VeVe StickerVerse Privacy Policy

Effective Date: 20 August 2026 · Last updated: 20 August 2026

VVeVe Stickerverse is operated by Orbis Technology Limited, a company registered in New Zealand.

Orbis Technology Limited (“VeVe”, “we”, “us” or “our”) operates VeVe Stickerverse, a Telegram-based digital collectible sticker platform accessible via @veve_stickerverse_bot on Telegram (“the App”).

We are committed to ensuring the privacy and protection of your personal information. This privacy policy describes the processing of personal information that is collected when you access and use VeVe Stickerverse or otherwise interact with us. This policy should be read alongside the VeVe Stickerverse Terms of Use and any other applicable policies.

Personal information, or personal data, means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

When you provide information on a third-party site or platform (including Telegram), the personal information you provide may be separately collected by that third-party site or platform. The personal information we collect is covered by this privacy policy, and the personal information the third-party site or platform collects is subject to its own privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the personal information we have collected directly through our services. VeVe Stickerverse may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites.

Privacy Policy Contents

• PART 1: PERSONAL INFORMATION WE COLLECT ABOUT YOU
• PART 2: HOW YOUR PERSONAL INFORMATION IS COLLECTED
• PART 3: HOW YOUR PERSONAL INFORMATION WILL BE USED
• PART 4: SHARING YOUR PERSONAL INFORMATION
• PART 5: YOUR RIGHTS
• PART 6: RETENTION OF YOUR PERSONAL INFORMATION
• PART 7: SECURITY
• PART 8: STORAGE AND INTERNATIONAL TRANSFERS
• PART 9: CHILDREN
• PART 10: CHANGES TO THIS PRIVACY POLICY
• PART 11: NOTICE TO RESIDENTS OF EU AND UK
• PART 12: HOW TO CONTACT US

Part 1: Personal Information We Collect About You

We may collect the following kinds of personal data about you:

Part 2: How Your Personal Information Is Collected

Information you give us. This includes information you provide when you connect your wallet, interact with drops, open packs, craft items, complete tasks for XP, refer other users, or otherwise use VeVe Stickerverse. It also includes information you provide when corresponding with us (for example, via Telegram or email).

Information we collect about you and your device. Each time you use VeVe Stickerverse we may automatically collect Device and Usage Data. We also collect information about your transactions including purchases, pack openings, minting activity, and crafting activity.

Information we receive from other sources. We may receive personal data about you from various third parties including:

• Payment and blockchain services: We may receive Transaction and Wallet Data from payment partners and blockchain infrastructure providers to process your transactions.
• Telegram: When you interact with VeVe Stickerverse through Telegram, we receive your Telegram user ID, username, and other information made available by Telegram in accordance with its terms and privacy policy.
• Third-party wallet providers: If you connect an external wallet (such as Tonkeeper or MyTonWallet), we receive your public wallet address. We do not receive or store your private keys.

Part 3: How Your Personal Information Will Be Used

We will only use your personal data when the law allows us to do so. Most commonly we will use your personal data in the following circumstances:

• Where you have consented before the processing.
• Where we need to perform a contract we are about to enter or have entered with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.

We use your personal information for the following purposes:

• To register you and set up your VeVe StickerVerse account.
• To process NFT drop purchases, pack openings, minting transactions (on-chain and off-chain), and related payments.
• To deliver the services that are part of VeVe Stickerverse, including drops, crafting, XP and levelling, referrals, leaderboards, and sticker sharing.
• To understand, diagnose, troubleshoot, and fix issues with the App, including through communications with our support team.
• To evaluate and develop new features, technologies, and other improvements to VeVe Stickerverse.
• To manage our relationship with you, including notifying you of changes to the App or our terms.
• To operate effective security measures for VeVe Stickerverse, including detecting and preventing bots, fraud, and other automated or unauthorised threats.
• To verify eligibility for rewards, referrals, and access to holder-only features, and to detect and prevent abuse of those features, including through multiple or fraudulent accounts, self-referral, or automated activity.
• To comply with legal obligations and law enforcement requests.
• To establish, exercise, or defend legal claims.
• To detect and prevent fraud, including fraudulent payments and fraudulent use of VeVe Stickerverse.
• To conduct business planning, reporting, and forecasting.
• For marketing, promotion, and advertising purposes where permitted by applicable law.

