ENTERTAINMENT SOFTWARE RATING BOARD

March 13 2018

Via Electronic Mail and First Class Mail Mr Donald S Clark Office of the Secretary Federal Trade Commission 600 Pennsylvania A venue NW Washington DC secretaryftcgov

middotRe Amended Submission of the Entertainment Software Rating Boards Proposed Post-Approval Modifications to its ESRB Privacy Ce1iified Kids Seal Requirements under 16 CFR sect 31211 ( e)

Dear Mr Clark

I write on behalf of the Ente1iainment Software Rating Board (ESRB) to request approval of the ESRB s proposed modifications to our Privacy Ce1iified Kids Seal Program (the Program) requirements from the Federal Trade Commission (the Commission) This letter reflects a slight modification to my initial letter dated January 26 2018 which modification is based on my communications with the Commissions staff

ESRB operates one of the first safe harbor programs under the Childrens Online Privacy Protection Act (COPPA) having received approval from the Commission in 2001 The Program requirements (the Requirements) were last amended in 2013 in response to the Amended COPPA Rule We believe it is important to continuously assess the Requirements to ensure they remain current with the Commissions COPPA-related regulations and guidance and to allow ESRB to monitor and uphold compliance with the Requirements in the most efficient and effective manner With that in mind I am enclosing

bull Under Exhibit A our proposed Privacy Certified Kids Seal Program Requirements (the Proposed Requirements) for which we are seeking the Commissions review and approval under 16 CFR sect 3121 l(e) and

bull Under Exhibit B a blackline draft of the Proposed Requirements showing all proposed changes to the Programs existing Requirements

Pursuant to 16 CFR sectsect 31211 ( c )(2) and ( e ) the following is a description ofhow the proposed changes affect the Programs existing Requirements This statement does not include non-substantive changes for example changes in tenninology (all of which are reflected in Exhibit B) -

420 LEXINGTON AVENUE SUITE 2240 NEW YORK NY 10170

212 759 0700 I FAX 212 759 2223 WWWESRBORG

bull In Section I of the Proposed Requirements we have revised the definition of the term Personal Information and Data to more closely track the Amended COPP A Rule and Commission guidance For example within the definition of Personal Information and Data we have clarified that audio recordings are not included if they are used solely to effectuate speech-to-text functionality and are deleted immediately thereafter That change is consistent with the C01mnissions October 23 2017 COPPA guidance We have also made explicit that personal information and data includes personal information and data contained within the metadata of a photograph video recording or audio recording

bull In Section I of the Proposed Requirements we have removed the definition of the term Privacy Risk Assessment because that term was not otherwise utilized in the Program Requirements

bull In Section II of the Proposed Requirements for new participants in the Progran1 we have removed the requirement for an initial Self-Assessment Questionnaire (SAQ) to be completed prior to or upon joining the Program This requirement which is currently found in Section IIA is no longer necessary Instead especially in the early stages of membership we have found that Program participants benefit from a more personal approach usually involving at least one (but more likely several) telephone calls or video conferences to introduce them to the Program and to allow us to gather necessary information However we have reserved the right to require an SAQ at other times if necessary

bull Moreover in Section ILA of the Proposed Requirements we have clarified certain aspects of the initial Compliance Repo1i including that ESRB will provide pmticipants with required and suggested changes to their privacy statements

bull We have removed the requirement for an initial Onsite Compliance Review for new participants which is currently found in Section 11B Program pmticipants are located throughout the United States and even outside the United States We do not believe they should be burdened by the time and expense of an initial Onsite Compliance Review when we can accomplish the same objectives mid gather the same information through video conferences telephone conferences and correspondence

bull We have revised Section 11B of the Proposed Requirements (currently Section 11C) to clarify that new members will get at least one Compliance Repo1t in their initial term This change is necessmmiddoty because some members join later in our fiscal year thereby shortening their initial terms If for example a member was to join in December we likely would provide that member with a single compliance report in its initial term rather than two or more

bull In Section 111C of the Proposed Requirements we have removed the second sentence because it is redundant of the first sentence We have also removed the qualifying language in the next scheduled Compliance Report from the final senterice of that

2 of3

Section because time could be of the essence in which case we would notify the participant of our discovery as soon as possible

bull In Section IIID2 of the Proposed Requirements we have changed maintain a consumer online hotline to provide contact information on its website to clarify that ESRB does not maintain a telephone hotline Rather consumers submit inquiries and complaints to us via email at privacyesrborg

bull We have made several changes in Sections IVA and IVB ofthe Proposed Requirements to strengthen the disclosures in participants- privacy statements

bull In Section IVC of the Proposed Requirements we have clarified that the link to a Kids Privacy Statement must be prominent and clearly labeled and we have added the requirement for online apps that a link to the privacy statement be available in the app store prior to download

bull In Section VA of the Proposed Requirements we have made minor revisions to strengthen the disclosures in direct notices to parents

bull In Section VB of the Proposed Requirements we have added the use of approved vendors such as Veratad Technologies to the list of available mechanisms to obtain verifiable parental consent -

bull In Section VIIA of the Proposed Requirements consistent with the best practice ofdata minimalization we have added text to make clear participants should not collect personal information and data if it is not being utilized

bull In Section VILE of the Proposed Requirements we have changed must to should to clarify that this requirement is a recommended best practice as opposed to an obligation under COPPA or the Amended COPP A Rule

We look forward to the Commissions review and consideration of the Proposed

Requirements If I can be of any assistance during that process please contact me at (917) 522~ 3267 or jfalzoneesrborg

Sincerely

7 --1(jLl~

John M Falzone Esq

Vice President ESRB Privacy Certified

Enclosures

3 of3

Section because time could be of the essence in which case we would notify the participant of our discovery as soon as possible

bull In Section IIID2 of the Proposed Requirements we have changed maintain a consumer online hotline to provide contact information on its website to clarify that ESRB does not maintain a telephone hotline Rather consumers submit inquiries and complaints to us via email at privacyesrborg

bull We have made several changes in Sections IVA and IVB ofthe Proposed Requirements to strengthen the disclosures in participants- privacy statements

bull In Section IVC of the Proposed Requirements we have clarified that the link to a Kids Privacy Statement must be prominent and clearly labeled and we have added the requirement for online apps that a link to the privacy statement be available in the app store prior to download

bull In Section VA of the Proposed Requirements we have made minor revisions to strengthen the disclosures in direct notices to parents

bull In Section VB of the Proposed Requirements we have added the use of approved vendors such as Veratad Technologies to the list of available mechanisms to obtain verifiable parental consent -

bull In Section VIIA of the Proposed Requirements consistent with the best practice ofdata minimalization we have added text to make clear participants should not collect personal information and data if it is not being utilized

bull In Section VILE of the Proposed Requirements we have changed must to should to clarify that this requirement is a recommended best practice as opposed to an obligation under COPPA or the Amended COPP A Rule

We look forward to the Commissions review and consideration of the Proposed

Requirements If I can be of any assistance during that process please contact me at (917) 522~ 3267 or jfalzoneesrborg

Sincerely

7 --1(jLl~

John M Falzone Esq

Vice President ESRB Privacy Certified

Enclosures

3 of3

EXHIBIT A

Proposed ESRB Privacy Certified Kids Seal Requirements

If a Monitored Product is directed or targeted at children under the age of thirteen 13) or Participant has actual knowledge it is collecting or maintaining or allowing a third party to collect or maintain) personal information or data from children under the age of thirteen (13) through a Monitored Product then Participant must comply with the ESRB Privacy Certified Kids Seal Requirements set forth in this Schedule for all such Monitored Products Participant has submitted to ESRB for certification and on which Participant intends to display the Privacy Certified Kids Privacy seal andor the ESRB Privacy Certified Mobile seal

I DEFINITIONS

ChildChildren means users resident in the United States who are under thirteen 13) years of age

Online Information Practices encompass but are not limited to (i) Participants practices regarding consumer notification and consumer access to their Personal Information and Data (as that term is defined below) (ii) Participants practices with respect to the collection use or disclosure of Personal Information and Data (iii) Participants practices regarding user choice and consent to how Personal Information and Data is used or shared and iv) security measures taken to protect Personal Information and Data provided by users

Personal Information and Data (PID means any information relating to an identified or identifiable individual collected on line including but not limited to

bull First and last name bull Home or other physical address or geolocation information bull Online contact information (eg email address instant messenger identifier video chat

identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier (eg a customer number held in a cookie internet protocol address

device serial number or unique device identifier) if additional PID is collected andor the persistent identifier(s) ~re not used solely to support the internal operations of the Monitored Product

bull Photograph or video recording showing the individuals face or otherwise containing PID in the phot_ograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PID within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

1 of 10

Demographic information (including but not limited to gender age date of birth educational background or political affiliation) also becomes PID when combined with other information enabling the individual to be identified PID does not include information that is rendered anonymous

Privacy Statement means the statement posted on the Monitored Products which discloses Participants up-to-date policies regarding user privacy and Participants practices with respect to the collection use and disclosure of PID

II PROGRAM DOCUMENTS AND PROCEDURES

A Initial Compliance Report

ESRB shall review Participants Privacy Statement anddeg related Online Information Practices with respect to the Monitored Products ESRB shall assess the state of Participants overall compliance with the Program Requirements after which it shall provide Participant (i required and suggested changes to Participants Privacy Statement and ii) a comprehensive report detailing any and all required and suggested changes to Participants Online Information Practices with respect to the Monitored Products Compliance Report)

Participant shall implement all changes required to the Privacy Statements and by middot the Compliance Report and attest to ESRB that it has done so in writing ESRB shall then complete a final review of the Privacy Statement and Monitored Products If all the required changes have been implemented or otherwise resolved ESRB shall provide Participant with written approval to use and access to the appropriate Program Marks

B Biannual Monitoring and Compliance Reports

At least once during the Initial Term and no more than twice during each Renewal Term (Reporting Periods) ESRB shall provide Participant with a Compliance Report that will (i list all of the Monitored Products (il describe changes to Participant~ Privacy Statement andor Monitored Products that are necessary for Participant to remain compliant wlth the Kids Seal Requirements and (iii) propose changes which although not required under the Kids Seal Requirements reflect best practices that are highly recommended by ESRB Within three 3) weeks of Participants receipt of a Compliance Report Particip~nt must notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

2 of 10

For ESRB to provide thorough and accurate Compliance Reports Participant must provide ESRB full access to the Monitored Products including access to members only or password-protected areas of the Monitored Products

Ill CONTINUING OBLIGATIONS OF PARTICIPANT

A Designation of Site Coordinator

Participant shall name a coordinator for the Monitored Products Site Coordinator) who shall be ESRBs primary contact Participant shall notify ESRB in the event of a change to the individual designated as Site Coordinator The Site Coordinator shall be responsible for the effectuation and implementation of Participants Online Information Practices reflected in its Privacy Statement and compliance with the Kids Seal Requirements All notices from ESRB shall be directed to the Site Coordinator

B Notifying ESRB of Material Changes

1 Participant shall notify ESRB in advance of any material change(s) to its Online Information Practices including by way of example changes to Participants Terms of Use or End User License Agreement changes to its data security infrastructure or the roll-out of any new sweepstakes contest or similar promotion through the Monitored Products

2 Participant shall obtain prior approval from ESRB for all substantive modification to its Privacy Statement whether such modification results from a material change in Participants Online Information Practices the revamping of Monitored Products or otherwise

3 Where changes to Participants Monitored Products Privacy Statement or Online Information Practices have been implemented Participant may be required to submit a Self-Assessment Questionnaire (SAQ) or provide updated information in a form determined by ESRB Participant may also be required to submit a SAQ if Participant has undergone a change in control or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government

C Notifying Users of Material Changes

Participant shall notify users of any material change(s) in its Online Information Practices or Privacy Statement Notice should be provided to users prior to the change taking effect Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participant of the type of notice Participant must provide to users of the Monitored Products

3 of 10

D Resolution of Consumer Complaints

1 Participant shall implement procedures to receive investigate and resolve privacy inquiries and complaints from users Where Participants internal mechanisms are unable to address a user grievance effectively Participant shall refer the user to ESRB for dispute resolution

2 ESRB shall provide contact information on its website which visitors to Participants Monitored Products may use to contact ESRB with inquiries or complaints regarding a Monitored Product After determining the nature of the complaint ESRB shall respond in one of the following ways

a If the question concern or complaint is not privacy-related ESRB shall either forward it to the individual at Participants company designated for such purpose or redirect the consumer to the appropriate contact mechanism (eg support page)

b If the inquiry or complaint is privacy-related and presents a question or an issue ESRB can independently address ESRB shall respond directly to the consumer

c lfahe inquiry or complaint is privacy related but requires information or input from Participant ESRB shall contact Participant Participant shall cooperate with ESRB in resolving consumer complaints

3 If neither Participant nor ESRB succeeds in independently resolving a consumer grievance and the consumer wishes to pursue the matter further Participant agrees to fully participate along with the consumer in a dispute resolution process conducted by ESRB and agrees to accept ESRBs judgment as final

E Required Notice to ESRB

Participant shall notify ESRB in writing within thirty (30) days if Participant (i) changes its name (ii) undergoes a change in control or (iii) changes the domain name of any Monitored Product

IV PRIVACY STATEMENT

A Content of General Privacy Statement

Participant shall maintain and abide by a Privacy Statement that is either written by Participant and approved by ESRB in its sole discretion or written by ESRB The Privacy Statement shall clearly set forth Participants Online Information Practic~s The Privacy

4 of 10

Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Participants posted Privacy Statement shall provide disclosure to users with respect to each of the following elements

1 Notice that the Monitored Product has been reviewed and certified by the ESRB Privacy Certified Program

2 A full description of how users can contact Participant including the 1Participants name postal address and email address

3 A full description of how users can contact ESRB with questions or concerns about Participants Privacy Statement or Online Information Practices

4 A complete list of all PID collected through the Monitored Product how each PID identified is collected and how it is used

5 The identity (including name address and e-mail address) of all entities that are collecting or maintaining PID on behalf of or through the Monitored Product

6 The entities (if any) with whom PID collected through the Monitored Product is shared or disclosed including the types of businesses in which any third parties are engaged the general purpose for which the information is used by the third parties and whether the third parties have agreed to maintain the confidentiality security and integrity of the PID collected by Participant

7 Notice of whether Participant supplements PID collected through the Monitored Products with information from other sources and if so a description of the PID and the sources from which they were collected

8 Disclosure of the tracking technologies if any used on the Monitored Product either by Participant or by an authorized third party

9 An explanation of when and how users may exercise opt-in andor opt-out options including the choices available to them regarding how their PID is collected and used

