Privacy Policy

PRIVACY AND COOKIE POLICY

Last updated July, 2026

What is the scope of this notice? This privacy notice for the Activate group of companies as set out in Appendix“A” (“Activate”, “we”, “us”, or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services or the services of our licensed partners (our “Partners”) (“Services”), such as when you:

Visit our website at https://playactivate.com, or any website of ours that links to this privacy notice ;
Visit the in-person site (a “Site”) or website of one of our Partners; and/or
Engage with us (or our Partners) in other related ways, including any sales, marketing, or events or participate in the Activate Global League (“AGL”) or Activate Tournament of Champions (“TOC”).

This privacy notice does not describe our Partners’ collection, storage, usage or sharing of your information where Activate is not involved. This includes our Partners’ management of their own booking systems, or their management of HR and applicant data, for example. Please refer to the relevant Partner’s privacy notice available on their country-specific website, or any other privacy notice provided to you by the Partner in the context of these activities.

References to “information” or “personal information” in this notice also cover the term “personal data”, as it is understood under applicable data protection laws.

This privacy notice is issued in English language and translated into respective local languages where applicable local data protection law requires. In the event of any discrepancy or inconsistency between the English version of this privacy notice and any translation thereof, the English version will prevail.

Who is the controller?

If you are located in the EEA, UAE, UK, or Switzerland, or any other country with equivalent or similar data protection laws, Activate is the controller of your personal information.

In some scenarios, Activate and its relevant Partner are “joint controllers”, which means both Activate and the Partner are responsible for determining how and why we process and use your personal information. As explained below, this is the case in respect of certain marketing and online advertising activities, and the handling of complaints or accident reporting when you visit one of our Partners’ Sites. For these activities, the relevant Partner will be your primary point of contact for any requests, questions or concerns and you can find their contact information in their privacy notice available on their country-specific website or in Appendix A herein.

For all other processing described in this notice, Activate acts as an “independent controller”.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact the relevant company at the information outlined in Appendix “A”.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Read more about the personal information you disclose to us.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we receive any information from third parties? We may receive information from public databases, marketing partners, social media platforms, and other outside sources. In addition, we may receive information if you attend one of our Partner’s Sites or visit one of our Partner’s websites. Learn more about information processed from other sources.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, advertise to you, for security and fraud prevention, and to comply with law. In some jurisdictions, we rely on (pre-) contractual obligations and based on our legitimate interests per the chart below. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so, where so required by applicable law. Learn more about how we process your information.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when, where, and with whom we share your personal information.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. This includes a right to object to us processing your personal information in certain circumstances. Learn more about your privacy rights.

How do you exercise your rights? To exercise your rights, please contact the relevant company, for example, at the information outlined in Appendix “A”. We will consider and act upon any request in accordance with applicable data protection laws. Where we are a joint controller with our Partners, the relevant Partner will be your primary point of contact to exercise your rights and you can find their contact information in their privacy notice available on their country-specific website. Notwithstanding this, you may exercise your rights also with us.

WHAT INFORMATION DO WEPROCESS?
WHY DO WE PROCESS YOUR INFORMATION?
WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
WHEN, WHERE, AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
HOW LONG DO WE KEEP YOUR INFORMATION?
HOW DO WE KEEP YOUR INFORMATION SAFE?
WHAT ARE YOUR PRIVACY RIGHTS?
CONTROLS FOR DO-NOT-TRACK FEATURES
DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
DO WE MAKE UPDATES TO THIS NOTICE?
HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE PROCESSFROM YOU?

1. WHAT INFORMATION DO WE PROCESS?

Personal Information You Disclose to Us

In Short: We processprocesspersonal information that you provide to us.

We processpersonal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we process depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we process may include the following:

Names ;
Date of birth;
Age;
Gender;
Phone numbers;
email addresses;
Mailing addresses (including your postal code or zip code) ;
Player data and scores (where you participate in the AGL or TOC);
Promotional photos, videos and interviews (where you participate in the AGL or TOC);
Information linked to your account profile (e.g., credentials);
Information provided in the context of customer service, including correspondence and complaints; and/or
Preferences regarding our Services.

Where you are the parent or guardian of a child, we may process your details as well as the child’s when you sign up and use our Services. For the purposes of collecting personal information, we consider under age 18 to be a child.

At other times you may book our Services through one of our Partners. You can find details of how our Partners manage their own booking systems in the relevant Partner’s privacy notice available on their country-specific website.

Sensitive Information. We do not process sensitive information.

Payment Data. You may need to provide data necessary to process your payment if you make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All such payment data is securely stored by Square, Clover, or Stripe pursuant to their practices (and we do not have access to such data). We therefore do not process payment data and are not responsible for any payment data processing by Square, Clover or Stripe. You may find their privacy notice link(s) here:

Square: https://squareup.com/us/en/legal/general/privacy Clover: https://www.clover.com/privacy-policy Stripe: https://stripe.com/en-ca/privacy

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

At other times our Partners, and not us, will be responsible for the processing of your payment data in their own booking systems. You can find details of this processing in the relevant Partner’s privacy notice available on their country-specific website.

Completeness and Accuracy: All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information Automatically Processed

In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is processed automatically when you visit our Services.

We automatically process certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. An IP address alone does not identify an individual without supplementary information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also process information through cookies and similar technologies.

The information we process includes:

Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically process when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
Device Data. We process device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data. We process location data such as information about your device's location, which can be either precise or imprecise. How much information we process depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to process geolocation data that tells us your current location (based on your IP address)), if you have upfront provided your consent to do so. You can withdraw your consent in the collection of this information either by refusing access to the information or by disabling your Location setting on your device at any time. However, if you choose to opt out, you may not be able to use certain aspects of the Services.

We may also receive your device information when you visit the websites of our Partners, including through cookies and similar technologies. For detail on the specific tracking technologies used on those websites, please visit the Cookie Policy of the relevant Partner’s country-specific website.

