This Privacy Policy (“Policy”) describes how HUYA PTE. LTD. and its affiliates (collectively, “we,” “us,” or “our”) collect, use, store, share, and protect your personal information when you access, register for, or use the Binkbink platform and its related services, including but not limited to our websites, applications, products, models, software, tools, and documentation (collectively, the “Service”). This Policy applies to all users of the Service, regardless of the manner in which they access or interact with the platform. By using the Service, you acknowledge that you have read, understood, and agreed to the terms of this Policy.

We are committed to protecting your privacy and ensuring that your personal information is handled in a transparent, lawful, and secure manner. This Policy is designed to help you understand what information we collect, why we collect it, how we use it, and the choices you have regarding your data. We encourage you to read this Policy carefully and to contact us if you have any questions or concerns.

The Service is provided by HUYA PTE. LTD., a company incorporated in Singapore. HUYA PTE. LTD. is the data controller responsible for the processing of your personal information as described in this Policy. Our contact details are provided in Section 12 of this Policy.

This Privacy Policy forms an integral part of the Binkbink User Agreement (“User Agreement”). By accepting the User Agreement, you also consent to the terms of this Policy. In the event of any conflict between this Policy and the User Agreement regarding the collection, use, or processing of personal information, this Policy shall prevail. We recommend that you read both documents together to gain a comprehensive understanding of your rights and obligations when using the Service.

This Policy is effective as of May 27, 2026. We reserve the right to update or modify this Policy from time to time in accordance with applicable laws and regulations. When we make material changes to this Policy, we will notify you through the Service (e.g., via in-app notification, email, or prominent notice on our website) prior to the changes taking effect. Your continued use of the Service after such notification constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.

“Personal Information” or “Personal Data” refers to any information that can, directly or indirectly, identify a natural person, including but not limited to name, date of birth, identification number, contact information, account credentials, device identifiers, location data, and any other information that may be linked to a specific individual. This definition encompasses both information you provide to us directly and information we collect automatically through your use of the Service.

“Sensitive Personal Information” refers to personal information that, if disclosed or misused, could result in harm to your personal safety, property, reputation, or other significant interests. This includes, but is not limited to, biometric data (such as facial recognition data and voiceprints), religious beliefs, financial account information, health records, precise geolocation data, and information revealing racial or ethnic origin, political opinions, or sexual orientation. We will only collect and process Sensitive Personal Information with your explicit consent or as otherwise permitted by applicable law, and we will take enhanced security measures to protect such data.

“Personal Information Processor” refers to any entity that processes personal information on our behalf under our instructions, including but not limited to cloud service providers, data analytics providers, payment processors, and other service partners. We require all Personal Information Processors to comply with applicable data protection laws and to implement appropriate technical and organizational measures to safeguard your personal information.

“Affiliates” refers to entities that control, are controlled by, or are under common control with HUYA PTE. LTD. “Third Parties” refers to any entities other than you, us, and our Affiliates, including but not limited to business partners, service providers, social media platforms, and governmental or regulatory authorities. We may share your personal information with Affiliates and Third Parties as described in Section 5 of this Policy.

• “Consent” means your freely given, specific, informed, and unambiguous indication of agreement to the processing of your personal information, which may be provided through a written statement, electronic action (such as clicking an agreement button), or other affirmative conduct.

• “De-identification” or “Anonymization” means the process of altering personal information so that it can no longer be used, either alone or in combination with other information, to identify a specific individual, and such information cannot be restored to an identifiable state.

• “Cross-border Transfer” means the transfer of personal information from the jurisdiction in which it was collected to a different jurisdiction for storage or processing.

• “Data Subject” means the identified or identifiable natural person to whom the personal information relates, i.e., you.

We collect your personal information through the following methods. The specific types of information collected may vary depending on the features and services you use.

When you register for an account or log in to the Service, we collect the following information: your email address or mobile phone number (used as your account identifier), your username or nickname, your password (stored in encrypted form), and profile information such as your avatar and personal bio. If you choose to register through a third-party account (such as Google or Apple), we will collect the information authorized by that third-party platform, which typically includes your third-party account ID, nickname, and avatar.

