Privacy Policy

1. INTRODUCTION This Privacy Policy explains how Degenesis Labs ("Degenesis Labs", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data when you access or use Grid Trade X, our websites, applications, wallet-connected features, customer support channels, and any related products, content, functionality, or services that link to or refer to this Privacy Policy (together, the "Services"). This Privacy Policy applies to personal data collected online and, where relevant, offline in connection with the provision, operation, maintenance, security, support, and improvement of the Services. For the purposes of applicable data protection law, Degenesis Labs is the controller of the personal data described in this Privacy Policy unless stated otherwise. Contact details: Degenesis Labs Email: x@degenesislabs.com Website: www.gridtradex.com Website: www.degenesislabs.com

2. SCOPE This Privacy Policy applies to personal data we process about: users and players of Grid Trade X; visitors to our websites; individuals who contact us for support, business, or other enquiries; individuals who interact with our communications, updates, or promotional materials; and other persons whose personal data is provided to us in connection with the Services. This Privacy Policy does not apply to third-party services, third-party wallets, payment services, blockchain networks, exchanges, marketplaces, app stores, social platforms, analytics tools, or websites that we do not own or control. Those third parties operate under their own terms and privacy policies, and you should review those separately.

3. AGE RESTRICTION Grid Trade X is intended only for individuals aged 18 or over. The Services are not directed to children, and we do not knowingly collect personal data from anyone under 18 in connection with the Services. By accessing or using the Services, you represent that you are at least 18 years of age and legally capable of entering into binding agreements in your jurisdiction. If we become aware that personal data has been collected from a person under 18 in connection with the Services, we may delete that data and take steps to suspend or terminate the relevant account or access.

4. IMPORTANT NOTICE ABOUT BLOCKCHAIN AND WALLET DATA Certain features of Grid Trade X may interact with blockchain networks, digital wallets, digital assets, and related infrastructure. Where you connect a wallet, sign messages, initiate transactions, receive digital assets, transfer digital assets, or withdraw value using the Services: your public wallet address and related blockchain activity may be visible on a public blockchain; blockchain records may be publicly accessible, permanent, and incapable of modification or deletion by us; blockchain activity linked to a wallet address may allow third parties to analyse or infer patterns about you; we may collect, analyse, display, or associate blockchain activity and wallet-related information with your use of the Services; and we cannot erase, modify, or restrict access to data recorded on a public blockchain, even where we delete related data held in our own systems. You should therefore understand that public blockchain activity may be visible to others indefinitely.

5. THE PERSONAL DATA WE COLLECT We may collect the following categories of personal data.

5.1 Identity and Account Data This may include: name or alias; username, display name, or player identifier; email address; date of birth or age confirmation data; country or region; account identifiers; wallet-linked account details; login, authentication, and security-related information; profile preferences and settings; and information you provide when creating or managing an account.

5.2 Wallet, Blockchain, and Digital Asset Data This may include: public wallet addresses; blockchain transaction hashes; wallet connection records; digital asset transaction history associated with the Services; deposits, withdrawals, transfers, rewards, entitlements, or claims; publicly visible on-chain data connected with your wallet activity; and metadata relating to digital asset interactions within or through the Services.

5.3 Transaction and Payment Data This may include: purchase history; order information; reward or withdrawal records; billing records; refunds, chargebacks, disputes, or reversals; promotional or discount information; and limited payment-related data received from third-party payment processors. We do not generally store full payment card details ourselves where payments are processed by third-party payment providers.

5.4 Gameplay and Service Usage Data This may include: game session data; progression, rank, score, and reward data; gameplay events and performance metrics; in-game selections, interactions, and activity history; account activity logs; crash and diagnostic reports; feature usage and navigation data; and technical records relevant to the operation, integrity, or improvement of the Services.

5.5 Device, Technical, and Network Data This may include: IP address; browser type and version; operating system; device type; device identifiers; language settings; approximate geolocation inferred from technical data; referral URLs; timestamped event logs; cookie identifiers; SDK or local storage identifiers; and network and connection data.

5.6 Communications and Support Data This may include: emails, support tickets, and enquiry forms; messages you send to us; screenshots, attachments, and bug reports; information you provide when requesting help; records of communications with you; and survey responses or feedback.

5.7 Marketing and Preference Data This may include: marketing preferences; communication preferences; newsletter subscription data; campaign engagement data; consent records; and information relating to your preferences or interests where lawfully collected.

5.8 Compliance, Security, and Fraud Prevention Data This may include: security alerts and access logs; fraud risk indicators; abuse or misuse indicators; suspicious activity records; device or account integrity signals; information used to investigate breaches of our terms, fraud, cheating, manipulation, or unlawful conduct; and information necessary to protect the Services, users, and Degenesis Labs.

