CLARIFICATION ON PROTECTION AND PROCESSING OF PERSONAL DATA AND CERTIFICATE OF CONSENT

As Netmarble EMEA FZ LLC (“NETMARBLE”), we hereby disclose in what way and under what circumstances we can process your personal data which we obtained by your submission and belong to you, in the capacity of Data Officer in accordance with the Personal Data Protection Law No. 6698 ("KVKK").

I. What is the method and legal reason for our collecting your personal data?

Your personal data consists of membership applications, registering or physical or electronic applications you made to Netmarble, and all the information and documents including your private data such as your healthcare information submitted to us in written or oral form or in electronic platform during after product purchasing from Netmarble, and this information are kept in physical or digital platforms.

In line with the basic principles envisaged by the KVKK, your personal data can be processed and transmitted to real and legal persons specified in the "Clarification and Consent Text" within the context of the personal data processing conditions and purposes stated in Articles 5 and 6 of the Corporate Tax Procedures Code with the purposes stated below.

II. By which purpose we process your personal data?

Our purpose of processing your personal data is to carry out our activities regarding activity subjects stated in the main agreement especially including online publishing, interactive services, activities, digital games and application products and services, to save the identification, membership creation, address and other necessary information to determine the operator’s data; to organize all the registrations and documents which will be a base to processing in electronic (internet) or physical platform, to control and inform the convenience of our products and services regarding age and gender, to inform about our products and services; to provide opportunities for you in order to benefit from membership, invitation, activities, and to carry out necessary processes in order to offer you these opportunities, to inform you about the advantages such as general and private campaigns, promotions, displays, discounts etc. and about the content and development of the activities, to carry out analyses in statistical studies in order to enhance services; and to comply with the data storing, reporting and informing liabilities set by the regulations and demanded by the companies and to carry out the requirements of the agreement.

Your data may be processed in line with Netmarble's interests and policies; to inform you of the content, possibilities and innovations related to products, services and/or activities of Netmarble, its sponsors and partners; to inform your parties about the information, activities and services that you will request; to match, verify, and process your personal data, preferences, transactions, navigation, and details along with the other data obtained on your login page using your username and password; to produce and manage applications related to our business activities; to provide you with the security of your personal data maintained by Netmarble and transfer it for the purpose of maintaining your data; to copy/back up to prevent data loss; to be able to send commercial electronic messages consensually in accordance with the applicable legislation; to make notifications (renewal, termination, etc.) regarding all applications, cards, memberships, products, services and services of Netmarble and related companies/organizations* website memberships which are issued and/or removed by Netmarble and its related companies/organizations*, to inform you of any communications that may be established, new services and products to be offered, changes in personal data policies and membership conditions and innovations; by Netmarble and its related companies/entities* and other real and/or legal entities specified in item 3 below, for the purpose of ensuring the fulfilment of legal obligations as required or required by statutory regulations and for other purposes stated in the Income Tax Code.

III. To whom and by which purpose we transfer your personal data?

Your personal data collected pursuant to the Articles I and II stated above and in KVKK can be transferred to Netmarble and related companies/organizations* including companies/organizations to be formed in the future and subsidiaries (*company shareholders and subsidiaries, workers, company personnel, legal, financial and tax advisors, auditors, advisors, companies, parties which the company receives complementary services and collaborates, international or domestic payment systems, payment services, electronic payment tools or companies, domestic or international financial and commercial authorities, corresponding banks when necessary and international/domestic member workplaces and third parties, partners and suppliers of these companies, real and/or legal shareholders; authorized public institutions and private persons), in accordance with the main principles prescribed by KVKK and with conditions and purposes of personal data processing stated in the Articles 8 and 9 of KVKK and the purposes above.

IV. As the data owner, what are your rights stated in the Article 11 of KVKK?

As the personal data owner, you have the rights,

to learn whether your personal data is processed; to request information about your personal data if it has been processed; to know the purpose of your personal data for processing and whether it is being used appropriately for its purpose; to know the third parties to whom your personal data is transferred, domestically or abroad; to request personal data to be corrected in the event that your personal data is incomplete or incorrectly processed, and to request third parties to be notified of the processing carried out in this context; to request deletion of your personal data in the event that the reasons for its processing are not met, despite the fact that it has been processed in accordance with the provisions of the KVKK and other relevant laws and to request third parties to whom your personal data is transferred to be notified of the action taken within this scope; to object to the occurrence of a consequence for yourself by analyzing your processed data exclusively through automated systems; to claim your damage to be compensated in case where your personal data is processed in violation of the law.

V. As the data owner, how will you be able to use your rights?

You may contact Netmarble by filling in the Application Form on the APPLICATION FORM link and sending it to the Netmarble EMEA FZ LLC Creative Tower, PO Box:4422, Fujairah, UAE address personally or by posting it via notary in order to use your above mentioned right under Article 11 of the KVKK. As personal data owners, if you submit your requests for your rights to Netmarble through the means set out above, Netmarble will conclude the request as soon as possible and within thirty (30) days at the latest, in accordance with the nature of the claim. However, if the transaction also requires a cost, Netmarble will charge the fee specified in the Personal Data Protection Board.

Also, you can always inform us about the change and/or updates on your personal data by contacting us from info@withbuff.com e-mail address or by applying personally to this address: Netmarble EMEA FZ LLC Creative Tower, PO Box:4422, Fujairah, UAE.

VI. What is the duration of processing your data?

In accordance with KVKK, your personal data processed for the purposes set forth in this Clarification and Consent text will be deleted, destroyed or used anonymously when the time required for processing according to KVKK cl7.1 is no longer met and/or the time limit for which we are obliged to process your data according to the legislation is expired.

VII. Conditions where Netmarble can process your data without your open consent, in accordance with KVKK:

In accordance with Article 5 of the KVKK, in cases where it is explicitly prescribed by law; where you are not able to explain your reasoning as data owner due to actual impossibility or where it is obligatory that your personal data is processed in order to protect your integrity or someone else's life or body in cases where legal reasoning is not granted; where the processing of personal data belonging to the parties to the contract is required, provided that it is directly related to the establishment or performance of a contract with Netmarble and its associated companies/entities*, other real and/or legal entities specified in item 3; where it is obligatory for Netmarble to fulfill a legal obligation; where your personal data is publicized by yourself; where data processing is mandatory for the establishment, use or protection of a right; where data process is obligatory for the legitimate interests of Netmarble, provided that it does not harm your fundamental rights and freedoms.

VIII. Precautions to protect your personal data:

Netmarble takes necessary precautions to protect against unauthorized access to personal data or the loss, misuse, disclosure, alteration or destruction of such information. Netmarble is committed to keeping your personal data confidential, ensuring your privacy and taking all necessary technical and administrative precautions and safety. In the event where Netmarble has been harmed or has been compromised by third parties as a result of attacks on the website and/or system, even though the necessary information security measures are taken by Netmarble, Netmarble will immediately notify you and the Personal Data Protection Board.

DECLARATION OF CONSENT

I hereby expressly acknowledge, represent and undertake that the necessary clarification is made, that I read and understand the text, and without any influence, I expressly consent to the processing of my personal data provided herein by Netmarble and the above named natural and legal persons.