When you use the Service to create, upload, input, submit, or publish content—including but not limited to AI-native applications, text, URLs, code, data sets, documents, and other materials—we collect and store such content as part of your account data. This content may contain personal information that you voluntarily provide, and you are responsible for ensuring that any personal information included in your content is provided in compliance with applicable laws and regulations.

When you access or use the Service, we automatically collect certain technical and usage information from your devices. This information is collected through cookies, SDKs, and similar technologies. The specific categories of information we collect automatically include:

Category	Specific Data Points	Purpose
Device Information	Device model, operating system version, device identifier (e.g., IMEI, OAID, IDFA), screen resolution, device brand	Service optimization, compatibility, security
Log Information	IP address, browser type and version, access timestamps, pages viewed, click records, search queries, error logs	Service improvement, security monitoring, troubleshooting
Location Information	Approximate location (country/city level via IP), Wi-Fi access point information (when you authorize location access)	Content localization, service improvement, compliance
Network Information	Network type (Wi-Fi/4G/5G), carrier information, network connection status	Service optimization, connectivity troubleshooting
Performance Data	App launch time, page load time, crash reports, latency metrics	Performance optimization, bug fixing

When you choose to log in through a third-party account (such as Google, Apple, or other social media platforms), we receive the information that you authorize the third party to share with us. This typically includes your third-party user ID, nickname, avatar, and email address. The specific scope of information shared depends on the third-party platform’s authorization settings and your consent on that platform.

We may receive information from our business partners and service providers, such as analytics providers, advertising networks, and payment processors. This information may include device identifiers, usage statistics, and other data that helps us improve our services and deliver relevant content. We require our partners to obtain your consent before sharing your personal information with us and to comply with applicable data protection laws.

We may collect information that you have made publicly available on the internet or through other public channels. This may include information from public social media profiles, public forums, and other publicly accessible sources. We will only use such information for the purposes described in this Policy and in compliance with applicable laws.

• We do not collect precise biometric data (such as fingerprint or iris scans) unless you explicitly provide it for a specific feature and give your separate consent.

• We do not collect the contents of your private communications on third-party platforms (such as private messages on social media) without your explicit authorization.

• We do not collect information from your device’s contact list, photo gallery, or other local files unless you actively choose to upload or share such information through the Service.

• We do not track your browsing activity on other websites or applications outside of the Service, except as may be necessary for security and fraud prevention purposes through our authorized SDKs.

We use your personal information for the following purposes. Each purpose is linked to the specific categories of information we collect:

Purpose	Categories of Information Used
Account creation and management	Registration information, login credentials
Service delivery and functionality	Account information, user-generated content, device information
Service improvement and optimization	Log information, device information, performance data, network information
Security and fraud prevention	IP address, device identifier, log information, location information
Customer support and communication	Contact information, account information, user-generated content
Compliance with legal obligations	All categories as required by applicable laws
AI content generation and processing	User-generated content, input prompts, usage data
Personalization and recommendation	Usage data, preferences, device information, location information
Analytics and research (anonymized)	Aggregated and de-identified data from all categories

When we process Sensitive Personal Information, we will obtain your separate, explicit consent prior to such processing, unless otherwise required by law. We will clearly inform you of the specific purpose, scope, and duration of such processing. We will limit the processing of Sensitive Personal Information to the minimum extent necessary to achieve the stated purpose and will implement enhanced security measures to protect such data. If you withdraw your consent for the processing of Sensitive Personal Information, we will cease such processing promptly, except where we are required by law to continue.

If we need to use your personal information for a purpose that is different from the one for which it was originally collected, we will notify you of the new purpose and obtain your consent again before proceeding with the new use. You have the right to refuse such new use, and we will respect your decision. In the event that you refuse, we will continue to process your personal information only for the original purpose, and the new feature or service requiring the changed purpose may not be available to you.

We may anonymize or de-identify your personal information so that it can no longer be used to identify you individually. Such anonymized or de-identified data may be used by us for any lawful purpose, including but not limited to service improvement, statistical analysis, research, and public reporting, without further notice to you or requiring your consent. We will ensure that anonymized and de-identified data cannot be re-identified through combination with other data sources.

We may share your personal information with our Affiliates for the purposes described in this Policy, including but not limited to unified account management, service improvement, and compliance. When sharing information with Affiliates, we will ensure that they are bound by confidentiality and data protection obligations no less stringent than those described in this Policy. Our Affiliates will process your personal information only for the purposes for which it was shared and in compliance with applicable laws.

