FourPlay PRIVACY POLICY

MrktStar, Inc. d/b/a Versus

Effective Date: April 30, 2026

1. Introduction

This Privacy Policy ("Policy") describes how MrktStar, Inc., d/b/a Versus, a Delaware corporation ("Company," "we," "us," or "our"), collects, uses, discloses, and protects information obtained via your ("you" or "your") use of the FourPlay mobile application ("App"), including all related features, services, content, and functionality offered through the App (collectively, the "Service(s)"). All capitalized terms undefined herein shall have the definitions provided in our Terms of Services.

Any information you provide through your use of the Services is subject to the terms of this Policy, as may be updated by us from time to time. The Services may be accessed as a standalone App or through integration within third-party platforms, websites, and/or applications. This Policy governs our collection and use of your information regardless of how you access the Services.

Please read this Policy carefully before using and/or accessing the Services. This Policy does not apply to any third-party websites, services, providers, or applications, even if such are available or accessible through our Services.

By downloading, installing, accessing, or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Policy. If you do not agree, do not use the Service.

2. Information We Collect

We collect several categories of information to provide, improve, and personalize the Service.

2.1 Information You Provide Directly

• Account Information: When you create an account and/or otherwise use the Services, we may collect the following information: your first name, last name, mobile phone number, email address, date of birth, and any username or display name you choose. Account creation and authentication are conducted via SMS-based two-factor verification. We reserve the right to request additional information, included, without limitation, government-issued identification documents (i.e., driver’s license, passport) and/or any other information as needed for identification verification, AML/KYC compliance, tax reporting and/or otherwise for us to provide the Service.
• Profile Information: You may optionally provide a profile photograph, biographical details, favorite sports teams, preferred sports, and/or other preference data as requested by the Service.
• User Content: We collect User Content you submit through the Service, including, without limitation, comments, reactions, answers to questions and challenges, and/or other content you post or share.
• Communications: We collect information from your communications with us, including, without limitation, customer support inquiries, feedback, and survey responses.
• Social Media Information: If you choose to log in, access, or otherwise connect to the Service through a social networking or authentication service (such as Apple ID, Google, Facebook, or similar providers), we may collect your user ID, display name, email address, and/or profile information associated with that service, as well as any information you have authorized that service to share with us. The manner in which such third-party services use, store, and disclose your information is governed solely by their own policies and terms. We are not responsible for the privacy practices of any third-party authentication or social networking service.

2.2 Information Collected Automatically

• Device Information: When you access the Services, additional information may be collected by us or third parties on our behalf for tracking and/or other business purposes, such as device identifiers (including advertising identifiers, device model, operating system version, and/or unique device identifiers that can identify the physical location of your device while using the Services), hardware specifications, browser type, language preferences, and mobile network information.
• Camera and Visual Data: When you use the scanning feature, the App accesses your device camera to capture and process visual data from your television or streaming display. Image data is cropped to the relevant display area, preprocessed on your device, and transmitted to our servers for content recognition using our proprietary matching algorithms. We may retain processed image data (“Clips”) and recognition results normalized and stored without user identifying data as long as necessary for purposes of improving our recognition technology and/or other features of the Service.
• Usage Data: We collect information about your interactions with the Service, including, without limitation, scan history, questions answered, scores, points earned, time and duration of sessions, features used, in-app navigation patterns, and/or other behavioral and engagement data.
• Viewing and Content Data: We collect information about the sports broadcasts, streaming content, and/or other media you scan or interact with through the Service, including, without limitation, sport type, specific games or events, teams involved, content titles, and/or content preferences derived from the Vibe Check feature.
• Location Data: We collect coarse (approximate) location data such as city, state, and country based on your IP address or device settings. We do not collect precise GPS location data. Coarse location data is used for content personalization, regulatory compliance, and jurisdictional eligibility verification for Competitions.
• Log and Analytics Data: We collect server logs, error reports, IP addresses, referring/exit pages, clickstream data, and analytics data through our analytics provider, PostHog.

2.3 Tracking Technologies

We and our third-party service providers use the following technologies to automatically collect information about your use of the Service:

• Software Development Kits (SDKs): We integrate third-party SDKs (including PostHog) into the App that collect device information, usage data, and performance metrics. SDKs may set and read device identifiers to track sessions and attribute activity.
• Device Fingerprinting: We may collect and combine device attributes (such as operating system, device model, screen resolution, and language settings) to create a device profile for analytics, fraud prevention, and security purposes.
• Advertising Identifiers: We may collect your device's advertising identifier (IDFA on iOS, GAID on Android) to deliver targeted advertising and measure ad performance. You may reset or limit the use of these identifiers through your device settings.
• Local Storage and Caching: The App may store data locally on your device (such as session tokens, cached content, and preference settings) to improve performance and user experience.