10 The nature of the security measures in place on the Monitored Products 11 Notice that PID provided to Participant may be subject to disclosure in

response to judicial or other government subpoenas warrants or orders 12 Notice that information posted by users in online bulletin boards chat

rooms news groups or other public forums may be displayed publicly 13 The notification procedures to be utilized by Participant in the event of a

material change in its Online Information Practices andor Privacy Statement and

14 Disclosure of the effective date or last date on which the Privacy Statement was updated (ie updated as of)

5 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

Demographic information (including but not limited to gender age date of birth educational background or political affiliation) also becomes PID when combined with other information enabling the individual to be identified PID does not include information that is rendered anonymous

Privacy Statement means the statement posted on the Monitored Products which discloses Participants up-to-date policies regarding user privacy and Participants practices with respect to the collection use and disclosure of PID

II PROGRAM DOCUMENTS AND PROCEDURES

A Initial Compliance Report

ESRB shall review Participants Privacy Statement anddeg related Online Information Practices with respect to the Monitored Products ESRB shall assess the state of Participants overall compliance with the Program Requirements after which it shall provide Participant (i required and suggested changes to Participants Privacy Statement and ii) a comprehensive report detailing any and all required and suggested changes to Participants Online Information Practices with respect to the Monitored Products Compliance Report)

Participant shall implement all changes required to the Privacy Statements and by middot the Compliance Report and attest to ESRB that it has done so in writing ESRB shall then complete a final review of the Privacy Statement and Monitored Products If all the required changes have been implemented or otherwise resolved ESRB shall provide Participant with written approval to use and access to the appropriate Program Marks

B Biannual Monitoring and Compliance Reports

At least once during the Initial Term and no more than twice during each Renewal Term (Reporting Periods) ESRB shall provide Participant with a Compliance Report that will (i list all of the Monitored Products (il describe changes to Participant~ Privacy Statement andor Monitored Products that are necessary for Participant to remain compliant wlth the Kids Seal Requirements and (iii) propose changes which although not required under the Kids Seal Requirements reflect best practices that are highly recommended by ESRB Within three 3) weeks of Participants receipt of a Compliance Report Particip~nt must notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

2 of 10

For ESRB to provide thorough and accurate Compliance Reports Participant must provide ESRB full access to the Monitored Products including access to members only or password-protected areas of the Monitored Products

Ill CONTINUING OBLIGATIONS OF PARTICIPANT

A Designation of Site Coordinator

Participant shall name a coordinator for the Monitored Products Site Coordinator) who shall be ESRBs primary contact Participant shall notify ESRB in the event of a change to the individual designated as Site Coordinator The Site Coordinator shall be responsible for the effectuation and implementation of Participants Online Information Practices reflected in its Privacy Statement and compliance with the Kids Seal Requirements All notices from ESRB shall be directed to the Site Coordinator

B Notifying ESRB of Material Changes

1 Participant shall notify ESRB in advance of any material change(s) to its Online Information Practices including by way of example changes to Participants Terms of Use or End User License Agreement changes to its data security infrastructure or the roll-out of any new sweepstakes contest or similar promotion through the Monitored Products

2 Participant shall obtain prior approval from ESRB for all substantive modification to its Privacy Statement whether such modification results from a material change in Participants Online Information Practices the revamping of Monitored Products or otherwise

3 Where changes to Participants Monitored Products Privacy Statement or Online Information Practices have been implemented Participant may be required to submit a Self-Assessment Questionnaire (SAQ) or provide updated information in a form determined by ESRB Participant may also be required to submit a SAQ if Participant has undergone a change in control or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government

C Notifying Users of Material Changes

Participant shall notify users of any material change(s) in its Online Information Practices or Privacy Statement Notice should be provided to users prior to the change taking effect Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participant of the type of notice Participant must provide to users of the Monitored Products

3 of 10

D Resolution of Consumer Complaints

1 Participant shall implement procedures to receive investigate and resolve privacy inquiries and complaints from users Where Participants internal mechanisms are unable to address a user grievance effectively Participant shall refer the user to ESRB for dispute resolution

2 ESRB shall provide contact information on its website which visitors to Participants Monitored Products may use to contact ESRB with inquiries or complaints regarding a Monitored Product After determining the nature of the complaint ESRB shall respond in one of the following ways

a If the question concern or complaint is not privacy-related ESRB shall either forward it to the individual at Participants company designated for such purpose or redirect the consumer to the appropriate contact mechanism (eg support page)

b If the inquiry or complaint is privacy-related and presents a question or an issue ESRB can independently address ESRB shall respond directly to the consumer

c lfahe inquiry or complaint is privacy related but requires information or input from Participant ESRB shall contact Participant Participant shall cooperate with ESRB in resolving consumer complaints

3 If neither Participant nor ESRB succeeds in independently resolving a consumer grievance and the consumer wishes to pursue the matter further Participant agrees to fully participate along with the consumer in a dispute resolution process conducted by ESRB and agrees to accept ESRBs judgment as final

E Required Notice to ESRB

Participant shall notify ESRB in writing within thirty (30) days if Participant (i) changes its name (ii) undergoes a change in control or (iii) changes the domain name of any Monitored Product

IV PRIVACY STATEMENT

A Content of General Privacy Statement

Participant shall maintain and abide by a Privacy Statement that is either written by Participant and approved by ESRB in its sole discretion or written by ESRB The Privacy Statement shall clearly set forth Participants Online Information Practic~s The Privacy

4 of 10

Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Participants posted Privacy Statement shall provide disclosure to users with respect to each of the following elements

1 Notice that the Monitored Product has been reviewed and certified by the ESRB Privacy Certified Program

2 A full description of how users can contact Participant including the 1Participants name postal address and email address

3 A full description of how users can contact ESRB with questions or concerns about Participants Privacy Statement or Online Information Practices

4 A complete list of all PID collected through the Monitored Product how each PID identified is collected and how it is used

5 The identity (including name address and e-mail address) of all entities that are collecting or maintaining PID on behalf of or through the Monitored Product

6 The entities (if any) with whom PID collected through the Monitored Product is shared or disclosed including the types of businesses in which any third parties are engaged the general purpose for which the information is used by the third parties and whether the third parties have agreed to maintain the confidentiality security and integrity of the PID collected by Participant

7 Notice of whether Participant supplements PID collected through the Monitored Products with information from other sources and if so a description of the PID and the sources from which they were collected

8 Disclosure of the tracking technologies if any used on the Monitored Product either by Participant or by an authorized third party

9 An explanation of when and how users may exercise opt-in andor opt-out options including the choices available to them regarding how their PID is collected and used

10 The nature of the security measures in place on the Monitored Products 11 Notice that PID provided to Participant may be subject to disclosure in

response to judicial or other government subpoenas warrants or orders 12 Notice that information posted by users in online bulletin boards chat

rooms news groups or other public forums may be displayed publicly 13 The notification procedures to be utilized by Participant in the event of a

material change in its Online Information Practices andor Privacy Statement and

14 Disclosure of the effective date or last date on which the Privacy Statement was updated (ie updated as of)

5 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

For ESRB to provide thorough and accurate Compliance Reports Participant must provide ESRB full access to the Monitored Products including access to members only or password-protected areas of the Monitored Products

Ill CONTINUING OBLIGATIONS OF PARTICIPANT

A Designation of Site Coordinator

Participant shall name a coordinator for the Monitored Products Site Coordinator) who shall be ESRBs primary contact Participant shall notify ESRB in the event of a change to the individual designated as Site Coordinator The Site Coordinator shall be responsible for the effectuation and implementation of Participants Online Information Practices reflected in its Privacy Statement and compliance with the Kids Seal Requirements All notices from ESRB shall be directed to the Site Coordinator

B Notifying ESRB of Material Changes

1 Participant shall notify ESRB in advance of any material change(s) to its Online Information Practices including by way of example changes to Participants Terms of Use or End User License Agreement changes to its data security infrastructure or the roll-out of any new sweepstakes contest or similar promotion through the Monitored Products

2 Participant shall obtain prior approval from ESRB for all substantive modification to its Privacy Statement whether such modification results from a material change in Participants Online Information Practices the revamping of Monitored Products or otherwise

3 Where changes to Participants Monitored Products Privacy Statement or Online Information Practices have been implemented Participant may be required to submit a Self-Assessment Questionnaire (SAQ) or provide updated information in a form determined by ESRB Participant may also be required to submit a SAQ if Participant has undergone a change in control or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government

C Notifying Users of Material Changes

Participant shall notify users of any material change(s) in its Online Information Practices or Privacy Statement Notice should be provided to users prior to the change taking effect Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participant of the type of notice Participant must provide to users of the Monitored Products

3 of 10

D Resolution of Consumer Complaints

1 Participant shall implement procedures to receive investigate and resolve privacy inquiries and complaints from users Where Participants internal mechanisms are unable to address a user grievance effectively Participant shall refer the user to ESRB for dispute resolution

2 ESRB shall provide contact information on its website which visitors to Participants Monitored Products may use to contact ESRB with inquiries or complaints regarding a Monitored Product After determining the nature of the complaint ESRB shall respond in one of the following ways

a If the question concern or complaint is not privacy-related ESRB shall either forward it to the individual at Participants company designated for such purpose or redirect the consumer to the appropriate contact mechanism (eg support page)

b If the inquiry or complaint is privacy-related and presents a question or an issue ESRB can independently address ESRB shall respond directly to the consumer

c lfahe inquiry or complaint is privacy related but requires information or input from Participant ESRB shall contact Participant Participant shall cooperate with ESRB in resolving consumer complaints

3 If neither Participant nor ESRB succeeds in independently resolving a consumer grievance and the consumer wishes to pursue the matter further Participant agrees to fully participate along with the consumer in a dispute resolution process conducted by ESRB and agrees to accept ESRBs judgment as final

E Required Notice to ESRB

Participant shall notify ESRB in writing within thirty (30) days if Participant (i) changes its name (ii) undergoes a change in control or (iii) changes the domain name of any Monitored Product

IV PRIVACY STATEMENT

A Content of General Privacy Statement

Participant shall maintain and abide by a Privacy Statement that is either written by Participant and approved by ESRB in its sole discretion or written by ESRB The Privacy Statement shall clearly set forth Participants Online Information Practic~s The Privacy

4 of 10

Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Participants posted Privacy Statement shall provide disclosure to users with respect to each of the following elements

1 Notice that the Monitored Product has been reviewed and certified by the ESRB Privacy Certified Program

2 A full description of how users can contact Participant including the 1Participants name postal address and email address

3 A full description of how users can contact ESRB with questions or concerns about Participants Privacy Statement or Online Information Practices

4 A complete list of all PID collected through the Monitored Product how each PID identified is collected and how it is used

5 The identity (including name address and e-mail address) of all entities that are collecting or maintaining PID on behalf of or through the Monitored Product

6 The entities (if any) with whom PID collected through the Monitored Product is shared or disclosed including the types of businesses in which any third parties are engaged the general purpose for which the information is used by the third parties and whether the third parties have agreed to maintain the confidentiality security and integrity of the PID collected by Participant

7 Notice of whether Participant supplements PID collected through the Monitored Products with information from other sources and if so a description of the PID and the sources from which they were collected

8 Disclosure of the tracking technologies if any used on the Monitored Product either by Participant or by an authorized third party

9 An explanation of when and how users may exercise opt-in andor opt-out options including the choices available to them regarding how their PID is collected and used

10 The nature of the security measures in place on the Monitored Products 11 Notice that PID provided to Participant may be subject to disclosure in

response to judicial or other government subpoenas warrants or orders 12 Notice that information posted by users in online bulletin boards chat

rooms news groups or other public forums may be displayed publicly 13 The notification procedures to be utilized by Participant in the event of a

material change in its Online Information Practices andor Privacy Statement and

14 Disclosure of the effective date or last date on which the Privacy Statement was updated (ie updated as of)

5 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

D Resolution of Consumer Complaints

1 Participant shall implement procedures to receive investigate and resolve privacy inquiries and complaints from users Where Participants internal mechanisms are unable to address a user grievance effectively Participant shall refer the user to ESRB for dispute resolution

2 ESRB shall provide contact information on its website which visitors to Participants Monitored Products may use to contact ESRB with inquiries or complaints regarding a Monitored Product After determining the nature of the complaint ESRB shall respond in one of the following ways

a If the question concern or complaint is not privacy-related ESRB shall either forward it to the individual at Participants company designated for such purpose or redirect the consumer to the appropriate contact mechanism (eg support page)

b If the inquiry or complaint is privacy-related and presents a question or an issue ESRB can independently address ESRB shall respond directly to the consumer

c lfahe inquiry or complaint is privacy related but requires information or input from Participant ESRB shall contact Participant Participant shall cooperate with ESRB in resolving consumer complaints

3 If neither Participant nor ESRB succeeds in independently resolving a consumer grievance and the consumer wishes to pursue the matter further Participant agrees to fully participate along with the consumer in a dispute resolution process conducted by ESRB and agrees to accept ESRBs judgment as final

E Required Notice to ESRB

Participant shall notify ESRB in writing within thirty (30) days if Participant (i) changes its name (ii) undergoes a change in control or (iii) changes the domain name of any Monitored Product

IV PRIVACY STATEMENT

A Content of General Privacy Statement

Participant shall maintain and abide by a Privacy Statement that is either written by Participant and approved by ESRB in its sole discretion or written by ESRB The Privacy Statement shall clearly set forth Participants Online Information Practic~s The Privacy

4 of 10

Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Participants posted Privacy Statement shall provide disclosure to users with respect to each of the following elements

1 Notice that the Monitored Product has been reviewed and certified by the ESRB Privacy Certified Program

2 A full description of how users can contact Participant including the 1Participants name postal address and email address

3 A full description of how users can contact ESRB with questions or concerns about Participants Privacy Statement or Online Information Practices

4 A complete list of all PID collected through the Monitored Product how each PID identified is collected and how it is used

5 The identity (including name address and e-mail address) of all entities that are collecting or maintaining PID on behalf of or through the Monitored Product

6 The entities (if any) with whom PID collected through the Monitored Product is shared or disclosed including the types of businesses in which any third parties are engaged the general purpose for which the information is used by the third parties and whether the third parties have agreed to maintain the confidentiality security and integrity of the PID collected by Participant

7 Notice of whether Participant supplements PID collected through the Monitored Products with information from other sources and if so a description of the PID and the sources from which they were collected

8 Disclosure of the tracking technologies if any used on the Monitored Product either by Participant or by an authorized third party

9 An explanation of when and how users may exercise opt-in andor opt-out options including the choices available to them regarding how their PID is collected and used