We may share your personal information with authorized partners and service providers who perform services on our behalf, such as cloud hosting, data analytics, customer support, payment processing, and content delivery. We will enter into data processing agreements with such partners that require them to process your personal information only for the specified purposes, implement appropriate security measures, and comply with applicable data protection laws. We will not authorize any partner to use your personal information for their own independent purposes.

Our Service may integrate third-party Software Development Kits (SDKs) for functionalities such as analytics, push notifications, and advertising. These SDKs may collect certain device and usage information as described in their respective privacy policies. We carefully vet all third-party SDKs and require their providers to comply with applicable data protection laws. We encourage you to review the privacy policies of these third-party SDK providers to understand their data practices.

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your personal information may be transferred to the successor entity as part of the transaction. We will notify you of such transfer through the Service and will require the receiving entity to honor this Policy. If the receiving entity intends to change the manner in which your personal information is processed, you will be given the opportunity to consent to such changes before they take effect.

Except as described in this Section 5, we will not transfer your personal information to any third party without obtaining your prior consent. We will clearly inform you of the identity of the recipient, the purpose of the transfer, and the categories of information to be transferred before seeking your consent.

When you voluntarily publish or share content on the Service that is accessible to other users (such as game creations, comments, or profile information), the personal information contained in such content may become publicly visible. You are responsible for the personal information you choose to make public, and we encourage you to exercise caution when sharing personal information in public areas of the Service.

We may disclose your personal information to governmental, regulatory, or judicial authorities when required by applicable laws, regulations, legal processes, or enforceable governmental requests. This includes, but is not limited to, disclosures necessary to comply with court orders, subpoenas, law enforcement requests, and regulatory investigations. We will evaluate each request to ensure it is legally valid and will, where permitted by law, notify you of such disclosure before or after it occurs.

As our Service is operated by HUYA PTE. LTD., a Singapore-based entity, your personal information may be transferred to and stored in Singapore and other jurisdictions outside of your country of residence.

The primary destination for cross-border transfers is Singapore, where our main data servers are located. We will inform you of any changes to the destination of cross-border transfers through updates to this Policy. The overseas recipients of your personal information will be bound by contractual obligations to protect your data in accordance with this Policy and applicable laws.

Your personal information is stored on servers located in Singapore. We have selected Singapore as our primary data storage location due to its robust data protection framework and reliable infrastructure. In the event that we need to store your personal information in a different jurisdiction, we will ensure that appropriate safeguards are in place as described in Section 5.4 of this Policy and will notify you of any such change.

We retain your personal information for the period necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by applicable laws. The general retention periods for different categories of data are as follows:

Data Category	Retention Period	Basis
Account information	Duration of account activity + 6 months after account deletion	Account management, legal compliance
Log information	Duration of account activity + 6 months after account deletion	Security monitoring, troubleshooting
Device and network information	Duration of account activity + 6 months after account deletion	Service optimization, security
Location information	Duration of account activity + 6 months after account deletion	Service improvement, compliance
Customer support records	Duration of account activity + 6 months after account deletion	Service quality, dispute resolution
Transaction and payment records	As required by applicable financial regulations	Legal and regulatory compliance

Upon expiration of the applicable retention period, we will take the following measures to dispose of your personal information:

• Deletion: We will permanently delete your personal information from our active servers and backup systems in a secure manner that prevents recovery or reconstruction.

• Anonymization: Where deletion is not feasible due to technical constraints or legal requirements, we will anonymize your personal information so that it can no longer be linked to you individually. Anonymized data may be retained for statistical and research purposes.

• If we are required by applicable laws or regulations to retain certain personal information beyond the standard retention period, we will limit the processing of such information to the minimum extent necessary for compliance purposes and will ensure that appropriate security measures remain in place.

We implement industry-standard technical measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: We use SSL/TLS encryption for data in transit and AES-256 encryption for data at rest to ensure that your information is protected during transmission and storage.

• Data Masking / Desensitization: We apply data masking techniques to sensitive fields (such as phone numbers and email addresses) when they are displayed in our systems to minimize exposure.