Information Processed From Other Sources

In Short: We may process limited data from public databases, marketing partners, and other outside sources. In addition, we may receive information if you attend one of our Partner’s Sites or visit one of our Partner’s websites.

In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.

If you make an Activate account at one of our Partner’s Sites or on one of our Partner’s websites, we will receive information such as your name, phone number, email address, postal code, and preferences (and, if relevant, those of your parent or guardian), and we may share some of this information back with our Partners. We may also combine your account information with a record of any bookings you have made on our Partner’s booking system (but we will not receive your payment information).

If you are a staff member of one of our Partners and have made an admin account at one of our Partner’s Sites (for example, to log into our software and systems), we will process your name and email address to administer our Services. You can find more information about how your personal information is processed in an employment context in the relevant Partner’s employee privacy notice.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, advertise to you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. For more information about our purposes of processing, including what categories of personal data we use for these purposes, see Appendix B. Note, where we process personal data to administer our contract with you or to comply with our legal obligations, this is mandatory, and we will not be able to provide our Services without this information. In other cases, provision of the requested personal data is optional, and based on your consent, but without consent this may affect your ability to procure or access certain functionalities or Services where the information is needed for those purposes.

Joint Controllership

In some (but not all) scenarios we act as joint controllers with the Partner at whose Site or website you set up an account or where you played our games. We do this for direct marketing and online targeting purposes. In particular, we may share your personal information obtained from those locations back with our Partners to facilitate their direct marketing and online targeting campaigns relating to the Services.

We are also joint controllers when we handle complaints made by players (or their parents or guardians) and accident reporting from one of our Partner’s Sites, which has been notified to us by our Partners.

Note this does not apply to processing done by our Partners as independent controller, for instance the management by our Partner of their booking system, HR data, and other on-site processing not covered above.

For requests, questions or concerns related to the joint control activities, the relevant Partner will be responsible for this and the main point of contact. Please refer to the Partner’s privacy notice, accessible https://playactivate.com/privacy-policy.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and, where so required by applicable law,we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services, to enter into or fulfill our contractual obligations, to protect your rights or to fulfil our legitimate business interests.

If you are located in the EEA, UAE, or UK or any other country with equivalent or similar data protection laws, please see Appendix “B”) for more information.

To initiate or defend legal proceedings – we may process your personal information where it is necessary to initiate or defend against any actions to claim rights or legal proceedings, or related to judicial or security procedures, for example when handling complaints and accident reports at our Partner sites;

If you are located in Canada, this section applies to you.

As used in this privacy notice, (a) “PIPEDA” means the Personal Information Protection and Electronic Documents Act, SC 2000, c 5; (b) “Substantially Similar Legislation” means provincial privacy legislation deemed to be substantially similar to PIPEDA, which, to date, includes the Personal Information Protection Act, RSA 2003, c P-6.5 (Alberta), the Personal Information Protection Act, RSBC 2003, c 63 (British Columbia) and An Act respecting the protection of personal information in the private sector, CQLR c P-39.1 (Quebec) ; and (c) “Canadian Privacy Laws” means PIPEDA and/or Substantially Similar Legislation, in each case to the extent applicable.

To the extent that our Services are available to individuals located in Canada, or to the extent we process your personal information in the context of the activities of an establishment in Canada, this privacy notice sets out our practices and obligations under Canadian Privacy Laws, to the extent applicable.

We do not rent, sell or trade your personal information.

Accuracy and Completeness. We make every reasonable effort to ensure that personal information is accurate and complete. This may involve requesting further information or updates from you. We rely on you to notify us if there is a change to your personal information that may affect your relationship with us. We will correct or amend the personal information in our files where it can be shown that the information is incorrect or incomplete.

Privacy Incidents. The protection of personal information is of paramount concern to us, and we are prepared to take appropriate and timely steps in the event of any incidents involving personal information in accordance with Canadian Privacy Laws.

Location. We and our service providers may store and/or process personal information outside of Canada (including in the United States of America). When information is stored or processed outside of Canada, it may be subject to the laws of and be accessible by legal authorities in such other jurisdictions. We have taken appropriate technical, organizational, and legal steps to secure this information.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). Individuals provide their consent to the collection, use, and disclosure of personal information by Activate when they provide their information to us or use the Services. You can withdraw your consent at any time. However, if your consent is withdrawn, we may not be able to provide you with certain products or services.

In some cases, we may disclose your personal information in hashed (pseudonymized) form to third-party advertising platforms for the purpose of audience suppression, exclusion, and advertising optimization. Where we rely on implied consent for this purpose, we do so on the basis that a reasonable person would expect their information to be used in this manner, and provided that an opt-out mechanism is available. For audience targeting beyond suppression or exclusion, we rely on express consent where required by applicable Canadian and USA Privacy Laws and Canada’s Anti-Spam Legislation (CASL) and CAN-SPAM Act.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way ;
For investigations and fraud detection and prevention ;
For business transactions provided certain conditions are met ;
If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim ;
For identifying injured, ill, or deceased persons and communicating with next of kin ;
If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse ;
If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province ;
If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records ;
If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced ;
If the collection is solely for journalistic, artistic, or literary purposes; and/or
If the information is publicly available and is specified by applicable law .

For further information about our privacy practices, to make a request for access to personal information, or to exercise any other rights outlined in this privacy notice, please contact the relevant company at the information outlined in Appendix “A”.

4. WHEN, WHERE AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
Partners who provide the Services. We may share your information with our licensed Partners who run our business activities in your jurisdiction.
Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
Service Providers. In some cases, we may share personal information with third party service providers performing functions on Activate’s behalf, including, for example, vendors that provide information technology services, payment services or provide analytics or assessment services. .All our service providers acting as our processors process your personal information only on our behalf and on the basis of our instructions for the purposes described above in accordance with the agreement concluded pursuant to Art 28 GDPR.

Advertising and Social Media Platforms. We may use third-party advertising service providers and social media platforms, including Meta Platforms, Inc. (Facebook and Instagram), to deliver advertisements regarding our Services. These advertisements may appear within our Services, on social media platforms, or through other digital advertising networks.