10 The nature of the security measures in place on the Monitored Products 11 Notice that PID provided to Participant may be subject to disclosure in

response to judicial or other government subpoenas warrants or orders 12 Notice that information posted by users in online bulletin boards chat

rooms news groups or other public forums may be displayed publicly 13 The notification procedures to be utilized by Participant in the event of a

material change in its Online Information Practices andor Privacy Statement and

14 Disclosure of the effective date or last date on which the Privacy Statement was updated (ie updated as of)

5 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Participants posted Privacy Statement shall provide disclosure to users with respect to each of the following elements

1 Notice that the Monitored Product has been reviewed and certified by the ESRB Privacy Certified Program

2 A full description of how users can contact Participant including the 1Participants name postal address and email address

3 A full description of how users can contact ESRB with questions or concerns about Participants Privacy Statement or Online Information Practices

4 A complete list of all PID collected through the Monitored Product how each PID identified is collected and how it is used

5 The identity (including name address and e-mail address) of all entities that are collecting or maintaining PID on behalf of or through the Monitored Product

6 The entities (if any) with whom PID collected through the Monitored Product is shared or disclosed including the types of businesses in which any third parties are engaged the general purpose for which the information is used by the third parties and whether the third parties have agreed to maintain the confidentiality security and integrity of the PID collected by Participant

7 Notice of whether Participant supplements PID collected through the Monitored Products with information from other sources and if so a description of the PID and the sources from which they were collected

8 Disclosure of the tracking technologies if any used on the Monitored Product either by Participant or by an authorized third party

9 An explanation of when and how users may exercise opt-in andor opt-out options including the choices available to them regarding how their PID is collected and used

10 The nature of the security measures in place on the Monitored Products 11 Notice that PID provided to Participant may be subject to disclosure in

response to judicial or other government subpoenas warrants or orders 12 Notice that information posted by users in online bulletin boards chat

rooms news groups or other public forums may be displayed publicly 13 The notification procedures to be utilized by Participant in the event of a

material change in its Online Information Practices andor Privacy Statement and

14 Disclosure of the effective date or last date on which the Privacy Statement was updated (ie updated as of)

5 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

B Content of Kids Privacy Statement

If Participant is collecting PIO from Children or if any portion of Participants Monitored Products are directed to or target Children then Participant either must implement a separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

In addition to the elements set forth in Section IVA above Participants Kids Privacy Statement or if there is no separate Kids Statement that portion of Participants General Privacy Statement reflecting its Online Information Practices with respect to Children must contain the following elements

1 Disclosure of the manner in which Childrens PID is collected through the Monitored Product and how it middotwill be used (eg to fulfill a requested transaction for record keeping purposes for the purpose of marketing products or services to Children etc)

2 Notice that a Childs participation in a chat room bulletin board or other online forum provided by Participant may result in such Child1 s public disclosure of PIO and notice of Participants policy to remove any such PID if and when discovered

3 Notice that a parent has the option to consent to Participants collection and use of their Childs PID without consenting to Participants disclosure of that information to third parties

4 A description of the procedures pursuant-to which parents can prevent Participants disclosure of their Childs PID to third parties

5 Disclosure that Participant may not condition a Childs participation in an activity on such Childs disclosing more PIO than is reasonably necessary to participate in such activity

6 Notice that parents may refuse to allow Participant andor any third party from further collecting or using their Childs PIO

7 A description of the process by which a parent can for any purpose access correct or delete their Child 1 s PIO and

8 A description of the process by which third parties give parents access to review correct or delete their Childs PIO including for the purpose of preventing disclosure to third parties of their Childs PIO

6 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

C Placement of Kids Privacy Statement and Other ESRB Marks

Participant must provide on its home page and on any pages where PID is collected from Children a prominent and clearly labeled link to its Privacy Statement If the Monitored Product is a website Participant should post the Kids Privacy Seal Mark near the link to the Privacy Statement The Kids Privacy Seal Mark must link directly to Participants membership confirmation page hosted at esrborg

If the Monitored Product rs an on line app a link to the Privacy Statement must be I

in the app store available prior to download A Privacy Statement preferably a short form template containing the Mobile Seal Mark must be accessible directly within the app

V DIRECT NOTICE AND PARENTAL CONSENT REQUIREMENTS

A Direct Notice to Parents to Obtain Prior Verifiable Parental Consent

1 Participant must make reasonable efforts taking into account available technology to ensure that a parent receives direct notice of Participants Online Information Practices with respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With limited exceptions Participant must provide direct notice to parents and obtain verifiable parental consent before collecting any PID from a Child For exceptions to this requirement see Section VD below

2 Direct notice to parents sent to obtain prior verifiable parental consent must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has collected the parents email address from the child in order to obtain consent (ii) disclosure of the additional items of PID that Participant intends to collect from the Child as well as potential opportunities for disclosure of the PID (iii) disclosure that Participant must obtain the parents permission to collect use or disclose the PID collected from the Child (iv) a description of the procedures by which a parent may give Participant such permission and (v) notice that if the parent does not provide consent within a reasonable time Participant will delete the parents on line contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Participant must take reasonable measures in light of available technology to ensure that the person providing consent is the Childs parent Acceptable mechanisms for obtaining verifiable parental consent include (i) providing a consent form to be signed by the parent and returned to Participant by mail scan or fax (ii) requiring a parent to use a credit card in connection with a transaction on Participants Monitored Product (iii) having a parent call a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checking a form of

7 of 10

government-issued identification against databases of such information provided that the identification information is deleted immediately after verification (vi) using email accompanied by a PIN or password obtained by the parent through one of the verification methods described above or (vii) using an approved vendor such as Veratad Technologies

C Information Collected for Participants Internal Use Only

Where Participants use of PID is for internal purposes only and there is no disclosure to third parties or the public methods to obtain prior verifiable parental consent may also include use of email coupled with additional steps to provide assurances that the person providing the consent is the parent Such additional steps include (i) sending a delayed confirmatory email to the parent after receiving consent or (ii) obtaining a postal address or telephone number from the parent and confirming the parents consent by letter or telepho0ne call If Participant implements such methods the confirmation communication must include (a) allthe information contained in the earlier email notice and (b) instructions for how the parent can revoke the conmiddotsent given in response to the earlier email

D Exceptions to Obtaining Prior Verifiable Parental Consent

middot Participant may cpllect a Childs name or email address prior to obtaining parental consent under the following exceptions

1 Obtaining Consent Participant may collect the name or email address of a parent or Child for the sole purpose of obtaining parental consent provided however that if Participant does not obtain parental consent after a reasonable time from the initial date of collection Participant shall permanently delete collected information from Participants records Participant must not use the collected name or email address to reshycontact the parent or Child

2 One-Time Response Participant may collect an email address (or other online identifier) from a Child for the sole purpose of responding directly on a one-time basis to a specific request from the Child -- so long as such information is not used to reshycontact the Child or for any other purpose and is subsequently deleted from Participants records Under this exception Pa_rticipant is not required to provide direct notice to a parent or to obtain verifiable parental consent

3 Multiple Responses Participant may collect the online contact information of a Child and parent only to respond directly on more than one occasion to a specific request from the Child so long as such information is not used for any other purpose In such instances Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain to the parent that Participant has collected the Childs email address to respond to the Childs request (iii) explain that the Childs request will require more than

8 of 10

one contact with the Child (iv) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (v) explain how a parent can refuse to permit further contact and information collection from the Child and (vi) explain that if the parent does not respond Participant may use the collected information for the purposes stated in the direct notice This direct notice to parents must be sent immediately after Participants initial response to the Child and before sending any additional responses

4 Protecting Child Safety Where Participant has used reasonable efforts to provide notice to the parent Participant may collect a Childs name and emall address only to the extent reasonably necessary to protect the safety of the Child on a Monitored Product provided such information is used for the sole purpose of protecting the Childs safety and not used to re-contact the Child or for any other purpose nor disclosed on the Monitored Products In such cases Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i include Participants Kids Privacy Statement or that portion of Participant1 s General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain that Participant has collected the Childs name and email address to protect the Childs safety (iii explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (iv) explain how a parent can refuse to permit further contact and information collection from the Child and (v) explain that if the parent does not respond Participant may use the information for the purposes stated in the direct notice

5 Protecting Others Participant may collect a Childs name and email address only to protect the integrity or security of Participants Monitored Products to take precautions against liability to respond to judicial process or to provide information to law enforcement agencies or pursuant to authorized investigations on matters related to public safety provided such information is not used for any other purpose Under this exception Participant is not required to provide direct notice to parents

VI PROVIDING PARENTS ACCESS TO AND CONTROL OVER CHILDRENS PERSONAL

INFORMATION AND DATA

Participant must provide parents with the following information and opportunities to control use of their Childs PID

bull The specific information Participant has collected from the Child induding hisher name address telephone number hobbies etc

bull An opportunity for the parent to prevent Participant from collecting or using PID about their Child in the future and

bull An opportunity for the parent to direct Participant to delete their Childs PID from Participants records

9 oflO

Participant must take reasonable measures in light of available technology to ensure that the person requesting access to or providing instructions about the Childs PIO is the Childs parent For acceptable verification mechanisms refer to Section VB above

VII DATA COLLECTION AND SECURITY

A Participant shall upon ESRBs reasonable request provide details regarding how PID is gathered from andor tracked through Participants Monitored Products as well as disclosure regarding how such PID is utilized If PID is not being utilized Participant should not collect it

B Participant shall establish implement and maintain reasonable procedures to protect the confidentiality security and integrity of PID within its control whether collected from adults or Children from unauthorized access use alteration distribution or disclosure Participant shall utilize appropriate commercially reasonable methods (eg encryption) to protect any sensitive PID it collects such as social security numbers or transactional information including but not limited to financial information

C Participant must take reasonable steps tci release Childrens PID only to service providers and third parties capable of maintaining the confidentiality security and integrity of such information

D Participant shall take reasonable steps when collecting creating maintaining using distributing or disclosing PIO to assure that the data created utiliz_ed andor shared is upshyto-date complete and accurate middot

E Participant must implement reasonable and effective _processes andor mechanisms that allow users to correct material inaccuracies in PID such as account or contact information These processes andor mechanisms must be easily comprehended and usershyfriendly and once utilized must confirm to users that the cited inaccuracies have been corrected

F If Participants Monitored Products provide links to third-party web sites or apps Participant should implement exit messages or bumper pages wherever users travel via such links to a third-party site or app to inform a user that (i) heshe is leaving Participants web site or app and (ii) Participants Terms of Use and Privacy Statement will no longer be applicable upon users departure from Participants website or app Prior to implementation Participant should submit the specific language it intends to utilize for this purpose to ESRB for approval

10 of 10

--

EXHIBITS

Proposed ESRB Privacy Certified Kids Seal Requirements

---middotmiddot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot The- following-011tlines-the ESRB Priveoy-GeflifieaKids 8~uiremellls (Pregffiltt~~-~ Requiremellts) es refereneed in the ESRB Pfftttoy Certified Paflieipetion Agreement (tlgreemellt) Any middotshy Formatted Indent First line 1 bull defined tellllS used in tile Agreement shell hwbulle the same mettnillg when tttilied heFe--Jf llllj-8f --middot-middot- Formatted Font +Body (Calibri) 12 pt Partioiplllfrac12~a_Monitored Web Sites or Mobile Apps are Product is_directed at andor eolleotFersonatly _____ _ Formatted Font +Body (Calibri) 12 pt Identifiable Illfomurtion ff6mor targeted at_children under the age of thirteen ( 13t--ar-tfany seeti011 middotmiddot-bull Formatted Font +Body (Calibri) 12 ptefPaflioipants Ma11i10red Web Sites er Mabile-Apps-ere-ttifeoted-ttttargeled-HI andor eolleets Persollfllly middotmiddot--

Formatted Font +Body (Calibri) 12 ptldentifHlble T11funna1ien fem ehildrell muler tlie age of thfrtoon-fHt--e~ Participant_ has actual-middotmiddot--shy

Formatted font +Body (Calibri 12 ptknowledge tlttltit is_collecting ormaintaining Peffi0nllly_lde11tifiable-Infermatiootor allowing a third----

Formatted Font +Body (Callbrl) 12 pt party to collect or maintain) personal information or dataJrom children under the age of thirteenmiddot--middot--

Formatted Font +Body (Calibri) 12 pt

Formatted Justified ---

(1-3) through f Monitored Web Sites or Mobile AppsProduct then Participant must comply with----middot-middot the followiftgESRB Privacy Certified KidsKids Seal -Requirements If1my of Partioipants set forth middotbullbull in this Sched~le for all such Monitored ~t~bile-Apps ere _eolleeling_inform~tiett-ffllffl ~middotshyeitiens oHh~Products Participant has eBFOlled in the HU Priva~submitted_to _middot ESRB for certification and on whichParticipant ffllSt-alse-eampljWilhintends to_display the_Privacy Certified Kids Privacy seal andorthe ESRB Privacy Certified BH--Seal-ReEjuirementswbieh shall_by releFenee ineorpomte-atiy-fted-flH-applieabe mies and defmiieBS-aS--OHlineft-llflder the Childreas Ollliae

Pribullaey Proeoion Act (as amended-on-9eeember 19 2012)Mobile sealbull-middot __ _-__ -middot-----------------

lt h--DEFINITIONS bull ---middot-------------------------middot---middotmiddotmiddotmiddotmiddotmiddot-----middotmiddotmiddotmiddotmiddotmiddot---------------------middot--middotmiddotmiddotmiddotmiddotmiddotmiddotgt

bull--- -middot----- J ----------------------------------middotmiddot----------------------------- -- ltgtmiddot ChildChildren means users resident 1n the United States er G11uadltt_0r anrhere else in the wOFk _

who are under thirteen (13) years of age middot

Online Information Practices encompass but are not limited to i) Participants practices regarding consumer notification and consumer access to their pet=seaal infemwttemPersonal ~ Information and Data (as that term is defined belowlt (ii) Participants Practices with_respect_to _ the collection use or disclosure of pelSOaal illfurmatioaPersonal Information and DataJi]l_-middotmiddot-

middotmiddot--middot--------- ----------- -----middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-------middotmiddot----------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-middot-------------------middotmiddot-middotmiddotmiddotmiddotmiddotmiddot middot ---~---a~a-------inelude an i11djvid11als namecollected_online--eontaet-infumuttioll (ie email eddresses_alld soreen names__ middot Formatted Font +Body (Callbr1) 12 pt

that funotien as email addresses including but not limited to middot Formatted Font +Body (Callbr1) 12 pt