• Access Control: We implement role-based access controls to restrict access to personal information to authorized personnel who need such access to perform their job functions. All access is logged and monitored.

• Network Security: We deploy firewalls, intrusion detection systems, and anti-malware solutions to protect our infrastructure from external threats.

• Vulnerability Management: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.

In addition to technical safeguards, we maintain comprehensive administrative and organizational measures to protect your personal information:

• We have established internal data protection policies and procedures that govern the collection, use, storage, and disposal of personal information.

• We provide regular data protection and security awareness training to all employees and contractors who have access to personal information.

• We conduct periodic audits and compliance reviews to ensure that our data protection practices remain effective and aligned with applicable laws and regulations.

• We require all employees and contractors to sign confidentiality agreements that impose strict obligations regarding the handling of personal information.

In the event of a personal information security incident (such as a data breach, unauthorized access, or data loss), we will promptly assess the scope and impact of the incident and take immediate remedial action. We will notify you of the incident through the Service, email, or other appropriate channels without undue delay, in accordance with applicable laws. The notification will include: a description of the incident, the categories of personal information affected, the measures we have taken or plan to take to address the incident, and recommendations for actions you can take to protect yourself.

In the event of a security incident, we recommend that you take the following steps to protect your information: change your account password immediately, enable two-factor authentication if available, monitor your account activity for suspicious behavior, and contact us at binkbink2026520@gmail.com if you notice any unauthorized activity. We will cooperate with you and relevant authorities to mitigate the impact of any security incident.

While we implement robust security measures to protect your personal information, please be aware that no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data, and you acknowledge that you provide your personal information at your own risk. We continuously strive to improve our security measures and will promptly address any vulnerabilities that are identified. We encourage you to take appropriate measures to protect your own information, such as using strong passwords and not sharing your account credentials with others.

You have the following rights regarding your personal information. To exercise any of these rights, please contact us at binkbink2026520@gmail.com. We will respond to your request within 15 business days of receipt.

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you. If you become aware that any of your personal information is incorrect or has changed, please notify us promptly so that we can update our records. You may also supplement your personal information by providing additional information through the Service’s account settings or by contacting us directly.

You may request the deletion of your personal information in the following circumstances: the processing is no longer necessary for the purpose for which it was collected; you withdraw your consent and there is no other legal basis for the processing; the personal information has been processed in violation of applicable laws or this Policy; or we are required by law to delete the information.

We may not be able to delete your personal information in certain circumstances, including but not limited to: where we are required by applicable laws or regulations to retain the information; where the information is necessary for the establishment, exercise, or defense of legal claims; where the information has been anonymized or de-identified such that it can no longer identify you; or where the deletion would render it impossible to fulfill our contractual obligations to you. In such cases, we will inform you of the reason for not complying with your deletion request and will restrict further processing of the information.

Where the processing of your personal information is based on your consent, you have the right to withdraw that consent at any time. You may withdraw your consent by adjusting your privacy settings within the Service, by sending a request to binkbink2026520@gmail.com, or by following the instructions provided in the relevant consent notice. The withdrawal of consent must be as easy as the process by which consent was originally given.

The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal. However, withdrawing consent may result in the unavailability of certain features or services that require the processing of the relevant personal information. We will inform you of the potential consequences of withdrawing consent before you do so.

You may cancel your account at any time by contacting us at binkbink2026520@gmail.com or through the account settings within the Service：Click on settings → click on Account Cancellation. Upon account cancellation, we will delete or anonymize your personal information in accordance with Section 6 of this Policy, except where retention is required by applicable laws. Please note that account cancellation is irreversible, and you will not be able to recover your account or its associated data once the cancellation process is complete.

To exercise any of the rights described in this Section 8, please submit a request to binkbink2026520@gmail.com with sufficient information to verify your identity (such as your account email or registered phone number). We will respond to your request within 15 business days of receipt. If we are unable to fulfill your request within this timeframe due to the complexity of the request, we will inform you of the reason for the delay and the expected timeframe for completion. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive, in which case we may charge a reasonable fee to cover administrative costs.

If you are dissatisfied with our response to your request or believe that our processing of your personal information violates applicable laws, you have the right to file a complaint with us by contacting binkbink2026520@gmail.com. We will investigate your complaint and respond within 15 business days.

