WinnerPoints APP Privacy Policy

Effective Date of Privacy Policy: August 6, 2025

Latest Update Date: April 18, 2026

The trust of users ("you") is very important to us. We fully understand that you care about how your personal information is used and shared. We regard the protection of your privacy as a top priority and will take appropriate security protection measures in accordance with applicable laws and regulations to protect your personal information and keep it secure and controllable to the best of our ability. In view of this, the developer of the WinnerPoints app, WINNERPOINTS LIMITED. ("WinnerPoints" or "we"), has formulated this Privacy Policy ("this Policy" or "this Privacy Policy") and hereby reminds you:

Before using the products and services of WinnerPoints, please carefully read and fully understand this Policy. Once you choose to use or continue using the services, you acknowledge and accept the current contents of this Policy and any content that may be updated from time to time, and agree that we may collect, use, disclose, store, share, or otherwise process your relevant information in accordance with this Policy.

By accessing or using our website global.winnerpoints.com and its domain name, as well as any other pages, functions, content, mobile applications, or other services provided through its links or provided by us from time to time, collectively referred to as the "Website/APP," or by using the Product in any manner, as defined in the End User License Agreement, and clicking the "Agree" button, you confirm that you accept the practices and policies described in this Privacy Policy and hereby agree that we may collect, use, and share your information in the manner described below. If you do not agree to this Policy, please do not use the related services of this APP.

I. Scope of Application of this Privacy Policy

This Privacy Policy covers how we process personal information that can identify you ("Personal Information") when you access or use our Website and Product. This Policy does not apply to the practices of companies that we do not own or control, or individuals that we do not employ or manage.

We will not collect personal information from minors under the age of 14 without the consent of their guardians. If you are the guardian of a minor, please properly supervise the minor's use of this APP. If we discover that we have collected information from a minor without consent, we will delete such information immediately.

II. Personal Information We Collect and Use

We collect your personal information only for the purpose of implementing the core functions of this APP and improving service quality, and only after obtaining your explicit and separate consent. Our collection of personal information strictly follows the principle of "minimum necessity." We do not collect personal information unrelated to the services. The types of personal information actually collected and the permissions requested to collect and use personal information are consistent with the scope described in this Privacy Policy and do not exceed the agreed scope.

(I) Information You Actively Provide

We will receive and store any information that you voluntarily provide. The relevant collection purpose, method, and scope will be separately and clearly notified to you in the corresponding service scenario, and such information will be collected only after obtaining your consent. We will not arbitrarily expand the scope of collection. For example:

Registration/Login: mobile phone number, username, password, stored in encrypted form
Service Use: name, email address, location information, tennis match scoring and performance data

You may choose not to provide such information, but this may prevent you from using the corresponding functions. We will anonymize the information and use it only in aggregated form for service optimization. We will not disclose information that can identify you to third parties.

(II) Device-Related Information

Sensitive Information; Separate Consent Required

After you agree to this Policy, we will collect identifiers of your device, such as Android ID and IDFA, for device unique identification, account security verification, application stability assurance, crash analysis, and troubleshooting of abnormalities, in order to ensure the safe and stable operation of the services.

We automatically obtain such information through system interfaces, follow the principle of data minimization, and use encryption technology to securely store and transmit it. The retention period will be the shortest period necessary to achieve the relevant purposes. We will not sell such information and will not share it with third parties without your permission. You may access, copy, delete relevant information, or withdraw your consent. Refusal to provide such information will not affect your use of the basic functions of the APP.

To ensure the normal operation of the APP, identify device identity, maintain account security, optimize service experience, and troubleshoot system failures, we will collect the following device-related information after obtaining your separate consent:

1. Device MAC Address

Purpose of collection: connecting to servers, ensuring basic functions, troubleshooting, and log recording

Method of collection: automatically read and uploaded when the APP starts

Scope of collection: the unique MAC address of the current device, not associated with personal identity

Retention period: 180 days; automatically anonymized upon expiration

(III) Clipboard Information

Sensitive Information; Separate Consent Required

To provide a convenient operation experience, such as identifying verification codes, quickly filling in addresses or passcodes, we will collect your clipboard information after obtaining your separate consent:

Purpose of collection: used only for convenient operations, including verification code recognition, address filling, and passcode redirection, and not used for any other purpose

Method of collection: read only when paste, verification code filling, or similar scenarios are triggered; no silent background reading

Scope of collection: only content related to APP services is read; unrelated content is deleted immediately and is not stored

Retention period: processed immediately and not stored for a long period

Authorization management: you may disable clipboard permission in system settings. Disabling it will not affect core functions.

