PRIVACY POLICY

RAID HUT LICENCIAMENTO DE JOGOS DIGITAIS LTDA.

CNPJ: 23.877.777/0001-34

Welcome to the Privacy Policy of RAID HUT LICENCIAMENTO DE JOGOS DIGITAIS LTDA., a private legal entity, enrolled with the CNPJ under No. 23.877.777/0001-34, headquartered at Rua Dr. Manoel de Almeida Belo, nº 1111, Loja 104, Bairro Novo, Olinda/PE, CEP 53.030-030 (hereinafter referred to simply as "RaidHut").

RaidHut values the privacy and the security of the information of its players and visitors. For this reason, this Privacy Policy was drafted to reaffirm our commitment to transparency and to explain, in a clear and accessible manner, how we collect, use, store and protect your personal data, always in strict compliance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018).

1. SUBJECT MATTER AND ACCEPTANCE

1.1. This Policy describes our privacy practices in relation to:

a) Game and Services: the use of the electronic game With Your Destiny (WYD) Global, of its account area and of the features associated with it, including, by way of example, the Global server, season servers and any temporary, seasonal, test or event servers (hereinafter jointly referred to as “WYD Global”), with;

b) Visitors: any individual who accesses or interacts with our official website and related pages ("User"); and

c) Communications: interactions carried out through our support channels, electronic messages and official community channels.

1.2. Accessing, registering or using any feature of the game implies your full consent to the provisions of this Privacy Policy. It is essential that the User be aware that the use of our services also constitutes acceptance of our Terms of Use, which govern the relationship between the parties.

1.2.1. Should you not agree with any provision established in these instruments, whether in whole or in part, you must refrain from using the game, must not carry out any registration and must immediately cease access to our services.

1.3. This Policy establishes the general data protection guidelines of RaidHut and must be interpreted jointly with and as a complement to the Terms of Use. In the event of a discrepancy as to the processing of personal data, the provisions of this Policy shall prevail.

2. IDENTIFICATION OF THE CONTROLLER

2.1. For the purposes of the Brazilian General Data Protection Law, RaidHut acts as Controller of personal data in the following situations:

a) Registration and Account Management: in the processing of the data provided for the creation of the game account, authentication, technical support and access management;

b) Game Operation: in the processing of the data generated during the use of the service, including transactions carried out in the game environment and application of the platform rules, and technical information relating to the operation, performance and stability of the application;

c) Security and Fraud Prevention: in the processing of access records and technical identifiers intended to protect the accounts and the integrity of the game; and

d) Operational Communications: in the processing of contact data for sending security notices, communications about the account and information about the service;

e) Surveys, Forms and Promotional Actions: in the processing of data collected through questionnaires, satisfaction surveys, event registrations, prize draws and promotional actions, even if operated through third-party tools;

f) Linking of External Accounts: in the processing of the data arising from the voluntary linking of the game account to third-party services, such as streaming platforms, for the purposes of promotional campaigns and receipt of rewards; and

g) Official Community Channels: in the processing of data that may be provided by the User in official channels maintained by RaidHut on third-party platforms, an exceptional situation, since support requests are directed to the official support channel.

2.2. In these situations, the controller is:

Corporate Name: RAID HUT LICENCIAMENTO DE JOGOS DIGITAIS LTDA.

CNPJ: 23.877.777/0001-34.

Headquarters and Administration: Rua Dr. Manoel de Almeida Belo, nº 1111, Loja 104, Bairro Novo, Olinda/PE, CEP 53.030-030.

Contact Channel: This email address is being protected from spambots. You need JavaScript enabled to view it.

2.3. In the situations in which service providers process personal data on our behalf and according to our instructions, such providers shall act as Processors, with RaidHut remaining responsible for defining the purposes and the means of the processing.

2.4. RaidHut undertakes to maintain records of the processing operations and to implement security measures compatible with the nature of the data processed, ensuring that the processing occurs in compliance with the legislation in force.