In connection with these activities, we may disclose limited personal information about our existing customers, such as email addresses and phone numbers, to our advertising service providers for audience-matching purposes. Before disclosure, this information is pseudonymized using industry-standard SHA-256 hashing, which converts identifiers into non-reversible hash values prior to transmission. However, hashed information remains personal information under applicable data protection laws.

We may use this information to: (i) create custom audiences so that advertisements for certain Services may be shown to existing customers; (ii) suppress or exclude existing customers or other individuals from particular advertising campaigns; and (iii) create "lookalike," "similar," or other modeled audiences by enabling advertising service providers to identify individuals who may share characteristics, interests, preferences, or behaviours similar to those of our existing customers and deliver advertisements to those individuals.

We use Braze, Inc. as our customer relationship management and marketing automation platform, which facilitates the secure transfer of hashed customer information to advertising platforms on our behalf as a service provider. Where Meta is used for audience matching, Meta is contractually restricted from using the data we provide for any purpose other than the audience-matching process and from sharing that data with third parties or other advertisers. Meta deletes the customer list data after the matching process is complete; however, the resulting matched audience may remain available until we delete it.

We may, in our discretion, exclude certain individuals from the targeted advertising activities described above. You may withdraw your consent to the use of your personal information for targeted advertising purposes. Please see the "What Are Your Privacy Rights?" section below for more information on how to exercise your rights.

In all cases, our advertising service providers may independently collect, use, and disclose information about you in accordance with their own privacy policies (and not this Privacy Notice) and may use their own cookies and similar tracking technologies. Based on the limited information we provide and information they collect independently, these providers may also infer information about you, such as your interests, preferences, or characteristics. For further information regarding Meta's privacy practices, please visit Meta's Privacy Policy at: https://www.facebook.com/privacy/policy.

If you are located in the European Economic Area (EEA),United Kingdom, or Switzerland, or any other country with equivalent or similar data protection laws, we may store and/or process personal information in international locations, including in Europe, Canada and the United States of America. Where we transfer your personal data outside your country of residence, we will ensure that all necessary safeguards are in place to protect the personal data with the protection afforded to it within your country of residence and that the transfer complies with applicable local data protection laws and is carried out using the transfer mechanisms permitted under those laws.Where we transfer your personal data to Canada (including in relation to the joint control activities), we rely on adequacy decisions from the European Commission and/or the UK Government and/or Switzerland in respect of Canada. Where we transfer your personal data to the United States, we adopt appropriate safeguards including EU and UK standard contractual clauses, as adapted to satisfy Swiss law requirements. The appropriate safeguards may also include, where necessary, an agreement on supplementary measures and, in any case, the performance of a transfer impact assessment To the extent required or permitted by data protection law, we may alternatively rely on an appropriate EU-US or US or Swiss-US Data Protection Framework certification, a vendor’s processor binding corporate rules and/or other data transfer mechanisms available under EU/UK/Swiss data protection laws. More information (including on the appropriate safeguards we adopt), and a copy of relevant transfer mechanisms, can be obtained by using the contact details in Appendix “A”.

For personal data originating in the UAE, it may be necessary for us to transfer your personal data to countries outside the UAE. In those cases we will comply with the PDPL and adopt the steps the law dictates to ensure the privacy of your personal data. Where we transfer your personal data outside the UAE, we do so on the basis that it is a country deemed to provide an adequate level of protection or, in reliance on another legally-approved transfer mechanism. In the event we cannot or choose not to continue to rely on either of those mechanisms at any time, we will not transfer your personal data outside the UAE unless we can do so on the basis of an alternative mechanism or in reliance on another exception available under the law.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to process and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. “Cookies” are small text files placed on computers that can processa nd store a variety of information. Persistent cookies are stored on a user’s hard drive and processed for a definite period unless manually deleted before their expiration period, while temporary cookies are automatically deleted from the user’s browser upon logging out of a website. Web browsers typically allow users to disable persistent and/or temporary cookies. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Most browsers automatically accept cookies. You can disable this function by changing your browser settings, but disabling cookies may impact your use and enjoyment of the Website. Not all features or functions of the Website may work properly if you disable cookies. You cannot disable all cookies, such as cookies that are essential to the functioning of the Website.

Do Not Track. We do not currently employ a process for automatically responding to “Do Not Track” (DNT) signals sent by web browsers, mobile devices, or other mechanisms. Per industry standards, third parties may be able to collect information, including personal information, about your online activities over time and across different websites or online services when you use the Website.

Global Privacy Control. You can use the Global Privacy Control (“GPC”) through a supported browser to signal certain of your opt-out preferences. You may opt-out of the processing of your Personal Information for purposes of targeted advertising or certain sales of your personal information by broadcasting the Global Privacy Control Signal through a supported browser. If you use the GPC, we will process your request for your browser, but it will not apply outside of that browser to your device. You will need to use the GPC for each browser you use to access the website If you clear your cookies in your browser after using the GPC, you will need to use the GPC again for us to process your opt out for that browser.

6. HOW LONG DO WE RETAIN YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

Retention Period

We retain each category of personal information, including sensitive personal information, for as long as needed or permitted in light of the purpose(s) for which it was processed. The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you have an account with us or keep using our services, and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
Whether there is a legal obligation to which we are subject, for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them; and
Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation or regulatory investigations.

7. HOW DO WE KEEP YOUR INFORMATION SECURE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented commercially reasonable technical, physical and organizational safeguards to protect personal information in our custody or control from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, including, where appropriate, password protection, encryption, SSL, firewalls, and internal restrictions on who may access data to protect our website. Please be aware that despite our best efforts, no data security measures can guarantee 100% security all of the time.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a password that nobody else knows or can easily guess, and keeping your password private.