We also collect, use, and share aggregated data such as statistical or demographic data for any purpose. Aggregated data could be derived from your personal data but is not considered personal data in law as it will not directly or indirectly reveal your identity. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data in accordance with this privacy policy.

Part 4: Sharing Your Personal Information

Your Telegram username and profile information may be visible to other users within VeVe Stickerverse, for example on leaderboards or in connection with drop activity.

We may disclose your personal information to the following categories of recipients:

• Third-Party Service Providers and Business Partners: We may share your personal information with third-party service providers (such as those providing IT infrastructure, blockchain services, analytics, payment processing, or customer support) and third-party business partners who process personal information for purposes described in this privacy policy or who are otherwise notified to you when we collect your personal information. This may include wallet, identity, or infrastructure providers integrated into the App from time to time. Where such providers are used, they support wallet connection and management rather than identity or age verification; as set out in our Terms of Use, we do not currently carry out identity or age verification (KYC) checks. If this changes, we will update this policy.
• Blockchain Networks: When you move digital items on-chain, your public wallet address and transaction data are recorded on the TON blockchain, which is a public, decentralised ledger. This information is publicly accessible and cannot be deleted or modified by us.
• Ownership Verification Services: Where access to a feature or channel depends on holding a digital item, we may share or verify your public wallet address and holdings with a third-party verification service for that purpose.
• Competent Law Enforcement Bodies, Regulators, Government Agencies, Courts or other Third Parties: We may share your personal information where we believe disclosure is necessary: (i) to comply with applicable law; (ii) to exercise, establish or defend our legal rights; (iii) to protect your rights or vital interests or those of any other person; or (iv) to detect, prevent or otherwise address security, fraud or technical issues.
• Potential Buyers: We may share your personal information with actual or potential buyers (and their agents and advisors) in connection with any actual or proposed purchase, merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets or transition of service to another provider, provided that the buyer or transferee must use your personal information only for the purposes disclosed in this privacy policy.

Part 5: Your Rights

Consent: If we have collected and processed your personal information with your consent, you can withdraw your consent at any time by contacting us using the details provided under How To Contact Us. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Communications: We may send you certain non-promotional communications regarding VeVe Stickerverse and, to the extent permitted by law, you will not be able to opt out of those communications (for example, communications regarding updates to the Terms of Use or this privacy policy). For marketing communications, you can unsubscribe at any time by following the instructions provided or by contacting us.

Your rights over your personal information. Depending on the country you live in or where we are regulated, you may have some or all of the following rights:

• Access: to request a copy of the personal information we hold about you.
• Correction: to request that we correct personal information that is inaccurate or incomplete.
• Erasure: to request that we delete your personal information in certain circumstances.
• Restriction: to request that we restrict processing of your personal information in certain circumstances.
• Objection: to object to processing carried out on the basis of our legitimate interests, and to object to direct marketing at any time.
• Portability: to receive certain personal information in a structured, commonly used, machine-readable format, or to have it transmitted to another controller.
• Withdrawal of consent:as described above.

Automated decision-making. We use automated bot detection to identify abuse of rewards, referrals, and fair-access mechanisms, including bots, multiple accounts, and self-referral. Where abuse is detected, these systems may automatically restrict or suspend an account, or withhold or reverse XP. We may also restrict or suspend accounts manually.

If you are in the UK or EU and a decision made solely by automated means significantly affects you, you have the right to request that the decision be reviewed by a person, to express your point of view, and to contest the decision. If you believe your account has been restricted in error, contact us using the details under How To Contact Us and a member of our team will review it.

To exercise any of these rights, contact us using the details under How To Contact Us. We may need to verify your identity before responding. We will respond within the timeframe required by applicable law.

Important limitation regarding blockchain data. Where personal information such as a public wallet address and transaction history has been recorded on the TON blockchain, that data is permanent, publicly accessible, and outside our control. We cannot amend, delete, or restrict it, and requests to do so cannot be fulfilled in respect of on-chain records. This is an inherent characteristic of public blockchain technology. Rights of erasure, correction, and restriction can only be exercised in respect of personal information held in our own systems.