3. IMPORTANT DEFINITIONS

3.1. So that you understand exactly how we take care of your information, we list below the meaning of some technical terms used in this Policy, explained in a simple manner:

a) Personal Data: is any information that may identify you directly (such as your name, CPF or e-mail) or that, combined with other data, makes it possible to identify who you are (such as the IP address of your computer).

b) Data Subject: is the natural person to whom the personal data refer. In this case, the Data Subject is you, whether as a registered player or as a visitor to our website.

c) Processing: is the term that sums up everything we do with the data. It includes the collection, recording, storage, use, sharing and even the deletion of the information.

d) Consent: is your clear and free authorization for RaidHut to process your personal data for a specific purpose.

e) Legitimate Interest: is one of the legal grounds that allows us to process data for legitimate purposes, provided that this does not infringe your fundamental rights and freedoms. We use this ground, for example, to prevent fraud and to curb the use of unauthorized programs in the game.

f) Game Account: is the individual record, identified by a username (login), through which you access WYD Global and to which your characters, items and history are linked.

g) Authentication Data: are the credentials that allow access to your account, such as the access password and the numeric password.

4. DATA COLLECTION AND PURPOSE

4.1. RaidHut collects the information strictly necessary for the provision of its services, guided by the principles of purpose, adequacy and necessity. The processing of data is segmented as will be described below in this clause.

4.2. Registration Data: for the creation and maintenance of the game account, the User provides full name, CPF, date of birth, e-mail address, telephone number, CEP, username (login), access password and numeric password.

4.2.1. Warranty of Accuracy: the User warrants and is liable for the truthfulness, accuracy, currency and authenticity of the personal data provided, undertaking to keep them duly updated through the available tools, notably the e-mail address, which is the channel used for security notices.

4.2.2. Right of Verification: RaidHut reserves the right to use the valid and possible means to identify Users, as well as to request additional data and documents that it deems relevant in order to verify the information provided, notably in account recovery requests.

4.2.3. Suspension and Deletion: should RaidHut detect data that are demonstrably incorrect, untrue or outdated, or should the User fail to send the required documents, it may, at its discretion, temporarily suspend or close the account, without prejudice to other applicable contractual or legal measures.

4.3. Data Collected Automatically (Browsing and Security): when the User accesses the game, the support platform or the website, we collect technical data such as the IP address used in the creation of the account and in the accesses, device identifiers, date and time records of access and information about the browser used.

4.3.1. Purpose: compliance with the Marco Civil da Internet (Brazilian Internet Civil Framework) as regards the retention of access records, fraud prevention, identification of improper account sharing, system security and performance analysis.

4.4. Usage and Transaction Data: during the use of the service, records are generated of the operations carried out in the game environment, including packages purchased and the respective amounts, virtual currency movements, character progression and history of bans and of support interactions.

4.5. Data Provided to Support: when contacting our support channels, you provide the content of the messages sent and any information that you spontaneously include for the analysis of your case.

4.6. Data Collected in Surveys and Occasional Actions: In addition to the data indicated above, RaidHut may collect information on an occasional and optional basis, through questionnaires, satisfaction surveys, event registrations, prize draws and promotional actions, even if operated through third-party tools.

4.6.1. In these situations, the following may be requested, according to the purpose of each action: username (login), character nickname, e-mail address, identities on community platforms (such as the Discord ID), preferences and opinions about the game and information necessary for the delivery of any prize.

4.6.2. Participation is always optional and the specific purpose will be informed by RaidHut itself. The data will be used exclusively for the declared purpose, and will be eliminated or anonymized within 06 (six) months after the conclusion of the action.

4.7. Data We Do Not Collect: We do not collect sensitive personal data, understood as those relating to racial or ethnic origin, religious belief, political opinion, health, sex life, genetic or biometric data. We request that the User not include them in messages addressed to support.

5. LEGAL BASES FOR THE PROCESSING

5.1. Pursuant to the LGPD, the processing of personal data is only permitted where a legal ground exists. RaidHut uses the legal bases set out in this Clause for its operations.

5.2. Performance of a Contract or of Preliminary Procedures (Art. 7, V, LGPD): we use this legal basis for all the data necessary for you to be able to use the game. This includes your registration, authentication, the operation of the account, the processing of the purchases made in the game and support assistance. Without these data, the provision of the service becomes unfeasible.

