PERSONAL DATA PROTECTION POLICY

This Personal Data Protection Policy ("Policy") forms part of the Service Agreement and Purchase Policy for Customers using Gamota services. It explains how we collect, receive, store, aggregate, process, use, disclose and share information of individuals and organizations ("Customers") when they access or use Gamota products and services through the website and other available interaction channels.

This Personal Data Protection Policy may be amended from time to time. Customers should visit and review it regularly to stay updated on the latest changes. Gamota reserves the right to amend, supplement or adjust the terms of this Policy at any time by publishing updates on Gamota's official website.

By continuing to use Gamota products and services after changes to this Personal Data Protection Policy take effect, Customers confirm their acceptance of the amended and updated Policy.

In this Policy, "Gamota", "we", "us" and "our" refer to the Gamota e-commerce sales website.

Gamota respectfully informs Customers that the latest Personal Data Protection Policy issued by Gamota takes effect from July 1, 2023.

1. GENERAL PROVISIONS

By registering for, using Gamota products and services, entering into agreements and/or allowing Gamota to use personal information and process Customers' personal data, Customers accept all provisions set out in this Personal Data Protection Policy.

Gamota will only collect, use, store and process Customers' personal data in accordance with: applicable laws and regulations (including Decree No. 13/2023/ND-CP dated April 17, 2023 on personal data protection and any documents amending, supplementing or replacing it from time to time); this Personal Data Protection Policy; and other contracts or agreements between Customers and Gamota. When Customers provide Gamota with personal data of a third party (such as information of a spouse, children, parents, guardians, friends, beneficiaries, authorized persons, partners, guarantors, emergency contacts, legal representatives, chief accountants, contact persons, shareholders or other individuals related to Customers), Customers represent and warrant that they have fully informed such third party of the contents of this Personal Data Protection Policy and have obtained that third party's lawful consent for Gamota to process personal data for the purposes stated in this Policy. Customers also understand that Gamota is not required to re-verify such consent.

Depending on Gamota's role in each specific situation, as (i) a personal data controller; (ii) a personal data processor; or (iii) a personal data controller and processor, Gamota will exercise corresponding rights and fulfill corresponding obligations in accordance with applicable law.

Gamota notes that collecting and processing Customers' personal data is a necessary and sufficient condition for Gamota to provide products and services to Customers.

2. TYPES OF PERSONAL DATA PROCESSED

In order for Gamota to fulfill Customers' requests (including but not limited to requests for game top-up services and other products and services) and/or provide general information about Gamota products/utilities, Gamota and the personal data processors with whom Gamota has agreements will need to use Customers' personal data (including but not limited to collecting, recording, analyzing, confirming, storing, editing, disclosing, combining, accessing, retrieving, recovering, encrypting, decrypting, copying, sharing, transmitting, providing, transferring, deleting, destroying personal data or other related actions).

Customers' personal data used may include sensitive personal data. The types of personal data that may be used are listed below and may vary depending on the time and the Customer's relationship with Gamota:

(i) Basic personal data: Full name, middle name and birth name, other names (if any); date of birth; date of death or disappearance; gender; place of birth, place of birth registration, permanent residence, temporary residence, current residence, hometown, contact address; nationality; personal images; phone number, identity card number, personal identification number, passport number, driver's license number, vehicle license plate number, personal tax code, social insurance number, health insurance card number; marital status; information about family relationships (parents, children); information about personal digital accounts; personal data reflecting activities and activity history in cyberspace; and other information associated with a specific person or helping identify a specific person.
(ii) Sensitive personal data: Political opinions, religious beliefs; health status and private life recorded in medical records, excluding blood type information; information related to racial or ethnic origin; information about inherited or acquired genetic characteristics; information about physical attributes or unique biological characteristics; information about sex life or sexual orientation; data on crimes or criminal acts collected and stored by law enforcement agencies; customer information of credit institutions, foreign bank branches, payment intermediary service providers and other permitted organizations, including legally required customer identification information, account information, deposit information, deposited asset information, transaction information, and information about organizations or individuals acting as guarantors at credit institutions, bank branches or payment intermediary service providers; location data identified through location services; and other personal data classified by law as specific and requiring necessary security measures.
(iii) Other personal data provided by Customers to Gamota when registering for products and services, as well as data generated during Customers' use of Gamota products and services.