Part 6: Retention of Your Personal Information

We will retain your personal information for the length of time needed to fulfil the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law. In considering retention periods, we take into account various factors including contractual limitation periods and legal requirements such as tax and accounting rules.

Please note that on-chain transaction data recorded on the TON blockchain is permanent and cannot be deleted by us or any other party. This is an inherent characteristic of public blockchain technology.

Part 7: Security

We take steps to ensure that your information is treated securely and in accordance with this privacy policy. We maintain commercially reasonable safeguards designed to protect against unauthorised use, disclosure, or access of personal information. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

We will never ask you for your private keys, seed phrase, or wallet recovery phrase. Do not share these with anyone, including anyone claiming to represent us.

If a data breach occurs that poses a risk to your rights or privacy, we will notify affected users and any required regulators without undue delay, in line with our obligations under applicable law, including the New Zealand Privacy Act 2020 and, where applicable, UK and EU data protection law.

Part 8: Storage and International Transfers

We operate globally and may transfer your personal information to third parties in locations around the world for the purposes described in this privacy policy.

VeVe Stickerverse is hosted on Amazon Web Services, which is based in the United States, so your personal data may be transferred to and processed in the United States.

The App is accessed through Telegram. Telegram operates its own infrastructure and processes data in accordance with its own privacy policy and terms, which are outside our control.

A current list of the service providers we use, and the countries in which they are based, is available on request by contacting us using the details under How To Contact Us.

We may add or change service providers, including wallet and infrastructure providers, from time to time. Where we do, your personal data may be transferred to and processed in the countries where those providers are based. We will update this policy to reflect any material change.

Your personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection.

Wherever your personal information is transferred, stored, or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. In respect of the UK and EU, if your personal data is transferred to a country which has not been deemed to have adequate data protection rules, then these steps will include implementing standard contractual clauses where recognised by law. Further details on the steps we take to protect your personal information in these cases are available from us on request by contacting us using the details provided under How To Contact Us.

Additionally, on-chain data is stored on the TON blockchain, which is a decentralised network with nodes located globally. Data recorded on-chain is publicly accessible worldwide.

Part 9: Children

VeVe Stickerverse is not intended for or targeted at anyone under 18 years of age. You must be at least 18 years old to use VeVe Stickerverse, as set out in our Terms of Use.

We do not carry out identity or age verification (KYC) checks, and age is self-declared. This applies to all users from the effective date of this policy, including those who registered under a previous version. We do not knowingly collect personal information from anyone under 18. Please contact us using the details provided under How To Contact Us if you are aware that we may have inadvertently collected personal information from a person under 18, and we will take steps to delete that information.

Access to VeVe Stickerverse is through Telegram, and Telegram’s own terms and minimum age requirements apply to your use of Telegram.

Part 10: Changes to This Privacy Policy

From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements, or for other purposes. The version number and effective date of this policy are stated at the top of this document. Notice may be provided by posting the revised policy within VeVe Stickerverse, via Telegram notification, or by other means consistent with applicable law.

Part 11: Notice to Residents of EU and UK

For residents of the UK and EU, we are required to specify the lawful basis for the processing of your personal information. The lawful bases we rely on include:

• Performance of a contract: where processing is necessary to perform our contract with you (for example, to register your account, process transactions, and deliver the services).
• Legitimate interests: where processing is necessary for our legitimate interests or those of a third party, provided your interests and fundamental rights do not override those interests (for example, to improve our services, detect fraud, ensure security, conduct business planning, and provide marketing).
• Consent: where you have given consent to the processing (for example, for certain marketing communications). You may withdraw consent at any time.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation (for example, anti-money laundering requirements, law enforcement requests).

You have a right to lodge a complaint with your local Data Protection Supervisory Authority if you believe we have not complied with applicable data protection laws.

Part 12: How to Contact Us

For privacy queries, we can be contacted by emailing privacy@veve.me.

For legal or Terms of Use queries, contact vevelegal@veve.me..

For general support, contact @VeVeStickerverseCommunity on Telegram, or @VeVeSVSupportBot to raise a support ticket.

We have establishments for the purposes of data protection laws in various countries including the UK and the EU.