UNUNIFI PRIVACY POLICY
Last updated: [29 September 2023]
We recognise our responsibilities in relation to the collection, holding, processing, use and/or transferof personal data. Your privacy is of utmost importance to us.
This policy (this Policy) outlines how we collect, use, store and disclose your personal data. Please takea moment to read about how we collect, use and/or disclose your personal data so that you know andunderstand the purposes for which we may collect, use and/or disclose your personal data. By
accessing the website at https://ununifi.io/ and any sub-domains (the Website), you agree andconsent to UnUniFi S.A. (the Company), its related corporations, business units and affiliates, as wellas their respective representatives and/or agents (collectively referred to herein as we, us or our),collecting, using, disclosing and sharing amongst themselves the personal data, and to disclosing such
personal data to relevant third party providers. This Policy supplements but does not supersede nor
replace any other consent which you may have previously provided to us nor does it affect any rightsthat we may have at law in connection with the collection, use and/or disclosure of your personal data.
We may from time to time update this Policy to ensure that this Policy is consistent with our future
developments, industry trends and/or any changes in legal or regulatory requirements. Subject to yourrights at law, the prevailing terms of this Policy shall apply. For the avoidance of doubt, this Policy
forms part of the terms and conditions governing your relationship with us and should be read in
conjunction with such terms and conditions.
The security of your personal data is important to us. At each stage of data collection, use anddisclosure, we have in place physical, electronic, administrative and procedural safeguards to protect
the personal data stored with us. However, do note that no transmission of personal data over theinternet can be guaranteed to be 100% secure – accordingly and despite our efforts, we cannot
guarantee or warrant the security of any information you transmit to us, or to or from our online
services. We shall not have any responsibility or liability for the security of information transmitted
via the internet.
This Policy describes how we may collect, use, disclose, process and manage your personal data, andapplies to any individual’s personal data which is in our possession or under our control.
1.

What personal data is collected by us"Personal data" means data, whether true or not, about an individual who can be identified (i) fromthat data, or (ii) from that data and other information to which the organisation has or is likely to haveaccess. Some examples of personal data that we may collect are:
(a)
(b)
(c)
(d)

(e)

personal particulars (e.g. legal name, alias(es), gender, telephone number, residential address,
date of birth, or identity card/passport details);
e-mail address, account username, account password, social media or messaging platform
handles and other social media or messaging platform profile information;
information or details regarding digital assets held;
particulars of digital wallet addresses (including transactions performed by said digital walletaddresses), public cryptographic key relating to digital wallet addresses on distributed ledger
networks and/or similar information;
information about your use of our services and Website, and specific user interactions with
the Website such as features utilised, areas visited or clicked on, and time spent;

(f)

(g)

(h)
(i)

usernames and password, third party account credentials (such as your Facebook login
credentials, Google login credentials), Internet Protocol (IP) address, and geographicallocation;browser type and version, operating system used by the accessing system, internet service
provider of the accessing system, the website from which an accessing system reaches our
website (i.e. "referrers"), mobile device ID, location of access, or other similar data andinformation;
behaviour such as pages (and sub-page) visited, time and date of your visit, time spent oneach page, and other diagnostic data; and/or
personal opinions made known to us (e.g. feedback or responses to surveys).

Personal data will be automatically collected when you interact with our services, access the Website,
interact with other users of our services, sign up for any beta/testing services, open an email from us
or fill in any form or survey, register a user account or update a user account that you registered withus, engage with us (whether through live chat, message, phone call, email, social media accounts,
messaging platforms, attendance at in-person events, opting-in to receive our marketing messages,
or subscribing to our mailing lists), or make a purchase from us.
To the extent permitted by law, we may also obtain other information about you such as contact
information, change of address or demographic information from commercially available sources.
2.