3. PURPOSES OF PERSONAL DATA PROCESSING

Customers agree to allow Gamota to collect and use Customers' personal data and share the results of personal data processing for the following purposes:
(i) Evaluating and providing Gamota products and services, and products and services that Gamota provides in cooperation with partners, to Customers;
(ii) Identifying, verifying and maintaining accurate customer identification information; ensuring the security and safety of Gamota's information systems and other customer due diligence requirements in accordance with law;
(iii) Supporting Customers and updating Customer information when Customers register for or use products and services provided by Gamota or Gamota's partners;
(iv) Performing obligations under contracts or agreements between Gamota and Customers (if any);
(v) Assessing risk, analyzing trends, compiling statistics and planning, including statistical data processing, improvement, development and provision of suitable services to users (personalizing user experience);
(vi) Detecting, preventing and investigating crimes, attacks or violations, including fraud, money laundering, terrorism, financing the proliferation of weapons of mass destruction, bribery, corruption or tax evasion;
(vii) Organizing product introductions and trade promotion, market research, public opinion surveys, brokerage, product referrals and advertising. Contacting Customers, directly or indirectly marketing products and services to Customers, implementing promotion programs, reward exchange, prize awards and gift delivery;
(viii) Recording Customers' service usage credibility to support the provision of Gamota products and services to Customers in the best manner, and organizing regular customer and loyalty programs to bring Customers the best consumption benefits;
(ix) Aggregating, analyzing, researching and developing new products and services, and providing suitable products and services to Customers;
(x) Evaluating, improving and enhancing the quality of products and services that Gamota provides to Customers. Developing new features and products and supporting areas related to Gamota services;
(xi) Verifying customer information to keep Customer accounts secure during inquiries, reviews and complaint handling.
(xii) Protecting or enforcing Gamota's lawful rights and interests, including the right to collect fees, recover and handle debts owed by Customers on Gamota's system (if any).

Where Customers have agreed to allow Gamota to use their personal data for marketing services and product advertising/referral purposes, Customers agree that Gamota has the right to market and introduce products with the following content, methods, forms and frequency:
(i) Content: Marketing and introduction of products of Gamota and its partners.
(ii) Method: Via advertising messages, notices on Gamota's official website and applications, or other methods permitted by law.
(iii) Form: Gamota sends information directly to Customers through cyberspace, devices, electronic means or other forms permitted by law.
(iv) Frequency: In accordance with advertising laws.

4. METHODS OF PERSONAL DATA PROCESSING

Customers' personal data may be processed:
(i) Manually; and/or
(ii) Automatically (by electronic means); and/or
(iii) By other methods consistent with applicable law.

5. INFORMATION ABOUT ORGANIZATIONS AND INDIVIDUALS PROCESSING DATA; OTHER INDIVIDUALS AND ORGANIZATIONS RELATED TO PERSONAL DATA PROCESSING PURPOSES

To serve Customers' experience and enable Gamota to carry out the purposes of personal data use under this Personal Data Protection Policy, Customers agree that Gamota may share Customers' personal data with the following organizations and individuals:
(i) Product and service providers for Gamota, including but not limited to information technology services, marketing services, market surveys, training services, legal services, audit services and delivery services;
(ii) Consulting companies, auditors, law-practicing organizations and Gamota's lawyers;
(iii) Financial partners, commercial banks, switching organizations, card organizations and payment intermediary companies cooperating with Gamota;
(iv) Payment acceptance units;
(v) Gamota employees and workers;
(vi) Gamota's parent company, subsidiaries and affiliates;
(vii) Any individual, competent authority, regulator or third party to whom Gamota is permitted or required to disclose under the laws of any country, or under any contract or other commitment between a third party and Gamota;
(viii) Any individual related to the enforcement or maintenance of any rights or obligations under agreement(s) between Customers and Gamota;
(ix) Service providers to Gamota where sharing or disclosure of data to them is necessary for Gamota to fulfill its obligations to Customers;
(x) Third parties responsible for processing personal data under their contracts or agreements with Gamota, including research companies, survey companies and rating agencies;
(xi) Competent state authorities;
(xii) Parties approved by Customers or parties for whom Gamota has a legal basis to share Customers' personal data.

Other than the above cases, Gamota will not disclose Customers' personal data to any other party unless:
(i) Customers have given consent;
(ii) Gamota is required or permitted to disclose under law;
(iii) Gamota transfers its rights and obligations under agreement(s) between Customers and Gamota.