We do not use browser-based cookies or web beacons within the App itself. However, if you access any web-based components of the Service (such as linked web pages or in-app web views), those pages may use cookies and similar tracking technologies. You can manage cookie preferences through your browser settings.

2.4 Information Derived from Your Activity

• Behavioral Profiles: We derive inferences about your preferences, interests, viewing habits, sports fandom, prediction tendencies, and engagement patterns from your use of the Service. This includes data generated through your participation in questions, challenges, and the Vibe Check feature.
• Aggregated Insights: We generate aggregated, de-identified statistical data from user responses and activity (e.g., percentage of users predicting a particular outcome) which may be used in features such as "AI Pro Tips" and shared with third parties as described in this Policy.

2.5 Information from Third Parties

• Platform Partners: If you access the Service through a third-party platform or partner application, we may receive information about you from that platform consistent with your privacy settings on that platform.
• Sports Data Providers: We receive sports statistics, game schedules, scores, and related data from third-party sports data providers to power the Service.
• Social Connections: When you invite friends or connect with other users, we collect information about those relationships to enable certain mechanics and/or social features made part of the Service.
• Authentication Providers: If you authenticate through a third-party service (such as Apple, Google, or a social networking platform), we may receive identity verification data, profile information, and authentication tokens from that provider.

3. How We Use Your Information

We use the information we collect for the following purposes:

1. Provide and Operate the Service: Account creation and authentication, content recognition, question delivery, scoring, leaderboards, team mechanics, prize administration, energy system management, and all core App functionality.
2. Content Recognition and Matching: Processing camera data through our proprietary neural network and matching algorithms to identify live sports broadcasts and streaming content.
3. Personalization: Tailoring content, questions, recommendations, and the Vibe Check experience based on your preferences, viewing history, and behavioral data.
4. Recommendations: Using your Vibe Check responses, viewing history, and behavioral data to generate personalized content recommendations, including recommendations based on the preferences of users with similar profiles.
5. “AI Pro Tips” and Aggregated Insights: Generating and displaying aggregated statistical insights derived from user responses (e.g., "71% of users think Team X will win") within the Service and to third parties.
6. Communications: Sending you SMS messages for account verification, transactional notifications (such as prize notifications), responding to customer support reports and inquiries, push notifications, and, where you have not opted out, promotional messages.
7. Advertising: Displaying advertisements within the Service and measuring advertising effectiveness. We may use your information (including, behavioral and preference data) to deliver targeted advertising.
8. Analytics and Improvement: Understanding usage patterns, diagnosing technical issues, measuring performance, and improving the Service through analytics platforms.
9. Safety and Integrity: Detecting and preventing fraud, abuse, security incidents, and other harmful activity regarding use of the Service, including verifying jurisdictional eligibility for Competitions and detecting use of VPNs or other location-masking tools.
10. Legal Compliance: Complying with applicable laws, regulations, legal processes, and governmental requests.
11. Research and Development: Developing new features, products, and services, including training and improving our content recognition and recommendation algorithms.

We may also use information provided by you for reasons for which we have a legitimate interest, such as (i) enforcing our Terms of Service, (ii) complying with applicable state and/or federal law or regulations relating to the use of the Services, or (iii) any other purpose disclosed to you at the time you provide information or with your consent. In all cases of data access and collection, your personally identifiable information will not be sold, rented, leased, loaned, or otherwise voluntarily distributed to unaffiliated third parties, except as described in this Policy or as otherwise permitted under applicable law.

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including analytics (PostHog), cloud hosting, SMS delivery, customer support, and content delivery. These providers are contractually obligated to use your information only to perform services for us and in compliance with this Policy.

4.2 Prize Fulfillment and Payment Processing

In connection with the administration and fulfillment of Competition prizes, we may share your information with third-party payment processors, shipping providers, and fulfillment partners. These third parties may collect certain information from you directly in order to process prize delivery, including your name, mailing address, email address, and, where required by law, tax identification information. In order to update or delete information held by these third-party processors, you may need to contact them directly, as we maintain only the minimum information necessary to administer the Service. Our use of third-party payment processors is governed by their respective privacy policies and terms of service.

4.3 Advertising Partners

We may share device identifiers, coarse location data, interest/behavioral segments and/or other de-identified, aggregated, or pseudonymized information with advertising partners to deliver targeted advertisements within the Service. We do not sell your name, phone number, or other personally identifiable information to advertisers. You may opt out of interest-based advertising as described below.