Personal data and the Blockchain

Blockchain technology, also known as distributed ledger technology (DLT), is at the core of ourbusiness. Blockchains are decentralised and made up of digitally recorded data in a chain of packages
called "blocks". The manner in which these blocks are linked is chronological, meaning that the data
is very difficult to alter once recorded. Since the ledger may be distributed all over the world (acrossseveral "nodes" which usually replicate the ledger) this means there is no single person making
decisions or otherwise administering the system (such as an operator of a cloud computing system),and that there is no centralised place where it is located either.
Accordingly, by design, a blockchain’s data cannot be changed or deleted and is said to be "immutable".
This may affect your ability to exercise your rights such as your right to erasure ("right to be forgotten"),or your rights to object or restrict processing of your personal data. Data on the blockchain cannot be
erased and cannot be changed. Although smart contracts may be used to revoke certain access rights,
and some content may be made invisible to others, it is not deleted.
In certain circumstances, in order to comply with our contractual obligations to you (such as delivery
of tokens or provision of other services) it will be necessary to collect certain personal data, such as
your wallet address, onto the blockchain; this is done through a smart contract and requires you to
execute such transactions using your wallet’s private key.
The ultimate decisions to (a) transact on the blockchain using your wallet address, as well as (b) share
the public key relating to your wallet address with anyone (including us) rests with you. IF YOU WANTTO ENSURE YOUR PRIVACY RIGHTS ARE NOT AFFECTED IN ANY WAY, YOU SHOULD NOT TRANSACTON BLOCKCHAINS AS CERTAIN RIGHTS MAY NOT BE FULLY AVAILABLE OR EXERCISABLE BY YOU ORUS DUE TO THE TECHNOLOGICAL INFRASTRUCTURE OF THE BLOCKCHAIN. IN PARTICULAR THE
BLOCKCHAIN IS AVAILABLE TO THE PUBLIC AND ANY PERSONAL DATA SHARED ON THE BLOCKCHAIN
WILL BECOME PUBLICLY AVAILABLE.

Specifically, information regarding your digital wallet addresses (including transactions performed bysaid digital wallet addresses), public cryptographic key relating to digital wallet addresses on
distributed ledger networks and/or similar information which you utilise to access the Website will belinked to your user account. By accessing our services, you provide your consent to our services
reading and/or accessing information from such digital wallet addresses in order to verify ownershipof any digital assets or tokens associated with such address (whether fungible or non-fungible). Users
will have the ability to "add" their digital wallet address to access our services, as well as the ability to"remove" such stored wallets. All data obtained by us in connection with your digital wallet addresses
shall be treated as personal data and dealt with in accordance with the provisions of this Policy.
3.

Purposes for collection, use and disclosure of your personal data

We may collect, use and/or disclose your personal data for its legitimate interests or businesspurposes, including operations for these purposes. These may include, without limitation, thefollowing:(a)developing, providing and improving our products and services (whether made available by
us or through us) or your participation in interactive features of our services, including without
limitation:(i)

services for administering, allocating, trading and/or holding of digital assets (bothfungible and non-fungible);(ii)

acting as intermediaries through any blockchain, network or platform;(iii)

recording and/or encryption on any blockchain, network or platform;(iv)

promoting advertisements or marketing material, whether from us or third parties;(v)

various products and/or services (whether digital or not, and whether provided
through an external service provider or otherwise);(vi)

any escrow, courier, anti-counterfeiting, cyber-security or dispute resolution services;(vii)

research, planning, analytics, trouble-shooting, technical maintenance and bug fixes;(b)communicating with you, including providing you with updates on changes to services or
products (whether made available by us or through us) including any additions, expansions,suspensions and replacements of or to such services or products and their terms andconditions;(c)addressing, investigating or responding to any feedback, queries, complaints, claims or
disputes in connection with the services;(d)complying with all applicable laws, regulations, rules, directives, orders, instructions andrequests from any local or foreign authorities, including regulatory, governmental, tax and law
enforcement authorities or other authorities;

(e)enforcing obligations owed to us, protecting our rights or property, and protecting against
legal liability; and/or(f)seeking professional advice, including legal or tax advice.

