Privacy Policy

Last updated: January 28, 2025

Thank you for choosing to be part of our community at DOS Labs Pte. Ltd. (together with its subsidiaries and affiliates, "Company", "we", "us", or "our"). We are committed to protecting your personal information. This Privacy Policy applies to all personal information collected through our platform, mobile applications, products and websites, including dos.me, id.dos.me, metados.com, doschain.com, explorer.doschain.com, stats.doschain.com, docs.doschain.com, forum.doschain.com, support.doschain.com, community.doschain.com, welcome.doschain.com, notify.doschain.com and services and related websites, and any related services, sales, marketing or events (collectively, the "Services").

When you access or use our Services, you trust us with your personal information. In this Privacy Policy, we describe how we collect, use, store and share your personal information and what rights you have in relation to it. If there are any terms in this privacy policy that you do not agree with, please discontinue access and use of our Services.

Please read this Privacy Policy carefully as it will help you make informed decisions about sharing your personal information with us. If you have any questions or concerns about our policy or our practices with regards to your personal information, please contact us at the email in the "Contact us" section.

1. What kinds of information do we collect?

Information you provide us

We collect personal information that you provide us through the Services, including when you use the Services, express an interest in obtaining information about our products or services, participate in activities and events related to the Services or otherwise contact us.

How we capture this data: We collect this information through web forms when you register, update your profile, make purchases, or interact with our services. Data is transmitted securely via HTTPS and stored in encrypted databases.

The personal information that we collect depends on the context of your interactions with us, the choices you make, the Services and the products and features you use, such as:

• Identity. First and last name, username, profile picture and other identifiers. When required by law, we may request additional information, such as identification documents, to verify your identity.
• Contact information. Email address, mailing address and phone number.
• Usage information. Information about how you use the Services, such as the products and features you use and actions you take.
• Marketing data. Your preferences for receiving our marketing communications and details about how you engage with them.
• User communications. Your communications when you contact us with questions or feedback, including feedback about the Services and customer support correspondences.
• Payment and financial information. Credit card information and other financial information when you make purchases or payments and related transaction information.
• Technical data. Blockchain wallet address and network transactions.

Information we automatically collect

How we capture this data: Our servers automatically record the following information when you access our Services. This data is captured through HTTP headers, browser APIs, server access logs, and analytics tools integrated into our platform.

• Device data. Browser and device characteristics, operating system, IP address, public blockchain wallet address and language preferences.
• Usage data. URLs, country, location, how and when you use the Services and other technical information.
• Transaction data. Information about your purchase activity or other transactions, such as product details, purchase price, and the date and location of the transaction.
• Cookies. We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Cookies are small text files stored on your device that help us identify your session and remember your preferences.

We use Google Analytics to help us offer you an optimized user experience. You can find more information about Google Analytics' use of your personal data here.

Information we collect from third party sources

How we capture this data: We receive this information through secure API integrations and OAuth authentication protocols when you connect third-party services to your account.

We may obtain information from third party sources, such as:

• Service providers, such as third-party service providers we use to facilitate commerce services, provide analytics or process payments.
• Gaming platforms (Steam, Epic Games, PlayStation, Xbox). When you link your gaming account through OAuth, we receive your platform user ID, display name, avatar, and publicly visible gaming statistics.
• Social accounts (Discord, Twitter/X, Facebook, Google, GitHub, Twitch). When you connect social accounts through OAuth, we receive your account ID, email address (if permitted by your privacy settings), display name, and avatar URL.
• Public sources, including blockchains and social media companies.

2. How do we use this information?

To provide and improve our service

We use your personal information to:

• Enable you to access and use the Services. Your identity and contact information are used to authenticate your account and maintain secure sessions.
• Provide and deliver products and services that you may request. Payment information is processed to complete transactions; contact information is used to send order confirmations and receipts.
• Maintain and improve our products and services. Usage data is analyzed in aggregate to identify technical issues and opportunities for improvement.
• Personalize your experience on the Services. Profile information and preferences are used to customize content, recommendations, and features for you.
• Process and complete transactions, and send you related information, including purchase confirmations and ticketing information.
• Facilitate events and provide information about events that you indicate an interest in.
• Send information, including technical notices, updates, security alerts and administrative messages to your registered email address.
• Provide support for the Services, including resolving issues and responding to your questions and feedback.

To comply with the law

In some cases, we have a legal obligation to collect or use your personal information. We use your personal information as we believe necessary or appropriate to:

• Comply with applicable laws, including anti-money laundering (AML) laws and know-your-customer (KYC) requirements.
• Comply with lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.

