2. How information about you is collected

2.1 When you use MatchMove® Wallet or use our related services, we collect information sent to the operation system by your computer, mobile phone or other access device. The information sent to us may include data on the pages you access, your computer IP address, device identifiers, the type of operating system you are using, your location, mobile network information, standard web log data and other information. MatchMove® Wallet web log and application data may include the browser type and/or mobile devices you are using and traffic to and from the application and/or MatchMove® Wallet. When you use MatchMove® Wallet or use our related services, we also collect information about your transactions and your activities.

2.2In addition, if you use MatchMove® Wallet or related services, we may collect the following types of information:

• Contact information, such as your name, address, mobile number, email and other similar information.
• Detailed personal information such as your date of birth or national ID number.

2.3We may also obtain information about you from third parties such as credit bureaus and identity verification services.

2.4 You may choose to provide us with access to certain personal information stored by third parties such as social media sites (e.g., Facebook and Twitter). The information we may receive varies by site and is controlled by that site. By associating an account managed by a third party with your MatchMove® Wallet , and authorizing us to have access to this information, you agree that we may collect, store and use this information in accordance with this Privacy Policy.

2.5 In order to help protect you from fraud and misuse of your personal information, we may collect information about your use and interaction with the MatchMove® Wallet provided by us. For example, we may evaluate your computer, mobile phone or other access devices to identify any malicious software or activity.

2.6 We may also collect additional information from or about you in other ways, such as through contact with our customer support team, results when you respond to a survey and from interactions with other websites and services offered by us.

3. How Cookies are used

3.1 When you access MatchMove® Wallet or related services, we (including companies we work with) may place small data files on your computer or other devices. These data files may be cookies, pixel tags, cache, "Flash cookies," or other local storage provided by your browser or associated applications (collectively "Cookies"). We shall use these technologies to; recognize you as a customer; customize MatchMove® Wallet related services, content, and advertising; measure promotional effectiveness; help ensure that your account security is not compromised; mitigate risk and prevent fraud; and to promote trust and safety across our services.

3.2 We use both session and persistent Cookies. Session Cookies expire and no longer have any effect when you log out of your account or close your browser or your wallet application on your mobile devices. Persistent Cookies remain on your browser or application until you erase them or they expire.

3.3 We encode our Cookies so that we can interpret the information stored in them. You are free to decline those Cookies if your browser or browser add-on permits, but doing so may interfere with your use of the Cards website and our related services. Refer to the help section of your browser, browser extensions, or installed applications for instructions on blocking, deleting, or disabling Cookies.

3.4 You may encounter myWallet application or MatchMove® Wallet cookies or pixel tags on websites or mobile devices that we do not control. For example, if you view a web page/link created by a third party or use an application developed by a third party, there may be a cookie or pixel tag placed by the web page or application. Likewise, these third parties may place their own cookies or pixel tags that are not subject to our control and this Privacy Policy does not cover their use.

4. How personal information is protected and stored

4.1 Throughout this policy, we use the term "personal information" to describe information that can be associated with a specific person and can be used to identify that person. We do not consider personal information to include information that has been made anonymous so that it does not identify a specific user.

4.2 We store and process your personal information on our servers in Asia, Europe and elsewhere in the world where our facilities are located. We shall protect your information using physical, technical, and administrative security measures to reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. Some of the safeguards are firewalls and data encryption, physical access controls to data centers, and information access authorization controls. These are assured via compliance and certification to industry and regulatory standards by internal audit and via independent third parties.

5. How the collected personal information is used

5.1The primary purpose in collecting personal information is to provide you with a secure, smooth, efficient, and customized experience. Your personal information may be used to:

• provide MatchMove® Wallet and related services and customer support;
• process transactions and send notices about your transactions;
• resolve disputes, collect fees, and troubleshoot problems;
• prevent potentially prohibited or illegal activities, and enforce the Terms and Conditions;
• customize, measure, and improve MatchMove® Wallet and related services and the content, layout, and operation of our websites and applications;
• deliver targeted marketing, service update notices, and promotional offers based on your communication preferences;
• contact you at any telephone number, by placing a voice call or through text (SMS) or email messaging, as authorized by the MatchMove® Wallet Terms and Conditions;
• compare information for accuracy and verify it with third parties.

6. Marketing

6.1 We shall not sell or rent your personal information to third parties for their marketing purposes without your explicit consent. We may combine your information with information we collect from other companies and use it to improve and personalize MatchMove® Wallet and related services, content, and advertising.

6.2We may call or send a text message (SMS) to you at a mobile phone number that you have provided.

6.3 If you do not wish to receive marketing communications or participate in ad-customization programs, simply indicate your preference by following the directions that may be provided within the communication or advertisement.

7. How personal information is shared with other MatchMove® Wallet, Cards users

7.1 To process your payments or other transactions, we may share some of your personal information, including your contact information, date of sign-up, and the number of transactions you have conducted, with the person or company that you are conducting transactions with. In addition, this and other information may also be shared with third parties when you use these third parties to access and use MatchMove® Wallet and related services. Unless you have agreed to it, these third parties are not allowed to use this information for any purpose other than to enable Cards and related services.

7.2 If you are buying goods or services and pay through MatchMove® Wallet we may also provide the Merchant with your shipping and billing address to help complete your transaction. The Merchant is not allowed to use this information to market its services to you unless you have agreed to it. If an attempt to pay your Merchant fails, or is later invalidated, we may also provide your Merchant with details of the unsuccessful transactions.