We may also use personal data for purposes set out in the terms and conditions that govern our
relationship with you or our customer.
4.

eKYC

For certain product offerings, we may engage and authorise certain third party service providers ofelectronic know-your-client (eKYC) services for identity verification, processing of identity
documentation, collection of due diligence documentation, and/or transaction monitoring.
Under these arrangements, personal data may be provided to such eKYC service providers throughthe submission of information, forms, documents or media files (in whatever format) through an
upload to online platforms operated by such eKYC service providers. The eKYC process may be
automated, semi-automated or performed by a human.
The result of the eKYC process as well as all personal data provided to eKYC service providers will bemade available solely to us and will not be shared with any other external parties. All eKYC service
providers shall be required to ensure that the eKYC solution is secure and robust to protect personal
data from unauthorised access, use and disclosure at all times.
5.

Use of personal data for marketing purposes

We may use your personal data to offer you products or services, including special offers, promotions,contests or entitlements that may be of interest to you or for which you may be eligible. Suchmarketing messages may be sent to you in various modes including but not limited to electronic mail,direct mailers, short message service, telephone calls, facsimile and other mobile messaging services,and may be sent directly by us or by various third parties which we work with. In doing so, the sender
will comply with all applicable data protection and privacy laws.
In respect of sending telemarketing messages to your telephone number via short message service,
telephone calls, facsimile and other mobile messaging services, please be assured that we shall only
do so if we have your clear and unambiguous consent in writing or other recorded form to do so or if
you have not otherwise made the appropriate registration of that number with the Do Not Call
Registry. If we have an ongoing relationship with you and you have not indicated to us that you do notwish to receive telemarketing messages sent to your telephone number, we may send you
telemarketing messages to that number related to the subject of our ongoing relationship via shortmessage service, facsimile and other mobile messaging services (other than a voice or video call).
You may at any time request that we stop contacting you for marketing purposes via selected or allmodes.
To find out more on how you can change the way we use your personal data for marketing purposes,
please contact us.
Nothing in this Policy shall vary or supersede the terms and conditions that govern our relationshipwith you.
6.

Disclosure and sharing of personal dataWe may from time to time and in compliance with all applicable laws on data privacy, disclose yourpersonal data to any of our personnel, staff, employees, officers, group entities, or to third parties(including without limitation banks, financial institutions, credit card companies, credit bureaus andtheir respective service providers, companies providing services relating to insurance and/or
reinsurance to us, and associations of insurance companies, agents, contractors or third party service
providers who provide services to us such as telecommunications, information technology, payment,
data processing, storage and archival, and our professional advisers such as our auditors and lawyers,
and regulators and authorities), located in any jurisdiction, in order to carry out the purposes set out
above (including without limitation the provision of our services, or as required by any law). Please be
assured that when we disclose your personal data to such parties, we will disclose only the personal
information that is necessary to deliver the service required, and will also require them to ensure thatany personal data disclosed to them are kept confidential and secure.
For more information about the third parties with whom we share your personal data, you may, whereappropriate, wish to refer to the agreement(s) and/or terms and conditions that govern our
relationship with you or our customer. You may also contact us for more information (please see
section 11 below).
We wish to emphasise that we do not sell personal data to any third parties without your explicit
consent, and we shall remain fully compliant of any duty or obligation of confidentiality imposed on
us under the applicable agreement(s) and/or terms and conditions that govern our relationship withyou or our customer or any applicable law.
You are responsible for ensuring that the personal data you provide to us is accurate, complete, andnot misleading and that such personal data is kept up to date. You acknowledge that failure on yourpart to do so may result in our inability to provide you with the products and services you haverequested. To update your personal data, please contact us (please see section 11 below for contact
details). Where you provide us with personal data concerning individuals other than yourself, you areresponsible for obtaining all legally required consents from the concerned individuals and you shallretain proof of such consent(s), such proof to be provided to us upon our request.
We may transfer, store, process and/or deal with your personal data in any jurisdiction, andaccordingly such personal data may be transferred to computers, servers or hardware located outsideof your state, province, country or other governmental jurisdiction where the data protection laws
may differ from those in your jurisdiction. We will take all steps reasonably necessary to ensure thatyour data is treated securely and in accordance with this Policy and no transfer of your personal data
will take place to an organisation or a country unless there are adequate controls in place including
the security of your data and other personal information (including without limitation the Standard
Contractual Clauses approved by the European Commission). Your consent to this Policy followed byyour submission of such information represents your agreement to the transfer of personal data as
described herein.
7.

