SUPPLEMENTAL TERMS – JURISDICTION-SPECIFIC ADDENDA

Last Updated: 2023-06-01

If you are a user located in Australia, Brazil, California, Canada, Hong Kong SAR, India, Indonesia, Japan, Macau SAR, Malaysia, Mexico, Philippines, Russia, Serbia, Singapore, South Korea, Sri Lanka, Taiwan (China), Thailand, Turkey, United Arab Emirates, United Kingdom or Vietnam, the terms set out below under the name of your jurisdiction apply to you in addition to the terms set out in our Privacy Policy.

We have provided translations of the Privacy Policy, but in the event of any conflict between the local language version and the English version, unless otherwise prescribed by applicable law, the English version shall prevail.

Australia

This section applies to users located in Australia:

Overseas Recipients

We take reasonable steps to ensure that third party recipients of your Personal Information located outside Australia handle your Personal Information in a manner that is consistent with Australian privacy laws. However, you acknowledge that we do not control, or accept liability for, the acts and omissions of these third party recipients.

Access

You have the right to access Personal Information we hold about you, how we use it, and who we share it with. You can access the Personal Information you have made available as part of your account by logging into your account. If you believe we hold any other Personal Information about you, please contact us at support@dipperapp.com.

Correction

You have the right to correct any of your Personal Information we hold that is inaccurate. You can access the Personal Information we hold about you by logging into your Dipper account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact us at support@dipperapp.com.

Children

If you are under the age of 18, you undertake that you have the consent of your parent or legal guardian to register an account on and use Dipper.

Your rights

If you are dissatisfied with our response to your request for access to, or correction of, your Personal Information or your privacy complaint in respect of your Personal Information, you may contact the Office of the Australian Information Commissioner (Telephone +61 1300 363 992 or email enquiries@oaic.gov.au).

Brazil

This section applies to users located in Brazil:

Consent Revocation

Whenever we use your Personal Information based on your consent, you may revoke consent that you have previously given for the collection, use and disclosure of your Personal Information, subject to contractual or legal limitations. To revoke such consent, you may terminate your Dipper account or you can contact support@dipperapp.com. This may affect our provision of Dipper to you.

Parental and Guardian Consent

If you are under the age of 18, you should not use Dipper for any purpose without first obtaining parental/guardian agreement to the Privacy Policy (both for themselves and on your behalf). We do not knowingly collect Personal Information from any children under the age of 18 without such consent. Please contact our Data Protection Officer if you believe we have any Personal Information from any children under the age of 18 without such parental/guardian consent – we will promptly investigate (and remove) such Personal Information.

California

This section applies to California residents covered by the California Consumer Privacy Act of 2018 ("CCPA").

The CCPA provides California residents with certain legal rights such as access, deletion, disclosure, or "do not sell." These rights are not absolute and are subject to certain exceptions.

Collection and Disclosure of Personal Information

Over the past 12 months, through your use of Dipper, we may have collected and disclosed the following categories of Personal Information from or about consumers, as defined in the CCPA:

  • Identifiers, such as phone number, name, alias, token, username, IP address, mobile application store user ID, mailing address, emergency contact information, and contact list. This information is collected directly from the consumer or device;
  • Geolocation data, including geolocation information derived from GPS coordinates, Wi-Fi access points, the compass, the accelerometer, IP address, and public posts. This information is collected directly from the consumer or device;
  • Internet or other electronic network activity information, including your device model, network type, OS type and version, client version, call history, chat data, invitations data, call credits history, search history, log data, information related to third party accounts that you have linked to Dipper, and survey information. This information is collected directly from a device;
  • Biometric information, such as voiceprints. This information is collected directly from the consumer or device;
  • Commercial information, including payment card information and transaction verification information. This information is collected directly from the consumer or device;
  • Audio, electronic, visual, or similar information, including a profile picture. This information is collected directly from the consumer; and
  • Other information that is described in subdivision (e) of Section 1798.80, such as nationality and gender (this information is being collected in the consumer context rather than the employer context). This information is collected directly from the consumer.

We collect Personal Information for the following purposes:

  • To operate and administer Dipper;
  • To communicate with consumers;
  • To improve our services;
  • For security and verification purposes, including to prevent and detect fraudulent activity; and
  • To address and remediate technical issues and bugs.

For additional information about what each type of Personal Information is used for, see the main portion of the Privacy Policy.