5.3. Compliance with a Legal or Regulatory Obligation (Art. 7, II, LGPD): we process certain data in order to comply with requirements of Brazilian legislation, such as the retention of access records for a period of 6 (six) months, pursuant to the Marco Civil da Internet (Law No. 12,965/2014), the issuance of legal documents and the notification of security incidents to the Autoridade Nacional de Proteção de Dados (Brazilian National Data Protection Authority - ANPD) and to the data subjects, under art. 48 of the LGPD.

5.4. Legitimate Interest (Art. 7, IX, LGPD): this legal basis is applied in situations in which the processing proves necessary for legitimate purposes of RaidHut, always respecting the rights of the data subject. It is used for:

a) Account Security: identification of suspicious access, fraud prevention and protection against improper appropriation of accounts;

b) Game Integrity: identification of the use of unauthorized programs, exploitation of flaws and other conduct incompatible with the platform rules; and

c) Display of Rankings: disclosure of rankings and performance listings, a feature inherent to the game experience, within the limits of Clause Six.

5.4.1. Whenever the processing is based on legitimate interest, we assess in advance whether it is necessary for the intended purpose and whether it respects your legitimate expectations, adopting measures to reduce any impacts. You may object to such processing through the channel indicated in item 15 of this Policy.

5.5. Regular Exercise of Rights (Art. 7, VI, LGPD): we may process personal data for the defense of our interests in judicial, administrative or arbitration proceedings.

5.6. Consent (Art. 7, I, LGPD): should it be necessary to process data for purposes that do not fall within the situations above, we will request your free, informed and unequivocal consent, which may be revoked at any time through our support channels.

6. INFORMATION DISPLAYED PUBLICLY IN THE GAME AND COMMUNICATIONS IN THE GAME ENVIRONMENT

6.1. Some features of WYD Global, such as ranking listings, leaderboards and elements of interaction between players, publicly display the name of your character (nickname) and information relating to your performance in the game.

6.2. Such displays do not include registration data such as civil name, CPF, e-mail address, telephone, CEP or any other data that would allow you to be identified outside the game environment.

6.3. We recommend that the User not use real personal data in the composition of their character name, since such identifier is visible to other players and may be displayed on public pages.

6.4. Communications in the Game Environment. WYD Global provides communication channels between players. RaidHut may record, monitor and moderate such communications, on the grounds of legitimate interest (art. 7, IX, LGPD) and of the regular exercise of rights (art. 7, VI, LGPD), for the purposes of community security, prevention of harassment, combating fraud and the irregular sale of items, and investigation of conduct incompatible with the Terms of Use.

6.4.1. Communication records are accessed on a restricted basis, upon functional necessity, and retained for the period necessary for the investigation of reports and the defense of rights.

6.4.2. The content of private messages exchanged between players is the exclusive responsibility of their authors. RaidHut provides reporting tools should inappropriate conduct by third parties be identified, and recommends that the User not share personal data, credentials or sensitive information through these channels.

7. MINIMUM AGE FOR REGISTRATION AND ACCESS TO THE GAME

7.1. The minimum age for creating an account on WYD Global is 18 (eighteen) years, as established in our Terms of Use.

7.2. Should an account be identified as created in breach of the established minimum age, RaidHut will take the applicable measures, including the suspension of the account and the elimination of the data, except in the situations in which retention is required by law.

8. ABSENCE OF AUTOMATED DECISIONS AND COMPLIANCE WITH THE GAME RULES

8.1. RaidHut does not adopt decisions taken on the basis of automated processing of data that affect the interests of the User, and therefore the situation of art. 20 of the LGPD does not apply.

8.2. The measures of warning, suspension or closure of an account, arising from conduct incompatible with the game rules - such as the use of unauthorized programs, exploitation of flaws, irregular sale of items and fraudulent behavior -, are adopted upon individualized human analysis.

8.3. A User who disagrees with a measure applied to their account may request a review through the official support channels, in which case the case will be reassessed.