Please note that our website contains links to other websites. We are not responsible for the privacy practices used or followed by other websites. You are encouraged to be aware of when you leave our website, and to read the privacy statements of each and every website you may visit that may processpersonal information from you.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as Canada, Malaysia, the EEA, the UAE, Switzerland, and the UK, you have rights that allow you greater access to and control over your personal information. Depending on what jurisdiction you are located in you may review, change, or terminate your account at any time.

Depending on the specific jurisdicition in which you are located, , you have certain rights under applicable data protection laws. These rights may only apply in some scenarios and may be subject to applicable exemptions. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict or stop the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making other than in certain circumstances, and to obtain human intervention on, and a right to express your point of view on and contest, an automated decision. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request, for example ,by contacting the relevant company at the information outlined in Appendix “A”.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, or if you would like to make a complaint, you also have the right to complain to your local data protection supervisory authority or to lodge a judicial appeal. You can find the contact details of your local data protector supervisory authority within the EEA here: hehttps://www.edpb.europa.eu/about-edpb/about-edpb/members_en. The UK Information Commissioner’s contact details are here: https://ico.org.uk/make-a-complaint/.

If you are located in Malaysia, the contact details for the data protection authorities are available here: https://www.pdp.gov.my/ppdpv1/en/about-us/.

If you are located in the UAE you may lodge complaints with the UAE Data Office (competent supervisory authority). Contact details for the UAE Data Office are not yet available, and we will update this Policy accordingly.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time, for example, by contacting the relevant company at the information outlined in Appendix “A”.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Unsubscribing from marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting the relevant company at the information outlined in Appendix“A”. You will then be removed from the marketing lists. However, we may still communicate with you — for example, to send you service-related messages that are necessary for the administration and use of your account or; to respond to service requests.

Account Information: If you would at any time like to review or change the information in your account or terminate your account, you can contact us, for example, by using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you are in certain jurisdictions, for example the EEA, Switzerland, or UK, you will also be asked whether you want to opt-in to any non-essential cookies, for example cookies used for analytics or advertising purposes. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services. To learn more about how to manage cookies and similar technologies, as well as how to managef interest-based advertising, please see our Cookie Policy.

If you have questions or comments about your privacy rights, you may contact our Privacy Officer by calling 1-833-859-3995 in North America (English only) or by sending us an email at [email protected].

10. Your Privacy Rights

Depending on where you live and the laws that apply, you may have certain statutory data protection rights regarding your personal information. These rights may be subject to exceptions and limitations under applicable law.

You may have the right to:

be informed of what personal data we hold about you and request access to and/or a copy of it;
request that we correct personal information that is inaccurate or incomplete;
request that personal information be removed from our systems (deleted), subject to certain exceptions;
request a portable copy of certain personal information;
opt out of certain processing of your personal information, including (where applicable) targeted advertising, and the sale or sharing of personal information (as those terms may be defined by applicable law);
withdraw your consent at any time where we process personal information based on your consent (this will not affect the lawfulness of processing before you withdrew consent);
not be discriminated against for exercising your rights (where applicable); and
appeal a decision we make about your request (where applicable under U.S. state law).

Sale/Sharing for targeted advertising: We do not sell personal information (including sensitive personal information), and we have not engaged in any sales in the preceding 12 months. We do not sell or knowingly “share” personal information (including sensitive personal information) of minors under 16 years of age. We may “share” (as defined under applicable U.S. state privacy laws) certain personal information, such as hashed identifiers, with social media platforms for the purpose of custom audience matching, audience suppression, and advertising optimization. You have the right to opt out of such sharing, as described below.

Sensitive personal information: Activate uses sensitive personal information only for purposes such as providing services, credentialing, security, fraud prevention, and compliance with law, as described above, and not to infer characteristics about you for targeted advertising.

Non-discrimination: Activate will not discriminate against you for exercising your privacy rights.

If you wish to exercise any of these rights, please contact us by writing to or emailing us at [email protected].

You may also mail your request to:

Activate Games Inc.

11-1099 Wilkes Avenue Winnipeg, Manitoba R3P2S2

We may need to verify your identity before processing certain requests. We will respond within the time required by applicable law.

Authorized agents (where applicable): In some U.S. states, you may designate an authorized agent to submit a request on your behalf. If you use an authorized agent, we may ask for proof that the agent is authorized, and we may also require you to verify your identity directly with us.

Appeals (where applicable): If we deny your request, you may have the right to appeal our decision. To appeal, please email [email protected] with the subject line “Privacy Request Appeal” and include your original request and our response. We will review and respond within the time required by applicable law.

Shine the Light. Pursuant to California Civil Code Section 1798.83, if you are a California resident, you have the right to obtain: (a) a list of all third parties to whom we may have disclosed your personal information within the past year for direct marketing purposes, and (b) a description of the categories of personal information disclosed, by contacting us per the “Contact Us” Section below.

International Transfer

We are a US-based company. If you access the Sites from outside the United States, please be aware that personal information may be transferred to, stored in, and processed in the United States. Certain governmental authorities may not consider the level of protection of personal information in the United States to be equivalent to that required in other jurisdictions.

De-Identified Information

Where we maintain or use de-identified information, we will continue to maintain and use the de-identified information only in a de-identified fashion and will not attempt to re-identify the information.

California Residents. California Civil Code Section 1798.83, also known as the "Shine The Light" law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information providedin Appendix “A”.

If you are under 18 years of age, reside in California, and have a registered account with the Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact information provided below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g., backups, etc.).

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, please contact the relevant company, for example, by usingt the information outlined in Appendix“A”.

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE PROCESSFROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we processfrom you, change that information, or delete it. To request to review, update, or delete your personal information, please contact the relevant company at the information outlined in Appendix "A" below.

APPENDIX “A” –

ACTIVATE CORPORATE

Activate Games Inc.

Website: https://playactivate.com

Contact Person: Privacy Officer

Contact Information: [email protected], 1-833-859-3995 North America (English only), or by post to: Activate Games Inc.11-1099 Wilkes Avenue, Winnipeg, Manitoba R3P 2S2

If you are in the Switzerland, we do not have a local establishment, therefore, we have appointed a local representative, who you can contact. Our representative can be contacted directly by emailing them at the following address:

Swiss Representative

Valfor Rechtsanwälte Ltd.