We may disclose each of the categories of Personal Information identified in the Privacy Policy to the following types of entities:

  • Related group companies within our corporate group who process your Personal Information in order to operate the services (as described in the section "Who Do We Share Your Data With" of the Privacy Policy);
  • Other companies that provide services on our behalf who are prohibited by contract from retaining, using, or disclosing Personal Information for any purpose other than for providing such services to us;
  • Other users of Dipper and Vaste with respect to Personal Information you publicly post through Dipper;
  • Official Accounts and Mini Program operators, and other third party services which you choose to use your Dipper account for login;
  • Regulators and judicial authorities and law enforcement agencies; and
  • Entities that acquire all or substantially all of our business.

In the past 12 months, we have not sold personal information of California residents within the meaning of "sold" in the CCPA.

Rights under the CCPA

If you are a California resident and the CCPA does not recognize an exemption that applies to you or your Personal Information, you have the right to:

  • Request we disclose to you free of charge the following information covering the 12 months preceding your request:
    • the categories of Personal Information about you that we collected;
    • the categories of sources from which the Personal Information was collected;
    • the purpose for collecting Personal Information about you;
    • the categories of third parties to whom we disclosed Personal Information about you and the categories of Personal Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and
    • the specific pieces of Personal Information we collected about you;
  • Request we delete Personal Information we collected from you, unless CCPA recognizes an exemption; and
  • Be free from unlawful discrimination for exercising your rights including providing a different level or quality of services or deny goods or services to you when you exercise your rights under the CCPA.

We aim to fulfill all verified requests within 45 days pursuant to the CCPA. If necessary, extensions for an additional 45 days will be accompanied by an explanation for the delay.

Please note that in order to protect your information, we will need to verify your identity before responding to any request to exercise your rights. In some cases we may need to collect additional information to verify your identity, such as a government issued ID.

How to Exercise Your Rights

First, you may wish to log into your account and manage your data from there. If you are a California resident to whom the CCPA applies, you may exercise your rights, if any, to other data by contacting us at support@dipperapp.com.

Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf by contacting us at support@dipperapp.com. For requests by an authorized agent, we may require you to directly verify your identity with us, and confirm with us that you provided the authorized agent permission to submit the request.

Canada

By clicking "accept", you consent to the cross-border transfer of your information to any country where we have databases or affiliates.

Our designated data protection officer can be contacted at support@dipperapp.com.

Your Rights

Consent Revocation

You may revoke consent that you have previously given for the collection, use and disclosure of your Personal Information, subject to contractual or legal limitations. To revoke such consent, you may terminate your Dipper account or you can contact support@dipperapp.com. This may affect our provision of Dipper to you.

Access

You have the right to access Personal Information we hold about you, to be provided with an account of how we use it, and to whom we disclose it. You can access your Personal Information by logging into your account or making a request in writing to support@dipperapp.com. We may require further information to verify your identity, which information will only be used for that purpose.

Correction

You have the right to correct any of your Personal Information we hold that is inaccurate. You can access your Personal Information by logging into your Dipper account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact us at support@dipperapp.com.

Hong Kong SAR

If you choose not to provide your Personal Information, you may not be able to use Dipper properly.

As a Hong Kong SAR data subject you have legal rights in relation to the Personal Information we hold about you (to the extent permitted under applicable laws and regulations).

You are entitled to make a subject access request (to receive a copy of the data we process about you). You can also exercise your right to data correction as well as your right to stop to the use of your personal data for direct marketing purposes. A fee may be chargeable by us for complying with a data access request.

India

Sensitive Personal Information

"Sensitive Personal Information" means passwords, financial information (such as bank account or credit card or debit card or other payment instrument details), biometric data, data relating to physical or mental health, sex life or sexual orientation, and/or medical records or history, and similar information, but does not include information available in the public domain, or provided under Indian laws, including the Right to Information Act, 2005.

Sharing Of Your Sensitive Personal Information

In the circumstances enumerated in the Privacy Policy, where we permit any third parties to collect and use your Sensitive Personal Information, we shall (i) ensure that such third parties maintain the same security standards that are adhered to by us for the protection of your Sensitive Personal Information and (ii) take reasonable measures to ensure that the third parties do not further disclose the Sensitive Personal Information.

Correction of Your Personal Information & Withdrawal Of Consent

If you believe we hold any other Personal Information about you or your children, and that information is inaccurate, or you have queries regarding the processing, transfer or end-use of your Personal Information, please contact us at support@dipperapp.com.