8. How personal information is shared with other parties

8.1We may share your personal information with:

• Our subsidiaries and affiliates " to provide joint content, products, and services (like registration, transactions and customer support), to help detect and prevent potentially illegal acts and violations of policies, and to guide decisions about products, services, and communications. Our subsidiaries and affiliates shall use this information to send you marketing communications only if you have requested their services.
• Service providers under contract who help with our business operations such as fraud prevention, bill collection, marketing, and technology services. These contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own benefit.
• Financial institutions that we partner with to jointly create and offer a product. These financial institutions may only use this information to market Cards-related products unless you have given consent for other uses.
• Credit bureaus and collection agencies to report account information, as permitted by law.
• Companies that we plan to merge with or be acquired by. (Should such a combination occur, we shall require that the new combined entity follow this privacy policy with respect to your personal information. If your personal information could be used contrary to this policy, you will receive prior notice).
• Law enforcement, government officials, or other third parties pursuant to a subpoena, court order, or other legal processes or requirements applicable to us or one of our affiliates; when we need to do so to comply with any law and/or rules; or when we believe, at our sole discretion, that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity or to investigate violations of the Terms and Conditions.
• Other third parties with your consent or direction to do so.

8.2 We shall not sell or rent any of your personal information to third parties for their marketing purposes and only share your personal information with third parties as described in this Privacy Policy.

9. How you can access or change your personal information

You can review and edit your personal information at any time by logging into your account and reviewing your account settings and profile or by calling Customer Service number provided on our website from time to time. You can also close your account by calling Customer Service. If you close your Cards and MatchMove® Wallet, we shall mark your account in our database as "Closed" but may retain personal information from your account as required by laws and/or to collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, prevent fraud, enforce the Terms and Conditions, or take other actions as required or permitted by law.

For wallet registration or transactions within the EU, data subjects have the following rights:

• to request access to your information and information related to our use and processing of your information;
• to request the correction of your information (we may seek to verify the accuracy of the personal information before rectifying it);
• in certain situations to ask us to erase, block or restrict the personal information we hold about you, or object to particular ways in which we are using your personal information; and
• in certain situations, you can also ask us to send the personal information you have given us to a third party.
• to ask to obtain a copy of, or reference to, the safeguards under which your personal information is transferred outside of the EU.
• to withdraw your consent to our use of your information at any time where we rely on your consent to use or process that information. This will not affect the lawfulness of our processing of your data prior to your withdrawal;
• to object to the processing of your information for certain purposes, namely:
  • to us using or processing your information where we use or process it in order to carry out a task in the public interest or for our legitimate interests;
  • to object to us using or processing your information for direct marketing purposes. You may also exercise your right to object to us using or processing your information for direct marketing purposes by clicking the unsubscribe link contained at the bottom of any marketing email we send to you and updating your preferences, or as a subscriber by visiting the preference centre on our website and changing your preferences.

10. Security Guidelines

10.1 Your role in safeguarding your Personal Data and Account Information
You are responsible for keeping your account information and password confidential. Failure to do so exposes you to the risks of fraud and loss. MatchMove will not be responsible for losses suffered by customers as a result of:

• Input errors or misuse of Cards and MatchMove® Wallet"s services;
• Negligent handling or sharing of your Password;
• Leaving a computer or mobile device unattended during an online session.
• Failure to immediately report known incidents of unauthorized account access.

10.2We strongly recommend that you observe the following best privacy and security practices at all times:

• Managing your Personal Data and Account Information and Password
• Your Personal Data and Account Information and Password identify you when you use our services. If any of these become invalid or ceases to be effective, it is imperative that you inform us by calling the Customer Service number for the respective services.
• Ensure that no one can see your Password when you log into our system.
• Ensure that you keep your Password confidential at all times and do not divulge it to anyone.
• Do not allow anyone (without exception) to use your Personal Data and Account Information and Password, as you are responsible for all transactions undertaken with your Personal Data and Account Information and Password.
• Do not base your password on your Personal Data and Account Information such as your telephone number, birth date or the like.
• Memorize your Password and do not record it anywhere.
• Change your Password regularly.
• Do not use the same character more than twice for your Password.
• Do not recycle your recently used Password.
• Change your Password IMMEDIATELY if you suspect that someone knows it.
• The same Password should not be used for different websites, applications or services particularly when they relate to different entities.
• Do not select the option on your browser for storing or retaining user name and Password.

10.3Take precautions against your security code keystrokes being captured

Exercise the necessary precautions to protect your personal computer against viruses and other malicious programs. Aside from damaging and/or destroying data, viruses and malicious programs can capture your Password keystrokes and other personal information and send them to another person without your consent. Precautions that you can take include the following:

• Ensure that you install an effective personal firewall as well as anti-virus, anti-spyware and anti-Trojan-horse software. These should be updated regularly.
• Do not download any software from a website that is of doubtful origin.
• Do not open any email or attachment that is from a source unknown to you. When in doubt, delete such email without opening it.

10.4Inform us immediately of suspected invasion of your privacy or of unauthorized transactions.

If you suspect that your privacy has been invaded or that your account(s) has/have been accessed by unauthorized persons, please change your Password immediately and contact us by calling Customer Service. Check your transaction records to see if any transaction has been performed without your authorization. Should there be any unauthorized or unusual transactions, please notify us immediately. c. You should check your transaction records regularly and notify us promptly of any errors. At the minimum, you should check your transaction records at least once at the beginning of each month.

Effective date: 25 May 2018
Last updated: 5 Nov 2020