St. Annagasse 9 P.O. Box 1162 8021 Zurich Switzerland [email protected]

If you are in the EEA, or UK we do not have a local establishment, therefore, we have appointed a local representative you can contact as follows:

EU Representative

Ametros Ltd, Coliemore House, Coliemore Road, Dalkey, Dublin, Ireland [email protected] www.ametrosgroup.com

UK Representative

Ametros Group Ltd, Broadway House, 32-35 Broadstreet, Hereford, England, HR4 9AR [email protected] www.ametrosgroup.com

If you are in the UAE, we do not have a local establishment, and you can contact the relevant authority in Appendix “A”.

ACTIVATE PARTNERS

Country/Region	Partner	Address	Email	Phone Number
USA	Sounds Fun Entertainment	100 West Main Street, Suite 500, Lexington, KY 40507, United States	[email protected]	859-287-4182
United Kingdom	Agility UK Ventures	3 Sheen Road, Richmond Upon Thames, England, TW9 1AD	[email protected]
France	Hadrena	6 Rue Saint Joseph, 75002 Paris, France	[email protected]
Norway, Sweden, Denmark, Finland	Realinvest AS	Falkenborgvegen 9, 7044 Trondheim, Norway	[email protected]
Germany, Austria, Switzerland	VRex Entertainment GmbH	Karl-Bröger-Straße 8, 91074 Herzogenaurach, Germany	[email protected]	+49 9132-7299290
Malaysia	Kara Global Holdings LLC	B-46-3A Sentral Residences, 8 Jalan Stesen 2, KL Sentral, 50470 Kuala Lumpur, Malaysia	[email protected]
UAE	Majid Al Futtaim Leisure & Entertainment	MAF Tower 1, Adjacent to Deira City Centre, Deira, PO Box 119991, Dubai, UAE	[email protected]
Mexico	Juegos Activate MX	Blvd. Juan Alonso de Torres 2002 Interior 2142, Colonia Valle del Campestre, León, Guanajuato, México	[email protected]	+52 55 2095 3391

Appendix B- Description of Processing Activities and Lawful Bases

If you are located in the European Economic Area or the UK, this section applies to you.

In the table below we have prepared a detailed activity-based overview showing which personal data we process for each specific purpose, the legal basis we rely on, and how long we retain the data.