9. SHARING OF DATA WITH THIRD PARTIES

9.1. RaidHut does not sell your personal data. However, for the feasibility of the operation of the game and the provision of a quality service, we may share your information with partners and suppliers strictly for the purposes described below:

a) Infrastructure and Storage Providers: your data are stored on cloud servers that ensure the availability and the security of the service;

b) Payment Methods and Financial Institutions: the purchases made in the game are processed by institutions specialized in payment methods engaged by RaidHut. The processing of payment data varies according to the method chosen:

i. For payments by redirection (e.g.: Xsolla, Paypal, Payment Wall), the user is directed to the environment of the processor itself, where they enter the data necessary for the transaction; such data are not accessed, processed or stored by RaidHut at any time.

ii. For credit card payments via integrated checkout (e.g.: PicPay), the card fields are displayed on the RaidHut page, but the data are sent through the SDK of the processor directly to its servers, which generate a single-use token. The authorization and the processing of the charge are carried out in the systems of the processor on the basis of that token.

c) Support and Communication Platforms: we use third-party tools to manage support tickets and to send operational and security communications to Users;

d) Analytics Service Providers: we may use analytical tools to understand the game usage behavior, with a view to improving the features and the User experience; and

e) Public Authorities and Legal Requirements: your data may be shared with judicial, administrative or governmental authorities, whenever there is a legal determination, court order or need to defend the rights of RaidHut in judicial or administrative proceedings.

9.1.1. With respect to the sharing of data with financial institutions, as set out in Clause 9.1, “b”, RaidHut does not store the full card number or the security code (CVV) at any stage. The following, however, are retained: (i) the last 4 (four) digits of the card; (ii) the transaction identifier; (iii) the status of the operation; as well as (iv) the amount and the payment method used. In all cases, the processing of card data is subject to the privacy policy of the processor itself.

9.2. RaidHut carefully selects its partners and requires that all of them adopt technical and administrative information security measures compatible with the LGPD, ensuring the protection and the confidentiality of the data shared.

9.3. In the event of a corporate reorganization, sale or merger, the data may be transferred to the acquirer or successor, which shall be bound by the obligations of this Policy.

9.4. Community Channels: we maintain official channels on third-party platforms, such as social networks and community messaging services. When interacting in these channels, the User is also subject to the privacy policies of the respective providers, over which RaidHut has no control, which is why we recommend that personal data or access credentials not be shared there.

10. INTERNATIONAL TRANSFER OF DATA

10.1. RaidHut is headquartered in Brazil and its services are governed by Brazilian law. However, for the operation of the game and the secure storage of information, we use cloud infrastructure services of global reach.

10.2. The personal data collected may be transferred, stored and processed on servers located outside Brazilian territory, mainly - but not limited to - in the United States of America.

10.3. Whenever there is a transfer of data to other countries, RaidHut ensures that such operation will be carried out in observance of Chapter V of the LGPD. To that end, we adopt the following precautions:

a) Selection of Suppliers: we operate only with service providers that demonstrate compliance with recognized privacy and security standards;

b) Legal Mechanisms: we use appropriate contractual instruments, with data protection contractual clauses that ensure that the recipient applies a level of protection equivalent to that required by Brazilian legislation; and

c) Technical Security: we apply encryption measures in transit and other security protocols to protect the data during transmission and storage in foreign jurisdictions.

10.4. Single User Base and Global Protection Standard. WYD Global is accessible to users located outside Brazil. In order to ensure uniform, predictable and auditable processing, RaidHut maintains a single user base and adopts a global data protection standard, applied indistinctly to all Users, regardless of their country of residence.

10.4.1. This standard has the LGPD as its reference and incorporates, where more protective, additional internationally recognized safeguards, such that RaidHut neither fragments the level of protection by jurisdiction nor ensures to Users abroad a level lower than that afforded to Users residing in Brazil. The following apply to all, uniformly:

a) the rights provided for in item 14 of this Policy;

b) the response period of item 15.5;

c) the single support channel of item 15.3;

d) the security measures of item 11 and the retention periods of item 13; and

e) the incident notification procedure of item 12.

10.4.2. The adoption of the global standard does not imply a waiver, by the User, of additional rights that may be provided for in the legislation of their country of residence, which may be exercised through the channel indicated in item 15, in which case RaidHut will assess the request and inform the measures adopted.

