PRIVACY POLICY OF ALIENS VS ZOMBIES: INVASION

(Version dated by the October 16, 2026)

1. WHY DO WE HAVE THIS POLICY?

This Privacy Policy is a set of commitments that GAMEGEARS LTD promises to follow when collecting, processing, and protecting your personal data. Your privacy is our highest priority, and we are committed to safeguarding your personal information in accordance with applicable laws and security best practices. This Policy explains:

What data we process;
With whom we may share your data;
The purposes of data processing;
How long we retain your data;
How we protect your data; and
How you can control your data.

We strive to comply with international data protection regulations, including the GDPR (European Union), LGPD (Brazil), and PIPA (Korea). Where local laws grant you specific rights, these are outlined in Section 8 (How Can You Control Your Data?) and Section 11 (California Privacy Rights), along with additional regional notices.

2. WHO ARE WE?

GAMEGEARS LTD is an international game development company dedicated to providing engaging and secure gaming experiences. This Privacy Policy explains how we collect, use, and protect your personal data as you play Aliens vs Zombies: Invasion.

If you are not an adult, please obtain permission from your legal guardian before using the Game. For any questions or concerns, please contact us via the "Help and Support" section in the Game or by email at: Email: support@gamegears.online

If, under applicable law (e.g., GDPR), we are required to appoint a Data Protection Officer (DPO) or a similar representative (e.g., "Encarregado" under LGPD), we will publish the relevant contact information in this Policy.

Data Controller

For the purposes of the GDPR and other applicable data protection laws, the Data Controller is:

GAMEGEARS LTD
3101, Cyprus, Limassol, 55 Griva Digeni
Email: support@gamegears.online

3. WHAT DATA DO WE COLLECT AND WHY?

We consider any information that can identify you as personal data. We collect various types of data to provide you with a full gaming experience and to continually improve our services. In order to clearly explain the data we process, please refer to the table below.

Data Processing Overview

Data Processing Purpose	Legal Basis	Data Categories	Retention Period	Additional Information
Account Creation & Management	Contract	Account information (username, display name, email address, account ID, account creation date)	For the duration of the account; typically removed or anonymized within 30 days after deletion request	Essential for accessing and using the Game.
User Verification & Security	Legitimate Interest	IP address, unique device IDs (device ID, advertising ID, Android ID, etc.), broad location data (e.g., country code)	For the duration of account activity or until a valid objection requires us to stop processing, subject to applicable retention obligations	Used for anti-cheat measures, fraud prevention, and protecting user accounts.
In-Game Transactions	Contract	Transaction details (amount, currency, date/time, voucher codes, order IDs)	Retained for up to 7 years (or as required by tax and legal obligations)	Payment data (e.g., credit card numbers) is processed directly by the app store or payment provider and is not stored by us.
Marketing & Communications	Consent	Email address and other contact details (if provided)	As long as you consent; until consent is withdrawn	Used for sending newsletters, updates and promotional communications. Necessary security and service messages are handled separately on the applicable legal basis.
Advertising & Analytics	Consent / Legitimate Interest	Advertising identifiers (e.g., IDFA/GAID), usage logs, device information, crash logs, and performance metrics	For as long as necessary for the stated purpose and subject to your applicable withdrawal or objection rights; irreversibly anonymized data may be kept longer	Data may be shared with third-party advertising networks or analytics providers (with your consent, where applicable).
Facebook Integration (Optional)	Consent	Facebook public profile information (name, profile picture, friend list, email address)	For the duration your Facebook account remains linked; until consent is revoked	Enables account verification and social features; integration is entirely optional and can be disconnected at any time via account settings.
Customer Support	Contract / Legitimate Interest	Data you provide when contacting support (e.g., email, screenshots, device details)	For the duration of the support case or as required by applicable law	Used solely for resolving support queries and ensuring optimal customer service.
Technical & Diagnostic Data	Legitimate Interest	Crash logs, error reports, device specifications, in-game usage statistics, and diagnostic data	For the duration of account activity; irreversibly anonymized data may be retained longer	Helps us monitor, diagnose, and resolve technical issues and improve game performance.