Processing activity	Categories of personal data	Purpose	Legal basis	Retention period
Account creation and user administration	Name and contact information Username and password Account information	Create and administer user account Authenticate users Provide access to services	Performance of contract (GDPR Article 6(1)(b)): Necessary to fulfil the agreement to provide services	Account & Profile Data – Retained while the account remains active and for up to 3 years following last meaningful engagement, after which the account is anonymized.
Delivery of services	Name and contact information Payment information Player data and performance results (for AGL/TOC products) Technical device information	Deliver the services and products you have ordered Process orders and transactions Provide customer support	Performance of contract (GDPR Article 6(1)(b)): Necessary to fulfil the agreement to provide services	Account & Profile Data – Retained while the account remains active and for up to 3 years following last meaningful engagement, after which the account is anonymized. Transaction & Billing Data – Retained for 7 years from the date of the transaction, or longer when required by law.
Customer service and complaint handling	Name and contact information Correspondence content Support enquiries Complaint information	Respond to enquiries Handle and resolve complaints Provide technical support Improve customer service	Performance of contract (GDPR Article 6(1)(b)): Necessary to fulfil obligations to the customer Legitimate interest (GDPR Article 6(1)(f)): Documentation of customer enquiries and quality assurance	Retained for up to 3 years following ticket resolution. Where escalated to formal dispute or regulatory matter, retained for 7 years following formal closure.
Administrative communication	Email address Name Account information	Send important messages about the service Inform about changes to terms Send confirmations and receipts Notify about account-related events	Performance of contract (GDPR Article 6(1)(b)): Necessary to fulfil the agreement and inform about material changes	Account & Profile Data – Retained while the account remains active and for up to 3 years following last meaningful engagement, after which the account is anonymized.
Marketing to existing customers (existing customer relationship) including targeted and personal advertising for North American corporate stores.	From existing customers for matching and targeting purpose: first name last name zip/postal code city (if available) state or province country bate of birth year of birth gender age	Send marketing materials about our own products and services to existing customers Inform about new features and offers	Legitimate interest (GDPR Article 6(1)(f)): Marketing of our own similar products to existing customers, with the option to unsubscribe Consent (GDPR Article 6(1)(a)): Express consent obtained before sending marketing	Marketing & Communication Preferences – Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal, for compliance and record-keeping purposes.
Marketing to new customers and non-customers (using existing customers data as exclusion)	In North American corporate stores, from existing customers for matching and exclusion purpose: first name last name zip/postal code city (if available) state or province country bate of birth year of birth gender • age	• Send marketing materials about products and services	Consent (GDPR Article 6(1)(a)): Express consent obtained before sending marketing Legitimate interest (GDPR Article 6(1)(f)): Marketing of our own similar products to existing customers, with the option to unsubscribe	Marketing & Communication Preferences – Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal, for compliance and record-keeping purposes.
Targeted advertising and personalisation	IP address Device identifiers Browser information Cookie data Behavioural patterns on the website Location data (general)	Display personalised content Deliver targeted advertisements Measure advertising effectiveness Analyse user behaviour	Consent (GDPR Article 6(1)(a)): Consent obtained via cookie banner for use of cookies and tracking technology	Marketing & Communication Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal.
Profiling for marketing purposes	Purchase history Product preferences Website activity Demographic information	Analyse preferences Send tailored marketing Create customer segments	Consent (GDPR Article 6(1)(a)) for profiling Legitimate interest (GDPR Article 6(1)(f)) for simple segmentation of existing customers	Marketing & Communication Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal.
Publication of customer testimonials and feedback	Name Profile picture, photo or video (if relevant) Statements/reviews	• Publish customer reviews on website and in marketing materials	Consent (GDPR Article 6(1)(a)): Express consent obtained before publication, with the option to withdraw Legitimate interest (GDPR Article 6(1)(f)): Necessary to protect our legitimate interests in advertising and publicity (where consent not required)	Marketing & Communication Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal.
Custom audience creation and audience suppression/exclusi on	• Name • Email address • Phone number • Device identifiers (where available)	• Create hashed custom audiences on social media platforms (e.g., Meta/Faceboo k) to suppress or exclude existing customers from advertising • Create lookalike audiences to reach new prospective customers • Improve advertising relevance and efficiency • Measure and optimise advertising campaigns	Consent (GDPR Article 6(1)(a)): Where consent is required for the sharing of personal data with third-party advertising platforms for audience matching Legitimate interest (GDPR Article 6(1)(f)): For audience suppression and exclusion purposes, where the processing serves to prevent unnecessary advertising to existing customers and reduces data exposure	Marketing & Communicatio n Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal. Meta deletes customer list data after the matching process is complete; the matched audience persists until manually deleted.
Marketing and publicity related to AGL and TOC (Activate Global League and Tour of Champions)	Name Image and video Player performances and results Interviews and statements	Market events Publish results and highlights Promote participants Create marketing materials	Consent (GDPR Article 6(1)(a)): Express consent from participant (and parents/guardia ns for minors) Legitimate interest (GDPR Article 6(1)(f)): Necessary to protect our legitimate interests in advertising and publicity (where consent not required)	Marketing & Communication Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal.
Security and fraud prevention	IP addresses Device identifiers Log information Transaction data Security logs	Protect against unauthorised access Detect and prevent fraud Protect system integrity Comply with security requirements	Legitimate interest (GDPR Article 6(1)(f)): Necessary to protect our legitimate interests in maintaining secure operations and protecting users against fraud Legal obligation (GDPR Article 6(1)(c)) where security logging is required by law	Technical, security & audit logs are retained for up to 18 months from log creation. -Transaction & Billing Data – retained for up to 7 years from the date of the transaction, or longer where required by law.
Administer prize draws and competitions	Email address Name Account information	• Select participants and deliver prizes	Consent (GDPR Article 6(1)(a)): Express consent where required, including from parents/guardia ns of minors Legitimate Interests (GDPR Article 6(1)(f)): Necessary to administer prize draws	Marketing & Communication Preferences - Retained for the duration of active marketing consent and up to 3 years following last engagement or consent withdrawal.
Analysis, development and improvement of services	Usage statistics (aggregated/anonymis ed) Functionality data Error reports User experience data	Analyse usage patterns Improve products and services Develop new features Troubleshooting • Request feedback	Consent (GDPR Article 6(1)(a)): Express consent where required (for use of cookies to process data for these purposes). Legitimate interest (GDPR Article 6(1)(f)): Necessary to improve and optimise services for the benefit of all users	Where data is aggregated or anonymized, it is not retained as personal data. Where identifiable data is processed for troubleshooting , analytics, or service improvement, it falls under Game & Operational Logs or Technical, Security & Audit Logs which are retained for up to 18 months from log creation.
Compliance with legal obligations	• All categories of personal data may be relevant depending on the legal obligation	Comply with legal requirements (e.g. accounting, tax) Respond to legal demands Cooperate with authorities Documentation for audit purposes	Legal obligation (GDPR Article 6(1)(c)): Necessary to comply with legal obligations incumbent upon us	Retained for 7 years following formal closure of the matter.
Processing of payment information	Payment card details (processed by payment service provider) Billing information Transaction history	Process payments Handle refunds Fulfil accounting requirements	Performance of contract (GDPR Article 6(1)(b)): Necessary to complete the transaction Legal obligation (GDPR Article 6(1)(c)): Retention in accordance with bookkeeping requirements	Retained for up to 7 years from the date of the transaction, or longer where required by law.

COOKIE POLICY

Last updated July 2026

This Cookie Policy explains how Activate ("Company", "we", "us", and "our") uses cookies and similar technologies to recognize you when you visit our website at https://playactivate.com ("Website"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.

This Cookie Policy is issued in English language and translated into respective local languages where applicable local data protection law requires. Alll language versions are accurate and equally authoritative.

We may use and disclose information processed via cookies and similar technologies for the purpose set out in Schedule B, except where we are required to do otherwise under applicable law. If we are required to treat the information as personal information under applicable law, we may use and disclose it for the purposes for which we use and disclose personal information, as detailed in our Privacy Policy. In some instances, we may combine information processed via cookies and similar technologies with personal information. If we do, we will treat the combined information as personal information so long as it is combined.

What Are Cookies?

A cookie is a small text file that our Website saves onto your computer or device when you use the Website that provides us certain information about your activities. Cookies allow the Site to remember your actions and preferences and recognize you or your browser. Web beacons / pixel tags are small graphics on a webpage that monitor your activity when viewing a webpage.

We use cookies to:

tailor our interactions with you;
help with our marketing efforts;
provide us with valuable data and statistics about the usage and effectiveness of our Website and to help us improve our Website; and
help us improve our services.

The cookies and similar technologies on our Website may collect information such as:

the IP addresses assigned to the computers and other devices you use;
your internet service provider;
the device ID number;
approximate geographic location;
the Website pages visited or clicked on;
the date and time you visited the Website, and the amount of time spent on the Website;
your operating system, browser type, search requests, and other similar information;
the websites you access before and after visiting the Website, and
data related to how and when you use the Website.

We may combine information from cookies with Personal Information, including data obtained from other sources.

A cookie can either be a “session” cookie or a “persistent” cookie. Session cookies exist only for so long as you are visiting the applicable Website and are typically deleted when you exit your web browser. Persistent cookies exist for a set period of time, for example, up to several months or years. Each time you visit a website that has implemented a persistent cookie, the persistent cookie is renewed, and that cookie will remain active until its predetermined expiration date. You can manually delete persistent cookies through your browser settings.