6. HOW WE COLLECT PERSONAL DATA We collect personal data in several ways.

6.1 Directly From You We collect data you provide directly when you: create or use an account; connect a wallet; use the Services; request support; subscribe to emails or updates; participate in promotions or surveys; contact us; or otherwise submit information to us.

6.2 Automatically We and our service providers may automatically collect certain data through cookies, logs, SDKs, pixels, local storage, device identifiers, analytics tools, and similar technologies when you interact with the Services.

6.3 From Third Parties We may receive personal data from third parties such as: wallet providers; payment processors; analytics providers; fraud prevention and security vendors; hosting and infrastructure providers; customer support providers; advertising and attribution partners; social login or authentication providers; and publicly available blockchain or transaction sources.

6.4 From Public Sources We may collect information from public sources where relevant to the Services, including publicly visible blockchain data and other publicly available online information.

7. HOW WE USE PERSONAL DATA We may collect, hold, use, and otherwise process personal data for the following purposes.

7.1 To Provide the Services Including: creating and managing accounts; enabling access to Grid Trade X; linking wallets; operating gameplay features; processing rewards, entitlements, and withdrawals of value; maintaining service functionality; and providing user support.

7.2 To Authenticate and Secure Accounts Including: verifying identity where required; authenticating users; securing accounts and wallets connected to the Services; preventing unauthorised access; investigating suspicious activity; and maintaining platform integrity.

7.3 To Process Transactions and Withdrawals Including: administering purchases; processing rewards and value withdrawals; maintaining transaction records; investigating failed or disputed transactions; and detecting or preventing fraudulent or abusive financial activity.

7.4 To Operate, Improve, and Develop the Services Including: analytics; testing; troubleshooting; diagnostics; product improvement; service optimisation; performance monitoring; and internal reporting.

7.5 To Communicate With You Including: responding to enquiries; handling support requests; sending service-related notices; issuing security alerts; sending account updates; and sending marketing communications where permitted by law.

7.6 To Protect Degenesis Labs, Users, and the Services Including: detecting and preventing fraud, abuse, cheating, manipulation, or misuse; enforcing our Terms of Use and related policies; investigating incidents; protecting our systems, users, rights, and property; and preventing unlawful or harmful behaviour.

7.7 To Comply With Legal and Regulatory Obligations Including: maintaining records; handling complaints and disputes; responding to lawful requests from authorities; complying with applicable laws, regulations, court orders, and legal processes; and establishing, exercising, or defending legal claims.

7.8 In Connection With Corporate Transactions Including an actual or proposed: merger; acquisition; restructuring; financing; sale of assets; insolvency event; or other corporate transaction involving all or part of our business.

8. LEGAL BASES FOR PROCESSING Where the UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases.

8.1 Performance of a Contract We process personal data where necessary to provide the Services to you, manage your account, enable gameplay, connect wallets, process transactions, administer withdrawals, and otherwise perform our contract with you.

8.2 Legitimate Interests We process personal data where necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights and freedoms. These legitimate interests may include: operating and improving the Services; securing the Services; fraud prevention; abuse detection; analytics; internal administration; product development; business continuity; legal protection; and limited direct marketing where lawful.

8.3 Legal Obligation We process personal data where necessary to comply with legal or regulatory obligations.

8.4 Consent We rely on consent where required by law, including for certain cookies, similar tracking technologies, and certain marketing activities.

8.5 Legal Claims We may process personal data where necessary to establish, exercise, or defend legal claims.

9. COOKIES AND SIMILAR TECHNOLOGIES We use cookies and similar technologies, including local storage, analytics tags, SDKs, pixels, and log technologies, to operate and improve the Services. These technologies may be used for: essential functionality; authentication; security; remembering preferences; analytics and measurement; performance monitoring; and marketing or advertising, where permitted. Where required by law, we will obtain your consent before placing or using non-essential cookies or similar technologies. Essential technologies necessary for the functioning, delivery, or security of the Services may be used without consent where legally permitted. You can manage your cookie preferences through any consent tools we make available, and through your browser or device settings. Disabling certain technologies may affect the availability or functionality of the Services.

10. ANALYTICS AND ADVERTISING We may use analytics and advertising partners to help us understand how users interact with the Services, measure performance, improve user experience, and deliver communications or advertising more effectively. This may include: website or application analytics; attribution tools; crash reporting; campaign measurement; and marketing performance tools. Where required by law, we will ask for consent before using non-essential analytics or advertising technologies. We may use audience segmentation and related marketing techniques based on information lawfully collected about users. We do not state that we "sell" personal data in this Privacy Policy. However, where applicable law uses a broader definition of "sale", "sharing", or similar concepts, your rights will depend on the laws that apply to you and the actual data flows in question.

