevant decisions of the competent authorities.

Localization Requirements

The following data types with localization requirements are not covered by our products.

a. Financial data as defined in Resolution No. 4.893/2021 of the Central Bank of Brazil.

b. Rules on data localization issued by the Ministry of Economy ("ME") and the Office of Institutional Security of the Presidency of the Republic ("GSI") in Supplementary Specifications No. 4 and No. 9 of February 15, 2013 and Regulation No. 20 MP/STI of June 14, 2016.

If you wish to reach the Yalla Match's Data Protection Officer, contact us at: dpo@yallamatch3.com

(5) Saudi Arabia

We comply with "The General Rules for Maintaining the Privacy of Users' Personal Data" ("CITC") promulgated "Procedures for Launching Services or Products Relying on Users' Personal Data or Personal Data Sharing).

a. In order to fulfill the basic obligations of Service Provider, we have passed the internationally recognized ISO27001 certification in terms of organizational management;

b. We obtain the express consent of the user before processing the user data;

c. Users have the right to correct data at any time;

d. We provide a method to copy a copy of personal data.

(6) UAE

In particular, we will comply with the requirements of the DIFC DP Law. If you use the platform in the United Arab Emirates ("UAE"), in addition to the above personal data processing requirements, we will also abide by the following terms:

In accordance with Article 39 of Part 6: Rights of Data Subjects of DIFC DP Law, you will not be discriminated against when using the platform services.

(7) Egypt

We follow the Egyptian Data Protection Law No. 151 of 2020, and the rights that data owners should enjoy have been fully explained in the text.We do not collect and process sensitive information of Egyptian residents .

If you wish to reach the Yalla Match's Data Protection Officer, contact us at: dpo@yallamatch3.com

(8) Algeria

With regard to the protection of personal data of local residents in the processing of personal data, we comply with Law No. 18-07. Sensitive data of users is not included in the data we collect and process

(9) India

Sensitive Personal Information

"Sensitive Personal Information" means passwords, financial information (such as bank account or credit card or debit card or other payment instrument details), biometric data, data relating to physical or mental health, sex life or sexual orientation, and/or medical records or history, and similar information, but does not include information available in the public domain, or provided under Indian laws, including the Right to Information Act, 2005.

Sharing Of Your Sensitive Personal Information

In the circumstances enumerated in the Privacy Policy, where we permit any third parties to collect and use your Sensitive Personal Information, we shall (i) ensure that such third parties maintain the same security standards that are adhered to by us for the protection of your Sensitive Personal Information and (ii) take reasonable measures to ensure that the third parties do not further disclose the Sensitive Personal Information.

Correction of Your Personal Information & Withdrawal Of Consent

If you believe we hold any other Personal Information about you or your children, and that information is inaccurate, or you have queries regarding the processing, transfer or end-use of your Personal Information, please contact us at dpo@yallamatch3.com

You do not have the right to retrospectively retract consent or request for deletion of records required for statutory purposes but can withdraw consent to any further processing of your or your children's Personal Information.

Security Measures of Your Personal Information

In accordance with applicable data privacy laws and regulations in India, we shall take appropriate, reasonable technical and organisational measures to prevent the loss of, damage to or unauthorised access to or processing of your Sensitive Personal Information.

Age Restrictions

Parental consent is required for children under the age of 18 years who wish to use our services. Where the users are children, their parents understand and acknowledge that our collection, storage and processing of Personal Information shared with us, shall be used for the lawful purposes set out in the Privacy Policy and is considered necessary for us to provide the services.

(10) Indonesia

Consent

By accepting and consenting to the Privacy Policy, you agree that we may collect, use and share your Personal Information in accordance with the Privacy Policy, as revised from time to time. If you do not agree to the Privacy Policy, you must not access or use our services and we have the right not to provide you with access to WeChat.

Accuracy of Information

You are responsible for ensuring that any Personal Information which you provide to us is accurate and up-to-date. In order to confirm the accuracy of the information, we may also verify the information you provided to us, at any time.

Parental and Guardian Consent

If you are under the age of 21, you undertake that you have the consent of your parent or legal guardian to register an account on and use WeChat.

Data Subject Rights

You have the right to access, update, correct and request erasure of Personal Information stored on WeChat from time to time in accordance with applicable data privacy laws and regulations in Indonesia.

Data Breach

In the event we fail to maintain the confidentiality of your Personal Information, we will notify you through the contact information provided by you or via WeChat, to the extent required by local laws and regulations.

Data Retention

We will retain your personal information in line with legal requirements.

Notification to Amendment of the Privacy Policy

In the event we amend this policy, we will post the updated Privacy Policy at this link and notify you via WeChat or other means before the change becomes effective.