First-party versus third-party cookies. Cookies may either be “first-party” or “third-party” cookies. A first-party cookie allows your web browser to talk to the actual Site that you are visiting (i.e. this Website). A third-party cookie allows your web browser to talk to a third-party website, such as the source of an ad that appears on the website you are visiting or a third-party analytics provider. We do not have control over how information gathered by third-party cookies is used by third parties.

Managing Cookies and Opting Out

Google Analytics. We use Google Analytics to collect and process information about your use of the Website. Google sets cookies on your browser or device, and then your web browser will automatically send information to Google. Google uses this information to provide us with reports that we use to better understand and measure how users interact with our Website.

To learn more about how Google uses data, visit Google’s Privacy Policy and Google’s page on “How Google uses data when you use our partners’ sites or apps.” You may download the Google Analytics Opt-out Browser Add-on for each web browser you use, but this does not prevent the use of other analytics tools. To learn more about Google Analytics cookies, visit Google Analytics Cookie Usage on Websites.

Meta Pixel. Our Website may use the Meta Pixel (formerly Facebook Pixel), a tool provided by Meta Platforms, Inc. This technology helps us understand actions that visitors take on our Website after viewing or interacting with our ads on Facebook or Instagram, measure the effectiveness of our marketing campaigns, and create audiences for future advertising. The information collected through the Meta Pixel may include your IP address, browser information, and information about your actions on our Website (such as pages visited) and may be linked by Meta to your Facebook or Instagram account if you have one. Meta uses this information in accordance with its own Data Policy. You can learn more about Meta's advertising and how to manage your preferences within your Facebook and Instagram account settings, or by visiting Meta’s Privacy Center. You may opt out of Meta's use of cookies and pixels by visiting Meta's Ad Settings.

Why Do We Use Cookies and Similar Technologies?

We use first- and third-party cookies for several reasons. Some cookies are required for technical reasons in order for our Website to operate, and we refer to these as "essential" or "strictly necessary" cookies. The processing of essential/strictly necessary cookies is based on our legal obligations and/or our legitimate interests. Other cookies are "non-essential" and only processed based on your prior voluntary consent.

Non-essential cookies may enable us to track and target the interests of our users to enhance the experience on our Website.

Cookies also allow us to collect such information as browser type, time spent on the Website, pages visited, language preferences, and traffic data. We use essetial cookies in this regardfor security purposes, to facilitate navigation and to display necessary information more effectively, as well as non-essential cookies to personalize your experience. We also gather statistical information about use of the Website in order to continually improve its design and functionality, understand how it is used, and assist us with resolving questions regarding the Website.

Non-essential cookies further allow us to select which of our advertisements or offers are most likely to appeal to you and display them while you are on the Website or reach out to you directly with personalized marketing communications. We may also use non-essential cookies or other technologies in online advertising to track responses to our ads.

Non-essential cookies are not the only way to recognize or track visitors to a website. We may use other, similar non-essential technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs").

These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our Website or opened an email including them. This allows us, for example, to monitor the traffic patterns of users from one page within a website to another, to deliver or communicate with cookies, to understand whether you have come to the Website from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of email marketing campaigns. In many instances, these technologies are reliant on non-essential cookies to function properly, and so declining cookies will impair their functioning.

How Can I Control Cookies and Similar Technologies?

You have the right to decide whether to accept or reject non-essential cookies and similar technologies. You can exercise your choices by setting your preferences in the Cookie Consent Manager. The Cookie Consent Manager allows you to select which categories of non-essential cookies and similar technologies you accept or reject. Essential cookies cannot be rejected as they are strictly necessary to provide you with services. Other categories of cookies, such as marketing and analysis cookies, will only be used if you give your express consent.

The Cookie Consent Manager can be found in the notification banner and on our Website. In addition, most browsers allow you to automatically decline cookies or be given the choice of declining or accepting particular cookies from a particular website. You may also wish to refer to http://www.allaboutcookies.org/manage-cookies/index.html. If you choose to reject cookies, you may still use our Website though your access to some functionality and areas of our Website may be restricted.

As the means by which you can refuse cookies through your web browser controls vary from browser to browser, you should visit your browser's help menu for more information. The following is information about how to manage cookies on the most popular browsers:

Chrome Firefox Safari on iPhone and iPad Safari on Mac Edge Opera Internet Explorer: Internet Explorer is no longer supported by Microsoft and is not recommended.

The specific types of first- and third-party cookies served through our Website and the purposes they perform are described table below and in the Cookie Policy accessible via the Cookie Consent Manager.

If you are visiting one of our partner’s websites, the cookies placed on that website may be different. For details of the specific cookies placed on the relevant partner’s website, please see the Cookie Policy accessible via the Cookie Consent Manager on that website.

Performance and Functionality Cookies

These cookies are used to enhance the performance and functionality of our Website but are non-essential to its use. However, without these cookies, certain functionality (such as videos) may become unavailable.

Name	Purpose	Provider	Service	Country	Type	Expires In
MR	Microsoft MSN cookie. Used to measure the use of the website for internal analytics.	.bat.bing.com	Microsoft	United States	server_cookie	As long as consent is effective, maximum 7 days
XSRF-TOKEN	Helps with site security by preventing Cross-Site Request Forgery (CSRF) attacks.	playactivate.com	Advertiser's website domain	United States	http_cookie	As long as consent is effective, maximum 2 hours

Analytics and Customization Cookies

These non-essential cookies collect information that is used either in aggregate form to help us understand how our Website is being used, how effective our marketing campaigns are, or to help us customize our Website for you.