11. INFORMATION SECURITY

11.1. RaidHut implements security measures, technical and administrative, capable of protecting personal data from unauthorized access and from accidental or unlawful situations of destruction, loss, alteration, communication or dissemination, in compliance with the standards required by the LGPD.

11.2. Among the technical measures adopted, the following stand out:

a) Encryption in Transit: use of secure communication protocols for the traffic of data between your device and our servers;

b) Restricted Access Control: access to personal data is limited to authorized employees who have a functional need to handle them, through named and individual accounts, in observance of the principle of least privilege;

c) Segregation of Environments: separation between resources accessible to the public and tools for internal use, which are neither exposed nor referenced on public pages;

d) Logging and Monitoring: recording of the operations carried out in the administrative environment, with identification of the operator, and monitoring of anomalous access patterns; and

e) Backups: performance of periodic copies to ensure the integrity and the availability of the data.

11.3. The administrative and organizational measures adopted are:

a) Information Security Policy: a formally approved document, with periodic review, which governs access control, credential management and the incident response procedure;

b) Training: our employees receive periodic guidance on data protection and information security;

c) Confidentiality Agreements: individuals with access to personal data are subject to confidentiality obligations; and

d) Access Review: periodic review of the active administrative accounts and of the privileges assigned to them.

11.4. The security of your data also depends on the conscious use of the service. By using WYD Global, you agree to and assume the following obligations:

a) The access credentials are for the personal and non-transferable use of the registered User, and the assignment, lending or sharing of the account with any third party is prohibited;

b) It is the exclusive duty of the User to maintain the confidentiality of their passwords, and they must adopt good security practices, such as the creation of strong passwords and the non-reuse of the same password in other services, it being clarified that RaidHut will never request your password by e-mail, telephone, social networks or any other channel;

c) The User is responsible for the activities carried out through the use of their credentials, any interaction carried out with their login and password being presumed authorized;

d) The system may monitor access patterns in order to identify improper account sharing, in which case there may be suspension of access for violation of the Terms of Use; and

e) Should the User suspect that their password has been discovered or that their account has been accessed without authorization, they must proceed with the immediate change of the password and notify RaidHut, without delay, through the official support channels, so that preventive blocking measures may be adopted.

11.5. RaidHut shall not be held liable for damage, loss of data or improper access arising from the poor management of the credentials by the User, from the intrusion into their personal devices or from situations of social engineering in which the User voluntarily provides their data to ill-intentioned third parties.

12. SECURITY INCIDENTS

12.1. In the event of a security incident that may result in relevant risk or damage to the data subjects, RaidHut will report the fact to the Autoridade Nacional de Proteção de Dados (ANPD) and to the affected users, within the periods and in the manner required by art. 48 of the LGPD and by Resolution CD/ANPD No. 15/2024.

12.2. The notification will state, in clear language, the description and the date of the incident, the categories of data involved, the risks and consequences to the data subject, the measures adopted by RaidHut and those recommended to the user, in addition to the contact channel for further clarification.

12.3. Where the incident affects groups of data subjects with a distinct severity of exposure, the notification will be segmented, so that each group receives the protection guidance appropriate to its situation.

12.4. The notifications will be carried out through the contact channels linked to the account and, where necessary, through the official public channels of the game, which is why it is essential to keep the e-mail address updated in the registration.

12.5. RaidHut maintains a channel for receiving reports of vulnerabilities identified by Users or external researchers, available at https://feedback.kersef.com/. A report made in good faith, without public disclosure of the flaw and without data extraction, does not give rise to any sanction against the reporting party.

13. RETENTION PERIOD

13.1. RaidHut stores your personal data only for the period strictly necessary to fulfill the purposes described in this Policy, to comply with legal obligations or to safeguard rights in judicial, administrative or arbitration proceedings.