You do not have the right to retrospectively retract consent or request for deletion of records required for statutory purposes but can withdraw consent to any further processing of your or your children's Personal Information.

Security Measures of Your Personal Information

In accordance with applicable data privacy laws and regulations in India, we shall take appropriate, reasonable technical and organisational measures to prevent the loss of, damage to or unauthorised access to or processing of your Sensitive Personal Information.

Age Restrictions

Parental consent is required for children under the age of 18 years who wish to use our services. Where the users are children, their parents understand and acknowledge that our collection, storage and processing of Personal Information shared with us, shall be used for the lawful purposes set out in the Privacy Policy and is considered necessary for us to provide the services.

Indonesia

Consent

By accepting and consenting to the Privacy Policy, you agree that we may collect, use and share your Personal Information in accordance with the Privacy Policy, as revised from time to time. If you do not agree to the Privacy Policy, you must not access or use our services and we have the right not to provide you with access to Dipper.

Accuracy of Information

You are responsible for ensuring that any Personal Information which you provide to us is accurate and up-to-date. In order to confirm the accuracy of the information, we may also verify the information you provided to us, at any time.

Parental and Guardian Consent

If you are under the age of 21, you undertake that you have the consent of your parent or legal guardian to register an account on and use Dipper.

Data Subject Rights

You have the right to access, update, correct and request erasure of Personal Information stored on Dipper from time to time in accordance with applicable data privacy laws and regulations in Indonesia.

Data Breach

In the event we fail to maintain the confidentiality of your Personal Information, we will notify you through the contact information provided by you or via Dipper, to the extent required by local laws and regulations.

Data Retention

We will retain your personal information in line with legal requirements.

Notification to Amendment of the Privacy Policy

In the event we amend this policy, we will post the updated Privacy Policy at this link and notify you via Dipper or other means before the change becomes effective.

Data Accuracy and Third Party Consent

You are responsible for making sure that any personal details which you provide to us are accurate and current. In order to confirm the accuracy of the information, we may also verify the information provided to us, at any time. You hereby represent that you have secured all necessary consent(s) before providing us with any other person's Personal Information (for example, for referral promotions, if applicable), in which case we will always assume that you have already obtained prior consent, and as such, you will be responsible for any claims whatsoever from any party arising as a result of the absence of such consent(s).

Japan

Consent

By clicking "accept", you consent to the cross-border transfer of your information to any country where we have databases or affiliates or where our service providers are located.

Your Rights

You may request that we notify you about the purposes of use of, the disclosure of, any correction to, the discontinuation of the use of or provision of, and/or the deletion of any and all of your Personal Information which is stored by us, to the extent provided for by the Act on the Protection of Personal Information of Japan. If you wish to make such a request, please contact us at support@dipperapp.com.

Kingdom of Saudi Arabia

You consent to the collection, use, disclosure, export and storage of your Personal Information as described in the Privacy Policy including (without limitation) for the purposes of showing you personalised advertising when you use the services.

Macau SAR

You have the right not to provide your Personal Information. However, as a result, we may not be able to provide Dipper to you. As a Macau SAR data subject you have legal rights in relation to your Personal Information (to the extent permitted under applicable laws and regulations). You are entitled to make a subject access request to request a copy of the data we process about you, to make a data correction request, and have the right to oppose the use of your Personal Information for marketing or any other form of commercial prospecting, or on any grounds of personal nature. A fee may be chargeable by us for complying with a data access request.

Malaysia

Parental and Guardian Consent

In the event you are agreeing to the Privacy Policy in order for a minor (a person under the age of 18) to access and use Dipper, you hereby consent to the provision of Personal Information of the minor to be processed in accordance with the Privacy Policy and you personally accept and agree to be bound by the terms in the Privacy Policy. Further, you hereby agree to take responsibility for the actions of such minor, and that minor's compliance with the Privacy Policy.

How We Store and Share Your Personal Information

In relation to users in Malaysia, our servers are located in Singapore and Hong Kong SAR and you consent to the transfer of your data outside of your country.

Rights of Data Subjects

Right of access: You have the right to request access to and obtain a copy of the Personal Information that we have collected and is being processed by or on behalf of us. We reserve the right to impose a fee for providing access to your Personal Information in the amounts permitted by law.

When handling a data access request, we are permitted to request certain information in order to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data access request.

