Supplemental California Consumer Privacy Act Statement

Last updated: September 23, 2025

We, MICOHO INC., issue this Supplemental California Consumer Privacy Act Statement to provide details about how we collect, use, disclose and otherwise process information that identifies, describes, or can reasonably be associated with California residents (“Personal Information”), and rights that California residents may have under the California Consumer Privacy Act (“CCPA”).

This Statement only applies to you if you reside in California, and does not reflect our processing of California residents’ Personal Information where an exception under the CCPA applies. Personal Information does not include publicly available information in government records or any data that has been deidentified, aggregated, or otherwise anonymized. This document supplements our MICOHO INC. Privacy Policy.

1. CCPA Notice at Collection

Collection: We may collect the following Personal Information about California residents:

Identifiers such as a real name, alias, postal address, unique personal identifiers, online identifiers, Internet Protocol address, email address, account name, and similar identifiers.
Commercial information, including records of personal property, products or services paid for, obtained, or considered, or other consuming histories or tendencies.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement.
Geolocation data. We may be able to infer your general location based on your Internet Protocol address.
Inferences drawn from any of the information identified herein to create a profile about a consumer reflecting the consumer's preferences.

Use: We may use Personal Information for the following purposes:

to enable us to personalize your in-game profile, provide our games (including the social elements of our games, such as team play and competitions), to ensure that the services you have paid for are activated in the games, and to provide you with player support if you need it;
to enable us to optimize our games for you and for the device that you are using, as well as to deliver customized in-game events, offers and promotions;
to manage our organization and its day-to-day operations;
to verify your identity and entitlement to products or via our website or mobile games (collectively, “Services”) when you contact us or access our Services;
to request your participation in our surveys about our organization, organizations we partner with, and the Services;
to help maintain the safety, security and integrity of our property and Services, technology assets and business;
to operate, improve and optimize our games and other Services;
to personalize our Services, understand our users and their preferences to enhance user experience and enjoyment using our Services and improve our users' experience;
to provide access to certain areas, functionalities and features of our Services, including social features and multiplayer competitions;
to communicate with you regarding Services-related information, including confirmations, technical notices, updates, security alerts and support and administrative messages;
to enable players to communicate with each other in games or on our social media accounts;
to respond to your comments and inquiries and provide customer support services;
to prevent potentially prohibited or illegal activities, including cheating or fraud and to protect our players;
to measure interest in our Services;
to ensure internal quality control;
to enable us to comply with laws that apply to us, to prevent fraud, to ensure compliance with our Terms of Service or, where necessary, to defend, exercise or establish our legal rights, including our rights under our Terms of Service;
to activate, verify and give effect to parental control settings;
to comply with contractual and legal obligations and requirements;
to provide support through our customer service channels when requested;
to conduct internal research and analytics;
to evaluate and enter into a reorganization, restructuring, merger, acquisition, or whole or partial sale or transfer of our business or assets ("Business Transaction"); and
to engage in cross-context behavioral and other marketing.

Do Not Sell or Share My Personal Information: We do not “sell” Personal Information about California residents in the sense of exchanging Personal Information for money. However, we disclose certain Personal Information about players of our mobile games (collectively, “Users”) to advertising networks and other advertising technology providers ("AdTech Providers") to provide Users with more interesting and customized information and advertising, which is considered "selling" and "sharing" under the CCPA. Such information may include online identifiers, IP addresses, information about Services of ours that they considered, Internet or other electronic network activity information, and inferences. To opt out of such “selling” and “sharing” in-game, please send email (support@micoho.com) to us.

Retention: We retain Personal Information only as necessary for the purposes for which the Personal Information is processed or for legal requirements. The length of time for which we retain Personal Information depends on the purposes for which we collect and use it and how long we need to retain it to comply with applicable laws (including for the purpose of satisfying any legal, regulatory, tax, accounting or reporting requirements), to establish, exercise or defend our legal rights, or to make the data available to judges and courts or the competent public authorities. Once the Personal Information is no longer necessary for the purposes for which we collected it, we will delete it.

Below is a copy of our CCPA Privacy Policy.

2. CCPA Privacy Policy

We have set out below the categories of Personal Information (as defined by the CCPA) that we have collected about California residents in the preceding 12 months and, for each category of Personal Information collected, the categories of sources from which that information was collected, whether we "sold" or "shared" such Personal Information (as defined by the CCPA), and to whom and for what purpose if so, and categories of third parties to whom we disclosed the Personal Information and the purposes of such disclosures. The table is followed by a description of the purposes for which we collected Personal Information. The word "consumer" here refers to a California resident.

Category of Personal Information	Did we collect? If so, from what source?	Did we sell? If so, to whom and for what purpose?	Did we share? If so, to whom and for what purpose?	Did we disclose apart from selling or sharing? If so, to whom and for what purpose?
Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, or other similar identifiers.	Yes, from California residents directly, third parties including social media platforms and networks, and automatically via cookies and other technology.	Yes, we "sold" California residents' unique personal identifiers, online identifiers, and IP addresses to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, we "shared" California residents' unique personal identifiers, online identifiers, and IP addresses to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, as described in Section 4 of our Privacy Policy.
Commercial information, including records of personal property, products or services paid for, obtained, or considered, or other consuming histories or tendencies.	Yes, from California residents directly.	Yes, we "sold" California residents' records of products or services considered to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, we "shared" California residents' records of products or services considered to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Same as above.
Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement.	Yes, from California residents directly, third parties including social media platforms and networks, and automatically via cookies and other technology.	Yes, we "sold" California residents' browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, we "shared" California residents' browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Same as above.
Geolocation data (general location based on Internet Protocol address).	Yes, from California residents directly, third parties including social media platforms and networks, and automatically via cookies and other technology.	Yes, we "sold" California residents' geolocation data to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, we "shared" California residents' geolocation data to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Same as above.
Inferences drawn from any of the information identified herein to create a profile about a consumer reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	Yes, we make inferences about California residents' interests.	Yes, we "sold" inferences about California residents' interests to AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Yes, we "shared" inferences about California residents' interests to our AdTech Providers. The purpose was so that we and they can serve Users cross-context behavioral and targeted advertising.	Same as above.

[MICOHO INC. @ 2025]