Privacy Policy.

We collect the following categories of personal information when you register for, access, or use the Platform:

(a) Information You Provide Directly

• Full legal name, date of birth, and contact information (email address, phone number, mailing address).
• Government-issued photo identification (for identity verification purposes).
• Biometric data, including a liveness image or video used to verify your identity against your photo ID, where required.
• Payment information, including debit card numbers, bank account details, or linked third-party payment account credentials.
• Username, password, and account preferences.
• Any communications you send to us, including customer support inquiries and feedback.

(b) Information Collected Automatically

• Device information, including device type, operating system, and unique device identifiers.
• IP address and general location data.
• GPS and precise location data, where you have granted permission or where required for identity verification or eligibility purposes.
• Usage data, including pages or screens viewed, features used, time spent on the Platform, and transaction history.
• Log data, such as access times, error reports, and referring URLs.

(c) Information from Third Parties

• Identity verification data from our third-party KYC provider (see Section 4 below).
• Payment processing data from third-party financial service providers.
• Fraud prevention and compliance data from third-party screening services.

We use the information we collect for the following purposes:

Account and Service Operations

• To create and manage your Packed Account.
• To process purchases, pack openings, inventory management, and withdrawals.
• To verify your identity and eligibility to use the Platform, including KYC and age verification.
• To determine your geographic eligibility to access the Services.
• To process and fulfill shipment requests for collectibles in your inventory.

Security, Compliance, and Fraud Prevention

• To detect, investigate, and prevent fraudulent transactions, cheating, money laundering, and other prohibited conduct.
• To comply with applicable federal and state laws and regulations, including anti-money laundering (AML) obligations.
• To enforce our Terms of Use and other policies.

Communications

• To send transactional notifications, such as purchase confirmations, shipment updates, and account alerts.
• To respond to your customer support inquiries.
• To send promotional or marketing communications, where you have consented or where permitted by applicable law.

Platform Improvement

• To analyze usage trends and improve the features, functionality, and performance of the Platform.
• To develop aggregated and de-identified data sets for internal analytics, algorithm development, and machine learning.

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers

We share information with trusted third-party vendors who assist us in operating the Platform, including payment processors, identity verification providers, shipping carriers, cloud hosting providers, and customer support tools. These service providers are contractually required to use your information only as directed by us and in accordance with this Privacy Policy.

Identity Verification – Coinflow

We use Coinflow to conduct KYC verification. When you submit identity documents or biometric data through the Platform, that information is processed by Coinflow in accordance with its own Terms of Service and Privacy Policy, available at https://coinflow.cash/terms-of-service/. By using the Platform, you agree to Coinflow’s applicable terms.

Legal and Regulatory Obligations

We may disclose your information when required to do so by law, regulation, legal process, or governmental request, including to comply with applicable federal or state laws, court orders, or regulatory inquiries.

Business Transfers

In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred to the successor entity as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Enforcement and Protection

We may share information when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Packed, our users, or the public, or to detect, prevent, or address fraud, security, or technical issues.

With Your Consent

We may share your information for any other purpose with your prior consent.

To comply with applicable laws and protect the integrity of our Platform, we are required to verify the identity of users who withdraw funds or access certain features. This process may involve the collection and processing of biometric data, including facial images or video recordings compared against your government-issued identification.

Biometric data is processed by our third-party KYC provider, Coinflow, on our behalf. We do not store raw biometric data on our own servers beyond what is necessary to complete the verification process. Biometric data is used solely for identity verification purposes and is not sold or used for advertising.

If you are a resident of a state with specific biometric privacy laws, additional rights and protections may apply to you. Please contact us at support@playpacked.com for more information.

Any payment information you store through the Platform, including debit card numbers, bank account details, or third-party payment account credentials, is stored locally on your mobile device through the Packed App. Packed does not store your full payment credentials on its own servers but may transmit that data to third-party payment processors as necessary to complete your transactions. All payment processing is conducted by our third-party payment partners, who maintain their own privacy and security standards.

You may remove stored payment information at any time through the App settings or by deleting the App.

We retain your personal information for as long as your Packed Account remains active, as necessary to provide you with the Services, and as required to comply with applicable legal obligations, resolve disputes, and enforce our agreements. When your account is deleted, we will take commercially reasonable steps to remove your personal information from our active systems, subject to our legal retention obligations and the retention of de-identified or aggregated data derived from your information.

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, or destruction. However, no security measure is perfect or impenetrable, and we cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials and for taking appropriate steps to secure your device.

In the event of a data breach that affects your personal information, we will notify you in accordance with applicable state breach notification laws.

Depending on the state in which you reside, you may have certain rights with respect to your personal information. These may include:

• The right to know what personal information we have collected about you and how it is used and shared.
• The right to access a copy of the personal information we hold about you.
• The right to request correction of inaccurate personal information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of the sale or sharing of your personal information (note: we do not sell personal information).
• The right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at support@playpacked.com. We will respond to verifiable requests within the timeframe required by applicable law. We may need to verify your identity before processing your request.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These include the right to know, delete, correct, and opt out of the sale or sharing of your personal information, as well as the right to limit the use of sensitive personal information. To submit a request, contact us at support@playpacked.com.

We and our third-party partners may use cookies, pixel tags, and similar tracking technologies on the Website to collect information about your browsing activity, preferences, and device. This information helps us operate and improve the Platform and may be used to deliver relevant content.

You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Website. The Packed App does not use browser cookies but may use similar device-based identifiers.

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a person under 18, we will take prompt steps to delete such information. If you believe a minor has provided us with personal information, please contact us at support@playpacked.com.

The Platform may contain links to third-party websites, applications, or services that are not operated or controlled by Packed. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will update the “Last updated” date at the top of this policy and notify you through the App or by email. Your continued use of the Platform after the updated policy takes effect constitutes your acceptance of the revised terms. If you do not agree with any changes, you must stop using the Platform.