13.2. The storage period varies according to the nature of the information and the legal basis that justifies the processing, subject to the following particularities:

a) Registration and Account Data: will be kept while the account is active. Once the account is closed, the registration data will be retained for a period of 02 (two) years.

b) Access Records (Logs): in compliance with art. 15 of the Marco Civil da Internet, RaidHut stores access records for a minimum period of 6 (six) months;

c) Fiscal and Tax Data: information relating to invoicing and financial transactions is kept for a minimum of 5 (five) years, as required by Brazilian tax and civil legislation; and

d) Data for Legal Defense: we may retain personal data for the statute of limitations period provided for by law, for the purposes of defense in any judicial or administrative proceedings.

e) Contact Data for Community Communications: the e-mail address provided by the User may be used for sending information about the game, updates and events, while the account is active and for up to 06 (six) months after its closure. The User may request the interruption of such sending at any time, without this resulting in prejudice to the receipt of operational and security communications.

13.2.1. With respect to the data retention period set out in Clause 13.2, “a”, the retention for the indicated period is intended exclusively for the following purposes: (i) to allow the reactivation of the account and the recovery of access by the data subject themselves, upon proof of ownership; (ii) to prevent the reopening of accounts closed by reason of infringement of the Terms of Use or of this Policy; and (iii) to preserve the history necessary for the investigation of fraud, use of unauthorized programs and irregular sale of items.

13.3. Anonymization: RaidHut may submit the data to irreversible anonymization processes, so that the information ceases to be considered personal data under the legislation in force. Once dissociated from any identifiable natural person, such data may be kept and used for, by way of example:

a) Analysis of usage flows and balancing of the game mechanics;

b) Preparation of statistical reports on the player base, ensuring that no data subject may be identified on an individualized basis; and

c) Identification of vulnerabilities and improvement of the security and the performance of the platform.

13.4. Once the retention period has ended or the purpose has been achieved, RaidHut will proceed with the definitive deletion of the personal data from its systems or with their irreversible anonymization.

13.5. The data subject may, at any time, request the deletion of data that are unnecessary or processed on the basis of their consent, through the channel indicated in item 15 of this Policy. RaidHut will analyze the request and may keep the data should there be a legal ground for the continuation of their processing, in which case it will inform the data subject of the reason for the refusal.

14. RIGHTS OF DATA SUBJECTS

14.1. RaidHut ensures to you, in your capacity as personal data subject, the exercise of your rights free of charge and in a facilitated manner. Under article 18 of the LGPD, you may, at any time and upon request, obtain:

a) Confirmation and Access: you may request confirmation that we carry out the processing of your data and, if so, access to a copy of such information;

b) Correction of Data: should your data be incomplete, inaccurate or outdated, you have the right to request correction;

c) Anonymization, Blocking or Elimination: you may request that unnecessary or excessive data, or data processed in non-compliance with the LGPD, be anonymized, blocked or eliminated;

d) Elimination of Data Processed with Consent: for the data whose processing was based exclusively on your consent, you may request definitive deletion, except in the retention situations provided for by law;

e) Information on Sharing: you may request information about the public and private entities with which RaidHut has carried out shared use of data;

f) Information on Denial of Consent: you have the right to be informed about the consequences of not providing consent, where it is requested;

g) Revocation of Consent: you may revoke any consent previously given, at any time, in a simple and free manner;

h) Objection: you may object to processing carried out on the grounds of legitimate interest, should you understand that there is non-compliance with the legislation; and

i) Review of Automated Decisions: you may request the review of decisions taken exclusively on the basis of automated processing, under item 8.

14.2. How to exercise your rights: to exercise any of the rights listed above, simply send a request through our official communication channel indicated in item 15. We will process your demand within the legal periods and will inform you of the measures adopted.

14.3. We may request additional information to confirm your identity prior to fulfilling the request, a measure intended to protect your own account against attempts of improper access by third parties.

14.4. The right of access is met by means of a clear and complete statement regarding the personal data processed, and does not imply the delivery of log files in raw format, of internal system structures or of information that would reveal game mechanics, balancing parameters or criteria of the fraud prevention mechanisms.

14.5. The response will cover the information relating to the requesting data subject, with the data of third parties that may appear in the same records being suppressed, in observance of the rights of those data subjects.

15. COMMUNICATION CHANNEL AND LEGAL EXEMPTION FROM APPOINTING A DATA PROTECTION OFFICER

15.1. In compliance with article 41 of the Brazilian General Data Protection Law, RaidHut establishes a direct communication channel so that you may clarify doubts, submit complaints or exercise your rights relating to privacy.

