VeVe StickerVerse Privacy Policy

VeVe StickerVerse is operated by Orbis Technology Limited, a company registered in New Zealand.

Effective Date: 03 June 2026

Orbis Technology Limited ("VeVe", "we", "us" or "our") operates VeVe StickerVerse, a Telegram-based NFT minting and sticker collectible platform accessible via the @veve_stickerverse_bot on Telegram ("the App").

We are committed to ensuring the privacy and protection of your personal information. This privacy policy describes the processing of personal information that is collected when you access and use VeVe StickerVerse or otherwise interact with us. This policy should be read alongside the VeVe StickerVerse Terms of Use and any other applicable policies.

Personal information, or personal data, means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

When you provide information on a third-party site or platform (including Telegram), the personal information you provide may be separately collected by that third-party site or platform. The personal information we collect is covered by this privacy policy, and the personal information the third-party site or platform collects is subject to its own privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the personal information we have collected directly through our services. VeVe StickerVerse may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites.

Privacy Policy Contents

• PART 1: PERSONAL INFORMATION WE COLLECT ABOUT YOU
• PART 2: HOW YOUR PERSONAL INFORMATION IS COLLECTED
• PART 3: HOW YOUR PERSONAL INFORMATION WILL BE USED
• PART 4: SHARING YOUR PERSONAL INFORMATION
• PART 5: YOUR RIGHTS
• PART 6: RETENTION OF YOUR PERSONAL INFORMATION
• PART 7: SECURITY
• PART 8: STORAGE AND INTERNATIONAL TRANSFERS
• PART 9: CHILDREN
• PART 10: CHANGES TO THIS PRIVACY POLICY
• PART 11: NOTICE TO RESIDENTS OF EU AND UK
• PART 12: HOW TO CONTACT US

Part 1: Personal Information We Collect About You

We may collect the following kinds of personal data about you:

Part 2: How Your Personal Information Is Collected

Information you give us. This includes information you provide when you connect your wallet, interact with drops, open packs, participate in the Forge, complete tasks for XP, or otherwise use VeVe StickerVerse. It also includes information you provide when corresponding with us (for example, via Telegram or email).

Information we collect about you and your device. Each time you use VeVe StickerVerse we may automatically collect Device and Usage Data. We also collect information about your transactions including NFT purchases, pack openings, minting activity, and Forge exchanges.

Information we receive from other sources. We may receive personal data about you from various third parties including:

• Payment and blockchain services: We may receive Transaction and Wallet Data from payment partners and blockchain infrastructure providers to process your transactions.
• Telegram: When you interact with VeVe StickerVerse through Telegram, we receive your Telegram user ID, username, and other information made available by Telegram in accordance with its terms and privacy policy.
• Third-party wallet providers: If you connect an external wallet (such as Tonkeeper or MyTonWallet), we receive your public wallet address. We do not receive or store your private keys.

Part 3: How Your Personal Information Will Be Used

We will only use your personal data when the law allows us to do so. Most commonly we will use your personal data in the following circumstances:

• Where you have consented before the processing.
• Where we need to perform a contract we are about to enter or have entered with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We use your personal information for the following purposes:

• To register you and set up your VeVe StickerVerse account.
• To process NFT drop purchases, pack openings, minting transactions (on-chain and off-chain), and related payments.
• To deliver the services that are part of VeVe StickerVerse, including drops, the Forge, XP and levelling, leaderboards, and sticker sharing.
• To understand, diagnose, troubleshoot, and fix issues with the App, including through communications with our support team.
• To evaluate and develop new features, technologies, and other improvements to VeVe StickerVerse.
• To manage our relationship with you, including notifying you of changes to the App or these terms.
• To operate effective security measures for VeVe StickerVerse, including detecting and preventing bots, fraud, and other automated or unauthorised threats.
• To comply with legal obligations and law enforcement requests.
• To establish, exercise, or defend legal claims.
• To detect and prevent fraud, including fraudulent payments and fraudulent use of VeVe StickerVerse.
• To conduct business planning, reporting, and forecasting.
• For marketing, promotion, and advertising purposes where permitted by applicable law.

We also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as it will not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data in accordance with this privacy policy.

Part 4: Sharing Your Personal Information

Your Telegram username and profile information may be visible to other users within VeVe StickerVerse, for example on leaderboards or in connection with drop activity.