1 Formatted font +Body (Calibri) 12 pt

bull First and last name Formatted Font +Body (Calibtl) 12 pt

bull Homq_or reveal ai1_i11divid11als emftilother physical addresstthsne-1n1mller fillf umnber home_-middotmiddotmiddot Formatted Font +Body (Calibri) 12 pt oodresssaeial-seooFity-fl hetos-Yitleesef -bull_ Formatted Font +Body (Callbrl) 12 pt

lof 13

Participants practices regarding user choice and consent to how ~elS01ml iBfurmatioaPersonal Information and Data_ is usedor shared__and _(iv)_ security measures __ taken __to protect

infuffifttianPersonal Information and Data_pfQ~_r~--~Y-~-~E~----------------------middot-middotmiddotmiddotmiddotmiddot------------

Pefsettally Identifiable Personal Information and Data lPID)Jneans any information that_een be ttsea--lrgJo itlentily an identifled or identifiable individual aF-yenltmiddothiolt enables direst oontaot-with-1111 individHftl This would

Formatted Font +Body (Calibri) 12 pt Farmatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt _ --

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Heading 1 Indent first line 025 Space Before 12 pt After 3 pt

Formatted Font 12 pt Not Bold

Formatted Font +Body (Calibri) 12 pt

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -__ _ Formatted Font +Body (Calibri) 12 pt

____ Formatted Font +Body (Calibri) 12 pt

-middot_-middotmiddotFormatted Font +Body (Calibri) 12 pt 7

____ - Formatted Font +Body (Calibri) 12 pt

bull-- Farmatted Font +Body (Calibri) 12 pt

ffildio esstaining-the-ttttage or voioe of a child per-sistent ideBtilfors (soclriis or geolocation information

bull Online contact information (eq email address instant messenger identifier video chat identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier eq a_ customer_ number _held_ in a_ cookie or a prooesser internet------ Formatted font +Body (Gallbrl) 12 pt

protocol address deviceserial number anQt_ unique device identifier~) _if additional PIO ___ - Formatted font -1-Body (Calibri) 12 pt

is collected andor the persistent identifier(sl are not used solely to support the internal ------ Formatted Font +Body (Calibri) 12 pt

operations of the Monitored Product bull Photograph or video recording showing the individuals faceo_r_~~~re_~~[__l)_~_geo_i_l)_C~~------- Formatted Font +Body (Calibri) 12 pt

information suffieioot ta ide0lify a street name and 11111110 oftovn otherwise containing PIO in the photograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PIO within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

Demographic_information that is eombilledvlitli_flemoool_i11fuF111atioo-jincluding _but not _limited to_----- Formatted Font +Body (Calibri) 12 pt

gender age dateofbirtheducational_background_or political affiliation) also becomes_Pfilsetutlly ------ Formatted Font -1-Body (Calibri) 12pt

IdentifiaJle IHfurmation Personally-ttleRtifiable lnformat-ionPID when combined with other ------i Formatted Font -1-Body (Calibri) 12pt

information enabling the individual to be identified PIO_ does_ not include _information that _is _______ Formatted Font -1-Body (Olllbrl) 12 pt

snce00amp0F-[endered anonymouseffJHhliely-avuilable infurmati0amp-tlIBt--lms-net--aeea-combi0ed with--110n- _______ Formatted Font +Body (Calibri) 12 pt

pHbio Pefsonally IdOAifiable-lnteffittlliefl ______ ____ ____________________ _____ ___________________ Formatted Font -1-Body (Calibri) 12 pt

Privacy Statement means the statement posted on the Monitored Welr-ampites-ef---Mobile AppsProducts~_ which_ discloses_ Participants_ up-to-dat~ policies_ regarding_ user_ privacy_ and ___ --- Formatted font -1-Body (callbr) 12 pt

Participants practices with respect to the collection use and disclosure of Personally Identifiable middot-- Formatted Font -1-Body(Ollibrl) 12 pt

Imermatien as stwh prnetiees may le updated ti-em time-te-timefQ____________________ _______________________ Formatted Font -1-Body(Gallbr) 12 pt

P-li-vaey Risk Assess ment-menns-the iAitiul pre eortifieation-repei+previltled by ESRll to-11-eempany-befare it aeeomes a Participant--in-H1e-Pregrn111 which refleets-GSRBs assessment of the-legal imd business risks posoo--by-the-oompanys thOA e1mce11t Privmy Statement data githerJBg practices and oHline-pfivaey disclosures

1~----~~~~~~M _1gt_9c_lJ_fylENTS AlJ~-~-~q=~-[)~lE_~-- _______ ___________________ __________ _________ Formatted Font +Body (Calibri) 12 pt

-lt--- bull Formatted Justified Indent First line 025

~-middot-i Formatted Justified - - bull Formatted List Paragraph Numbered -1- level l + Numbering Style A 8 C + Start at 1 + Alignment Left -1-ff-it--has-t1ot already done so dtffilg the pre ee11ifieatiott-phase-ift Aligned at 05 + lndent at 1

ootieipation ofreeeipt ofESRBs Priaey Risk Assessment Paffieipant-shall Hilly eomplete-ft-Self [ Formatted Font +Body (Qillbli) 12 ptAssessmeat Quesionnaire (SAQ) mid return it to flSRB In providiBgcthe cempleted SAQ Partioipllflt

Hndersta0ds that ESRB may rely all tile statemeAts eontaittetl--thereia fur the )lfrposc of determining j Formatted Font +Body (Calibri) 12 pt

2 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

one contact with the Child (iv) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (v) explain how a parent can refuse to permit further contact and information collection from the Child and (vi) explain that if the parent does not respond Participant may use the collected information for the purposes stated in the direct notice This direct notice to parents must be sent immediately after Participants initial response to the Child and before sending any additional responses

4 Protecting Child Safety Where Participant has used reasonable efforts to provide notice to the parent Participant may collect a Childs name and emall address only to the extent reasonably necessary to protect the safety of the Child on a Monitored Product provided such information is used for the sole purpose of protecting the Childs safety and not used to re-contact the Child or for any other purpose nor disclosed on the Monitored Products In such cases Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i include Participants Kids Privacy Statement or that portion of Participant1 s General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain that Participant has collected the Childs name and email address to protect the Childs safety (iii explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (iv) explain how a parent can refuse to permit further contact and information collection from the Child and (v) explain that if the parent does not respond Participant may use the information for the purposes stated in the direct notice

5 Protecting Others Participant may collect a Childs name and email address only to protect the integrity or security of Participants Monitored Products to take precautions against liability to respond to judicial process or to provide information to law enforcement agencies or pursuant to authorized investigations on matters related to public safety provided such information is not used for any other purpose Under this exception Participant is not required to provide direct notice to parents

VI PROVIDING PARENTS ACCESS TO AND CONTROL OVER CHILDRENS PERSONAL

INFORMATION AND DATA

Participant must provide parents with the following information and opportunities to control use of their Childs PID

bull The specific information Participant has collected from the Child induding hisher name address telephone number hobbies etc

bull An opportunity for the parent to prevent Participant from collecting or using PID about their Child in the future and

bull An opportunity for the parent to direct Participant to delete their Childs PID from Participants records

9 oflO

Participant must take reasonable measures in light of available technology to ensure that the person requesting access to or providing instructions about the Childs PIO is the Childs parent For acceptable verification mechanisms refer to Section VB above

VII DATA COLLECTION AND SECURITY

A Participant shall upon ESRBs reasonable request provide details regarding how PID is gathered from andor tracked through Participants Monitored Products as well as disclosure regarding how such PID is utilized If PID is not being utilized Participant should not collect it

B Participant shall establish implement and maintain reasonable procedures to protect the confidentiality security and integrity of PID within its control whether collected from adults or Children from unauthorized access use alteration distribution or disclosure Participant shall utilize appropriate commercially reasonable methods (eg encryption) to protect any sensitive PID it collects such as social security numbers or transactional information including but not limited to financial information

C Participant must take reasonable steps tci release Childrens PID only to service providers and third parties capable of maintaining the confidentiality security and integrity of such information

D Participant shall take reasonable steps when collecting creating maintaining using distributing or disclosing PIO to assure that the data created utiliz_ed andor shared is upshyto-date complete and accurate middot

E Participant must implement reasonable and effective _processes andor mechanisms that allow users to correct material inaccuracies in PID such as account or contact information These processes andor mechanisms must be easily comprehended and usershyfriendly and once utilized must confirm to users that the cited inaccuracies have been corrected

F If Participants Monitored Products provide links to third-party web sites or apps Participant should implement exit messages or bumper pages wherever users travel via such links to a third-party site or app to inform a user that (i) heshe is leaving Participants web site or app and (ii) Participants Terms of Use and Privacy Statement will no longer be applicable upon users departure from Participants website or app Prior to implementation Participant should submit the specific language it intends to utilize for this purpose to ESRB for approval

10 of 10

--

EXHIBITS

Proposed ESRB Privacy Certified Kids Seal Requirements

---middotmiddot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot The- following-011tlines-the ESRB Priveoy-GeflifieaKids 8~uiremellls (Pregffiltt~~-~ Requiremellts) es refereneed in the ESRB Pfftttoy Certified Paflieipetion Agreement (tlgreemellt) Any middotshy Formatted Indent First line 1 bull defined tellllS used in tile Agreement shell hwbulle the same mettnillg when tttilied heFe--Jf llllj-8f --middot-middot- Formatted Font +Body (Calibri) 12 pt Partioiplllfrac12~a_Monitored Web Sites or Mobile Apps are Product is_directed at andor eolleotFersonatly _____ _ Formatted Font +Body (Calibri) 12 pt Identifiable Illfomurtion ff6mor targeted at_children under the age of thirteen ( 13t--ar-tfany seeti011 middotmiddot-bull Formatted Font +Body (Calibri) 12 ptefPaflioipants Ma11i10red Web Sites er Mabile-Apps-ere-ttifeoted-ttttargeled-HI andor eolleets Persollfllly middotmiddot--

Formatted Font +Body (Calibri) 12 ptldentifHlble T11funna1ien fem ehildrell muler tlie age of thfrtoon-fHt--e~ Participant_ has actual-middotmiddot--shy

Formatted font +Body (Calibri 12 ptknowledge tlttltit is_collecting ormaintaining Peffi0nllly_lde11tifiable-Infermatiootor allowing a third----

Formatted Font +Body (Callbrl) 12 pt party to collect or maintain) personal information or dataJrom children under the age of thirteenmiddot--middot--

Formatted Font +Body (Calibri) 12 pt

Formatted Justified ---

(1-3) through f Monitored Web Sites or Mobile AppsProduct then Participant must comply with----middot-middot the followiftgESRB Privacy Certified KidsKids Seal -Requirements If1my of Partioipants set forth middotbullbull in this Sched~le for all such Monitored ~t~bile-Apps ere _eolleeling_inform~tiett-ffllffl ~middotshyeitiens oHh~Products Participant has eBFOlled in the HU Priva~submitted_to _middot ESRB for certification and on whichParticipant ffllSt-alse-eampljWilhintends to_display the_Privacy Certified Kids Privacy seal andorthe ESRB Privacy Certified BH--Seal-ReEjuirementswbieh shall_by releFenee ineorpomte-atiy-fted-flH-applieabe mies and defmiieBS-aS--OHlineft-llflder the Childreas Ollliae

Pribullaey Proeoion Act (as amended-on-9eeember 19 2012)Mobile sealbull-middot __ _-__ -middot-----------------

lt h--DEFINITIONS bull ---middot-------------------------middot---middotmiddotmiddotmiddotmiddotmiddot-----middotmiddotmiddotmiddotmiddotmiddot---------------------middot--middotmiddotmiddotmiddotmiddotmiddotmiddotgt

bull--- -middot----- J ----------------------------------middotmiddot----------------------------- -- ltgtmiddot ChildChildren means users resident 1n the United States er G11uadltt_0r anrhere else in the wOFk _

who are under thirteen (13) years of age middot

Online Information Practices encompass but are not limited to i) Participants practices regarding consumer notification and consumer access to their pet=seaal infemwttemPersonal ~ Information and Data (as that term is defined belowlt (ii) Participants Practices with_respect_to _ the collection use or disclosure of pelSOaal illfurmatioaPersonal Information and DataJi]l_-middotmiddot-

middotmiddot--middot--------- ----------- -----middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-------middotmiddot----------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-middot-------------------middotmiddot-middotmiddotmiddotmiddotmiddotmiddot middot ---~---a~a-------inelude an i11djvid11als namecollected_online--eontaet-infumuttioll (ie email eddresses_alld soreen names__ middot Formatted Font +Body (Callbr1) 12 pt

that funotien as email addresses including but not limited to middot Formatted Font +Body (Callbr1) 12 pt

1 Formatted font +Body (Calibri) 12 pt

bull First and last name Formatted Font +Body (Calibtl) 12 pt

bull Homq_or reveal ai1_i11divid11als emftilother physical addresstthsne-1n1mller fillf umnber home_-middotmiddotmiddot Formatted Font +Body (Calibri) 12 pt oodresssaeial-seooFity-fl hetos-Yitleesef -bull_ Formatted Font +Body (Callbrl) 12 pt

lof 13

Participants practices regarding user choice and consent to how ~elS01ml iBfurmatioaPersonal Information and Data_ is usedor shared__and _(iv)_ security measures __ taken __to protect

infuffifttianPersonal Information and Data_pfQ~_r~--~Y-~-~E~----------------------middot-middotmiddotmiddotmiddotmiddot------------

Pefsettally Identifiable Personal Information and Data lPID)Jneans any information that_een be ttsea--lrgJo itlentily an identifled or identifiable individual aF-yenltmiddothiolt enables direst oontaot-with-1111 individHftl This would

Formatted Font +Body (Calibri) 12 pt Farmatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt _ --

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Heading 1 Indent first line 025 Space Before 12 pt After 3 pt

Formatted Font 12 pt Not Bold

Formatted Font +Body (Calibri) 12 pt

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -__ _ Formatted Font +Body (Calibri) 12 pt

____ Formatted Font +Body (Calibri) 12 pt

-middot_-middotmiddotFormatted Font +Body (Calibri) 12 pt 7

____ - Formatted Font +Body (Calibri) 12 pt

bull-- Farmatted Font +Body (Calibri) 12 pt

ffildio esstaining-the-ttttage or voioe of a child per-sistent ideBtilfors (soclriis or geolocation information

bull Online contact information (eq email address instant messenger identifier video chat identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier eq a_ customer_ number _held_ in a_ cookie or a prooesser internet------ Formatted font +Body (Gallbrl) 12 pt

protocol address deviceserial number anQt_ unique device identifier~) _if additional PIO ___ - Formatted font -1-Body (Calibri) 12 pt

is collected andor the persistent identifier(sl are not used solely to support the internal ------ Formatted Font +Body (Calibri) 12 pt

operations of the Monitored Product bull Photograph or video recording showing the individuals faceo_r_~~~re_~~[__l)_~_geo_i_l)_C~~------- Formatted Font +Body (Calibri) 12 pt

information suffieioot ta ide0lify a street name and 11111110 oftovn otherwise containing PIO in the photograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PIO within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