(IV) Other Information Automatically Collected by the System

When you interact with our Website/APP, we will automatically receive and record server log information from your browser, including your IP address, Cookie information, and requested pages. Cookies are used to identify your device and collect access statistics. You may disable Cookies in your browser settings, but this may affect the experience of certain functions.

Retention period: log information is stored for 90 days and automatically deleted upon expiration.

III. Rules for the Collection and Use of Personal Information

We collect and use your personal information strictly in accordance with this Privacy Policy and do not exceed the stated scope.
If this Policy is updated through hot update, we will provide prominent notice through APP pop-ups or notifications, and obtain your explicit consent again before the update. After the update, we will promptly update the APK-MD5 or resubmit for inspection to ensure compliance.
Information will be used only for the purposes expressly stated in this Policy. Any use beyond the stated scope requires your explicit consent again.
We follow the principle of "minimum necessity," store information in encrypted form, and take measures such as access control and security audits to prevent leakage, tampering, or loss.
All information transmission uses the HTTPS secure protocol to ensure transmission security.

IV. Rules for Sharing Personal Information

We will not rent or sell your personal information. We will share it only under the following circumstances and in strict compliance with laws and regulations:

Affiliates/Partners: shared when necessary to provide services, subject to the signing of data processing agreements
Agents/Service Providers: used only within the authorized scope and not processed beyond such scope
Business Transfer: in the event of merger, acquisition, or bankruptcy, information may be transferred as an asset, and the transferee must comply with this Policy
Legal Requirements: to comply with instructions from judicial or administrative authorities, or to protect the legitimate rights and interests of us, users, or others
Your Explicit Consent: shared after obtaining your separate consent

V. Your Rights Regarding Personal Information

You may access, edit, or delete certain information through account settings, including your name, password, email address, personal profile, and tennis match information. Automatically uploaded match data cannot be modified.

Account Cancellation

Cancellation path: You may submit an account cancellation request by clicking: [Specific path: Me -> Settings -> Account and Security -> Cancel Account]

Effect of cancellation: Once your account is cancelled, you will no longer be able to log in to that account or use our products and services. All personal information, historical data, and rights and interests under that account, such as points and balances, will be cleared and cannot be recovered.

Processing period: After receiving your cancellation request and verifying your identity, we will complete verification and processing within 15 working days.

Data processing after cancellation: After account cancellation is completed, unless otherwise required by laws and regulations, we will stop providing products or services to you and delete your personal information or anonymize it.

You may also apply for account cancellation by sending an email to cs@winnerpoints.com. We will process your request within 15 working days.

VI. Information Security and Storage

Your account is protected by a password. Please properly keep your password and identity information secure. We take measures including encrypted storage, permission control, security audits, and vulnerability monitoring to protect information security. However, the internet environment is not absolutely secure. This APP may contain third-party links. We are not responsible for the privacy policies of third parties. Please access such links with caution.

VII. Changes to this Privacy Policy

We may modify this Policy from time to time. Non-material changes will be announced through APP notices. Material changes or hot updates will be prominently notified through pop-ups, and will take effect only after obtaining your explicit consent again. Your continued use of the services indicates that you accept the updated Policy.

VIII. Other Provisions

Matters not covered by this Policy shall be handled in accordance with relevant laws, regulations, and regulatory requirements. If you have any questions, comments, or complaints, please contact us at cs@winnerpoints.com. We will respond and process your request within 15 working days.

This Privacy Policy takes effect from the date you click "Agree." Updated versions will take effect from the date you agree to them.