PRIVACY POLICY

1. DATA CONTROLLER AND CONTACT INFORMATION

The Service is operated by: Chimai Yanyi (Hong Kong) Limited Registration Country: China Registration Region: Hong Kong Registered Address: Unit 903A, 9/F., Cameron Commercial Centre, 458-468 Hennessy Road, Causeway Bay, Hong Kong

For privacy-related questions, requests, complaints, or concerns, please contact us at: Privacy Contact Email: aly1cwq@hysgame.com.cn

Unless otherwise required by applicable law, Chimai Yanyi (Hong Kong) Limited is responsible for the processing of personal information in connection with the Service.

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies to personal information processed through the Service, including when you access or use our TikTok Mini Drama through TikTok's platform.

The Service may operate within TikTok's products, services, software, or WebView environment.

TikTok may independently collect and process information in accordance with TikTok's own privacy policies and terms.

This Privacy Policy does not govern information collected directly by TikTok or other third parties acting independently as data controllers.

3. INFORMATION WE MAY COLLECT

Depending on how you use the Service, we may collect or receive the following categories of information.

3.1 Information Received Through TikTok

When you access the Service through TikTok, we may receive certain information made available to us through TikTok's platform and applicable APIs, subject to the permissions and technical capabilities available to the Service.

This may include:

• TikTok user or platform identifiers;
• basic profile information made available through TikTok;
• information necessary to authenticate or maintain a session;
• information relating to your interaction with the Service;
• advertising or reward-related information where technically available and permitted.

We do not intentionally request information from TikTok beyond what is reasonably necessary for the relevant Service functionality.

3.2 Information You Provide

Depending on the features you use, you may voluntarily provide:

• email address;
• customer service communications;
• feedback;
• reports or complaints;
• information contained in support requests; and
• other information you voluntarily submit to us.

3.3 Technical and Usage Information

When you use the Service, we may automatically collect certain technical and usage information, including:

• device type and model;
• operating system and version;
• application, platform, or WebView version;
• browser information;
• IP address;
• approximate location derived from IP address, where permitted;
• language and regional settings;
• network information;
• device or advertising identifiers, where permitted;
• session information;
• access times;
• pages, screens, dramas, episodes, or features viewed;
• interaction and navigation information;
• crash reports;
• diagnostic information; and
• performance information.

4. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes:

1. to provide and operate the Service;
2. to authenticate and maintain access;
3. to provide drama, video, entertainment, and related content;
4. to maintain preferences and Service settings;
5. to provide customer support;
6. to respond to inquiries and complaints;
7. to maintain and improve Service performance;
8. to identify and resolve technical problems;
9. to detect fraud, abuse, and security incidents;
10. to protect the security and integrity of the Service;
11. to analyze Service usage and performance;
12. to provide advertising and advertising-related features;
13. to provide rewarded advertising or similar features;
14. to measure advertising and Service performance;
15. to comply with applicable legal obligations;
16. to establish, exercise, or defend legal claims;
17. to enforce our Terms of Service; and
18. for other purposes disclosed to you when information is collected.

We will not use personal information for materially incompatible purposes except where permitted or required by applicable law.

5. ADVERTISING AND MONETIZATION

The Service may contain advertisements, including rewarded advertisements, interstitial advertisements, video advertisements, or other advertising formats.

Advertising functionality may be provided by third-party advertising providers or technology providers integrated into the Service or TikTok platform.

Depending on applicable law, platform permissions, and technical implementation, advertising providers may process information such as:

• advertising identifiers;
• device information;
• approximate location;
• advertising interaction information;
• technical information;
• ad impression information; and
• conversion or attribution information.

Third-party advertising providers may process information according to their own privacy policies and terms.

Where required by applicable law, we will obtain appropriate consent, provide required notices, or provide available controls relating to personalized advertising.

6. HOW WE SHARE PERSONAL INFORMATION

We may disclose personal information to the following categories of recipients where reasonably necessary and legally permitted.

6.1 Service Providers

We may use third-party providers for:

• cloud hosting;
• data storage;
• content delivery;
• analytics;
• customer support;
• security;
• technical maintenance;
• advertising;
• fraud prevention;
• payment processing, where applicable; and
• other technical or operational services.

These providers may process information on our behalf subject to applicable contractual and legal requirements.

6.2 TikTok and Platform Providers

Because the Service may operate through TikTok, information may be exchanged with or processed through TikTok's technical infrastructure as necessary for the Service to function.

TikTok may independently process personal information under its own privacy policies.

6.3 Legal and Regulatory Disclosures

We may disclose information where reasonably necessary to:

• comply with applicable laws;
• respond to lawful requests;
• comply with court orders or legal processes;
• protect our rights or property;
• protect users or the public; or
• investigate fraud, abuse, or security incidents.

