PRIVACY NOTICE FOR RAYMATIX

1. Who are we?

Mad Brand LTD processes your personal data while you use Raymatix services. If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, you can contact us by using the details provided in section 13 "How to contact us" below. If you are located in the European Economic Area or UK and you have any questions about this Privacy Notice, including any requests to exercise your rights provided by the EU Data Protection Legislations, you can contact our EU/UK Representative by using its contact details provided in section 13 "How to contact us" below.

2. What personal data do we collect about you?

Personal data is any information relating to natural persons who can be identified, directly or indirectly. We may collect, use, store and transfer the following types of personal data:

• Identity Data: First name, Last name, date of birth, gender
• Contact Details: email address, telephone number
• Location Data: Approximation of geographical information about the user's device's location
• Payment Receipts: Invoice records; payment records; billing address; payment method; payment amount; payment date; payment receipts of 3rd party service provider
• Payment details: First 6 digits of Credit card, Expiry date of Credit card. When payment is processed via 3rd party e.g. Mastercard, Visa, PayPal and others, all details are passed directly to the 3rd party.
• Consent records: records of any consents you have given, together with the date and time, means of consent and any related information.
• Marketing and Communication Data: user's preferences in relation to receiving information about our websites.
• Views and opinions: any views and opinions that you choose to send to us, or publicly post about us on social media platforms.
• Digital Data: user's social media accounts, metadata, online identifiers (e.g., internet protocol addresses, cookie identifiers) and any additional browser, device, or behavioral data collected for the purpose of fraud detection and prevention.

3. How do we collect your personal data?

• Data you have provided to us: We obtain your personal data through Raymatix website or applications or where you contact us via email or telephone, or by any other means.
• Relationship data: We collect or obtain your personal data in the ordinary course of our relationship with you.
• Data you make public: We collect or obtain your personal data that you manifestly choose to make public, including via social media.
• App data: We collect or obtain your personal data when you download or use our Apps.
• Site data: We collect or obtain your personal data when you visit our website or use any features or resources available on or through the website.
• Registration details: We collect or obtain your personal data when you use, or register to use, any of our Sites, Apps, or services.
• Content and advertising information: If you interact with any third-party content or advertising on a Site or in an App, we receive your personal data from the relevant third party provider.
• Third party information: We collect or obtain your personal data from third parties who provide it to us (e.g., credit reference agencies; law enforcement authorities; etc.).

4. Why do we collect and process your personal data?

We collect and process your Personal Data for the following purposes: When it is necessary for the performance of a contract with you: - To provide you with the services you request from us; allow you the use of online forms, surveys, and services; allow you to sign up for certain services such as newsletters or to create an account. - To allow you to share information and take full advantage of sharing features; allow you to create a publicly visible Profile. - To carry out payment transactions; store transaction history; ensure subscription payment; comply with legal or regulatory obligations. When it is necessary for the purposes of our legitimate business interests: - To maintain and improve our services; understand how you use our services; develop new services and offers. - To tailor the services to your needs and interests; provide you with tailored content; give you a better and more useful experience of our digital properties. - To communicate with you; keep record of our exchanges; send you promotional offers and direct marketing; inform you about our services. - To create and maintain a trusted and safer environment; investigating, detecting, preventing, or reporting fraud, security breaches, or illegal activities. - To detect and prevent online fraud and intrusions. When it is necessary for the protection of your vital interests or of another natural person. When it is necessary for complying with any applicable laws or regulations, or in response to lawful requests for information. When you give us your consent to process your personal data. Change of purpose of processing: We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your personal data for an unrelated purpose, we will notify you and explain the legal basis.

5. Who may we share your data with?

We shall grant access to your personal data to authorized RAYMATIX employees and members who have a need-to-know in order to process it for us, and who are subject to strict contractual confidentiality obligations. In addition, we may need to transfer or allow access to the following categories of authorized third parties:

• Suppliers and service providers we engage to process personal data or perform services on our behalf.
• Successors in title to our business — if ownership of all or substantially all of our business changes, we may need to transfer your Personal Data to the relevant third party as part of any due diligence process.
• Our media representatives.
• Legal advisers, witnesses, experts and judicial and quasi-judicial authorities; in order to protect us against harm to the rights, property or safety of Raymatix LTD, our users or the public.
• Administrative or judicial authorities; in order to meet the requirements of any applicable law, regulation, legal process or enforceable governmental request.
• Payment service providers and fraud prevention partners; with whom we share relevant data for fraud detection.

