• ID and Password for Game accounts and online accounts (Sony Accounts, Nintendo Accounts and Network Service Accounts, Microsoft Accounts, Steam Accounts or Epic Accounts) of customers who use the Service;
• Cookies and other terminal identifiers and attribute information of customers who access the Website (such as, age, gender, interests’ categories, affinity categories, in-market segments. For more information about interests categories, affinity categories, in-market segments, visit https://support.google.com/analytics/answer/12948931);
• IP addresses, provider information, terminal information and web browser information of customers who access the Website;
• Names, email addresses, the play time and date of accessing the Game, ID and Password for online accounts (Sony Accounts, Nintendo Accounts, Microsoft Accounts or Steam Accounts), and system requirements of customers who contacted Customer Support;
• Other personal information collected by the Company in connection with the Services, the Website, and the Customer Support (if required by applicable laws and regulations, the Company shall obtain such personal information after separately notifying the customers).

• to provide the performance of the Service, and to handle faults in the Game and diagnose its problems;
• to analyze the attributes of customers who accessed the Website and improve our customers’ experience when they access the Website;
• to analyze the use of the Website, to maintain, handle faults in and operate and improve the Website, and to diagnose server problems;
• to respond to inquiries made by customers to Customer Support;
• if required, to respond to disputes and litigation and to comply with our legal obligations;
• to conduct other business operations necessary to provide the Service and services incidental thereto;
• to develop new services;
• to send updates, promotions, and marketing materials that may be of interest to you;
• with your consent, or as otherwise disclosed at the time information is collected;
• for our recordkeeping purposes;
• to maintain security of the Service and the Website including preventing fraud and cyber-attacks; and
• for other purposes permitted under applicable laws and regulations.

• ID and Password for Game accounts and online accounts (Sony Accounts, Nintendo Accounts and Network Service Accounts, Microsoft Accounts, or Steam Accounts) of customers who use the Service:
  As long as it is necessary for the Company to provide the Service. Once the performance of the Service is achieved, the personal information are not kept.
• Cookies and other terminal identifiers and attribute information of customers who access the Website:
  Within 14 months

• ID and Password for Game accounts and online accounts (Sony Accounts, Nintendo Accounts and Network Service Accounts, Microsoft Accounts, Steam Accounts or Epic Accounts) of customers who use the Service which the Company collects from platforms providing the Service such as Sony Interactive Entertainment LLC, Nintendo Co., Ltd., Microsoft Corporation, Valve Corporation and Epic Games, Inc.; and
• attribute information of customers who access the Website which the Company obtains from The Website Traffic Analysis Service Provider such as Google LLC.

• Platforms providing the Service such as Sony Interactive Entertainment LLC, Nintendo Co., Ltd., Microsoft Corporation Valve Corporation and Epic Games, Inc.;
• The Game Developer such as Lasengle Inc., Unknown Corporation, TAMSOFT CORPORATION, and Gemdrops, Inc.;
• The Website Production and Maintenance Service Provider such as ESBrain,Inc., Kirksville co.,ltd., Aniplex of America Inc. and Amazon Web Services, Inc.;
• The Customer Support Service Provider such as DIGITAL HEARTS Co., Ltd.;
• The Website Traffic Analysis Service Provider such as Google LLC; and
• Other contractors of the Company

○ Legal compliance, etc.
In some instances, the Company may be required to disclose your personal information to public and governmental authorities within or outside your country of residence in accordance with law and/or requests from such authorities. The Company will also disclose your personal information if the disclosure is necessary or appropriate, due to the purposes of law enforcement or handling other issues of public importance. The Company will also disclose your personal information if the disclosure is reasonably necessary to protect the Company’s rights, to pursue available remedies, to enforce the Company’s terms of use, to investigate fraud, or to protect the Company’s operations or customers.

○ Other
In addition, we may also share personal information of customers with other parties, including:

• As part of a corporate sale, merger, or acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding;
• Cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal's consent;
• With your consent;
• Other cases permitted under applicable laws and regulations.

We may share information that has been de-identified or aggregated without limitation.

• United States of America.

In such cases, the Company will take proper protection measures required by the personal information protection regulation of each country. For the protection measures of each country, please refer to the country-specific exhibits.