4. FACEBOOK VERIFICATION AND INTEGRATION

Where Facebook integration is available in your version of the Game, the following terms apply to that optional feature.

How It Works

Consent and Connection: If you choose to verify your account via Facebook or enable social features (such as sharing achievements or inviting friends), you will be redirected to Facebook. There, you will be asked to grant permission for our Game to access specific data from your Facebook account.

Data Received from Facebook: With your consent, we may receive the following information from Facebook:

Your public profile (name, profile picture, friend list)
Your email address
Any additional information you permit Facebook to share

Purpose of Facebook Data Processing: The data obtained is used solely to:

Verify your identity and facilitate login via Facebook
Enable social features within the Game
Enhance your overall gaming experience

Voluntary Integration & Revocation: Facebook integration is entirely optional. Should you choose not to link your Facebook account, core features of the Game remain available, though certain social functionalities will not be enabled. You may revoke your consent at any time via your account settings or the Facebook interface. Once revoked, we will cease processing data obtained from Facebook for these purposes.

Compliance: All processing of Facebook data is conducted in accordance with this Privacy Policy and Facebook's own policies.

5. LEGAL BASES FOR DATA PROCESSING

We process your personal data only when necessary for providing access to and improving the Game. Our legal bases for processing include:

Contract: For account creation, management, and processing in-game transactions.
Legitimate Interests: For security measures, fraud prevention, and the analysis of user behavior to enhance the gaming experience.
Consent: For processing data based on your explicit permissions (e.g., marketing communications, Facebook integration, targeted ads).
Legal Obligations: To comply with applicable laws such as tax reporting and consumer protection regulations.

6. HOW DO WE SHARE YOUR DATA?

We do not sell your personal data for money. Certain advertising disclosures may constitute "sharing" or a "sale" under applicable privacy laws; the relevant opt-out rights are described in Section 11. However, to provide you with our services, we may share your data under the following circumstances:

Service Providers & Partners:

Technical/Customer Support Providers: Companies that help us operate and maintain the Game.
Cloud/Hosting Services: Providers that securely store and process data on our behalf.
Analytics & Advertising Partners: Third parties that assist us in understanding usage patterns and delivering relevant ads (subject to your consent).
Software Providers: Partners offering services in accordance with our instructions and contractual obligations regarding data protection.

We maintain an up-to-date list of these third-party partners here. This list identifies the partners and, where applicable, links to their own privacy policies. We update this list whenever we add or remove a vendor to ensure transparency and compliance with applicable laws.

Affiliates & Business Transfers:

Data may be shared within our corporate group or transferred in connection with mergers, acquisitions, or asset sales, subject to confidentiality agreements.

Legal & Regulatory Requirements:

We may disclose data to comply with legal obligations, respond to lawful requests, or protect the rights, property, or safety of our users or the public.

International Transfers:

When data is transferred outside the EEA, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

If you reside in other regions (e.g., Brazil, Korea), we will also use appropriate or equivalent safeguards to ensure lawful data transfers, in line with LGPD or PIPA requirements.

7. DATA RETENTION

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. For example:

Account Data: Retained for as long as your account is active; if deletion is requested, data is generally removed or anonymized within 30 days (except where longer retention is required, e.g., 7 years for financial records).
Usage & Analytics Data: Identifiable or pseudonymized data is retained only as long as necessary for the stated purpose, subject to applicable rights. Irreversibly anonymized data may be retained longer.
Support Data: Retained for the duration of the support case or as required by law.

Once the purpose for which data is processed has been fulfilled, personal data is securely deleted.

8. HOW CAN YOU CONTROL YOUR DATA?

You have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion ("Right to be Forgotten"): Request deletion of your personal data (note that this may result in loss of access to the Game).
Restriction & Objection: Request that we limit or cease processing your data.
Withdraw Consent: Revoke consent for data processing where it is based on your permission (e.g., marketing communications, Facebook integration).