6. POSSIBLE UNINTENDED CONSEQUENCES AND DAMAGES

Gamota uses various information security technologies such as international PCI DSS standards, SSL, etc. to protect Customers' personal data from leakage, misuse, unwanted use or unauthorized sharing. Gamota is committed to protecting Customers' personal data to the maximum extent.
Some unintended consequences and damages may occur, including but not limited to: (a) hardware or software errors during data processing causing loss of Customers' data; (b) security vulnerabilities beyond Gamota's control, where systems are attacked by hackers causing data leakage; (c) Customers unintentionally disclosing personal data due to carelessness, fraud, or accessing websites/downloading applications containing malware; (d) natural disasters, etc.
Gamota recommends that Customers keep confidential information related to usernames, account login passwords, OTPs and biometrics, and not share such information with anyone else.
Customers should protect electronic devices during use and should lock, log out of or exit their accounts on Gamota's website when they no longer need to use the account.
In the event of an incident or detection of a violation affecting Customers' personal data, Gamota will promptly notify the competent state authority of the personal data protection violation and make efforts to take remedial and preventive measures.

7. START AND END TIME OF PERSONAL DATA PROCESSING

Start time of personal data processing: From the time Customers accept this Personal Data Protection Policy or when Customers register to use Gamota products and services.

8. RIGHTS AND OBLIGATIONS OF CUSTOMERS

8.1 As personal data subjects, Customers have the following rights: (i) the right to be informed; (ii) the right to consent; (iii) the right of access; (iv) the right to withdraw consent; (v) the right to request data deletion; (vi) the right to restrict data processing; (vii) the right to data provision; (viii) the right to object to data processing; (ix) the right to complain, denounce or initiate lawsuits; (x) the right to claim compensation for damages; (xi) the right to self-protection and other related rights as prescribed by law.
8.2 To the extent permitted by law, Customers may exercise their rights by: (i) taking actions directly on Gamota's website; or (ii) contacting Gamota using the information provided in Section 9 below. Gamota will fulfill lawful and valid requests from Customers within the time prescribed by law from receipt of a valid request.
8.3 Where Customers withdraw consent to the processing of personal data, request data deletion or exercise other related rights over any or all of their personal data, such actions may: (i) affect the legal validity of contracts and legal relationships between Gamota and Customers; (ii) cause Gamota products and services for Customers to be limited, restricted, suspended or cancelled, depending on the case. Such changes may lead to costs or damages borne by Customers and/or third parties.
Gamota will continue using Customers' personal data to the remaining extent required (if any) or as prescribed by law.
8.4 Customers' obligations:
(i) Comply with laws, this Personal Data Protection Policy and Gamota's regulations and guidelines related to the processing of Customers' personal data.
(ii) Provide complete, truthful and accurate personal data and other information as requested by Gamota when registering for and using Gamota products and services, and when such information changes. Gamota will protect Customers' personal data based on the information registered by Customers; therefore, if any information is inaccurate, Gamota will not be responsible where such information affects or limits Customers' rights and interests. If Customers fail to notify changes and risks or losses arise, Customers are responsible for errors or acts of misuse or fraud when using services caused by their own fault or by failing to provide correct, complete, accurate and timely updated information, including financial damages and costs arising from incorrect or inconsistent information.
(iii) Cooperate with Gamota, competent state authorities or third parties where issues arise that affect Customers' personal data.
(iv) Protect Customers' own personal data; proactively apply measures to protect their personal data during the use of Gamota products and services; promptly notify Gamota upon detecting errors or confusion in their personal data or suspecting that their personal data is being infringed.
(v) Be responsible for information, data and consents that Customers create or provide online; be responsible where personal data is leaked or infringed due to Customers' own fault.
(vi) Regularly update themselves on Gamota's Personal Data Protection Policy and regulations announced to Customers from time to time or posted on Gamota's official website (Gamota.com) or Gamota Wallet application. Take actions as guided by Gamota to clearly express full consent, partial consent, conditional consent or non-consent to personal data processing purposes announced by Gamota from time to time.
(vii) Respect and protect the personal data of others.
(viii) Other obligations prescribed by law.

9. HOW CUSTOMERS MAY CONTACT GAMOTA

To exercise their rights or discuss with Gamota any matters related to this Personal Data Protection Policy, Customers may contact Gamota by one of the following methods: (i) calling Hotline (+84) 2435 191 618; or (ii) sending an email to support@Gamota.vn; or (iii) contacting Gamota's official Fanpage for guidance.