Data Accuracy and Third Party Consent

You are responsible for making sure that any personal details which you provide to us are accurate and current. In order to confirm the accuracy of the information, we may also verify the information provided to us, at any time. You hereby represent that you have secured all necessary consent(s) before providing us with any other person's Personal Information (for example, for referral promotions, if applicable), in which case we will always assume that you have already obtained prior consent, and as such, you will be responsible for any claims whatsoever from any party arising as a result of the absence of such consent(s).

Yalla Match is not directed at people under the age of 13 (or such applicable age of majority under relevant local laws of the user) ("Child") . In certain cases this age may be higher due to local regulatory requirements, please see the relevant part of the Terms of Service for the specific minimum age limits, and the terms set out under the name of your jurisdiction in Adaptation Area List as well for more information.

Unless otherwise restricted by applicable law for applicable age of majority under relevant local laws of the user, Child who is allowed to use our Platform and Services in accordance with his relevant local laws, shall read the following terms carefully in the company of his guardians, and obtain firstly parental/guardian consent to and acknowledgment of this policy (both for themselves and on their Child's behalf).

We do not knowingly collect personal information from any Child without such consent and acknowledgment. Hereby, parents/guardians shall make a decision on whether to accept this policy after full understanding.

(1) Users who are under the age of 16 (especially those under the age of 13 or such applicable age of majority under relevant local laws of the user) shall read all the terms of this Policy and use the relevant services of Yalla Match under the supervision, guidance and consent of their guardians

(2) We attach importance to the protection of personal information of underage users. When filling in personal information, underage users shall strengthen their awareness of personal protection and treat it with caution. Please use relevant services of Yalla Match correctly under the guidance of their guardians.

(3) We will ensure the confidentiality and security of underage users' information in accordance with relevant laws and regulations and the terms of this policy. If we find ourselves collecting personal information from underage users without the prior consent of verifiable parents or legal guardians, we will delete the relevant data as soon as possible. If you are the guardian of an underage user, when you have any questions about the use of our services or the user information provided to us by the underage user under your guardianship, or if you believe that there is a user who is Child, please contact us in time according to the contact information provided in Section 11 of this policy.

We may amend, at our discretion, any portion of this Policy at any time by posting or displaying the amended Policy on this page. For major changes, we will also provide more noticeable notifications (we may explain the specific changes to the privacy policy by making special prompts on the browsing page, etc.).YOU WILL BE DEEMED TO HAVE ACCEPTED SUCH AMENDMENTS BY CONTINUING TO USE THE SERVICE, SO PLEASE REVIEW IT FREQUENTLY. WITHOUT YOUR EXPLICIT CONSENT, WE WILL NOT REDUCE YOUR RIGHTS IN ACCORDANCE WITH THIS PRIVACY POLICY.

The major changes referred to in this privacy policy include but are not limited to: major changes in our service model; changes in the main objects of personal information sharing, transfer or public disclosure; major changes in your right to participate in the processing of personal information and how to exercise it ; Our contact information and complaint channels have changed; when the personal information security impact assessment report shows that there is a high risk.

We will also archive the old version of this privacy policy for your review.

If you wish to make a complaint about how we handle your personal information, please contact us at dpo@yallamatch3.com and we will endeavour to process your request as soon as possible. This does not affect your right to file a claim against a data protection authority.

If you have any suggestions or questions about the protection of personal information, or you have any questions about this policy, you can contact us through the following ways. We will review the problems as soon as possible, and give a reply within 15 working days after verifying your user ID. For questions about this policy, please send your comments and requests to: Yalla Match Technology. Address: Dubai Internet City (DIC) 16, United Arab Emirates (P.O. Box: 501913), E-mail: dpo@yallamatch3.com.

(1) You have the right to file a complaint with the regulatory authority in charge of data protection. We attach great importance to the protection of users' privacy. If you have any comments or suggestions about us, you can send them to us. We are very happy to communicate with you and address your concerns.

(2) If you have a dispute with us over privacy protection, you can find a way to resolve the dispute in the Terms of Service .

In-App Purchases

From time to time, We may offer "Golds" for purchase through the App Store, Google Play or other application platforms if available ("in-app purchases"). If you choose to make an in-app purchase, you will be prompted to enter details for your account with the mobile platform you are using (e.g., Apple, Android, etc.) ("your IAP Account"), and your IAP Account will be charged for the in-app purchase in accordance with the terms disclosed to you at the time of purchase as well as the general terms for in-app purchases that apply to your IAP Account. The price of the Golds will be displayed at the point of purchase. All charges and payments for Golds will be made in the currency specified at the point of purchase through the relevant payment mechanism. Currency exchange settlements, foreign transaction fees and payment channel fees, if any, are based on your agreement with the applicable payment provider.
You will be responsible for the payment of any Golds purchased by you. Once your purchase has been completed, your user account will be credited with Golds.
If you live in the European Union, you have certain rights to withdraw from a purchase under the Consumer Rights Directive and its implementing legislation. However, if you purchase Golds, you acknowledge and agree that we start supplying the Golds to you promptly once the purchase is complete and therefore, your right to cancel or withdraw from the agreement to purchase is lost at this point.