Additional rights for specific regions:

Data Portability (GDPR, some other jurisdictions): Receive your data in a structured, commonly used, and machine-readable format.
Right to Lodge a Complaint: You may file a complaint with a supervisory authority (for example, in the EU or Brazil) if you believe we have processed your data unlawfully.
Request for Suspension of Processing (Korea): Under PIPA, users may request temporary suspension of processing under certain conditions.

To exercise these rights, please contact us via the in-game "Help" section or email: Email: support@gamegears.online

We may request proportionate information to verify your identity. For GDPR requests, we respond without undue delay and within one month of receipt; a permitted extension of up to two further months will be explained within the first month. Other applicable statutory deadlines may differ.

You have all the technical capabilities to determine how the Data shall be used. We are constantly improving the data management methods available to you.

You can form a request within the Project by sending a request in the Help section or Account. You are entitled to obtain information from us on how we handle your personal data, to see copies of all personal data held by us and to request that your personal data is amended, corrected or deleted from our systems. You can also limit, restrict or object to the processing of your data.

For exercising your rights, you can:

at any time withdraw your consent where processing is based on consent, without affecting the lawfulness of earlier processing;
access to your Data received by us. You are entitled to access the Data about you received by us which means you have the right to request the provision of information about Data storage, access to Data, as well as copies of the stored Data;
require limitation of Data processing for the time required to verify the reliability of the information provided;
change the Data. You may discretionary determine the Data, which shall be associated with your Account.
object to the processing of your Data. If you believe that we have no legitimate reason for processing your Data, please contact us using email: support@gamegears.online. If we fail to satisfy your claim, you have the right to file a complaint with the local supervisory authority.
delete Data related to the Account.

The procedure for withdrawing consent to the processing and deletion of Data:

PLEASE NOTE that deleting Account Data may remove access to the Account and its progress. We delete associated personal data subject to the limited retention required by law or justified for security, fraud prevention or legal claims, as explained in Section 7. Uninstalling the Game does not itself submit a deletion request.

9. HOW DO WE PROTECT YOUR DATA?

We implement robust technical and organizational measures to safeguard your data against unauthorized access, alteration, or loss. Our security measures include:

Data Encryption: During both storage and transmission.
Access Controls: Restricting data access to authorized personnel only.
Two-Factor Authentication: For sensitive account operations.
Regular Audits & Security Assessments: To continuously identify and mitigate vulnerabilities.

We provide you with access to international Project and strive to comply with applicable local laws. Please note that our Services are provided "as is" and you should get to know with applicable laws. By continuing your use of the Project, you are warrant that your use of the Project is not contrary to the applicable law and Terms of Service.

GAMEGEARS LTD respects the confidentiality of your data and strives to ensure the highest level of protection. Despite the measures we are taking to protect your information, any measures that we apply will not have any effect if you neglect the data security.

The project implemented reliable means of protection to ensure the security of your data. We do everything possible for your safety when using the Project and are constantly improving our information protection methods. As some means of protecting information from unauthorized access, alteration, disclosure or destruction, we use the following methods:

data encryption during storage and transmission;
we carry out two-stage user authentication when requesting an action with the Data;
we improve the techniques and methods of collecting, storing and processing the Data;
access to the Data, in encrypted and impersonal form, have only authorized employees, consultants or interested groups of people who need access to this information to perform their duties;
all persons having access to the Data are briefed on working with data, their knowledge and skills are systematically being checked.

In spite of all measures taken by us, your careful attitude to the Account and access to it has a great importance in the safety of your Data. To prevent unauthorized access to your Data and Account, we strongly recommend you not to share access to the account to any third parties and to comply with the rules of the project and use of the Services. In case of your violation of the Terms of Service of the Services, we will not be able to guarantee the security of your Data.