Demographic_information that is eombilledvlitli_flemoool_i11fuF111atioo-jincluding _but not _limited to_----- Formatted Font +Body (Calibri) 12 pt

gender age dateofbirtheducational_background_or political affiliation) also becomes_Pfilsetutlly ------ Formatted Font -1-Body (Calibri) 12pt

IdentifiaJle IHfurmation Personally-ttleRtifiable lnformat-ionPID when combined with other ------i Formatted Font -1-Body (Calibri) 12pt

information enabling the individual to be identified PIO_ does_ not include _information that _is _______ Formatted Font -1-Body (Olllbrl) 12 pt

snce00amp0F-[endered anonymouseffJHhliely-avuilable infurmati0amp-tlIBt--lms-net--aeea-combi0ed with--110n- _______ Formatted Font +Body (Calibri) 12 pt

pHbio Pefsonally IdOAifiable-lnteffittlliefl ______ ____ ____________________ _____ ___________________ Formatted Font -1-Body (Calibri) 12 pt

Privacy Statement means the statement posted on the Monitored Welr-ampites-ef---Mobile AppsProducts~_ which_ discloses_ Participants_ up-to-dat~ policies_ regarding_ user_ privacy_ and ___ --- Formatted font -1-Body (callbr) 12 pt

Participants practices with respect to the collection use and disclosure of Personally Identifiable middot-- Formatted Font -1-Body(Ollibrl) 12 pt

Imermatien as stwh prnetiees may le updated ti-em time-te-timefQ____________________ _______________________ Formatted Font -1-Body(Gallbr) 12 pt

P-li-vaey Risk Assess ment-menns-the iAitiul pre eortifieation-repei+previltled by ESRll to-11-eempany-befare it aeeomes a Participant--in-H1e-Pregrn111 which refleets-GSRBs assessment of the-legal imd business risks posoo--by-the-oompanys thOA e1mce11t Privmy Statement data githerJBg practices and oHline-pfivaey disclosures

1~----~~~~~~M _1gt_9c_lJ_fylENTS AlJ~-~-~q=~-[)~lE_~-- _______ ___________________ __________ _________ Formatted Font +Body (Calibri) 12 pt

-lt--- bull Formatted Justified Indent First line 025

~-middot-i Formatted Justified - - bull Formatted List Paragraph Numbered -1- level l + Numbering Style A 8 C + Start at 1 + Alignment Left -1-ff-it--has-t1ot already done so dtffilg the pre ee11ifieatiott-phase-ift Aligned at 05 + lndent at 1

ootieipation ofreeeipt ofESRBs Priaey Risk Assessment Paffieipant-shall Hilly eomplete-ft-Self [ Formatted Font +Body (Qillbli) 12 ptAssessmeat Quesionnaire (SAQ) mid return it to flSRB In providiBgcthe cempleted SAQ Partioipllflt

Hndersta0ds that ESRB may rely all tile statemeAts eontaittetl--thereia fur the )lfrposc of determining j Formatted Font +Body (Calibri) 12 pt

2 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

Participant must take reasonable measures in light of available technology to ensure that the person requesting access to or providing instructions about the Childs PIO is the Childs parent For acceptable verification mechanisms refer to Section VB above

VII DATA COLLECTION AND SECURITY

A Participant shall upon ESRBs reasonable request provide details regarding how PID is gathered from andor tracked through Participants Monitored Products as well as disclosure regarding how such PID is utilized If PID is not being utilized Participant should not collect it

B Participant shall establish implement and maintain reasonable procedures to protect the confidentiality security and integrity of PID within its control whether collected from adults or Children from unauthorized access use alteration distribution or disclosure Participant shall utilize appropriate commercially reasonable methods (eg encryption) to protect any sensitive PID it collects such as social security numbers or transactional information including but not limited to financial information

C Participant must take reasonable steps tci release Childrens PID only to service providers and third parties capable of maintaining the confidentiality security and integrity of such information

D Participant shall take reasonable steps when collecting creating maintaining using distributing or disclosing PIO to assure that the data created utiliz_ed andor shared is upshyto-date complete and accurate middot

E Participant must implement reasonable and effective _processes andor mechanisms that allow users to correct material inaccuracies in PID such as account or contact information These processes andor mechanisms must be easily comprehended and usershyfriendly and once utilized must confirm to users that the cited inaccuracies have been corrected

F If Participants Monitored Products provide links to third-party web sites or apps Participant should implement exit messages or bumper pages wherever users travel via such links to a third-party site or app to inform a user that (i) heshe is leaving Participants web site or app and (ii) Participants Terms of Use and Privacy Statement will no longer be applicable upon users departure from Participants website or app Prior to implementation Participant should submit the specific language it intends to utilize for this purpose to ESRB for approval

10 of 10

--

EXHIBITS

Proposed ESRB Privacy Certified Kids Seal Requirements

---middotmiddot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot The- following-011tlines-the ESRB Priveoy-GeflifieaKids 8~uiremellls (Pregffiltt~~-~ Requiremellts) es refereneed in the ESRB Pfftttoy Certified Paflieipetion Agreement (tlgreemellt) Any middotshy Formatted Indent First line 1 bull defined tellllS used in tile Agreement shell hwbulle the same mettnillg when tttilied heFe--Jf llllj-8f --middot-middot- Formatted Font +Body (Calibri) 12 pt Partioiplllfrac12~a_Monitored Web Sites or Mobile Apps are Product is_directed at andor eolleotFersonatly _____ _ Formatted Font +Body (Calibri) 12 pt Identifiable Illfomurtion ff6mor targeted at_children under the age of thirteen ( 13t--ar-tfany seeti011 middotmiddot-bull Formatted Font +Body (Calibri) 12 ptefPaflioipants Ma11i10red Web Sites er Mabile-Apps-ere-ttifeoted-ttttargeled-HI andor eolleets Persollfllly middotmiddot--

Formatted Font +Body (Calibri) 12 ptldentifHlble T11funna1ien fem ehildrell muler tlie age of thfrtoon-fHt--e~ Participant_ has actual-middotmiddot--shy

Formatted font +Body (Calibri 12 ptknowledge tlttltit is_collecting ormaintaining Peffi0nllly_lde11tifiable-Infermatiootor allowing a third----

Formatted Font +Body (Callbrl) 12 pt party to collect or maintain) personal information or dataJrom children under the age of thirteenmiddot--middot--

Formatted Font +Body (Calibri) 12 pt

Formatted Justified ---

(1-3) through f Monitored Web Sites or Mobile AppsProduct then Participant must comply with----middot-middot the followiftgESRB Privacy Certified KidsKids Seal -Requirements If1my of Partioipants set forth middotbullbull in this Sched~le for all such Monitored ~t~bile-Apps ere _eolleeling_inform~tiett-ffllffl ~middotshyeitiens oHh~Products Participant has eBFOlled in the HU Priva~submitted_to _middot ESRB for certification and on whichParticipant ffllSt-alse-eampljWilhintends to_display the_Privacy Certified Kids Privacy seal andorthe ESRB Privacy Certified BH--Seal-ReEjuirementswbieh shall_by releFenee ineorpomte-atiy-fted-flH-applieabe mies and defmiieBS-aS--OHlineft-llflder the Childreas Ollliae

Pribullaey Proeoion Act (as amended-on-9eeember 19 2012)Mobile sealbull-middot __ _-__ -middot-----------------

lt h--DEFINITIONS bull ---middot-------------------------middot---middotmiddotmiddotmiddotmiddotmiddot-----middotmiddotmiddotmiddotmiddotmiddot---------------------middot--middotmiddotmiddotmiddotmiddotmiddotmiddotgt

bull--- -middot----- J ----------------------------------middotmiddot----------------------------- -- ltgtmiddot ChildChildren means users resident 1n the United States er G11uadltt_0r anrhere else in the wOFk _

who are under thirteen (13) years of age middot

Online Information Practices encompass but are not limited to i) Participants practices regarding consumer notification and consumer access to their pet=seaal infemwttemPersonal ~ Information and Data (as that term is defined belowlt (ii) Participants Practices with_respect_to _ the collection use or disclosure of pelSOaal illfurmatioaPersonal Information and DataJi]l_-middotmiddot-

middotmiddot--middot--------- ----------- -----middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-------middotmiddot----------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-middot-------------------middotmiddot-middotmiddotmiddotmiddotmiddotmiddot middot ---~---a~a-------inelude an i11djvid11als namecollected_online--eontaet-infumuttioll (ie email eddresses_alld soreen names__ middot Formatted Font +Body (Callbr1) 12 pt

that funotien as email addresses including but not limited to middot Formatted Font +Body (Callbr1) 12 pt

1 Formatted font +Body (Calibri) 12 pt

bull First and last name Formatted Font +Body (Calibtl) 12 pt

bull Homq_or reveal ai1_i11divid11als emftilother physical addresstthsne-1n1mller fillf umnber home_-middotmiddotmiddot Formatted Font +Body (Calibri) 12 pt oodresssaeial-seooFity-fl hetos-Yitleesef -bull_ Formatted Font +Body (Callbrl) 12 pt

lof 13

Participants practices regarding user choice and consent to how ~elS01ml iBfurmatioaPersonal Information and Data_ is usedor shared__and _(iv)_ security measures __ taken __to protect

infuffifttianPersonal Information and Data_pfQ~_r~--~Y-~-~E~----------------------middot-middotmiddotmiddotmiddotmiddot------------

Pefsettally Identifiable Personal Information and Data lPID)Jneans any information that_een be ttsea--lrgJo itlentily an identifled or identifiable individual aF-yenltmiddothiolt enables direst oontaot-with-1111 individHftl This would

Formatted Font +Body (Calibri) 12 pt Farmatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt _ --

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Heading 1 Indent first line 025 Space Before 12 pt After 3 pt

Formatted Font 12 pt Not Bold

Formatted Font +Body (Calibri) 12 pt

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -__ _ Formatted Font +Body (Calibri) 12 pt

____ Formatted Font +Body (Calibri) 12 pt

-middot_-middotmiddotFormatted Font +Body (Calibri) 12 pt 7

____ - Formatted Font +Body (Calibri) 12 pt

bull-- Farmatted Font +Body (Calibri) 12 pt

ffildio esstaining-the-ttttage or voioe of a child per-sistent ideBtilfors (soclriis or geolocation information

bull Online contact information (eq email address instant messenger identifier video chat identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier eq a_ customer_ number _held_ in a_ cookie or a prooesser internet------ Formatted font +Body (Gallbrl) 12 pt

protocol address deviceserial number anQt_ unique device identifier~) _if additional PIO ___ - Formatted font -1-Body (Calibri) 12 pt

is collected andor the persistent identifier(sl are not used solely to support the internal ------ Formatted Font +Body (Calibri) 12 pt

operations of the Monitored Product bull Photograph or video recording showing the individuals faceo_r_~~~re_~~[__l)_~_geo_i_l)_C~~------- Formatted Font +Body (Calibri) 12 pt

information suffieioot ta ide0lify a street name and 11111110 oftovn otherwise containing PIO in the photograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PIO within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

Demographic_information that is eombilledvlitli_flemoool_i11fuF111atioo-jincluding _but not _limited to_----- Formatted Font +Body (Calibri) 12 pt

gender age dateofbirtheducational_background_or political affiliation) also becomes_Pfilsetutlly ------ Formatted Font -1-Body (Calibri) 12pt

IdentifiaJle IHfurmation Personally-ttleRtifiable lnformat-ionPID when combined with other ------i Formatted Font -1-Body (Calibri) 12pt

information enabling the individual to be identified PIO_ does_ not include _information that _is _______ Formatted Font -1-Body (Olllbrl) 12 pt

snce00amp0F-[endered anonymouseffJHhliely-avuilable infurmati0amp-tlIBt--lms-net--aeea-combi0ed with--110n- _______ Formatted Font +Body (Calibri) 12 pt

pHbio Pefsonally IdOAifiable-lnteffittlliefl ______ ____ ____________________ _____ ___________________ Formatted Font -1-Body (Calibri) 12 pt

Privacy Statement means the statement posted on the Monitored Welr-ampites-ef---Mobile AppsProducts~_ which_ discloses_ Participants_ up-to-dat~ policies_ regarding_ user_ privacy_ and ___ --- Formatted font -1-Body (callbr) 12 pt

Participants practices with respect to the collection use and disclosure of Personally Identifiable middot-- Formatted Font -1-Body(Ollibrl) 12 pt

Imermatien as stwh prnetiees may le updated ti-em time-te-timefQ____________________ _______________________ Formatted Font -1-Body(Gallbr) 12 pt

P-li-vaey Risk Assess ment-menns-the iAitiul pre eortifieation-repei+previltled by ESRll to-11-eempany-befare it aeeomes a Participant--in-H1e-Pregrn111 which refleets-GSRBs assessment of the-legal imd business risks posoo--by-the-oompanys thOA e1mce11t Privmy Statement data githerJBg practices and oHline-pfivaey disclosures

1~----~~~~~~M _1gt_9c_lJ_fylENTS AlJ~-~-~q=~-[)~lE_~-- _______ ___________________ __________ _________ Formatted Font +Body (Calibri) 12 pt

-lt--- bull Formatted Justified Indent First line 025

~-middot-i Formatted Justified - - bull Formatted List Paragraph Numbered -1- level l + Numbering Style A 8 C + Start at 1 + Alignment Left -1-ff-it--has-t1ot already done so dtffilg the pre ee11ifieatiott-phase-ift Aligned at 05 + lndent at 1

ootieipation ofreeeipt ofESRBs Priaey Risk Assessment Paffieipant-shall Hilly eomplete-ft-Self [ Formatted Font +Body (Qillbli) 12 ptAssessmeat Quesionnaire (SAQ) mid return it to flSRB In providiBgcthe cempleted SAQ Partioipllflt

Hndersta0ds that ESRB may rely all tile statemeAts eontaittetl--thereia fur the )lfrposc of determining j Formatted Font +Body (Calibri) 12 pt

2 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

--

EXHIBITS

Proposed ESRB Privacy Certified Kids Seal Requirements

---middotmiddot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot The- following-011tlines-the ESRB Priveoy-GeflifieaKids 8~uiremellls (Pregffiltt~~-~ Requiremellts) es refereneed in the ESRB Pfftttoy Certified Paflieipetion Agreement (tlgreemellt) Any middotshy Formatted Indent First line 1 bull defined tellllS used in tile Agreement shell hwbulle the same mettnillg when tttilied heFe--Jf llllj-8f --middot-middot- Formatted Font +Body (Calibri) 12 pt Partioiplllfrac12~a_Monitored Web Sites or Mobile Apps are Product is_directed at andor eolleotFersonatly _____ _ Formatted Font +Body (Calibri) 12 pt Identifiable Illfomurtion ff6mor targeted at_children under the age of thirteen ( 13t--ar-tfany seeti011 middotmiddot-bull Formatted Font +Body (Calibri) 12 ptefPaflioipants Ma11i10red Web Sites er Mabile-Apps-ere-ttifeoted-ttttargeled-HI andor eolleets Persollfllly middotmiddot--