You can also collect Golds through the following ways:

ü Completing a game level

ü Participate in activities (such as Daily Tasks)

ü Open the Chest

ü Help other members in the Club

ü Win the Avatar's Box

ü Other methods Yalla Match may add

There is no obvious difference between the Golds collected and purchased by the user through the above methods and user can use them for the same Service as well in Yalla Match. However, because the Golds collected by users through the above methods are generated by the system and are NOT purchased by user, you agree that Yalla Match has the absolute right to manage, regulate, control, modify and/or eliminate such Golds as it sees fit in its sole discretion, in any general or specific case, and that Yalla Match will have no liability to you based on its exercise of such right.

You can collect Golds through the following ways:

ü Win the Avatar's Box

ü Other methods Yalla Match may add

Golds can be used to:

ü Purchase the extra Lives for game

ü Purchase the extra Moves

ü Purchase the Bosters

ü Purchase the Power-ups

ü Create a Club

ü Other existing uses and uses Yalla Match may add in the future

Costume Tokens can be used to:

ü Purchase in-game skins

ü Other existing uses and uses Yalla Match may add in the future

Yalla Match have the right to adjust the uses and usage rules of Golds and Costume Tokens from time to time.
The Golds and Costume Tokens in your account will be consumed because they are used.
Golds and Costume Tokens cannot be converted into or exchanged for or cash, or be refunded or reimbursed by us for any reason.
Golds and Costume Tokens can only be used on Yalla Match and as part of our services, and cannot be combined or used in conjunction with other promotions, coupons, discounts or special offers, except those designated by us.
No Golds and Costume Tokens may be assigned or transferred to any other user of the services or third party except as expressly permitted by us in writing. The sale, barter, assignment or other disposal of any Golds and Costume Tokens, other than by us, is expressly prohibited.
Accrued Golds and Costume Tokens do not constitute property and are not transferable: (a) upon death; (b) as part of a domestic relations matter; or (c) otherwise by operation of law.
Any Golds and Costume Tokens assigned, sold, or otherwise transferred without the express written consent of us are void. Any user of the services who violates this restriction may have his or her account terminated by us, have Golds and ] forfeited from his or her account, and/or be subject to liability for damages and litigation and transaction costs.
All Golds and Costume Tokens of a user will expire automatically upon termination or cancellation of such user's account for any reason.
We reserve the right to deduct Golds and Costume Tokens from the account if the user acquire them by illegal or fraud way.
You agree that we have the right to manage, regulate, control, modify and/or eliminate such Golds and Costume Tokens, where we have a valid reason to do so such as where we reasonably believe you have violated this Policy, you are in breach of any applicable law or regulation or for legal, security or technical reasons and that we will have no liability to you based on our exercise of such right.

Those Virtual Items require users to purchase from officially approved channels such as Apple/Google App Store through their Apple/Google App Store accounts.

Handing over your account to others for operation, conducting private transactions with others, prohibited proxy recharge ( any purchase of Golds through unofficial channels, or entrusting accounts to others to recharge on their behalf are strictly forbidden. The common types of prohibited proxy recharges (including but not limited to, purchase and recharge from nonofficial third-party recharge platforms, private transactions with third parties, and provision of user accounts to log in and recharge from third-party devices) or malicious refunds after recharging are all violations of the platform rules. These actions will disrupt the normal management of the platform, and will also put users' accounts and personal information at risk including but not limited to the leakage of users' information, fraudulent use of credit cards, failure of recharge, and the malicious theft of accounts. Moreover, these types of recharge and/or refunds are mostly scams, which can easily cause property damage. Yalla Match will always crack down on the aforementioned behaviors and maintain the right to pursue legal liabilities according to applicable law.

In response to this type of behavior, the platform will take measures including but not limited to the following:

Take back all the virtual currency and purchased items in the account suspected of proxy charging or malicious refund.
Freeze all remaining virtual items in the account suspected of the malicious refund until the refund is canceled or the amount of refund is reimbursed in full.
Time-limited or permanent ban on the account.
We are not liable for any losses or damages caused by recharging on unofficial proxy recharge, malicious refunds, or account transactions.

You may cancel your account at any time, and Yalla Match may terminate your account in accordance with the Terms. All the Virtual Items in your account might be forfeited immediately upon the cancellation or termination of your account. There will be no refunds for any unused or unredeemed Virtual Items. So we recommend that you use them before terminating or cancel your account.

If you have any problems with Virtual Items or find any proxy recharge, malicious refunds, account transactions and other violations conducted by any user, please contact us in Yalla Match APP Feedback in Settings or email to support@yallamatch3.com .