Marvelous Inc. (hereinafter referred to as the 'Company'), in accordance with the following policies, endeavours to appropriately handle all personal information.

The Company, in handling personal information, complies with the Privacy Act 1988.

The Company will not handle personal information beyond what is necessary to fulfil the purpose of use described below without the consent of the person in question.

The Company takes appropriate measures to ensure the safe management of personal information, and works to prevent unauthorised access to personal information, as well as leaks, loss, or damage, etc. to personal information.

The Company, with the exception of the following cases, will not provide personal information to a third party without obtaining the consent of the person in question.

・ Cases where the handling of information is outsourced to a third party only to the extent necessary for it to be used for the purposes for which it was obtained.

・ Cases where the provision of information to third parties is based on laws and regulations.

The Company will respond accordingly to cases where personal data held by the Company is requested for disclosure, correction, etc.

The Company, for the aim of properly handling personal information, will proceed with the continued implementation of in-house training.

Enacted 1/2/2016

The Company will handle personal information to the extent that it is necessary to achieve the purpose of use for the following. For the providing of the Company's products & services

For identity verification and authentication services

For conducting questionnaires

For conducting prize contests & campaigns

For point addition & point exchange

For marketing research, statistics, and analysis

For system maintenance and defect response

To send important notices regarding our Terms of Use, policy changes, etc.

For the management and operation of the Company's applications, websites, services, contents, etc.

In order to respond to enquiries from the user

For achieving any other purpose that the person in question will be made aware of, and will be required to consent to, when asked to provide personal information

For customers under the age of 13, please provide personal information only once you have obtained the consent of a legal guardian.

Protecting the privacy of young people is especially important to Marvelous. In Accordance with the Australian Industry Codes; Privacy Code of Practice, established by Internet Industry Association (IIA), for customers with children under 15 years of age, we advise that a legal guardian provide consent on behalf of an individual under the age of 15 before disclosure of sensitive information collected from or about the child.

On the Company's website, etc., in order to provide greater convenience to our customers, we use the technology called Cookies. Although the Company website, etc. will be able to identify customers' computers through the use of Cookies, we will not obtain any personal information. Also, customers may choose to disable Cookies in their browsers, and should this be the case, there will be instances where some functionality may not be available.

The Company, in order to examine the usage conditions of customers on the Company website, will use a Web Beacon in certain cases, but it will not be used to acquire personal information.

The Company does not assume any responsibility for the protection of customers' personal information on third party websites, etc. linked to the Company's website.

Customers can ask for the disclosure of their own personal data held by the Company. Also, if as a result of an error, etc. is found, customers can request a correction to be made to their own personal data or that use of the data be discontinued. For the disclosure request by following the process provided. Company will take all reasonable measures to promptly comply with such requests.
Company will retain an archived copy of your records as required by law.
①details of request:

• Correction of personal information / deletion of personal information
• Account number
• Requester full name
• Self or a representative
• Date of birth
• Address
• Applicable Services
• Requester contact information: e-mail address

Company takes commercially reasonable precautions against possible security breaches of our Services and customer records but no website or internet transmission is completely secure. Company does not guarantee that unauthorized access, hacking, data loss, or other breaches will never occur. Company urges you to take steps to keep your personal information safe. The transmission of information over the internet is not completely secure. Company cannot guarantee the security of your data while it is being transmitted and any transmission is at your own risk.

‹ Identity Verification Documents › (one of A, B, or C)

A)

Driver's License
It must be unexpired and include the person's current address. This cannot be an international driver's licence.

B)

Australian Passport
It must be unexpired and include the person's current address.

C)

Health insurance card or pension book, as well as any of the following (residence card, receipt for a public utility charge, bill for a public utility charge)

The resident card, receipt for a public utility charge, or bill for a public utility charge, needs to have been issued within the last 3 months and have the current address listed. In the case of a disclosure request from a representative, in addition to the personal identity verification documents listed above, please email required information and scanned document to Company at e-mail address: [email protected]

‹ For a Voluntary Representative › (for A, B & C)

A)

A letter of authorisation (power of attorney) from the person being represented
The relationship to the representative, the reason for requiring a representative, and the name, date of birth, address, and telephone number of the representative are also required.

B)

The person in question's signature.
Needs to have been issued within the last 3 months. The letter of authorisation to act as proxy (power of attorney) will require notarisation by a licensed notary public with signature and a registered seal or stamp

C)

Representative's personal identity verification documents
Please refer to the aforementioned ‹ Identity Verification Documents ›.

‹ For a Legal Representative › (both A & B)

A)

A document confirming that there is a legal right of representation
Abstract of Family Register, etc.

B)

Representative's personal identity verification documents
Please refer to the aforementioned ‹ Identity Verification Documents ›.

Shinagawa Seaside East Tower 5th Floor, 4-12-8 Higashi-Shinagawa, Shinagawa-ku, Tokyo 140-0002 Japan Contact Marvelous Inc. Information Systems Division for Personal Information Enquiries

Enacted 1/2/2016