Compliance, fraud prevention and safety

We use your personal information as we believe necessary or appropriate to:

• Prevent, detect and investigate fraudulent, harmful or illegal activity, including cyberattacks and scams. IP addresses, device fingerprints, and usage patterns are analyzed to detect suspicious activity.
• Enforce the Terms of Use that govern the Services.
• Comply with our internal policies and procedures.

To send marketing communications

We and our third-party marketing partners may use your personal information for marketing purposes, such as to send you communications (including via text message and/or email as permitted by law) about promotions, upcoming events, and other news about products and services offered by us. You can opt-out of our marketing and promotional communications at any time (see the "Your choices" section).

Targeted advertising

We engage third party advertising partners to display ads to you. Our advertising partners may use cookies and similar technologies to collect information about your online activity for the purpose of targeting ads to you. You can learn more about how to opt-out of tracking technologies in the "Your choices" section.

Research and analytics

We may use your information for data analysis, including identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our services, products, marketing and your experience. We may use, store and share this information in aggregated or anonymized form so that it is not associated with individual end users and does not include personal information.

With your consent

We may use or share your personal information with your consent, such as when you consent to let us post your testimonials or endorsements on our Services, you instruct us to take a specific action with respect to your personal information, or you opt into third party marketing communications.

3. How do we share this information?

We do not sell your personal information. We disclose personal information to third parties under the following circumstances:

Service providers and professional advisors

How data is shared: We share data with service providers through secure API integrations, encrypted data transfers, and contractual agreements (Data Processing Agreements) that require them to protect your data and use it only for specified purposes.

Companies and individuals that provide services on our behalf or help us operate the Services, including:

• Payment processing: Payment and transaction information shared with payment processors (e.g., Stripe) to complete purchases securely.
• Customer support: Contact information and support tickets shared with helpdesk tools to resolve your inquiries.
• Marketing and email delivery: Email addresses shared with email service providers for transactional and marketing communications.
• Hosting and infrastructure: All data hosted on secure cloud providers (Google Cloud Platform, AWS) with enterprise-grade security.
• Analytics: Anonymized and aggregated usage data shared with analytics providers to improve our services.
• Identity verification services: Identity documents shared with KYC/AML providers when required by law.

Compliance with laws and law enforcement

How data is shared: We may be legally required to share data with law enforcement or government agencies through formal legal process (subpoenas, court orders, government requests).

For legal, protection and safety purposes, such as to:

• Comply with laws, including KYC and AML requirements.
• Respond to lawful requests and legal processes.
• Protect the rights and property of the Company, our agents, customers, and others.
• Protect the safety of our employees and agents, our customers or any person.

Affiliates

We may share your personal information with our subsidiaries and corporate entities affiliated for purposes consistent with this Privacy Policy, including MetaDOS Inc., DOS Labs Pte. Ltd., and related entities.

Business transactions

When we enter into a business transaction, or negotiate a business transaction, involving a corporate divestiture, merger, consolidation, acquisition, reorganization, bankruptcy, sale or other transfer of all or a part of our business or assets. We will notify users before data becomes subject to a different privacy policy.

Gaming platforms

How data is shared: When you link gaming accounts (Steam, Epic Games, PlayStation, Xbox), we exchange authentication tokens and identifiers through OAuth protocols to enable cross-platform features and display your gaming statistics.

4. International transfers

We and our service providers have offices in the United States, Singapore, and other countries. As such, your personal information may be processed in, transferred to or from the United States or other locations outside of your state, province, country or other governmental jurisdiction where data protection laws may not be as protective or comprehensive as those in your jurisdiction.

5. Retention

We retain personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods by data type:

Active Account Data

• Profile information (name, email, username, avatar): Retained while your account is active
• Connected gaming and social accounts: Retained until you disconnect them or delete your account
• Preferences and settings: Retained while your account is active
• Transaction and purchase history: Retained for the duration of your account plus 7 years for legal/tax compliance

After Account Deletion

• Personal data: Deleted from active databases within 30 days of account deletion request
• Backups: Purged from backup systems within 90 days
• Anonymized analytics: May be retained indefinitely (cannot be used to identify you)

Legal and Compliance Retention

• Transaction and payment records: Retained for 7 years for legal, tax, and audit compliance
• Security and access logs: Retained for 1 year for fraud prevention and security investigations
• KYC/AML verification records: Retained as required by applicable anti-money laundering laws (typically 5-7 years after account closure)
• Data subject to legal proceedings: Retained until the legal matter is fully resolved

Inactive Accounts

• Accounts inactive for more than 24 months may be flagged for deletion
• We will notify you via email before taking any action, giving you the opportunity to reactivate your account

In some circumstances we may anonymize your personal information such that it can no longer be associated with you, in which case we may use this information indefinitely without further notice to you.