Name	Purpose	Provider	Service	Country	Type	Expires In
#collect	Sends data such as visitor behaviour and device information to Google Analytics. Tracks visitors across marketing channels and devices during the browsing session.	playactivate.com	Google Analytics	United States	pixel_tracker	As long as consent is effective, maximum session
699659602/	Not provided.	playactivate.com	Not provided.	United States	pixel_tracker	As long as consent is effective, maximum session
_ga	Records a unique ID used to generate statistical data on website usage by the user.	.playactivate.com	Google Analytics	United States	http_cookie	As long as consent is effective, maximum 1 year, 11 months, 29 days
ga#	Distinguishes individual users by assigning a randomly generated client identifier to calculate visits and sessions.	.playactivate.com	Google Analytics	United States	http_cookie	As long as consent is effective, maximum 1 year, 11 months, 29 days
_gat#	Enables Google Analytics to regulate the rate of requests.	.playactivate.com	Google Analytics	United States	http_cookie	As long as consent is effective, maximum 1 minute
_gid	Stores a unique ID used to generate statistical data on website usage by visitors.	.playactivate.com	Google Analytics	United States	http_cookie	As long as consent is effective, maximum 1 day
MUID	Sets a unique user ID for tracking how the user uses the site.	.bing.com	Bing Analytics	United States	http_cookie	As long as consent is effective, maximum 1 year, 24 days

Advertising Cookies

These non-essential cookies are used to make advertising messages more relevant to you. They perform functions such as preventing the same advertisement from continuously reappearing, ensuring advertisements are properly displayed, and selecting advertisements based on your interests.

Name	Purpose	Provider	Service	Countr y	Type	Expires In
_fbp	Facebook tracking pixel used to identify visitors for personalized advertising.	.playactivate.com	Facebook	United States	http_cookie	As long as consent is effective, maximum 2 months, 29 days
_uetvid	Used to track visitors across multiple websites to present relevant advertisemen ts based on visitor preferences.	playactivate.com	Google Tag Manager	United States	html_local_stora ge	As long as consent is effective; expiry to be confirme d
_uetsid	Collects visitor behaviour data across websites to enable more relevant advertising and frequency capping.	.playactivate.com	Google Tag Manager	United States	http_cookie	As long as consent is effective, maximum 1 day
ga-audiences	Used by Google Ads to re-engage visitors likely to convert based on online behaviour across websites.	playactivate.com	Google Ads (AdWords)	United States	pixel_tracker	As long as consent is effective, maximum session
_uetsid	Collects visitor behaviour data across websites to enable more relevant advertising and frequency capping.	playactivate.com	Google Tag Manager	United States	html_local_stora ge	As long as consent is effective; expiry to be confirme d
_uetvid	Used to track visitors across multiple websites to present relevant advertisemen ts based on visitor preferences.	.playactivate.com	Google Tag Manager	United States	http_cookie	As long as consent is effective, maximum 1 year, 24 days
td	Used to deliver targeted advertisemen ts based on browsing activity.	playactivate.com	UnrulyX	United States	pixel_tracker	As long as consent is effective, maximum session
IDE	Used to measure ad conversion rates.	.doubleclick.net	DoubleClic k	United States	server_cookie	As long as consent is effective, maximum 1 year, 11 months, 29 days
_uetvid_ex p	Contains the expiry date for the correspondin g _uetvid cookie.	playactivate.com	Google Tag Manager	United States	html_local_stora ge	As long as consent is effective; expiry to be confirme d
_uetsid_ex p	Contains the expiry date for the correspondin g _uetsid cookie.	playactivate.com	Google Tag Manager	United States	html_local_stora ge	As long as consent is effective; expiry to be confirme d
test_cooki e	Session cookie used to check whether the user's browser supports cookies.	.doubleclick.net	DoubleClic k	United States	server_cookie	As long as consent is effective, maximum 15 minutes
_gcl_au	Used by Google AdSense to experiment with advertising efficiency across websites.	.playactivate.co m	Google AdSense	United States	http_cookie	As long as consent is effective, maximu m 2 months, 29 days

Do You Use Google Analytics?

We use Google Analytics, which uses non-essential cookies and similar technologies to processand analyze information about use of the Services and report on activities and trends only based on our consent. This service may also processinformation regarding the use of other websites, apps, and online resources. You can learn about Google’s practices by going to www.google.com/policies/privacy/partners/, and exercise the opt-out provided by Google by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout. Of course, you can manage the use of cookies of Google Analytics also in out Cookie Consent Manager.

Do You Serve Targeted Advertising?

We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Website and other websites or online services, only based on your consent. You may receive advertisements based on information relating to your access to and use of the Website and other websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognize a unique non-essential cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they process about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.

If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Cookie Policy, please visit:

For the U.S.: Digital Advertising Alliance and Network Advertising Initiative
For Canada: Digital Advertising Alliance of Canada
For Europe: European Interactive Digital Advertising Alliance

International data transfers

As indicated in the cookie tables above, the cookies we use result in the transfer of your personal data to the United States, where our service providers (including Google, Microsoft, Meta/Facebook, and others) are located.

These international data transfers are conducted in accordance with Chapter V of the General Data Protection Regulation (GDPR). Specifically:

For transfers to Google LLC and Microsoft Corporation: We rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, which provides that the United States ensures an adequate level of protection for personal data transferred under this framework. You can access the adequacy decision here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
For transfers to Meta Platforms, Inc.: We rely on Standard Contractual Clauses approved by the European Commission as appropriate safeguards under Article 46 GDPR. You can access information about Meta's data transfer mechanisms here: https://www.facebook.com/privacy/policy
For other service providers: We ensure that appropriate safeguards are in place, including Standard Contractual Clauses or other legally recognized transfer mechanisms.

For detailed information about the international transfers carried out by the third parties identified in this Cookie Policy, please refer to their respective privacy policies.

What are your privacy rights?

For further information on your privacy rights, kindly refer to our Privacy Policy[khttps://playactivate.com/privacy-policy indly link]

How Often Will You Update This Cookie Policy?

We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Policy indicates when it was last updated.

Where Can I Get Further Information?

If you have any questions about our use of cookies or other technologies, please contact the relevant company at the information outlined in Appendix “A” of the Privacy and Cookie Policy