• Formulation of basic policies: to secure proper processing of personal information, the Company will form basic security policies e.g. “compliance with related laws, regulations, guidelines, and the like”, “questions and complaints processing center”, etc.
• Preparation of procedures related to processing of personal information: in each of the steps of acquiring, using, storing, providing, deleting, disposing etc, the Company will form processing procedures for personal information regarding processing methods, responsible persons, persons in charge and their duties etc;
• Organizational safety management measures: the Company will, as well as identifying persons responsible for the processing of customers personal information, clarify which employees will process personal information and the scope of personal information that such employee will process, and prepare a reporting and communication system if a breach of such access rights is found or a breach of any personal information is found (in accordance with applicable personal information protection regulations).
• Human safety management measures: The Company will conduct regular training for employees for important matters regarding processing of personal information.
• Physical safety management measures: In the areas that personal information will be processed, the Company will, as well as managing employees’ access of rooms and limiting devices that would be brought into the room, take measures to prevent access to personal information by persons without authority. The Company will, take measures to prevent robbery, loss or unauthorised access etc. devices, electronic media, documents and anything else containing personal information.
• Technical safety management measures: The Company will limit the number of persons in charge and the scope of personal information databases accessible by persons. The Company will install systems to protect information systems that process personal information from unauthorized access and unauthorized software from outside.
• Grasping the external environment: The Company will take safety management measures after grasping systems regarding protection of personal information in the United States where personal data are stored.

• Reports on user attributes and interest categories of Google Analytics

The Company and third-party vendors including Google Analytics combine first party cookies (or other first party IDs) and third party cookies such as Google advertising cookies (or other third party IDs) to analyze customers attributes and interests.

○ Third-Party Links and Tools
The Website and Service may provide links to third-party websites or apps. We do not control the privacy practices of those websites or apps, and they are not covered by this Privacy Policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices. The Website also includes integrated social media tools or “plug-ins,” such as social networking tools offered by third parties. If you use these tools to share personal information or you otherwise interact with these features on the Site, those companies may collect information about you and may use and share such information in accordance with your account settings, including by sharing such information with the general public. Your interactions with third-party companies and your use of their features are governed by the privacy policies of the companies that provide those features. We encourage you to carefully read the privacy policies of any accounts you create and use.

• the earlier of the date on which you use the Service, access the Website, or make inquiries to the Customer Support for the first time after receiving such notice, or
• the date stated in such notice.

If there are any necessary procedures in personal information protection regulations that will be applied, such procedures will be taken.

• Obtaining information regarding data processing: You have the right to obtain from us all necessary information regarding our processing of your data (GDPR Article 13 and Article 14).
• Access to personal information: You have the right to obtain confirmation from us as to whether or not personal information concerning you are being processed, and, where that is the case, to access personal information and certain information (GDPR Article 15).
• Rectification and erasure (“right to be forgotten”) of personal information: You have the right to have us rectify inaccurate personal information concerning you without undue delay and have incomplete personal information completed by us (GDPR, Article 16). You also have the right to have us erase personal information concerning you without undue delay when certain grounds apply (GDPR Article 17).
• Restricting processing of personal information: You have the right to restrict our processing of personal information concerning you when certain conditions are met (GDPR Article 18).
• Objection to processing of personal information: You have the right to object to our processing of personal information concerning you when certain conditions are met (GDPR Article 21(1)).
• Objection to direct marketing: You have the right to object at any time to processing of personal information for direct marketing, which includes profiling to the extent that it is related to such direct marketing (GDPR Article 21(2)).
• Personal information portability: You have the right to receive personal information concerning you in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from us, when certain conditions are met (GDPR Article 20).
• Freedom from automated individual decision-making, including profiling: You have the right to not be subject to a decision based solely on automated (no human involvement) processing (including profiling), which produces legal effects or similar significant effects on you, when certain conditions are met (GDPR Article 22).
• You may lodge a complaint regarding our processing of your personal information with the data protection supervisory authority of the member state where you live or work or where the alleged infringement took place (GDPR Article 77) or, if you live in the United Kingdom, with the Information Commissioner of the United Kingdom.

Our representative in the EU:
Name: Sony Europe BV
Address: Taurusavenue 16, 2132LS Hoofddorp, the Netherlands
email: privacyoffice.SEU@sony.com
Our representative in the UK:
Name: Sony Europe BV
Address: The Heights, Brooklands, Weybridge, Surrey KT13 0XW, The United Kingdom
email: privacyoffice.SEU@sony.com

Last reviewed: January 14, 2027 For a printable version of the Privacy Policy, please click here（https://meltyblood.typelumina.com/privacy/en_globalprivacypolicy_2024.pdf）.

California Privacy Rights
This section applies to customers residing in California and applies only to “personal information” that is subject to the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”). “Personal information” is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual, device, or household. It includes disclosures required under CCPA. We may update this Privacy Policy from time to time. You should not use the Service if you have any objections to our Privacy Policy, which is binding upon all users of the Service. If you have a question about how your personal information is being used, you can contact us through the methods provided in the “Contact Details” section at the end of this Privacy Policy.