WARNING! The following actions are prohibited by this Policy and the Terms of Service, and may also violate the confidentiality of your data:

transfer of information about the Account and (or) access rights to third parties. Please note that our official representative will never request access to your Account;
the use of unauthorized third-party programs, the use of robot programs and (or) programs that change the game process, including assistance in the game process. In addition to the fact that the use of such programs is expressly prohibited by the Terms of Service, they may contain malicious software that could harm the security of your data;
the acquisition of in-game values from third parties. By acquiring in-game values bypassing the Terms of Service, you can become a victim of fraudsters.

GAMEGEARS LTD appreciate the help of our users in identifying and addressing potential vulnerabilities, as we take the security of our systems and data extremely seriously. Please report any security vulnerabilities found in our systems or applications to us as soon as possible.

In your email, please include a detailed description of the vulnerability, including any relevant technical details that may help us understand the nature and severity of the issue. If possible, please also include steps to reproduce the vulnerability, so that we can more easily investigate and remediate the issue. We take all reports of security vulnerabilities seriously, and we will investigate each report promptly and thoroughly.

We may also contact you for additional information or clarification, so please be sure to include your contact information in your email. Thank you for helping us maintain the security of our systems and data. We greatly appreciate your contribution to our security efforts.

Please keep your account credentials secure and do not share them with others. If you suspect any security breach, contact us immediately at: Email: support@gamegears.online

10. CHILDREN'S PRIVACY

Aliens vs Zombies: Invasion is not directed to children under the age of 16. We are committed to ensuring that if children do engage with our Game, their personal data is handled responsibly and in compliance with relevant regulations.

No Knowing Collection of Children's Data

We do not knowingly collect personal information from children under the age of 16 (or any higher threshold required by applicable law) without verifiable parental consent.

If we discover that we have inadvertently collected personal data from a child without proper consent, we will promptly delete or anonymize that data.

Age Restriction & Verification

Age Gate: Where feasible, we implement checks (e.g., age prompts) to discourage children under the required age from providing personal data.

Parental/Guardian Consent: If a user is under the required age, they must obtain permission from a parent or legal guardian before accessing or using the Game's services. We may request a parent's email address or other verification information to ensure consent is valid and verifiable.

Limited Data Collection

Any data collected in connection with children's activity (e.g., for support requests or gameplay functionality) is minimized to what is strictly necessary for providing our services. We do not use such data for behavioral advertising or other purposes not permitted by law.

Parental Controls & Guidance

We encourage parents and guardians to familiarize themselves with online safety practices and monitor their children's in-game activities. Please visit our Parental Guide for tips on protecting children's privacy, managing in-app purchases, and setting controls to ensure a child-friendly experience.

Parental Rights

Parents or legal guardians may request to review, delete, or prevent further collection of their child's personal data. If you believe we have collected information from a child contrary to applicable law, contact us immediately, and we will take appropriate measures.

Contact for Children's Data Concerns

If you have concerns about the data we may hold from or about a child, or wish to withdraw consent previously given, please contact our support team:

Email: support@gamegears.online

11. CALIFORNIA PRIVACY RIGHTS

Where applicable to our processing, California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

Right to Know: Request details about the personal data we have collected about you during the period covered by applicable law.
Right to Delete: Request deletion of your personal data (subject to legal exceptions).
Right to Opt-Out: You may opt out of disclosures that constitute a sale or sharing of personal information under applicable law, including cross-context behavioral advertising.
Right to Correct: Request corrections to any inaccurate information.
Right to Non-Discrimination: You will not be treated differently for exercising your privacy rights.

To exercise these rights, please contact: Email: support@gamegears.online

12. CHANGES TO THIS POLICY

We reserve the right to modify or update this Privacy Policy at any time. Should significant changes be made, we will notify you via the Game or other appropriate channels. Where a change requires new consent, we will obtain it before the relevant processing begins. Continued use of the Game is not, by itself, consent to such processing.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, or if you wish to request previous versions of this Policy, please contact us at:

GAMEGEARS LTD
Address: 3101, Cyprus, Limassol, 55 Griva Digeni
Email: support@gamegears.online

FAITHFULLY YOURS,
GAMEGEARS LTD

This Policy is written in English. In the event of any discrepancies between translations, the English version shall prevail.