Formatted Font +Body (Calibri) 12 ptldentifHlble T11funna1ien fem ehildrell muler tlie age of thfrtoon-fHt--e~ Participant_ has actual-middotmiddot--shy

Formatted font +Body (Calibri 12 ptknowledge tlttltit is_collecting ormaintaining Peffi0nllly_lde11tifiable-Infermatiootor allowing a third----

Formatted Font +Body (Callbrl) 12 pt party to collect or maintain) personal information or dataJrom children under the age of thirteenmiddot--middot--

Formatted Font +Body (Calibri) 12 pt

Formatted Justified ---

(1-3) through f Monitored Web Sites or Mobile AppsProduct then Participant must comply with----middot-middot the followiftgESRB Privacy Certified KidsKids Seal -Requirements If1my of Partioipants set forth middotbullbull in this Sched~le for all such Monitored ~t~bile-Apps ere _eolleeling_inform~tiett-ffllffl ~middotshyeitiens oHh~Products Participant has eBFOlled in the HU Priva~submitted_to _middot ESRB for certification and on whichParticipant ffllSt-alse-eampljWilhintends to_display the_Privacy Certified Kids Privacy seal andorthe ESRB Privacy Certified BH--Seal-ReEjuirementswbieh shall_by releFenee ineorpomte-atiy-fted-flH-applieabe mies and defmiieBS-aS--OHlineft-llflder the Childreas Ollliae

Pribullaey Proeoion Act (as amended-on-9eeember 19 2012)Mobile sealbull-middot __ _-__ -middot-----------------

lt h--DEFINITIONS bull ---middot-------------------------middot---middotmiddotmiddotmiddotmiddotmiddot-----middotmiddotmiddotmiddotmiddotmiddot---------------------middot--middotmiddotmiddotmiddotmiddotmiddotmiddotgt

bull--- -middot----- J ----------------------------------middotmiddot----------------------------- -- ltgtmiddot ChildChildren means users resident 1n the United States er G11uadltt_0r anrhere else in the wOFk _

who are under thirteen (13) years of age middot

Online Information Practices encompass but are not limited to i) Participants practices regarding consumer notification and consumer access to their pet=seaal infemwttemPersonal ~ Information and Data (as that term is defined belowlt (ii) Participants Practices with_respect_to _ the collection use or disclosure of pelSOaal illfurmatioaPersonal Information and DataJi]l_-middotmiddot-

middotmiddot--middot--------- ----------- -----middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-------middotmiddot----------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-middot-------------------middotmiddot-middotmiddotmiddotmiddotmiddotmiddot middot ---~---a~a-------inelude an i11djvid11als namecollected_online--eontaet-infumuttioll (ie email eddresses_alld soreen names__ middot Formatted Font +Body (Callbr1) 12 pt

that funotien as email addresses including but not limited to middot Formatted Font +Body (Callbr1) 12 pt

1 Formatted font +Body (Calibri) 12 pt

bull First and last name Formatted Font +Body (Calibtl) 12 pt

bull Homq_or reveal ai1_i11divid11als emftilother physical addresstthsne-1n1mller fillf umnber home_-middotmiddotmiddot Formatted Font +Body (Calibri) 12 pt oodresssaeial-seooFity-fl hetos-Yitleesef -bull_ Formatted Font +Body (Callbrl) 12 pt

lof 13

Participants practices regarding user choice and consent to how ~elS01ml iBfurmatioaPersonal Information and Data_ is usedor shared__and _(iv)_ security measures __ taken __to protect

infuffifttianPersonal Information and Data_pfQ~_r~--~Y-~-~E~----------------------middot-middotmiddotmiddotmiddotmiddot------------

Pefsettally Identifiable Personal Information and Data lPID)Jneans any information that_een be ttsea--lrgJo itlentily an identifled or identifiable individual aF-yenltmiddothiolt enables direst oontaot-with-1111 individHftl This would

Formatted Font +Body (Calibri) 12 pt Farmatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt _ --

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Heading 1 Indent first line 025 Space Before 12 pt After 3 pt

Formatted Font 12 pt Not Bold

Formatted Font +Body (Calibri) 12 pt

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -__ _ Formatted Font +Body (Calibri) 12 pt

____ Formatted Font +Body (Calibri) 12 pt

-middot_-middotmiddotFormatted Font +Body (Calibri) 12 pt 7

____ - Formatted Font +Body (Calibri) 12 pt

bull-- Farmatted Font +Body (Calibri) 12 pt

ffildio esstaining-the-ttttage or voioe of a child per-sistent ideBtilfors (soclriis or geolocation information

bull Online contact information (eq email address instant messenger identifier video chat identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier eq a_ customer_ number _held_ in a_ cookie or a prooesser internet------ Formatted font +Body (Gallbrl) 12 pt

protocol address deviceserial number anQt_ unique device identifier~) _if additional PIO ___ - Formatted font -1-Body (Calibri) 12 pt

is collected andor the persistent identifier(sl are not used solely to support the internal ------ Formatted Font +Body (Calibri) 12 pt

operations of the Monitored Product bull Photograph or video recording showing the individuals faceo_r_~~~re_~~[__l)_~_geo_i_l)_C~~------- Formatted Font +Body (Calibri) 12 pt

information suffieioot ta ide0lify a street name and 11111110 oftovn otherwise containing PIO in the photograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PIO within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

Demographic_information that is eombilledvlitli_flemoool_i11fuF111atioo-jincluding _but not _limited to_----- Formatted Font +Body (Calibri) 12 pt

gender age dateofbirtheducational_background_or political affiliation) also becomes_Pfilsetutlly ------ Formatted Font -1-Body (Calibri) 12pt

IdentifiaJle IHfurmation Personally-ttleRtifiable lnformat-ionPID when combined with other ------i Formatted Font -1-Body (Calibri) 12pt

information enabling the individual to be identified PIO_ does_ not include _information that _is _______ Formatted Font -1-Body (Olllbrl) 12 pt

snce00amp0F-[endered anonymouseffJHhliely-avuilable infurmati0amp-tlIBt--lms-net--aeea-combi0ed with--110n- _______ Formatted Font +Body (Calibri) 12 pt

pHbio Pefsonally IdOAifiable-lnteffittlliefl ______ ____ ____________________ _____ ___________________ Formatted Font -1-Body (Calibri) 12 pt

Privacy Statement means the statement posted on the Monitored Welr-ampites-ef---Mobile AppsProducts~_ which_ discloses_ Participants_ up-to-dat~ policies_ regarding_ user_ privacy_ and ___ --- Formatted font -1-Body (callbr) 12 pt

Participants practices with respect to the collection use and disclosure of Personally Identifiable middot-- Formatted Font -1-Body(Ollibrl) 12 pt

Imermatien as stwh prnetiees may le updated ti-em time-te-timefQ____________________ _______________________ Formatted Font -1-Body(Gallbr) 12 pt

P-li-vaey Risk Assess ment-menns-the iAitiul pre eortifieation-repei+previltled by ESRll to-11-eempany-befare it aeeomes a Participant--in-H1e-Pregrn111 which refleets-GSRBs assessment of the-legal imd business risks posoo--by-the-oompanys thOA e1mce11t Privmy Statement data githerJBg practices and oHline-pfivaey disclosures

1~----~~~~~~M _1gt_9c_lJ_fylENTS AlJ~-~-~q=~-[)~lE_~-- _______ ___________________ __________ _________ Formatted Font +Body (Calibri) 12 pt

-lt--- bull Formatted Justified Indent First line 025

~-middot-i Formatted Justified - - bull Formatted List Paragraph Numbered -1- level l + Numbering Style A 8 C + Start at 1 + Alignment Left -1-ff-it--has-t1ot already done so dtffilg the pre ee11ifieatiott-phase-ift Aligned at 05 + lndent at 1

ootieipation ofreeeipt ofESRBs Priaey Risk Assessment Paffieipant-shall Hilly eomplete-ft-Self [ Formatted Font +Body (Qillbli) 12 ptAssessmeat Quesionnaire (SAQ) mid return it to flSRB In providiBgcthe cempleted SAQ Partioipllflt

Hndersta0ds that ESRB may rely all tile statemeAts eontaittetl--thereia fur the )lfrposc of determining j Formatted Font +Body (Calibri) 12 pt

2 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

ffildio esstaining-the-ttttage or voioe of a child per-sistent ideBtilfors (soclriis or geolocation information

bull Online contact information (eq email address instant messenger identifier video chat identifier VOiP identifier and screen name that permits direct contact with the individual on line)

bull Phone number bull Persistent identifier eq a_ customer_ number _held_ in a_ cookie or a prooesser internet------ Formatted font +Body (Gallbrl) 12 pt

protocol address deviceserial number anQt_ unique device identifier~) _if additional PIO ___ - Formatted font -1-Body (Calibri) 12 pt

is collected andor the persistent identifier(sl are not used solely to support the internal ------ Formatted Font +Body (Calibri) 12 pt

operations of the Monitored Product bull Photograph or video recording showing the individuals faceo_r_~~~re_~~[__l)_~_geo_i_l)_C~~------- Formatted Font +Body (Calibri) 12 pt

information suffieioot ta ide0lify a street name and 11111110 oftovn otherwise containing PIO in the photograph or recording or within the metadata of the photograph or recording

bull Audio recording capturing the individuals voice or otherwise containing PIO within the recording or the metadata of the recording except to the extent such audio recordings are used solely to effectuate speech-to-text functionality in the Monitored Product and deleted immediately thereafter and

bull Social security number or other government identification number

Demographic_information that is eombilledvlitli_flemoool_i11fuF111atioo-jincluding _but not _limited to_----- Formatted Font +Body (Calibri) 12 pt

gender age dateofbirtheducational_background_or political affiliation) also becomes_Pfilsetutlly ------ Formatted Font -1-Body (Calibri) 12pt

IdentifiaJle IHfurmation Personally-ttleRtifiable lnformat-ionPID when combined with other ------i Formatted Font -1-Body (Calibri) 12pt

information enabling the individual to be identified PIO_ does_ not include _information that _is _______ Formatted Font -1-Body (Olllbrl) 12 pt

snce00amp0F-[endered anonymouseffJHhliely-avuilable infurmati0amp-tlIBt--lms-net--aeea-combi0ed with--110n- _______ Formatted Font +Body (Calibri) 12 pt

pHbio Pefsonally IdOAifiable-lnteffittlliefl ______ ____ ____________________ _____ ___________________ Formatted Font -1-Body (Calibri) 12 pt

Privacy Statement means the statement posted on the Monitored Welr-ampites-ef---Mobile AppsProducts~_ which_ discloses_ Participants_ up-to-dat~ policies_ regarding_ user_ privacy_ and ___ --- Formatted font -1-Body (callbr) 12 pt

Participants practices with respect to the collection use and disclosure of Personally Identifiable middot-- Formatted Font -1-Body(Ollibrl) 12 pt

Imermatien as stwh prnetiees may le updated ti-em time-te-timefQ____________________ _______________________ Formatted Font -1-Body(Gallbr) 12 pt

P-li-vaey Risk Assess ment-menns-the iAitiul pre eortifieation-repei+previltled by ESRll to-11-eempany-befare it aeeomes a Participant--in-H1e-Pregrn111 which refleets-GSRBs assessment of the-legal imd business risks posoo--by-the-oompanys thOA e1mce11t Privmy Statement data githerJBg practices and oHline-pfivaey disclosures

1~----~~~~~~M _1gt_9c_lJ_fylENTS AlJ~-~-~q=~-[)~lE_~-- _______ ___________________ __________ _________ Formatted Font +Body (Calibri) 12 pt

-lt--- bull Formatted Justified Indent First line 025

~-middot-i Formatted Justified - - bull Formatted List Paragraph Numbered -1- level l + Numbering Style A 8 C + Start at 1 + Alignment Left -1-ff-it--has-t1ot already done so dtffilg the pre ee11ifieatiott-phase-ift Aligned at 05 + lndent at 1

ootieipation ofreeeipt ofESRBs Priaey Risk Assessment Paffieipant-shall Hilly eomplete-ft-Self [ Formatted Font +Body (Qillbli) 12 ptAssessmeat Quesionnaire (SAQ) mid return it to flSRB In providiBgcthe cempleted SAQ Partioipllflt

Hndersta0ds that ESRB may rely all tile statemeAts eontaittetl--thereia fur the )lfrposc of determining j Formatted Font +Body (Calibri) 12 pt

2 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

Pa11ieil)a11ts infunnatio11 eolleeioo-pmetiees as Nei1--fts-Paffieipants ovelllll qaalifieatien fur the-pound8RB Pfwaoy Certified P-mg1am n attthoriiaed lOflresetltaive ofPaftioif)OHt shall sig1H11uktest that the iHfum111tioll-flf6yenffied in tile 8AQ is lflle and a~ate-sttbmited-

~~B shall review the eemfJ1eted 8AQ aloag-witl-farticipants Privacy _____ _______ ------=----~Cltement _and_ relC1d__illffifffillHon-e-0Ueetio11 fFaetiees a11dOnline__lnformation____---

Practices with respect to the Monitored Products ESRB shall_e1~~-~~~-~-~~-_S_C1t~CffC1~~ipants __ ---shyoverall compliance with the Program Requirements-Jvon eemflleting this reliew B8RB will after middot----which it shallprovlde Participant_with(i) required and_suggested changes to Participants_Privacy ____ _ Statement and liila comprehensive_report detailing any and all_required and suggestedchanges-----shyto Participants Privaoy 8tatemeRt-a1ullerOnline Information Practices with respect to the_ middot--- Monitored Well Sites or Mobie-Apps (Cer1ifieatio11Products Compliance Report) ___________________ middotmiddot---

middotmiddot-

f~ii_~~P~ii~-~~~~~-cU_ll_P~_f~_~_ C1J1 _~he1ng~~ _r~g~(r_~~l__o th~_fr~imiddott__~t~iii~ii~_s_ lt --shyand PY~-~_~~~~~~i~ll~C_IJPJancs_~_pgr_Cl_iii__Cl~~~s_ 9~~-~~ ~Li~--~~__tj2_i~_s_9__~y-~ctttming a bull middot- sigtted-eep~middot ofthe Certifieatio11 Re1ort B8RB will in writing ESRB shallthen complete a final review~middotmiddot~--shyof the Privacy Statement and Monitored _Web-sies--01-Mebile Apps _OHd _iProducts__ Ii all themiddot_-- required changes have been implemented or otherwise resolved ESRB shallprovfde Partlcl pant_bullmiddot- with written approval to use and access to the appropriate Program Marks middot

I bullmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middot----------- --------------- --------middotLmiddot--middotmiddotmiddot~bulllt B bullOesite Cofilft~ -------- ----------middot

I At the lime Partieipant is-eeri-fied-ta-ellter the PFegram Partieipant middotshall be suhjcet to a11 011Site-oomJm9Hee febullciew by E8RB TI1c ottSiti wiiifw shall be sehed11lea in

adwmoo-feHHRut111lly-eo11ve11ie11t time aad shall be-oottduetcd-decing-Pnrtieipa11ts 110FF11al business hoefS Partieiflanl shall bear the feasenable-eosm (eg Falel lodging meals) assosiated-vith-this-review and agrees te rnimbure-E8RB vithin thirty (39) days ofrceeiflt ofa11-invoiredetailing these ellargcs

~llla-Partieiplflts eomfJli1111ee reeara er ongoing eoneems with le5fElet lo the Mottitored Web Siles or Mebile AflpS so warrant E8RB Hay-eemttet miditiollllklnstte FOyenievs the-neeessity ofmiddotuhieh shall lie determiaed-by-poundSRB in its sole diseretion-Part-ieipaut-shall reimbafSe B8RB for-the-reaselllble eosts assoeilllea with any sueh oasite reraquoiew provided howemiddoter that sueh rnvitlVS shall be-limited-te-110- mere than 011e ver calendar year middot

3 Pm1ieiflallt may also requcSHMklitiooal-ottsite visits by E8RB (eg fur stafftrailttllg or-eduefttional-pttrf)oses) the reasonable costs ofwhieh shall be borne by Partieiflant

Formatted Font +Body calibrl) 12 pt

Formatted Font +Body calibri) 12 pt

Formatted font +Body (calibrl) 12 pt -middotmiddot

Formatted Font +Body (calibn1 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt -Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Form1tted Font +Body (Callllrl) 12 pt -Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

-

Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibrl) 12 pt

Formatted Justified Indent First line 1

middot bullmiddot----- Formatted Font +Body (calibrl) 12 pt

~Bla-nnual Monitoring and Compliance Reports bullbull - Formatted Indent first line 05

middot middot- Form=attedI=n=de=n=t=Lefto=bull========~ Twice a yearAt least once durrng the Initial Term and no more than twice during _ Formattedbull Fontmiddot +Body (CallbriJ 12 pt

each Renewal Term (Reporting Perodsq-d11ring the Teffl of he_Agreement1_ESRB shall providemiddot_middot__ Form1tted font +Body (Calibri) 12 pt

Participant with a fOfJert-f-ompliance Report9__that will i) list all of the_Monitored_W-eb-Sttes-of ---middot-middot Formatted Font +Body (Olibrl) 12 pt Mohlle Amgts as frac14ell as 11_bullew sites ha lamiddote eeme-te-BSRBs 11t1e11tioa aHring hat REfort-ing middotmiddot--bull

nmiddot middotmiddot =FormattedFont_+=Body_(Cal_ibrt)deg_12-p-l-~~--4PeriedProducts__Ql_9~~~r~_E_-=-~~ng_E~9~_iti~l_Cl_f~~-PiX~~-Y -~E1_El__C11_9_egtf_-i_Cgt)~~()f~9_ ~ -----i Formatted Font +Body (Callbrl) 12 pt

3of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

Siles er Mellile Apps ~1ieh Products thatare_necessary for Participant to remain compliant with __ ----the PFegmmKids SealRequirements_and (iii)propose changes which although not required under_-----the PmgramKids SealRequirements_reflect _best practices whieh~ a re_ highly recommended-ltmiddot--by ESRB Within three (3) weeks of Participants receipt of a Compliance Report Participant must middot--notify ESRB through ESRBs SharePoint system (or through whatever other means may be specified by ESRB pursuant to its then-current policy) that Participant has implemented all changes required by the Compliance Report If Participant needs more than three weeks to Implement the required changes Participant shall notify ESRB immediately and provide a time frame within which it commits to complete all changes

lnerdeH6r JQr_ESRB to_provide thorough and accurate_Compliance Reports Participant mustbull-~middot---middotshy

provide ESRB full access to the Monitored Well Sites er Mehffe-AjpsProducts including access to_--shy

members only or password-protected areas of the Monitored Weamp---Sites er Mebile

AppsProducts _____ middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-------------------------------middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot ______ middotmiddotmiddotmiddotmiddotmiddot--------------------middot ____-

-r~ ~- -------------------------------------------~-~~~~ u bullbullbull abullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull-bull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull- --- ~ ~ ~ u u -~ -bull

Ill CONTINUING OBLIGATIONS OF PARTICIPANT +middot

A Designation of Site Coordinator

AHkamp-fflfle--the Agreeme11t is mee11lellfarticipantshall_name a____middot-------middot-middot-middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--coordinator__ for__ the__ Monitored __ leb__ Siles __er -Mehlle---Ap~Products__(Site Jmiddot

Coordinator) who shall be ESRBs primarycontact--fflttl_Participant shall keep)QifYESRB ~ -~ sheuld it llesignatsin the event of adi-fferem-cha nge _to theJndividual_ te---aetdesignated as_ Site___ __ _ Coordinator The Slte Coordinator shall be the empleyee 1esponsible for the effectuationand bull middotmiddot implementation oftheParticipants Online Information Practices reflected in itsPrivacy Statement middot bull and complfance with these P-regramthe Kids Seal Requirements All notices from ESRB shall be _-

d)rected to the Site Coordinator middot

bullmiddot B- Notifying ESRB of Material Changes --

4--1_____farticipant isretjlliredtoilil__notlfy ESRB in advance of anymiddotmiddotmiddotmiddot------+~ material

change(s) _to _its_ Online Information _Practices_ including_ by way_ of_ examplebullmiddot-_ changes to Participants Terms of Use or End User License Agreement changes to its data security bullmiddotlt infrastructure or the roll-out of any new sweepstakes contest or similar promotion en---athrough

~Monitored Web Site er--Mellile App _Productsmiddotmiddotmiddotbullmiddotmiddotmiddotmiddot-----------------------middot _ _ __ ----------~=~ S-------L__farticipant Rlll5lfil1fillobtain_prior approval from_ESRB for aey _____ ~-middotmiddot

~~ -

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

formatted Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted font +Body (Callbrl) 12 pt

Formatted Font +Body (Callbrl) 12 pl

formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Justified Indent Left 05

Formatted Jusllfled Indent First fine 025

Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Callbrl) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibn1 12 pt

Formatted Font +Body (Calibri 12 pt

Formattedmiddot Font +Body (Calibri) 12 pt

Formatted Justified Indent First line 1

Formatted Indent First line 1 No bullets or numbering

Formatted font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pl

Formatted Justified Indent First line 1

Formatted Font +Body (Calibri) 12 pl

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Indent Lett O Flrst line 1

Formatted Indent First line 1 No bllllets or numbering

Formatted font +Body (Calibri) 12 pt

j formatted Font +Body (Callbrl) 12 pt

4of 13 7

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

~ubstantive _modif1cation to_its Privacy Statement_ whether such_modific_ationbullmiddot---lt--- gtF_c_rm=att_e_d====----====1lt results from a material change in Participants Online Information Practices the revamping of t1 Fcrmatted Juslined Indent First line 1

Monitored Web Site or-Mabile--AppProducts or otherwise bull _-------------------middot-middotmiddotmiddot--middotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-middotmiddot-__ _____ ----------------------middot- _ ______________ bullmiddot--lt-middot Fcratted Font +Body (Calfbrl) 12 pt 6------------L____Where changes to Participants Monitored Web Siles er Mebile_____ bull--- middot Formatted Justified Indent Lett obull first line 1