4.4 Aggregated and De-Identified Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties as necessary for them to provide services, including platform partners, sports leagues, broadcasters, advertisers, and researchers. Such information may include prediction data, viewing statistics, engagement metrics, and/or behavioral trends. For example, we may share with a broadcast partner that a certain percentage of users predicted a particular game outcome.

4.5 Platform Partners

Where the Service is integrated within a third-party platform or partner application, we may share limited data with that partner as described in our agreements with them. Any such sharing will be disclosed at or before the point of collection.

4.6 Other Users

Certain information is visible to other users of the Service, including your username, profile photograph, scores, leaderboard rankings, team affiliations, and any User Content you post publicly (such as comments). Your responses to questions and challenges may be incorporated into aggregated statistics visible to other users.

4.7 Legal and Safety

We may disclose your information with our accountants, attorneys, and/or other professional advisors who owed a duty of confidentiality to Company; if required by law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of the Company, our users, or the public; or to detect, prevent, or address fraud, security, or technical issues.

4.8 Business Transfers

In the event of Company merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred to a successor entity. We will notify you of any such change in ownership or control of your personal information. You acknowledge and agree that we have no control over how such information is treated, transferred, or protected by such third parties in such circumstances.

4.9 With Your Consent

We may share your information for any other purpose not expressly set forth in this Policy with your express consent.

5. Data Retention

We retain your personal information for as long as your account is active and thereafter for as long as necessary for the following purposes:

• To comply with legal obligations, resolve disputes, and enforce our agreements.
• To maintain aggregated, de-identified datasets that incorporate your prior activity.
• For safety, fraud prevention, and security purposes.

Aggregated and de-identified data may be retained indefinitely.

6. Your Rights and Choices

6.1 Account Information

You may update or correct your account information at any time through the App settings.

6.2 Account Deletion

You may request deletion of your account and associated personal information by contacting us at the address provided below. Upon receiving a verified request, we will delete your personal information within the timeframes required by applicable law, subject to any exceptions permitted by law.

6.3 Push Notifications/Marketing Communications

We may send you marketing communications or emails that contain information about our products and services, contests, or upcoming events. At any time, you may unsubscribe from marketing communications by logging into your account or by contacting us at the address below.

Please note that you will not be able to opt out of certain administrative communications regarding the Services, such as communications regarding updates to our Terms of Service, this Policy, account security, or required regulatory disclosures.

You may opt out of push notifications through your device settings.

6.4 SMS Communications

You may opt out of non-transactional SMS messages by replying STOP to any SMS message we send. Note that SMS-based authentication messages are required for account functionality and cannot be opted out of while maintaining an active account.

6.5 Camera Access

You may revoke camera permissions through your device settings at any time. Note that the scanning feature requires camera access to function.

6.6 Advertising Choices

You may limit ad tracking through your device settings. You may also opt out of interest-based advertising through industry opt-out mechanisms such as the Digital Advertising Alliance (DAA) at optout.aboutads.info or the Network Advertising Initiative (NAI) at optout.networkadvertising.org.

6.7 Third-Party Advertising Disclosures

If you do not want us to share your information with third-party advertising partners for targeted advertising purposes, you may opt out by adjusting your advertising preferences within the App settings or by contacting us at the address below. Please note that opting out of targeted advertising does not mean you will stop seeing advertisements within the Service; rather, the advertisements you see may be less relevant to your interests.

7. Rights for Specific Jurisdictions

7.1 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, the following additional provisions apply:

• Legal Bases for Processing: We process your personal data on the following legal bases: (a) with your consent in accordance with this Policy and/or applicable local law (e.g., for targeted advertising); (b) performance of your contract with Company (e.g., providing the Service under the Terms of Service); (c) compliance with legal obligations; and (d) as necessary for providing the Service and/or in accordance with our legitimate interests (e.g., fraud prevention, Service improvement, and security), where those interests are not overridden by your rights.
• Data Transfers: Your personal data may be transferred to and processed in the United States and other countries outside the EEA/UK/Switzerland. We implement appropriate safeguards for such transfers, as required per applicable law(s).
• Your Rights: You have the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing and to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.
• Data Protection Officer: You may contact our data protection representative at the contact information provided below.