Cookies and related technologies

The Website uses cookies. A cookie is a small text file placed on your computer or mobile device when
you visit a Website or use an app, which may include an anonymous unique identifier. Cookies collectinformation about users and their visit to the Website or use of the app, such as their Internet protocol(IP) address, how they arrived at the Website (for example, through a search engine or a link fromanother Website), how they navigate within the Website or app, browser information, computer or
device type, operating system, internet service provider, website usage, referring/exit pages, platform

type, date/time stamp, number of clicks, ads viewed, and how they use our services. We use cookies
and other technologies to facilitate your internet sessions and use of our apps, offer you customised
products and/or services according to your preferred settings, display features and services whichmight be of interest to you (including ads on our services), track usage of our websites and apps, tocompile statistics about activities carried out on our websites, and to hold certain information.
Examples of cookies which we use include, without limitation, Sign-in and Authentication Cookies foruser authentication, Session Cookies to operate our service, Preference Cookies to remember yourpreferences and various settings, Third-Party Cookies from third party services to receive andincorporate external data, as well as Security Cookies for security purposes.
You may set up your web browser to block cookies from monitoring your website visit. You may also
remove cookies stored from your computer or mobile device. However, if you do block cookies you
may not be able to use certain features and functions of our Website.
We further utilise a variety of other similar tracking technologies provided by parties such as Google
Tag Manager, Google Analytics, hCaptcha, FeedBucket, Notifi and Raleon Analytics, which include
technologies such as cookies, identifiers for mobile devices, beacons, tags (including pixel tags), andscripts to collect and track information and to improve and analyse our services.
Our systems do not fully recognise “do not track” signals or other mechanisms that might enable users
to opt out of tracking on the Website.
8.

Other web sites

Our websites may contain links to other websites which are not maintained by us. This Policy only
applies to websites maintained by us. When visiting these third party websites, you should read theirprivacy policies which will apply to your use of such websites.
9.

Retention of personal dataYour personal data is retained as long as the purpose for which it was collected remains and until it is
no longer necessary for any legal or business purposes. This enables us to comply with legal andregulatory requirements or use it where we need to for our legitimate purposes, such as transfers ofdigital assets, and dealing with any disputes or concerns that may arise.
We may need to retain information for a longer period where we need the information to comply withregulatory or legal requirements or where we may need it for our legitimate purposes (e.g. to help us
respond to queries or complaints, fighting fraud and financial crime, responding to requests from
regulators etc).
When we no longer need to use personal data, we will remove it from our systems and records and/or
take steps to anonymise it so that you can no longer be identified from it.
10.

Queries, Access/Correction Requests and Withdrawal of Consent

If you:(a)

have queries about our data protection processes and practices;(b)wish to request access to and/or make corrections to your personal data in our possession orunder our control; or(c)wish to withdraw your consent to our collection, use or disclosure of your personal data,please submit a written request (with supporting documents, (if any) to our Data Protection Officer
at: info@ununifi.io Our Data Protection Officer shall respond to you within 30 days of your submission.
Please note that if you withdraw your consent to any or all use or disclosure of your personal data,
depending on the nature of your request, we may not be in a position to continue to provide ourservices or products to you or administer any contractual relationship in place. Such withdrawal may
also result in the termination of any agreement you may have with us. Our legal rights and remedies
are expressly reserved in such event.
We may charge you a fee for processing your request for access. Such a fee depends on the natureand complexity of your access request. Information on the processing fee will be made available to
you.
11.