The Service is not intended for children under the age of 14. Users between the ages of 14 and 18 (or the age of majority in their jurisdiction, whichever is lower) may use the Service only under the supervision and with the consent of their parent or legal guardian. By allowing a minor to use the Service, the parent or legal guardian agrees to this Policy on behalf of the minor and accepts responsibility for the minor’s use of the Service. We encourage parents and guardians to monitor their children’s online activities and to set appropriate boundaries for internet usage.

We do not knowingly collect personal information from children under the age of 14. If we become aware that we have inadvertently collected personal information from a child under 14 without verified parental consent, we will take prompt steps to delete such information from our servers. If you are a parent or guardian and believe that your child under 14 has provided personal information to us, please contact us immediately at binkbink2026520@gmail.com so that we can take appropriate action.

Where we are required by applicable law to obtain parental or guardian consent before processing the personal information of a minor, we will implement a verifiable consent mechanism. This may include requiring the parent or guardian to provide their identity verification, signing a digital consent form, or other methods as required by applicable laws. We will clearly explain the purposes for which the minor’s personal information will be used and the rights of the parent or guardian with respect to such information.

Parents and guardians may contact us regarding the processing of a minor’s personal information, including to request access, correction, or deletion of such information, by sending an email to binkbink2026520@gmail.com. We will respond to all such requests within 10 business days. Parents and guardians may also use this email address to file complaints regarding our handling of minors’ personal information.

We use the following categories of cookies and similar technologies to operate, maintain, and improve the Service:

Cookie Category	Purpose	Examples
Essential / Necessary Cookies	Required for the basic functionality of the Service, such as session management, authentication, and security	Session ID, CSRF token, login state
Performance Cookies	Collect information about how users interact with the Service to improve performance and user experience	Page load time, error rates, feature usage statistics
Functional Cookies	Remember your preferences and settings to provide a personalized experience	Language preference, theme settings, layout preferences
Advertising / Targeting Cookies	Used to deliver relevant advertisements and measure the effectiveness of advertising campaigns	Ad identifiers, conversion tracking, audience segmentation

• Local Storage: We use HTML5 local storage and session storage to store data on your device for performance optimization and session persistence.

• Pixel Tags / Web Beacons: We may use pixel tags or web beacons in emails and on our web pages to track email open rates and page views for analytics purposes.

• SDKs: We integrate third-party SDKs that may use their own tracking technologies to collect device and usage information as described in their respective privacy policies.

• Browser Settings: Most browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is being set.

• Opt-Out Tools: You may use opt-out tools provided by industry organizations (such as the Network Advertising Initiative or the Digital Advertising Alliance) to opt out of targeted advertising cookies.

Please note that disabling certain cookies may affect the functionality of the Service. Essential cookies are necessary for the Service to operate properly and cannot be disabled. Disabling performance, functional, or advertising cookies may result in a less personalized experience, reduced functionality, or the display of less relevant advertisements. We recommend that you carefully consider the impact before disabling cookies.

We may update this Policy from time to time to reflect changes in our data practices, applicable laws, or the features of the Service. When we update this Policy, we will notify you through one or more of the following methods: posting a prominent notice on our website or within the Service, sending you an email notification, or displaying an in-app notification. The updated Policy will be effective as of the date specified in the notice.

If we make material changes to this Policy that affect the collection, use, or sharing of your personal information in a way that is different from what was originally stated, we will obtain your consent again before implementing such changes. Material changes include, but are not limited to, the introduction of new categories of personal information collection, new purposes for processing, new third-party sharing arrangements, or changes to your rights. You will have the opportunity to review the changes and to accept or decline them before they take effect.

If you have any questions, concerns, or requests regarding this Policy or our data practices, please contact our Data Protection Officer or the relevant department at:

We are committed to addressing your inquiries and resolving any issues in a timely and transparent manner. We will acknowledge receipt of your message within 3 business days and provide a substantive response within 15 business days.

If you believe that we have violated this Policy or applicable data protection laws in the processing of your personal information, you may file a complaint with us by sending an email to binkbink2026520@gmail.com. Please include a detailed description of your concern, the relevant facts, and any supporting documentation. We will investigate your complaint and respond within 15 business days of receipt. If the investigation requires additional time, we will inform you of the expected timeframe for completion.