We will comply with data access requests within the time periods as stipulated under Malaysian data protection laws.

Right of correction: You may request for the correction of your Personal Information. When handling a data correction request, we are permitted to request certain information in order to verify the identity of the requester to ensure that he/she is the person legally entitled to make the data correction request.

Right to limit processing of your Personal Information: You may request limiting the processing of your Personal Information by using the contact details provided in the Privacy Policy. However this may affect our provision of Dipper to you.

Contact

To protect your Personal Information and handle complaints relating to your Personal Information, we have appointed a data protection officer, responsible for the management and safety of your Personal Information, who can be contacted at support@dipperapp.com.

Mexico

Purposes of processing

Certain of the purposes for processing stated in the Privacy Policy are voluntary, including:

  • to show you personalised advertising;
  • to allow you to disclose your location to a Mini Program, or find Mini Programs Nearby; and
  • to allow you to disclose your general location to the People Nearby and Shake functions for a limited period of time and you can choose to clear such location data at any time.

Data transfer consent

We require your consent to carry out the following transfers of data, which are detailed in the section "Who Do We Share Your Data With" in the Privacy Policy:

  • Official Accounts and Mini Program operators
  • A third party that acquires all or substantially all of us or our business.

By using Dipper and providing us with your personal data, you agree to the data transfers detailed above that require your consent.

Age restrictions

You won't be able to use Dipper unless you are 18 years old or you have obtained parental/guardian agreement to the Privacy Policy (both for themselves and on your behalf).

Your rights

The sub-sections entitled "Access & Correction", "Erasure", "Objection", "Restriction of Processing to Storage Only", which includes the limitation to the use and disclosure of your personal data, and "Advertising" included in the section "How Can I Exercise My Rights Over My Data?" in the Privacy Policy also apply to users that are located in Mexico.

You also have the right to revoke the consent that you have provided us to process your personal data.

To exercise any of your rights, contact us at support@dipperapp.com.

To know more about your rights, as well as the applicable means, procedures and requirements to exercise any of your rights, please contact us at support@dipperapp.com.

Philippines

Minimum Age

You must be at least 18 years of age to be able to use Dipper.

Your Rights

You are entitled to the following rights:

  • Right to be informed. You may in certain circumstances have the right to be informed whether personal data pertaining to is being, or has been processed, including the existence of automated decision-making and profiling.
  • Right to object. You may in certain circumstances have the right to object to the processing of your personal information, including processing for direct marketing, automated processing or profiling.
  • Right to access. You may in certain circumstances have the right to seek reasonable access to, upon request, your personal information.
  • Right to rectification. You may in certain circumstances have the right to dispute an inaccuracy or error in your personal information and have us correct it, unless the request is vexatious or otherwise unreasonable.
  • Right to erasure or blocking. You may in certain circumstances have the right to suspend, withdraw or seek the blocking, removal or destruction of your personal information.

Consent

By consenting to this Privacy Policy, you consent to us:

  • collecting and processing your personal information as described in the section "How We Use Your Personal Information" in the Privacy Policy;
  • sharing your personal information with third parties, companies within our corporate group, and a third party that acquires substantially all or substantially all of us or our business, as described in this Privacy Policy and for the purposes stated herein; and
  • transferring or storing your personal information in destinations outside the Philippines as described in the sections "Who Do We Share Your Data With?" and "Where Do We Process Your Data?" in the Privacy Policy.

Russia

If you are using Dipper from Russia:

·       You confirm that you are at least 18 years old.

·       You consent (for the purposes of the Russian Federal Law No. 152-FZ dated 27 July 2006 "On Personal Data" (as amended) or any replacement regulations) to the processing in accordance herewith of your information. In particular, if legitimate interests, optimisation of the service, carrying out of the contract or any other purposes are mentioned herein, you agree that, for the purposes of Russian law, the consent so provided can be considered an additional ground for processing (meaning that the processing is conducted with your consent). You also consent to the cross-border transfer of your information to any country where we have databases or affiliates or where our service providers are located and, in particular Singapore and Hong Kong SAR.

·       When you consent to (i.e. unless you opt-out from) the use of personalised advertising, such consent is granted for the purposes of the Russian Federation Law No. 38-FZ dated 13 March 2006 "On Advertising" (as amended) or any replacement regulations. This consent covers the relevant processing actions (including cross-border transfer) with respect to only certain types of your data as specified herein. For the purposes of personalised advertising, we may transfer (including by way of cross-border transfer) your data to our affiliates or service providers (as specified herein).