Contact information

To contact us on any aspect of this Policy or your personal data or to provide any feedback that you
may have, please contact our Data Protection Officer at info@ununifi.io
12.

Governing Law and Jurisdiction

This Policy and your use of the Website shall be governed and construed in accordance with the lawsof Panama. All disputes arising out of or in connection with this Policy (including without limitation
the enforceability of this Section 12 or any question regarding its existence, validity or termination,
your access or use of the services shall be referred to and finally resolved by arbitration administeredby the Singapore International Arbitration Centre (SIAC) in accordance with the Arbitration Rules of
the Singapore International Arbitration Centre (SIAC Rules) for the time being in force, which rules are
deemed to be incorporated by reference in this Section 12. The seat of the arbitration shall beSingapore. The Tribunal shall consist of 1 arbitrator. The language of the arbitration shall be English.
The award of the arbitrator will be final and binding, and any judgment on the award rendered by thearbitrator may be entered in any court of competent jurisdiction. Each party irrevocably submits tothe jurisdiction and venue of such tribunal. Further, each party will cover its own fees and costs
associated with the arbitration proceedings.
13.

Amendments and updates to UnUniFi Privacy Policy

We reserve the right to amend this Policy from time to time to ensure that this Policy is consistent
with any developments to the way we use your personal data or any changes to the laws andregulations applicable to us. We will make available the updated Policy on the Website. When thisPolicy is updated, we will post a notice on the Website and also change the "Last Updated" dateindicated at the top. You are encouraged to visit the Website from time to time to ensure that you arewell informed of our latest policies in relation to personal data protection. All communications,transactions and dealings with us shall be subject to the latest version of this Policy in force at the
time.
14.

For European Union or European Economic Area Residents

This section 14 applies if you are an individual located in the European Union or European Economic
Area. Subject to applicable law, you have the following additional rights in relation to your personal
data:(a) the right to access your personal data (if you ask us, we will confirm whether we are processing
your personal data in a structured, commonly used and machine-readable format and, if so,

provide you with a copy of that personal data (along with certain other details). If you require
additional copies, we may need to charge a reasonable fee;(b) the right to ensure the accuracy of your personal data;(c) the right to have us delete your personal data (we will do so in some circumstances, such as where
we no longer need it, but do note that we may not delete your data when other interests outweighyour right to deletion);(d) the right to restrict further processing of your personal data (unless we demonstrate compelling
legitimate grounds for the processing);(e) rights in relation to automated decision-making and profiling (you have the right to be free fromdecisions based solely on automated processing of your personal data, including profiling, that
affect you, unless such processing is necessary for entering into, or the performance of, a contract
between you and us or you provide your explicit consent to such processing);(f) the right to withdraw consent (if we rely on your consent to process your personal data, you havethe right to withdraw that consent at any time, but provided always that this shall not affect thelawfulness of processing based on your prior consent); and(g) the right to complain to a supervisory authority in your country of residence in the event that datais misused.
If you believe that our processing of your personal information infringes data protection laws, youhave a legal right to lodge a complaint with a supervisory authority responsible for data protection.
You may do so in the EU member state of your residence, your place of work or the place of the alleged
infringement. You may exercise any of your rights in relation to your personal data by contacting our
Data Protection Officer at: info@ununifi.io and we shall respond to you within 30 days of yoursubmission.
15.

Your acceptance of these terms

This Policy applies in conjunction with any other notices, contractual clauses and consent clauses that
apply in relation to the collection, use and disclosure of your personal data by us. We may revise thisPolicy from time to time without any prior notice. You may determine if any such revision has takenplace by referring to the date on which this Policy was last updated.
By using the Website and/or any services provided by us, you signify your acceptance of this Policy
and terms of service. If you do not agree to this Policy or terms of service, please do not use theWebsite or any services provided by us. Your continued use of the Website following the posting ofchanges to this Policy will be deemed your acceptance of those changes.