6.4 Corporate Transactions

If the Company is involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

7. INTERNATIONAL DATA TRANSFERS

The Service may be available to users in multiple countries. Personal information may therefore be processed, stored, or accessed in jurisdictions other than the country where you reside.

Depending on our technical architecture and service providers, these jurisdictions may include:

• Hong Kong;
• China;
• Australia;
• Canada;
• Japan;
• South Korea;
• Singapore;
• the United States; and
• other jurisdictions where our service providers or infrastructure operate.

Actual processing locations may change as our infrastructure and service providers change.

Where applicable law requires safeguards for international transfers, we will use appropriate legally recognized mechanisms and reasonable technical or organizational safeguards.

8. DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• provide the Service;
• maintain technical and business records;
• resolve disputes;
• prevent fraud and abuse;
• enforce agreements;
• comply with legal obligations; and
• protect our legitimate interests.

When personal information is no longer reasonably required, we will delete, anonymize, or securely dispose of it where reasonably practicable and required by applicable law.

9. DATA SECURITY

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These measures may include:

• access controls;
• authentication mechanisms;
• encryption where appropriate;
• security monitoring;
• restricted administrative access;
• system protections; and
• incident management procedures.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

10. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have rights concerning your personal information, including:

• access to personal information;
• correction of inaccurate information;
• deletion of personal information;
• objection to certain processing;
• restriction of certain processing;
• withdrawal of consent where processing relies on consent;
• data portability where applicable; and
• the right to lodge a complaint with a competent privacy regulator.

These rights may be subject to applicable legal exceptions and limitations.

To exercise an applicable privacy right, contact: aly1cwq@hysgame.com.cn

We may need to verify your identity before processing certain requests.

11. HONG KONG PRIVACY

As the Company is incorporated in Hong Kong, the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") may apply to our processing of personal data.

Subject to applicable legal requirements and exemptions, individuals may have rights relating to access to and correction of their personal data.

We will handle personal data in accordance with applicable requirements relating to collection, use, retention, security, openness, access, and correction.

12. AUSTRALIAN USERS

If Australian privacy law applies to our processing of your personal information, we will comply with applicable requirements of the Australian Privacy Principles ("APPs") to the extent required by law.

Our privacy practices address matters including:

• the kinds of personal information we collect;
• how personal information is collected and held;
• the purposes for which personal information is collected, used, and disclosed;
• how individuals may request access or correction;
• how privacy complaints may be submitted; and
• whether personal information is likely to be disclosed to overseas recipients.

For Australian privacy inquiries or complaints, please contact: aly1cwq@hysgame.com.cn

You may also have the right to contact the Office of the Australian Information Commissioner or another competent regulator where applicable.

13. USERS IN OTHER JURISDICTIONS

The Service may be available in Australia, Brazil, the Philippines, South Korea, Canada, Malaysia, Mexico, Japan, Saudi Arabia, Thailand, Türkiye, New Zealand, Indonesia, and other jurisdictions.

We intend to comply with mandatory privacy and consumer protection requirements applicable to users in those jurisdictions to the extent required by law.

Where local law provides rights or protections that cannot lawfully be excluded or limited, those rights and protections will continue to apply.

14. CHILDREN'S PRIVACY

The Service is not intended for children where applicable law prohibits us from providing the Service to them.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us in circumstances where collection was not permitted, please contact: aly1cwq@hysgame.com.cn

We will take reasonable steps to investigate and, where appropriate, delete such information.

15. COOKIES AND SIMILAR TECHNOLOGIES

The Service or third-party service providers may use cookies, SDKs, local storage, pixels, or similar technologies.

These technologies may be used for:

• authentication;
• security;
• session management;
• analytics;
• performance monitoring;
• personalization;
• advertising; and
• fraud prevention.

Where required by applicable law, we will obtain consent or provide appropriate controls before using technologies that require consent.

16. THIRD-PARTY SERVICES

The Service may contain or depend upon third-party services, platforms, websites, SDKs, advertising networks, payment providers, analytics services, or content providers.

Third parties may independently process personal information under their own privacy policies.

We encourage you to review the applicable privacy policies of relevant third-party providers.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time.

When material changes are made, we may provide appropriate notice through the Service or other reasonable means.

The "Last Updated" date indicates when this Privacy Policy was most recently revised.

18. CONTACT US

For questions, privacy requests, complaints, or concerns regarding this Privacy Policy, please contact: Chimai Yanyi (Hong Kong) Limited Registered Address: Unit 903A, 9/F., Cameron Commercial Centre, 458-468 Hennessy Road, Causeway Bay, Hong Kong Privacy Email: aly1cwq@hysgame.com.cn

Last Updated: September 16, 2026