We may disclose your personal information to the following categories of recipients:

• Third-Party Service Providers and Business Partners: We may share your personal information with third-party service providers (such as those providing IT infrastructure, blockchain services, analytics, payment processing, or customer support) and third-party business partners who process personal information for purposes described in this privacy policy or who are otherwise notified to you when we collect your personal information. This may include services such as Privy or other wallet and identity providers integrated into the App.
• Blockchain Networks: When you mint on-chain NFTs, your public wallet address and transaction data are recorded on the TON blockchain, which is a public, decentralised ledger. This information is publicly accessible and cannot be deleted or modified by us.
• Competent Law Enforcement Bodies, Regulators, Government Agencies, Courts or other Third Parties: We may share your personal information where we believe disclosure is necessary: (i) to comply with applicable law; (ii) to exercise, establish or defend our legal rights; (iii) to protect your rights or vital interests or those of any other person; or (iv) to detect, prevent or otherwise address security, fraud or technical issues.
• Potential Buyers: We may share your personal information with actual or potential buyers (and their agents and advisors) in connection with any actual or proposed purchase, merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets or transition of service to another provider, provided that the buyer or transferee must use your personal information only for the purposes disclosed in this privacy policy.

Part 5: Your Rights

Consent: If we have collected and processed your personal information with your consent, you can withdraw your consent at any time by contacting us using the details provided under How To Contact Us. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Communications: We may send you certain non-promotional communications regarding VeVe StickerVerse and, to the extent permitted by law, you will not be able to opt out of those communications (e.g., communications regarding updates to the Terms of Use or this privacy policy). For marketing communications, you can unsubscribe at any time by following the instructions provided or by contacting us.

Other rights: Depending on the country you live in or where we are regulated, you may also have other rights in relation to your personal information (for example, under EU, UK, and certain US state laws). Please contact us using the details provided under How To Contact Us if you would like to know more or to make a request.

Part 6: Retention of Your Personal Information

We will retain your personal information for the length of time needed to fulfil the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. In considering retention periods, we take into account various factors including contractual limitation periods and legal requirements such as tax and accounting rules.

Please note that on-chain transaction data recorded on the TON blockchain is permanent and cannot be deleted by us or any other party. This is an inherent characteristic of public blockchain technology.

Part 7: Security

We take steps to ensure that your information is treated securely and in accordance with this privacy policy. We maintain commercially reasonable safeguards designed to protect against unauthorized use, disclosure, or access of personal information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Part 8: Storage and International Transfers

We operate globally and may transfer your personal information to third parties in locations around the world for the purposes described in this privacy policy. Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection.

Wherever your personal information is transferred, stored, or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. In respect of the UK and EU, if your personal data is transferred to a country which has not been deemed to have adequate data protection rules, then these steps will include implementing standard contractual clauses where recognised by law. Further details on the steps we take to protect your personal information in these cases are available from us on request by contacting us using the details provided under How To Contact Us.

Additionally, on-chain NFT data is stored on the TON blockchain, which is a decentralised network with nodes located globally. Data recorded on-chain is publicly accessible worldwide.

Part 9: Children

VeVe StickerVerse is not targeted at children under 16 years of age and we do not knowingly collect personal information from children under 16 (or the minimum age required to use VeVe StickerVerse and give valid consent to the collection and processing of personal information in your country, if higher). Please contact us using the details provided under How To Contact Us if you are aware that we may have inadvertently collected personal information from a child.

Part 10: Changes to This Privacy Policy

From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements, or for other purposes. The effective date of this policy is stated at the top of this document. Notice may be provided by posting the revised policy within VeVe StickerVerse, via Telegram notification, or by other means consistent with applicable law.

Part 11: Notice to Residents of EU and UK

For residents of the UK and EU, we are required to specify the lawful basis for the processing of your personal information. The lawful bases we rely on include:

• Performance of a contract: where processing is necessary to perform our contract with you (e.g., to register your account, process transactions, and deliver the services).
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests (e.g., to improve our services, detect fraud, ensure security, conduct business planning, and provide marketing).
• Consent: where you have given consent to the processing (e.g., for certain marketing communications). You may withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation (e.g., anti-money laundering requirements, law enforcement requests).

You have a right to lodge a complaint with your local Data Protection Supervisory Authority if you believe we have not complied with applicable data protection laws.

Part 12: How to Contact Us

For privacy queries, we can be contacted by emailing privacy@veve.me.

We have establishments for the purposes of data protection laws in various countries including the UK and the EU.