6. Where may your personal data be transferred?

RAYMATIX is part of Mad Brand Group which is a multinational group with affiliates, partners and subcontractors located in many countries around the world. Because of the international nature of our business, we transfer Personal Data within Raymatix entities, and to third parties as noted in Section 5 above. If you are located in the European Union and your personal data is transferred to a service provider for processing in any country outside the European Economic Area that is not recognized by the EU Commission as providing an adequate level of protection for personal data, we ensure that appropriate safeguards (e.g. Standard Contractual Clauses) under the applicable data protection law are provided.

7. How do we ensure the security of your personal data?

We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized forms of processing. Please note however that no data transmission over the Internet can be guaranteed to be secure from intrusion. You should also take appropriate measures to safeguard your personal data, in particular by keeping your password secure and confidential. If we know or have reason to believe that your personal data were compromised, we will immediately notify affected users of a breach if such happens in accordance with applicable laws.

8. How long do we keep your personal data?

We will only retain your personal data for the period necessary to fulfil the purposes described in this Privacy Notice. The criteria for determining the duration are as follows:

• For as long as we maintain an ongoing relationship with you; or
• For as long as your personal data is necessary in connection with the purposes set out in this Privacy Notice, for which we have a valid legal basis;
• Any applicable limitation period under applicable law.
• If any relevant legal claims are brought, we continue to process Personal Data for such additional periods as are necessary in connection with that claim.

Your personal data collected through our website and apps will be retained as long as your account is active or otherwise for as long as is necessary for the purpose for which we have initially collected it. Please note that your personal data that is no longer needed is either permanently deleted or anonymized.

9. Do we collect and process minors' personal data?

You must be 18 years of age or older to subscribe to our Services. In certain jurisdictions, the age of majority may be older than 18, in which case, you must satisfy that age in order to become a user. While individuals under the age of 18 may utilize our Services, they may do so only with the involvement, supervision, and approval of a parent or legal guardian.

10. What rights do you have?

Subject to the data protection legislation that applies to you, such as the EU GDPR, UK GDPR, Egypt's Data Protection Law or California Consumer Privacy Act (CCPA), you may have a number of data protection rights:

• Right of Access: You have the right to access your personal data and ask for a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request the correction of any incomplete or inaccurate data we hold about you.
• Right to Erasure: You have the right to ask us to delete your personal data where there is no reason to continue processing it.
• Right to Object: You have the right to object to the processing of your personal data when we are relying on a legitimate interest.
• Right to Restrict Processing: You have the right to ask us to suspend the processing of your personal data in certain cases.
• Right to Data Portability: You have the right to request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
• Right not to be subject to automated decision-making: You have the right not to be subject to a decision based solely on automated processing that produces an adverse legal effect or significantly affects you.
• Right to Withdraw Your Consent: You have the right to withdraw your consent at any time where we are relying on consent to process your personal data.
• Right to file a complaint: You have the right to lodge a complaint to a Data Protection Authority about our collection and use of your personal information.

11. How can you exercise your rights?

If you wish to exercise your rights, please contact us by using the details provided in section 13 "How to contact us" below. Please note that:

• We may need to verify your identity before we can act on your request.
• Since the exercise of these rights is subject to certain legal conditions and limitations, we may have to decline your request if those conditions are not fulfilled.
• We may reject requests that are unreasonably repetitive, require disproportionate technical effort, or create a risk on the privacy of others.
• You will not have to pay a fee to exercise any of the other rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
• In any case, we will seek to deal promptly with your request, and in any event within one month (subject to any extensions to which we are lawfully entitled).

12. How does this Privacy Notice work with third-party data processing?

Our services may be provided through and/or utilize features operated by third party platforms or contain links to sites operated by third parties whose policies regarding the handling of personal data may differ from ours. For example:

• You may be able to access our services through platforms such as gaming systems, smart TVs, mobile devices, set top boxes and other Internet connected devices. These third parties have independent privacy policies and terms of use.
• Our digital properties may contain links to other websites which are outside our control and are not covered by this Privacy Notice.

We advise you to consult such policies and terms if you want to learn more about the processing of your personal data by such third parties.

13. How to contact us?

If you have any queries, please contact us at: support@raymatix.com

14. How may this Privacy Notice be updated?

We may update this Privacy Notice from time to time in response to changing legal, regulatory or operational requirements. Any changes of this Privacy Notice will be published on this page. When these changes are material, we may provide you specific notice of any such changes in accordance with the law. Where applicable, we will ensure that you have had the possibility to accept those changes so as to allow you to continue using our services or to refuse — in which case, you will be entitled to cancel your use of our Services.