·       We will not implement any material changes hereto, unless we have notified you.

·       You can contact us at support@dipperapp.com. Please include the word "Russia" in the subject line of your email.

Singapore

By clicking "accept", you consent to the collection, use and disclosure of your Personal Information, for the purposes set out in the section "How do we use your information" in the Privacy Policy, and which we will process as an "organisation" as defined under the Personal Data Protection Act 2012.

Our designated data protection officer for the purposes of compliance with the Personal Data Protection Act 2012 can be contacted at support@dipperapp.com.

Access

You have the right to access your Personal Information, how we use it, and who we share it with. You can access the Personal Information you have made available as part of your account by logging into your account. If you believe we hold any other Personal Information about you, please contact us at support@dipperapp.com.

Correction

You have the right to correct any of your Personal Information that is inaccurate. You can access the Personal Information we hold about you by logging into your account. If you believe we hold any other Personal Information about you and that information is inaccurate, please contact support@dipperapp.com.

South Korea

Children under the age of 14 must not use Dipper for any purpose without first obtaining parental/guardian consent to the Privacy Policy (both for the parent/guardian themself and on their child's behalf). We do not knowingly collect Personal Information from any children under the age of 14 without such consent. Please contact our Data Protection Officer if you believe we have any Personal Information from any children under the age of 14 without such parental/guardian consent – we will promptly investigate (and remove) such Personal Information.

The Personal Information we provide to third parties located outside of Korea for the Dipper service is as follows:

Identity of the recipient and Contact information of Chief Privacy Officer

Location of the recipient (or as otherwise stated in the recipient's privacy policy)

Purposes of use of Personal Information by the recipient

Items of Personal Information to be provided

Date and method of transfer

Period of retention and use of Personal Information by the recipient

Operators of third party services that allow log in via Dipper
Please refer to the privacy policy of the relevant third party service for contact information.

Where the servers of the third party services are located

Access to third party services in accordance with your request.

User alias

Profile photo

Gender

Region

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Adyen N.V.
dpo@adyen.com

The Netherlands

Verifying payment card information in relation to parental/guardian consent

Payment card information

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Foursquare Labs, Inc.
privacy@foursquare.com

USA

Location-based services

Location Data

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Google Asia Pacific Pte. Ltd.
http://policies.google.com/privacy

USA

Translation service

Text to be translated

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Microsoft Operations Pte Ltd.
https://privacy.microsoft.com

USA

Translation service

Text to be translated

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Meta Platforms, Inc.
https://www.facebook.com/policy.php/

USA

Sharing of Your Moments posts in accordance with your request

Your Moments post to be shared

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Twitter, Inc.
https://twitter.com/en/privacy

USA

Sharing of Your Moments posts in accordance with your request

Your Moments post to be shared

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Beijing NetEase Youdao Computer System Co., Ltd.
Privacy@service.netease.com

Chinese Mainland

Translation service (no Korean language supported)

Text to be translated

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

Tencent Technology (Shenzhen) Co., Ltd.
dataprivacy@tencent.com

Chinese Mainland

Translation service

Text to be translated

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

PTW (Singapore) Pte. Ltd.
dataprivacy@ptw.com

Singapore and Malaysia

Customer support services

Information as may be necessary to handle your customer support queries

Transmitted from time to time

Retained for such time as stated in the privacy policy of the relevant third party service.

The mandatory retention periods for Personal Information required by law in Korea is as follows:

Items

Relevant Statute

Retention Period

Records related to entering into and withdrawing from a contract

Act on the Consumer Protection in Electronic Commerce

5 years

Records related to payment and other supplies of money

Act on the Consumer Protection in Electronic Commerce

5 years

Records related to consumer complaints and dispute settlement

Act on the Consumer Protection in Electronic Commerce

3 years

Records related to labelling/advertisement

Act on the Consumer Protection in Electronic Commerce

6 months

Service visit logs

Protection of Communications Secrets Act

3 months

Telecommunication logs

Protection of Communications Secrets Act

12 months

The destruction procedure of Personal Information is as follows:

·       Destruction procedure : Personal Information that needs to be destroyed is destroyed in accordance with our data deletion and retention protocols under the supervision of our Data Protection Officer.

