Last Updated: 15th January 2026 | Effective Date: 2nd January 2023

1. OWNERSHIP AND SCOPE

This Privacy Policy is owned and operated by GameScript Ltd ("GS", "we", "us", or "our"), a company incorporated and based in Jersey, Channel Islands.

This website is intended for a global audience. While we provide specific disclosures for residents of the United States (including California), we process all personal data in accordance with the Data Protection (Jersey) Law 2018 (DPJL).

2. LEGAL BASIS FOR PROCESSING

Under Jersey law, we must have a "lawful basis" for processing your data. We rely on the following:

• Consent: Where you have given us clear consent (e.g., signing up for a newsletter or accepting cookies).
• Performance of a Contract: Where processing is necessary to provide the services you have requested.
• Legitimate Interests: Where processing is necessary for our business interests, such as improving website security, preventing fraud, and performing internal analytics, provided these do not override your fundamental rights.
• Legal Obligation: Where we must process data to comply with Jersey or international law.

3. INFORMATION WE COLLECT

We may collect and process the following categories of information:

• Identifiers: Such as name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, or account name.
• Internet Activity: Browsing history, search history, and information regarding your interaction with our Website or advertisements.
• Geolocation Data: Physical location or movements.
• Inferences: Profiles drawn from any of the above to reflect your preferences and characteristics.

4. INTERNATIONAL TRANSFERS OF DATA

GameScript Ltd is based in Jersey. Jersey is recognized by the European Commission and the UK government as providing an "adequate" level of data protection.

When we transfer your personal data to "Third Countries" (such as the United States), we ensure a similar degree of protection is afforded to it by implementing safeguards such as Adequacy Decisions, Standard Contractual Clauses (SCCs), or the EU-US Data Privacy Framework.

5. YOUR PRIVACY RIGHTS

Regardless of your location, you have significant rights over your data:

• Right of Access: You can ask for copies of your personal information.
• Right to Rectification: You can ask us to correct information you think is inaccurate.
• Right to Erasure: You can ask us to erase your personal information in certain circumstances.
• Right to Restriction/Objection: You can object to the processing of your data or ask us to restrict how we use it.
• Right to Data Portability: You can ask that we transfer the information you gave us to another organization.

6. CALIFORNIA RESIDENT SPECIFIC DISCLOSURES (CCPA)

In addition to the rights above, California residents have the following rights under the CCPA:

• Right to Know: The categories and specific pieces of personal information we have collected.
• Right to Opt-Out: The right to direct a business that sells/shares personal information to stop doing so. (Note: We do not sell your personal data for monetary value).
• Non-Discrimination: We will not discriminate against you for exercising any of these rights.

7. RESPONSE TIMING AND FORMAT

We endeavour to respond to a verifiable consumer request within 4 weeks (28 days) of its receipt. If we require more time (up to a maximum of 8 additional weeks for complex requests), we will inform you of the reason and the extension period in writing. Any disclosures we provide will cover the 12-month period preceding the request's receipt. We do not charge a fee to process your request unless it is manifestly unfounded or excessive.

8. CONTACT INFORMATION & COMPLAINTS

If you have any questions about this policy or wish to exercise your rights, please contact our Data Protection Officer:

Email: dpo@gamescript.ai
Postal Address: GameScript Ltd, First Floor, 17 The Esplanade, St. Helier, Jersey, JE2 3QA

Right to Complain to a Regulator: If you are not satisfied with our response, you have the right to lodge a complaint with the Jersey Office of the Information Commissioner (JOIC):

• Website: www.jerseyoic.org
• Email: enquiries@jerseyoic.org