15.2. RaidHut, in its capacity as a small-scale processing agent, declares that it makes use of the exemption from appointing a data protection officer, as permitted by art. 11 of Resolution CD/ANPD No. 2/2022, maintaining, in observance of the said provision, a direct communication channel to ensure prompt handling of the demands of data subjects.

15.3. For any request, complaint or doubt about how we process your personal data, you must get in touch through the following channel:

Support channel: https://feedback.kersef.com/

15.4. Through this channel, you may: (i) request the access to, the correction of or the deletion of your data; (ii) revoke consent previously provided; (iii) clarify doubts about this Policy or about the security measures adopted; (iv) report any suspicion of a security incident or of improper access to your account; and (v) request the definitive closure of your game account.

15.4.1. The closure of the account entails the definitive loss of access to the game, of the characters, items, virtual currency and other assets linked to it, without any right to reimbursement of amounts already paid. The measure is irreversible and is not to be confused with temporary suspension.

15.4.2. Once the account is closed, the data will be processed in the manner of Clause 13.2 “a”.

15.5. RaidHut undertakes to confirm the receipt of your message and to provide a reasoned response within the periods established by the legislation in force. In the case of requests for access or for confirmation of processing, the full response will be provided within 15 (fifteen) days, counted from the date of the request.

16. COOKIE POLICY

16.1. RaidHut uses cookies and similar technologies to ensure the proper functioning of its website, to improve your browsing experience and to understand how our services are used.

16.2. Cookies are small text files sent to and stored on your computer or mobile device through your browser. They serve to remember your preferences, to facilitate access to the account and to allow the platform to function more efficiently.

16.3. We classify the cookies used into three main categories:

a) Strictly Necessary Cookies (Essential): they are fundamental to the functioning of the service, allowing browsing, access to secure areas and the maintenance of session security. Without these cookies, the services cannot be properly provided;

b) Analytical and Performance Cookies: they collect information about how Users interact with the website, which helps us to correct flaws and to improve the technical performance of the system; and

c) Functionality Cookies: they are used to remember choices made by you, such as language or region, and to provide personalized features.

16.4. Most browsers are configured to accept cookies automatically. You may configure your browser to refuse all cookies, to accept only those from trusted sites or to alert you whenever a cookie is being sent, with the updated instructions being made available in the help tools of the respective browser.

16.5. It is important to emphasize that, should you choose to block or delete the strictly necessary cookies, some features may be compromised, which may make it impossible to access your account or impair other features.

17. CHANGES TO THE PRIVACY POLICY

17.1. RaidHut reserves the right to modify, alter or update this Privacy Policy at any time, unilaterally, in order to reflect changes in our services, technological advances, legislative updates or new guidelines from the Autoridade Nacional de Proteção de Dados (ANPD).

17.2. Whenever there is a significant change in the content of this document, especially as regards the purposes of the processing or the rights of the data subjects, RaidHut will make efforts to notify you through one of the following channels: (i) a prominent notice on our website; (ii) the sending of an electronic message to the address registered in your account; or (iii) an announcement in the official channels of the game, including the support platform.

17.3. The new version of the Policy will enter into force on the date of its publication, which will be duly indicated in the "Last updated" field. We recommend that you review this document periodically in order to stay informed about how we protect your information.

17.4. By continuing to access the game or to use our services after the publication of an update, you acknowledge and accept the new conditions established. Should you not agree with the changes, you must immediately cease the use of the services and may request the deletion of your data, in accordance with the terms provided for in Clause Fourteen.

17.5. Should any provision of this Policy be deemed invalid, illegal or unenforceable by a competent judicial or administrative authority, such invalidity will not affect the validity of the remaining clauses, which will remain in full force.

18. APPLICABLE LEGISLATION

18.1. This Privacy Policy is governed by, interpreted and performed in accordance with the laws of the Federative Republic of Brazil, especially Law No. 13,709/2018 (Brazilian General Data Protection Law), Law No. 12,965/2014 (Marco Civil da Internet) and, where applicable, Law No. 8,078/1990 (Brazilian Consumer Protection Code).

Last updated on 08/10/2026.