·       Destruction method : We destroy Personal Information recorded and saved in electronic format via methods such as Low Level Format so as to disable the reproduction thereof; and Personal Information recorded and saved in hardcopy via grinder or incineration.

 

Sri Lanka

By clicking "accept", you consent to the terms and conditions of the Privacy Policy and permit the collection, use and disclosure of your Personal Information. However, if you are under the age of 18, you undertake that you have the consent of your parent or legal guardian to register an account on and use Dipper.

Where you request to withdraw consent or, refrain from further processing of data or, erase or, rectify or, complete your Personal Information, we will provide you with our response to the request within 21 working days.

Personalised Marketing

By clicking "accept", you hereby consent to being shown personalised advertisements. You may choose to stop receiving personalised advertising from us by following the opt out instructions included in the Settings section of Dipper or by contacting us at support@dipperapp.com.

Taiwan (China)

We do not knowingly collect or solicit Personal Information from anyone under the age of 7 or knowingly allow such persons to register with Dipper. If you are under 7, please do not attempt to use or register for Dipper or send any Personal Information about yourself to us. No one under the age of 7 may provide any Personal Information to us while using Dipper. In the case of users located in Taiwan, persons under the age of 20 are required to obtain parental/guardian consent prior to using Dipper.

We will first obtain your consent prior to transfer of your Personal Information for the purpose of providing you with personalised advertising.

You may exercise the following rights as set forth in Article 3 of the Personal Data Protection Act: (1) access your Personal Information to check and review it; (2) have a copy of your Personal Information; (3) supplement or correct your Personal Information; (4) demand that we cease the collection, processing, or use of your Personal Information; and (5) demand that we delete your Personal Information. To the extent permitted by law, there may be limitations on our ability to comply with your request.

Thailand

By clicking "accept", you acknowledge that you have read, understood, and agree to the Privacy Policy. If you do not agree with the Privacy Policy, you must not use Dipper.

You may withdraw your consent to the processing of your Personal Information. You may request us to provide access to, make any correction to, discontinue, restrict the use or provision of, erase any and all of your Personal Information and/or to provide you or transfer to third party such information which is stored by us in a machine readable format as well as file a complaint to a relevant authority, to the extent provided by applicable data privacy laws and regulations in Thailand, including the Thai Personal Data Protection Act. Where you wish to make such requests, please contact us atsupport@dipperapp.com.

If you are under the age of 20, you undertake that your parental consent is obtained for account registration and your use of Dipper.

United Arab Emirates

You consent to the collection, use, disclosure, export and storage of your Personal Information as described in the Privacy Policy including (without limitation) for the purposes of showing you personalised advertising when you use the services.

We may voluntarily report a cyber-security incident where it constitutes a crime under UAE law (e.g. under the UAE Cybercrime Law). The incident can be reported to the relevant authorities for the purpose of investigations. Please note also that voluntary reporting of a cyber-security incident can also be made to the UAE Computer Emergency Response Team ("CERT"). CERT is a security awareness organisation that provides a process for logging incidents and advising on known cyber security threats in the UAE.

Children

In the case of users located in the United Arab Emirates, the minimum age to be able to legally agree to commercial transactions is 21 (under the Hijri calendar). However, a minor, who is between the ages of 18 and 21 may obtain a court order giving him/her permission to engage in specific commercial transactions. In addition, a minor who is above the age of 7 years old may engage in commercial transactions subject to their guardian's approval.

Vietnam

By accepting the Privacy Policy, you expressly agree and authorize us to collect, use, store, and process your Personal Information, including, lawfully disclosing and transferring it to third parties, as described in the Privacy Policy.

We maintain international standards and security practices for data protection. When your Personal Information is transferred within or outside your jurisdiction of residence, it will be subject to the same or higher levels of security practices and data protection by the recipient entity as adhered to by us.

Where we permit any third parties to collect and use your Personal Information, we shall take reasonable measures to ensure that the third parties do not further disclose the Personal Information.

Your Personal Information, if required to be disclosed to the competent law enforcement agencies, public authorities or other judicial bodies and organisations, will be disclosed upon receipt of written request from such organisations.

Where required by the law and regulatory requirements of your jurisdiction from time to time, we may retain all or part of your Personal Information for a period longer than described in the Privacy Policy.

You have the right to access, correct, and erase the Personal Information we hold about you. You also have the right to withdraw your consent to collect, store, process, use and disclose your Personal Information and to request us to stop processing or providing your Personal Information to a third party.