7.2 California (CCPA/CPRA)

If you are a California resident, the following additional provisions apply under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA):

• Your Rights:
  • Right to Know: You have the right to know/request information about the categories and sources of personal information we collect, disclose, and sell/share, our purposes for collecting it, and the types of third parties that receive it. Such details are set forth in this Policy. You may also request a copy of specific pieces of personal information we hold about you.
  • Right to Delete: You have the right to delete/request deletion of some or all of your personal information we hold about you, subject to certain exceptions (e.g., information needed to complete transactions, comply with legal obligations, detect fraud, or exercise our legal rights).
  • Right to Correct: You have the right to correct/request correction of inaccurate personal information we hold about you.
  • Right to Opt-Out of Sale or Sharing: We may share device identifiers and behavioral data with advertising partners for cross-context behavioral advertising purposes. We may sell aggregated behavioral and interest data. You may opt out of the sale or sharing of your personal information by contacting us or through opt-out mechanisms within the App.
  • Right to Limit Use of Sensitive Personal Information: You havethe right to limit the use and/or disclosure of your sensitive personal information to uses necessary to provide the Services, comply with legal obligations, or as otherwise permitted by the CCPA/CPRA.
  • We will not discriminate against you for exercising these rights.
• Retention: We retain each category of personal information for the periods described in Section 5 of this Policy.
• Verification: To exercise your rights to know and delete, we must verify your identity as the owner of the account and/or personal information you are inquiring about. We will not be able to fulfill your request until verification is complete. In general, we verify identity by confirming that you are the owner of the phone number associated with the account. An authorized agent submitting a request on your behalf must provide sufficient evidence that you have authorized that person to submit the request.

7.3 Other U.S. State Privacy Laws

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states with applicable data protection laws may also have rights similar to those described above. We will honor applicable rights requests in accordance with the applicable law(s) of your state of residence. To exercise your rights, contact us using the information provided below.

7.4 Other International Jurisdictions

If you are located in a jurisdiction with data protection laws that provide rights beyond those described above, we will honor those rights consistent with applicable law. This includes, but is not limited to, rights under Brazil’s LGPD, Canada’s PIPEDA, Australia’s Privacy Act, Japan’s APPI, South Korea’s PIPA, and other applicable data protection legislation.

8. Children’s Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Service or provide any information to us.

If we learn that we have collected personal information from a child under 13, we will take steps to promptly delete such information. If you believe a child under 13 has provided us with personal information, please contact us at the address below.

For users between the ages of 13 and 16 in the EEA/UK, we will obtain verifiable parental or guardian consent before processing personal data where required by applicable law. For users between 13 and 16 in California, we will not sell or share their personal information without affirmative authorization.

9. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and secure development practices.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your information. Any transmission of personal information is at your own risk.

The safety and security of your information also depends on you. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. We ask you not to share your account credentials with anyone.

By using the Services or otherwise providing information to us, you agree that we may communicate with you electronically regarding security, privacy, and/or administrative issues relating to your use of the Services.

If we learn of a security breach affecting your personal information, we will notify you electronically (via push notification, SMS, or in-app notice) and/or take other steps as required by applicable law.

10. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that are not owned or controlled by us. This Policy does not apply to the practices of third parties, and links to or from the Services do not imply that we endorse or have reviewed those websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service. If you provide personal information to any third-party websites, applications, or services, you acknowledge that you are doing so at your own risk and subject to that website, application, or services’ privacy policy.

If you access the Service through a third-party platform or partner application, that platform’s privacy policy also applies to information collected by that platform. We are not responsible for the privacy practices of third-party platforms.

If you choose to log in, access, or connect to the Service through a social networking or authentication service, the use of that service is governed by its own privacy practices and policies, including your ability to adjust privacy settings on that platform. Please review the terms and privacy policies of any such service before connecting it to the Service.

11. Submissions

This Policy shall not apply to any unsolicited information or feedback you provide to us through the Service or through any other means. This includes, but is not limited to, information posted to any public areas of the Service, ideas for new products/features or modifications to existing products/features, and/or other unsolicited questions, comments, suggestions, ideas, or feedback about the Services (collectively, "Submissions"). All Submissions shall be deemed to be non-confidential and we shall be free to reproduce, use, disclose, and distribute such Submissions to others without limitation or compensation to you.

12. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no industry consensus on how to respond to DNT signals, the Service does not currently respond to DNT signals. We will update this Policy if we adopt a DNT standard in the future.

13. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you by posting the updated Policy within the App, updating the "Effective Date" above, and, where appropriate, providing additional notice (such as via push notification or SMS). Your continued use of the Service after the effective date of any updated Policy constitutes your acceptance of the revised Policy.

14. Contact Us

If you have questions about this Policy or wish to exercise your privacy rights, contact us at:

MrktStar, Inc. d/b/a Versus

584 Castro Street

San Francisco, CA 94114

Email: privacy@versusgame.com

For EEA/UK inquiries, you may also contact our data protection representative at the address above.