• Personal and online identifiers (such as first and last name, address, phone number, unique online identifiers, IP addresses, email addresses, account names, etc.)
• Characteristics of protected classifications under California or federal law (age, gender, etc.)
• Commercial information including products or services purchased, obtained, or considered and in-game play time
• Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement)
• Inferences drawn from the above information about your predicted characteristics and preferences
• Other information about you that is linked to the personal information above
• De-identified information. We maintain and use all de-identified information in de-identified form.

• Our business purposes as identified in CCPA include:
  Auditing related to our interactions with you;
  Legal compliance;
  Detecting and protecting against security incidents, fraud, and illegal activity;
  Debugging;
  Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;
  Internal research for technological improvement;
  Internal operations;
  Activities to maintain and improve our services; and
  Other one-time uses.
• Our commercial purposes as identified in CCPA include:
  Advertising;
  Marketing

• a. The right to know the categories of California Personal Information that we have collected concerning you, the categories of information sources from which we collect that California Personal Information, our business or commercial purpose for collecting or selling California Personal Information, the categories of third parties with whom we disclose California Personal Information, and specific pieces of California Personal Information that we have collected concerning you.
• b. The right to request deletion of the California Personal Information concerning you that we have collected from you.
• c. The right to correct California Personal Information that is inaccurate.
• d. The right to data portability, which is the right to receive the personal information that you have given us, in a structured, commonly used and machine-readable format. You have the right to send that personal information to another controller if the processing is based on consent pursuant on a contract and is carried out by automated means.
• e. The right to opt-out of profiling, which is the right not to be subject to a decision based solely on profiling, except under certain exceptions under applicable laws.
• f. The rright not to be discriminated againstr by us on the grounds of your exercise of privacy rights granted under CCPA.
• g. Shine the Light. As a California resident, under California’s Shine the Light law (California Civil Code § 1798.83) you may request that we provide a list of the categories of personal information that we have disclosed to third parties for direct marketing purposes in the most recent calendar year, and the names and addresses of those third parties. You also may request that we do not share your personal information with third parties for marketing purposes. To make such a request, please contact us through the methods provided in the “Contact Details” section below.

You can make a request to exercise the above rights by contacting us using the contact details specified in Section 9 below.
Verification procedures and necessary information: We may request that you provide additional information to verify your identity or to correctly understand, evaluate and respond to your request, but you are not required to create an account with us in order to submit or achieve any request. We ask you to provide specific personal information for our records and reference. We will require you to provide, at a minimum name and email address.
Agent: You may nominate an agent who is authorized to make requests on your behalf. You may do so by giving your agent written permission to act on your behalf. Even if you choose to use an agent, to the extent permitted by law, there may be cases where we request a new verification when responding to a request.
Minors’ Right to Opt In. We do not have actual knowledge that we sell the personal information of minors under 16 years of age.
“Do Not Sell or Share My Personal Information.” You have the right to opt-out of the sale or sharing of your California Personal Information for targeted advertising purposes of your California Personal Information. We do not sell the personal information of consumers we actually know are less than 16 years old. If you wish to exercise this right, you may submit a request to twilumina_support@aniplex.co.jp or you can block the collection of information by our third-party advertising partners in the cookie preference tool also available.

If you have any questions or concerns regarding our privacy policies and practices or your options and rights under California law, please contact us using the contact details specified in Section 13 (Contact details) of the Global Privacy Policy.
Email us at: twilumina_support@aniplex.co.jp
Nevada Privacy Rights
Although we do not currently conduct sales of personal information, Nevada residents may submit a request directing us to not sell personal information we maintain about them if our practices change in the future.

• our affiliates and/or other service providers that provide development and maintenance, administrative, data processing, research and marketing, distribution, IT and telecommunications, digital storage, professional, or other similar services to us. This includes, without limitation, cloud hosting service providers, which provides us with digital storage services on its servers;

• ascertain whether we hold any of your personal information;
• request access to your personal information held by us (and be given reasons if such a request is refused, and object to such a refusal);
• require us to correct any personal information which is inaccurate (and be given reasons if such a request is refused, and object to such a refusal);
• ascertain our policies and practices (from time to time) in relation to personal information generally, and the types of personal information held by us; and
• withdraw consent from receiving direct marketing from us at any time.

If you would like to make a request in relation to the above (or make any general enquiries), please send us your request or enquiry in writing as set out in the Privacy Policy as supplemented by this Exhibit in paragraph 9 below.
In accordance with the PDPO, we have the right to charge you a reasonable fee for the processing of any personal information access request.