6. How do we secure this information?

We employ appropriate technical and organizational security measures designed to protect the security of any personal information we process, including:

• Encryption in transit: All data transmitted using TLS 1.2/1.3
• Encryption at rest: Sensitive data encrypted using AES-256
• Authentication: Passwords hashed using industry-standard algorithms; support for two-factor authentication
• Infrastructure: Hosted on enterprise-grade cloud providers with SOC 2 Type II compliance
• Access controls: Strict employee access controls with role-based permissions; audit logging for all data access
• Security testing: Regular vulnerability assessments and penetration testing

However, the security of information transmitted through the internet can never be guaranteed. We are not responsible for any interception or interruption of any communications through the internet or for changes to or losses of data. Users of the Services are responsible for maintaining the security of any password, biometrics, user ID or other form of authentication involved in obtaining access to password protected or secure areas of any of our digital services.

7. Minors

We do not knowingly solicit data from or market to persons under the age of 18. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to delete such data from our records. If you become aware of any data we have collected from children under age 18, please contact us at privacy@metados.com.

8. Your choices

Access, update, correct or delete

You may contact us to request a copy of your personal information. You may also request that we update, correct or delete your personal information or that we update your preferences. We are permitted to request additional information from you to verify your identity and authority to delete the account.

Opt out of marketing communications

You may opt out of receiving newsletters, promotional emails and other marketing communications by following the instructions in such communications we send you.

Opt out of tracking technologies

Regular cookies may generally be disabled through the preferences and settings of most web browsers.

Opt out of Google Analytics

You may exercise choices regarding the use of cookies from Google Analytics by going to https://tools.google.com/dlpage/gaoptout and downloading the Google Analytics Opt-out Browser Add-on.

Do Not Track

Most web browsers and some mobile operating systems and mobile applications include a Do Not Track ("DNT") feature setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. We do not currently respond to DNT browser signals.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make any changes, we will change the Last Updated date above. We encourage you to periodically review the Privacy Policy for the latest information on our privacy practices.

Any modifications to this Privacy Policy will be effective upon our posting of the updated terms. In all cases, your continued use of the Services following the posting of any updated Privacy Policy indicates your acceptance of the terms of the updated Privacy Policy.

10. Contact us

We welcome your comments or questions about this Privacy Policy. You may contact us at:

11. Notice to California residents

California Civil Code Section 1798.83 permits individual California residents to request certain information regarding our disclosure of certain categories of personal information to third parties for those third parties' direct marketing purposes. To make such a request, please contact us using the information in the "Contact Us" section.

If you are a California resident, you have certain additional rights with respect to your personal information pursuant to the California Consumer Privacy Act of 2018 ("CCPA").

In the preceding 12 months, we have not sold any personal information of consumers.

We will not discriminate against any consumer for exercising their CCPA rights.

12. Notice to Nevada residents

If you are a Nevada resident, you have the right to opt out of the sale of certain personal information to third parties. At this time, we do not sell your information to third parties. If that were to change, we will update this Privacy Policy.

13. Notice for EEA

If you are a data subject in the European Economic Area, the United Kingdom or Switzerland, you have certain rights with respect to your personal data pursuant to the General Data Protection Regulation of the European Union ("GDPR"). This section applies to you.

References to "personal information" in this Privacy Policy are equivalent to "personal data" as defined under GDPR.

Company is the controller of your personal information as covered by this Privacy Policy for purposes of GDPR. Company's address is as follows:

Your rights

You may:

• Ask whether we have any personal data about you and request a copy of such personal data
• Request that we update or correct inaccuracies in your personal data
• Request that we delete your personal data
• Request a portable copy of your personal data
• Request that we restrict the processing of your personal data if such processing is inappropriate
• Object to our processing of your personal data

If you would like to exercise any of these rights, please contact us at the email in the "Contact us" section.

If you would like to submit a complaint about our use of your personal data or our response to your requests regarding your personal data, please contact us at the same email. You may also lodge a complaint with your local data protection authority.

Transfers outside of the EEA

If we transfer your personal data outside the European Economic Area, we will do so in accordance with the terms of this Privacy Notice and applicable data protection law, including through the use of Standard Contractual Clauses approved by the European Commission where required.