11. DISCLOSURE OF PERSONAL DATA We may disclose personal data to the following categories of recipients where reasonably necessary.

11.1 Service Providers Including providers of: hosting and cloud infrastructure; analytics; customer support; payment processing; wallet and authentication services; security and fraud prevention; email delivery; technical development and diagnostics; data storage; and legal, audit, accounting, and professional services.

11.2 Business and Technical Partners Including partners who help us operate, support, distribute, or improve the Services.

11.3 Other Users and Public Networks Certain information may be visible to other users or to the public by design, including: usernames or display names; public wallet addresses; blockchain transactions; certain gameplay statistics or leaderboard data; and other information that is inherently public through blockchain activity or features of the Services.

11.4 Authorities and Legal Recipients We may disclose personal data where required or permitted by law to courts, regulators, law enforcement, government bodies, or other relevant authorities.

11.5 Corporate Transaction Counterparties We may disclose personal data to actual or potential investors, purchasers, lenders, advisers, or counterparties in connection with a real or proposed corporate transaction.

11.6 Group Entities Where applicable, we may disclose personal data within the Degenesis Labs group for internal administrative, security, legal, and operational purposes consistent with this Privacy Policy.

12. INTERNATIONAL TRANSFERS Your personal data may be stored, accessed, or processed in countries outside your country of residence. Where the UK GDPR or EU GDPR applies and personal data is transferred internationally to a country not recognised as providing an adequate level of protection, we will take appropriate steps to ensure that the transfer is subject to suitable safeguards as required by law. These safeguards may include approved standard contractual clauses or other lawful transfer mechanisms. By using the Services, you understand that your personal data may be processed in jurisdictions with different data protection laws from those in your own country.

13. DATA RETENTION We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to: provide the Services; maintain account history and transaction records; administer withdrawals and disputes; comply with legal, regulatory, tax, accounting, and reporting obligations; investigate fraud, abuse, or security incidents; and establish, exercise, or defend legal claims. The period for which we retain personal data depends on the nature of the data, the purpose for which it was collected, and any legal or operational requirements that apply. In some circumstances, we may anonymise or aggregate information so that it no longer identifies you. We may retain anonymised or aggregated information for longer periods. For the avoidance of doubt, we cannot delete or modify data that has been recorded on a public blockchain.

14. SECURITY We implement reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These measures may include: access controls; authentication procedures; monitoring and logging; vendor management; secure infrastructure controls; internal restrictions on access to data; and incident response procedures. No method of transmission over the internet and no system of storage is completely secure. Accordingly, we cannot guarantee absolute security.

15. YOUR RIGHTS Subject to applicable law, you may have the right to: request access to personal data we hold about you; request correction of inaccurate or incomplete personal data; request deletion of personal data; request restriction of processing; object to certain processing; request portability of certain personal data; and withdraw consent where processing is based on consent. These rights are not absolute. We may refuse or limit a request where permitted by law, including where the request is manifestly unfounded, excessive, would adversely affect the rights of others, or where we are legally entitled or required to retain or continue processing the data.

15.1 Exercising Your Rights To exercise your rights, contact us at: Email: x@degenesislabs.com We may require information necessary to verify your identity before acting on a request.

16. MARKETING COMMUNICATIONS Where lawful, we may send you marketing communications about Grid Trade X, Degenesis Labs, and related products or updates. You can opt out of marketing communications at any time by: using the unsubscribe link included in the message; adjusting settings where available; or contacting us at x@degenesislabs.com. Opting out of marketing does not affect service-related communications, including security notices, account notices, legal notices, or operational messages.

17. THIRD-PARTY SERVICES AND LINKS The Services may contain links to or integrations with third-party websites, products, wallets, tools, services, or platforms. We do not control those third parties and are not responsible for their privacy, security, or data-handling practices. Your use of third-party services is at your own risk and subject to their own terms and privacy policies.

18. CHANGES TO THIS PRIVACY POLICY We may amend this Privacy Policy from time to time. Where we make material changes, we may provide notice by posting the updated Privacy Policy on our websites or through the Services, and by other means where appropriate. Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance of the revised Privacy Policy to the extent permitted by law.

19. CONTACT US If you have questions, requests, or complaints about this Privacy Policy or our handling of personal data, contact: Degenesis Labs Email: x@degenesislabs.com Website: www.gridtradex.com Website: www.degenesislabs.com