AppsProducts Privacy middot__ middot Formatted Indent FirSt line 1 No bullets or numbering

~~~~~ir_111~__ 2r__9ri~ii~ E~-YiT2~~ltC Practices have been Implemented middotbull Formatted)===================(Participant may be required to submit aA-YfHH1~euro1 S~ssessmenf uestionnai_e SA or -F_o_rm_att_e_d___________~~ provide updated information 1n a form determined by ESRB Participant may also be required to submit a ReW-SAQ -if Participant has undergone a ~change 1n control-as-defined i11 8eetien 25 ef tile Agreemeuf or if there has been an investigation of Participants practices by a federal or state authority agency or regulatory body or any unit of federal or state government------

bullmiddotmiddotmiddotmiddot------------------------------middot-middotmiddot-middotmiddotmiddotmiddot--middotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--middotmiddot------------------------------4middot__ middot Formatted Font +Body (Calibri) 12 pt _ Formatted Justlned Indent First line 1 middot- gt-===---=========-=---Formatted Justmed Indent Left O Flrst line lC Notifying Users of Material Changes -

gt=============== Formatted Justified

Participant is reqwreEI toshall notify users of any_material_cha 11~e(s) in lts __________________ Formatted Font +Body (callbtl) 12 pt

Online Information_Practices or Privacy Statement_ Notice should be provided_to---middot--middot Formatted Justified Indent Rrstllne 1middot

users prior to the change taking effect Pftctwubullat shall gh-e ESRB ahbullanee notiee of Ellt material ----- Formatted ~ rnvbullp~ J A------------------~bull=bullbull~4=

ehange se that ESRB may-ensur-e-tlt11HSClS-are preperly neHie4--Different types of material changes may require different forms of notice to users If while reviewing Participants Monitored Web Sire5Products in the normal course ESRB discovers a material change of which it was not previously notified ESRB will advise Participanti1Hhe-11e1t sel1eEluleEI Cempli11Bee R-ep8ftj)f the type_ of notice Participant must provide to users of the Monitored let Sites er Mobile Apps

Products

D Resolution of Consumer Complaints_ _c-- Formatted Font +Body (calibrl) 12 pt

middotmiddot formatted Numbered + Level 1 + Numbering Style A B C bullbullbull + Start at 4 + Alignment Left + Aligned at 05 + Indent at 1

~---Participant nutstshall implement procedures to receive investigate and -- Formatted resolve privacy Inquiries and complaints from users Where Participants internal------ ------------------------------------------middotmiddot middot middot middot middot middot middot middot middot middot middot ------------------------------------- ------- - Formattedmiddot Justified Indentmiddot first linemiddot l

mechanisms are unable to address a user grievance effectively Participant shall refer the user to middotmiddot-- middot middot middot ESRB foranel advise the user af ESRBs fl ispute Rresolution precess _F_o_rm_att_e_d___________~~

--____ ESRB shall maintain a eensnmer enline--hetlitteprovide contac___information on its Formatted 7

website which visitors to farticipants_Monitored Web Sites er Mebile AppjProducts may use to contactsectB Formatted 8

with inquiries or complaints regarding lhaltre-siteamp-a MonitoIed Product After determining __t__e nature of the complaint ESRB shall respond in one of the following ways

5 of 13

s____l_f the question _concern_or _complaint is _not privacy-related ESRB shall ____ _ Formatted font +Body (callbr) 12 pt

either f_~_~rcJ tile e~~iU_r~--~~-=-- 1_1_~yid_uaL~_t__ f~)PC~(s__ cgrnJJany_ __ ---- Formatted Font +Body (calibri) 12 pt

designated for such pu rposec- or redirect the consumer to the appropriate -- middot middot middot middot Formatted Font +Body (cabri) 12 pt

contact mechanism (e_g_ support page)

~fthc_~_~l_1l_t~~~-~l_iinquiry 0_~5~9-[a11_t)~_p_~i~acy~rela__~~--~11-~_p_~~~~11__s---middotmiddot Formatted font +Body (Calibri) 12 pt

a question or an issue ESRB can independently address ESRB shall respond middot- Formatted list Paragraph justified Numbered+ Level 1 + d- ti t th If I - ale I r f It Numbering Style a b c ___ + Start at 1 + Alignment Left +irec y o e consumer aearyltms an r reso inon oe-601tSttffieP3 Agned at l + Indent at 15

eofflt)laint requires iHpHt ftem P11Ftieipant E8RB s11111 eontaet Participant lo oetafrac12tt -( Formatted Font +Body (caibri) 12 pt

Ike Aeeessary informlltim-__ -~_il_rt~~ifJil_llt_s~~~-~lfJ_g_~~~-g____i~-~-Ei~~ ~~l-1middot-~~l- ---- --- Formatted Font +Body (Calibri) 12 pt ~~ll81llllf sectllll)lill 11pound8

________ _ _____ -- Formatted Font +Body (Galbrl) 12 pt _ _____ ----- L~ ~ - - - - TT Tr- ------------- ------ - ---- -- - bullbull - bull r~--------------

f If inquiry or complaint is privacy related but requires information or input from Participant ESRB shall contact Participant Eertici12ant shall __ -- Formatted font +Body (Calibri) 12 pt

cooperate with ESRB in resolving consumer complaints

3~______J_f _neither_ Participant_ nor_ ESRB succeeds_ in_ independently_ resolving_ a ____ -- Formatted Font +Body (Galibri) 12 pt

consumer grievance and the consumer wishes to pursue the matter further Participant agrees --- Formatted font +Body (callbrJ 12 pt

to fully participate along with the consumer In ~-~13--~~_l_fi~Rl_l~~w-~oh1ti_f~P~-~~-~s co_ri~_ll~_t_~9 ____ - Formatted Font +Body (Calibri) 12 pt

by ESRB and______ agrees ______ to ______ accept _____ ESRBs _____ )udgment______ as______ final_---~-- Formatted Font +Body (Gallbrl) 12 pt

middotmiddot--J Formatted Font +Body (calibri) 12 pt

__________ _____ _ _ _ _ _ _ _ _ _ _ _ ____ _ ____________________________________________________________________ 1 Formatted Font +Body (Calibri) 12 pt

E Required Notice to ESRB middot- formatted Font +Body (Callon) 12 pt

j formatted Justified Indent First line 1

Participant shall notify ESRB in writing within thirty (30) days if Participant (i) changes its name (ii) undergoes a ~change in control~defifleJ-iwltmiddot- Formatted Justified Indent First line 1

Seel-ion 2sect ofth 6greement or_(iii) changes the_domain_name of an~_Monitored Web Site er Mebile -gtlt- Formatted Font +Body (Calibri) 12 pt

AppProduct______________ _________ ----------------bull ____________ __________ ___________ _ __________________ bull-_ Formatted Font +_Body (Calibri) 12 pt

middotmiddot Formatted Font +Body (Calibri) 12 pt

____________________________________ ____________ -----------------bull-------- -------------------------------- ____ ____middot middotmiddot1 Formatted Font +Body(caUbrl) 12 pt ) IV PRIVACY STATEMENT middot--- Formatted Font +Body ((allbtl) 12 pt middot=7

j formatted Justified ) A Content of General Privacy Statement

------Participant shall maintain and abide by a Privacy Statement that is+------ formatted Justified Indent First line 1

either written by Participahtand approved by ESRB in its sole discretion or written by ES~B- The ------ Formatted Font +Body (callbri) 12 pt

Privacy Statement shall clearly set forth Participants Online Information Practices The Privacy Statement must link only to and from web pages that are in the English language If a Participant wishes to link the Privacy Statement to or from a web page or mobile application in a language other than English the Privacy Statement must be translated and localized for the applicable languagelocality At a minimum Partidpants posted Privacy Statement shall provide disclosure ____ - Formatted Font +Body (calibri) 12 pt

6of 13

Formatted Font +Body (Calibri) 12 pt

Formatted r79f Formatted font +Body (Calibri) 12 pt Formatted Font +Body (Calibrl) 12 pt

Formatted Font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri 12 pt

to users with respect to each of the following elements

--------- - bullbull- bull bull 0 0 M bull bull 0 LObullbullbullbullbull 0 bull- ----------bullbullbullbullbullbullbullbullbullbull-bull-bull~-bull bull bull 0 0 T ~bull -~ -----bullbullbullbullbullbullbullbullbullbullbull bull~bull bull bull bull bull bull bull 0 TT T -------bullbullbullbullbullbullbullbullbullbullbull L bull

Hetiee bull 1 Notice ~_lt1__~h~siteis11_fl_~~1_i_e_iP~_t_ J_rx_(Jllitored P_r_(J~_l~_t_ ltI_ ~~~11_ reviewed_lt_gtmiddot

and certified by the ESRB Privacy Certified Program _

bull_2bull--~-i~~i~-~~~~f~~~~~si~~~~bull~~n~~jjltl~CJ~7~-iR~-~L including_~--~~~~~~~~~~~~~

~full description_of how users l_efthe site eHHfOntact_ESRB with__ ----~--~--- Formatted Font +Body (Calibri) 12 pt

questions or concerns about Participants Privacy Statement or f3fWOOY- ---bulllt-middot -Fo-rm_att-e-d-----------~~~ flmetteeS ltJ

Formatted Font +Body (Calibri) 12 pt Formatted Font +Body (Calibri) 12 pt

Formatted rriif

Formatted font +Body (Calibri) 12 pt

_3__Hle56Hf1Heft-6fihe Perseaally EleaftttbleOnline_ Information tlffiHs-Practices __ bull4 Acomplete list of all PIDcollect~~J~-~lt-~l~~~~Monit)[~9_p_~oqlI_CLJio--_~---

each PID identified is collected and how it is used ____________________________-middotltmiddot-bull_5__t-lle~identity (including name address_and e-mail_address) of all_ekie _middotmiddotbullmiddotmiddot

0e~oosentities _C___~ll_J)a_rtiC~ ___t~-~ __ ltl_r_C __~QLJ~cting __l_l7_~(111Jgt_ bull_bull

f~e--lnfefffillHfilOr maintaining PID on behalf of or through the - middot-sifrac14Monitored Product _______________________________________________________________ middoti Formatted Font +Body(Calibrl) 12 pt

02--------the--man-ner in v11ich Pcrso11-aly--lde11ttffllble Information- eollectecl throttgll tile middot ( Formatted Font +Body (Calibri) 12 pt site iJ1 be--tl500 - - -j

Formatted Font +Body (Calibri) 12 pt bull_6__twihe__~11~J~e5 (if _at1y)__~i~_l __~~ii__l_frac12lrsenaly_~~~1fi31~f_Htlllif1n~ j Formattedmiddot Fontmiddot +Body (Calibri) 12 pt

collected through the siteMonitored Producti~-~~Qil_f~-~~_e__e_t1titie_s~~-lt ( Formatted middot eelle6~~~discl_1~~1i_T1cJ~-~1g_~he types q_f_ ~l_ille_se in ll_lhich a_rix -_ degF--t-t-d---=--=----gt~ third parties are engaged the general purpose for which thelrif~~ii9_~iQ11__-gt-0-rm_a_e____________==lt

OH beilalfof is used by the third parties whetherth_e si_t_ ~ IPPthi r~_ R~ ~ ormae n +Y (~i~r) ~~ P have agreed to maintain the confidentiality security and integrity of the[( orma e middot n middot + Y( n) P

PID collected by Participant_ ________________________________________________ _________ Formatted Font +Body (Calibri) 12 pt bull_7__tteticeNotice of whether Participant supplements Personally ldentttttble Formatted Font +Body (Calibri) 12 pt

Inform~__co_lle_~~~sl_--~th_r_(J~-g~--~h~--~txl-1_i~ored Pr()~lI_Ct~-~~- Formatted Font +Body (Calibri) 12 pt information from other sources and if so a description of the PID and the ( Formatted Font +Body (callbrl) 1 pt sources from which they were collectedmiddot Formatted Font +Body (Calibri) 12 pt~~~~~~=~~~~~~~=--Jmiddot-------------------bullbullmiddotmiddotmiddotmiddotmiddotmiddot-middot------------

bull8 disclosureDisclosure of the tracking technologies if any used on the middot- Formatted Font +Body (Cahbn) 12 pt

siieMonitored Product either by Participant or by an authorized third party fFormatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 ptbull_9__aaAQexplanation of when_ and how users_ may exercise_opt-in andor opt- out options including the choices available to them regarding how their Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 ptPID is collected and used bull1Q__fueihe__ nature _of the_ scurity_ measures _in _place_ on the_ siteMonitored ( Formatted Font +Body (Calibri) 12 pt ~ ___________________________middot______________________________ _____________________ middotgt ( Formatted Font +Body (Callbrl) 12 pt

bull1L__netiee that Personally Identifiable IRfurmatiollNotice that PID provided _to_ ( Formatted Font +Body [Calibri) 12 pt

Participant may be subject to disclosure in response to judicial or other Formatted Font +Body (Calibri) 12 pt government subpoenas warrants or orders Formatted Font +Body (Calibri) 12 pt

bull11___wtieeNotice h_at_infOffl_~ll Pr~l__~y u_s_~[__itl__t]i_ne__~~l~~~ri lJo_~~~-~-- Formatted Font +Body (Calibri) 12 pt chat rooms news groups_ or_ other _public__forums _may_ be__displayed -middotbull_ Formatted font +Body (Calibri) 12 pt

publicly middotmiddotmiddot- Formatted Font +Body (Calibri) 12 pt

bull Formatted Font +Body (Calibri) 12 pt

7 of 13

bullli_tlle~notificationProcedures tobe utilized by Participant in the event of __ ( ormatted Font +Body(Calibri) 12 pt

a material change in its Online Information Practices andor Privacy Statement and

bullkh__disele5ureDisciosure of the effective date or last date on which the Privacy -middot Formatted Font +Body (Calibri) 12 pt Statement was updated(imiddotemiddotup~i~t~i~s of) _____________ ------middot-- i Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt --------------- - - - ---- u - -- - -- _-~--

8 Content of Kids Privacy Statement Formatted Justified

If Participant is collecting fefseltftlly-Identifiable lnfermationPID from -middot- Formatted Font +Body(Calibri) 12pt

Children or if anyportion _ of _Participants MonitoredVcb _Sites or Molli~_-- formatted Font +Body (Calibri) 12 pt

AppProducts are_ directed toor target_ Children _then _Participant _either _must_ implement a _ -1 Formatted Font +Body(Callbrl) 12 pt

separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

Formatted Font +Body (Calibri) 12 pt

J11 ~9~~i~n__~()--~~l__~le_111e11ts__~~ f~~~if_ _~~~i~n_lA__a_~-~J-~~ ~~ ~~i~p~nts__Kids_--- Formatted JusUfted Indent First line 1

Privacy Statement or ifthere is no separate Kids Statement that portion of Participants General l formatted Justified

Privacy Statement reflecting its Online Information Practices with respect to Children must ~F=o=rm-att=e=d==Ju=s=trfi=e=d=N=u=m=be=r=ed-+=L=ev=e=l=l=+=N=u=m=be=r=in=g-~

contain the following elements Style 1 2 3 + Start at 1 + Alignment Lett+ Aligned at - l + Tab after 15 + Indent at 15

bull_1___Disclosure of the manner in which Childrens ~entma~ A Formatted Font +Body (Galibri) 12 pt

~o_nEQ_i~_ ~~~eel ~hr_~~~~~~~ ~it~~pMonit~~~9 f~~~~t ~-~- _- ~ ~~ Y ~~bull ~~ P ~~il~i~i~i~~-~~~~-~~~~~~~~~~~~~i~~~~~--_ Formatted Font +B~ (Galibrl) 12 t the purpose of marketing products or services to the Child ~f Formatted Font +Body (Galibri) 12 pt

Formatted font +Body (Gaibrl) 12 pt-Children etc)_ ___ ---middot -middot -----------------middot--middotmiddot _ _middot---------

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Gallbri) 12 ptbullb____Notice that a_Chids participation in a chat room bulletin board or otherbullgtlt Formatted Justified Numbered + level 1 + Numberingonline forum provlded by Participant may result in such Childs public Style 1 2 3 + Start at 1 + Alignment Left + Aligned at

disclosure of PeF5eHftlly--JdeffiHiable InfurmatiooEQL and_ notice __ of_ 1 + Tab after 15 + Indent at 15 Participants policy to remove any such Personally Identifiable nfeffililtiooEQ middot middot- middot Formatted Font +Body (Calibri) 12 pt if and when discovered----_ Formatted Font +Body (Gallbrl) 12 pt

Formatted Font +Body (Galibrl) 12 pt ~ Formatted Font +Body (Gallbil) 12 pt

l____Notice that_a parent has the option to_consent to Participants collectionbullmiddot-_ formatted list Pamgraph Justified Numbered + level 1 +

and use of their Childs ~ble lnfom1ai0nEQ_ without Numbering Style 1 2 3 + Start at 1 + Alignment left + AUgned at 1 + Tab after 15 + Indent at 15consenting to Participants disclosure of that information to third parties middot-

i formatted Font +Body (Galibri) 12 pt 7 bullmiddot middot middot middot middot middot -------------------middotmiddotmiddot middotmiddot middot middot middot middot middot middot middot middot middot- --------------middotmiddot middot middot middot middot middot middot middot middot middot -bull-------------bull middot-- middotmiddot middot middot middot bull- ----- Formatted Font +Body (Calibri) 12 pt

4A description_ of the procedures_pursuant to whlch parents can middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-----middot---middotf Formatted Font +Body (Calbri) 12 pt

prevent __ Participants disclosure __ of __ their Childs __ Pesollally _lde11tifiable+-gtlt Formatted Font +Body (CaUbri) 12 pt

l11furmati0RpoundlQ to third partiesmiddot-middotmiddotmiddot __ ----middot-------------- ______________ Formatted Justified Indent Hanging 05 Formatted Font +Body (Calibri) 12 pt

Formatted Justified

8 of 13

( Formatted ciiifJ ( Formatted ~

(( Formatted t5fuj Formatted c=iwfi

5==Pisclos_ure_t_hat Participant may not condition a Childs (gt-F=o_rm=att_e_d=~==========~~~middot18=lt

p_articip~~~~filea~~~~1 t~~cnh is~= ~~~~~~~~ort~~nl~- fgt-__~=__============~secti ~=lt

such activity ea2=cil=( gt-F=o_rm=att_e_d============~CR~--~middot ( Formatted C]22)1_______________ ___________________ __________ ------------------middotmiddot-Formatted EtiitJ

~sect_____Notice that parents may viegtyen-Rlid eleot to remove their Childs ~ rF-o-rm=att_e_d============~~=-

Peroonaly Identifiable lnfunnation and may also-Jefuse to allow Participant te-fillQLQr-rF_o_rm=att_e_d============--===~ any third party from turther _eeleetcollectinR_cir_ HSeampiOamp_their_ Childs bull -F_o_rm_att_e_d_=======--==~=

Pef5onally ldenfiable InfurmaHon nnd gt=F=o_rm=att_e_d==============27~

flQ_ -------------------middot---------------- --------------- -------bullbull----middotmiddot--- _____________ AFF=o=rm=a=tt=e=d============c-aamiddotmiddotmiddot12ad Formatted [iii]

M--L_______j__de_s~_r)p_t_io_1_1_o_~~-~~-R~9ces_s_by_frac12_~l~~-9_J)ltlEl_1_~~~1_1_fo_r_an_y _________ ___30_(-)caF=o=rm=a=tt=e=d==========~EtimJ

-_--~~ii-~~~-~~6~~middot 9~~ect__ ~lt-~~l~ebull t~ei l~s ~~~~~ ~gtJgt------=====----===sectd

11furmatmu Formatted trifil 8 A description of the process by which third parties give parents access to (gt-=-=-========-====_Jb

d I h h Id I d ~ f Formatted lJ341 Jreview ~orr~ct or e ete t e1r C i s PID_)1_1_~-~-_i_rig_~~-t_he_2urJl~~~-deg---middotmiddotmiddot Formatted Cnill preventingd1sclosureto )cc_======--=========--~-

W~~---Jrr~~~~i~~~l~~~==l~~l~=~ti~~~lt~~ ~ E G------Pl~-~~-~~-~t-~f-Kid-Privacy Stateme~t-~-~d -ot-h~-rESRBMr-ks _____ -- - ----_- -----middot Formatted rmJj --- ------- --------------middot middot middot---- ----bull middotmiddot--------------------~_-bull--(Formatted fmiddot Mod

Participant must provide on its home page and on any pages where Personally middotmiddotlt~ Formatted tifuj TdenHiable InfurmationeJQ_i_s_ -~~)~-C~~ltJ_ fro1T1__Ql_l_c~)_rl~ _9_W~-~ ~ri~_n~_ a_ ncl _clearly la belecl J_i_ri~_ o__it_s__ _ __~ Formatted ~~ KWs-f rivacy Statement-or to thatportion _of its_Gem~ml _Privacy 8tateme11t _tllat_relleols PaRIBipants __ middotmiddot-_ Formatted ~ GnttnHHfoanation Practices middotbullifu respect to Childr-en-- If the Monitored Product is a website middotmiddot-- 1Formatted ~ participant should label_tllis linkwitaQQE_the KiesKig~Jrivacy Seal M~~k-i-de~tifi~cTon Scheelul~------ Formatted middotmiddot- 45

D_ Ifit is not possible to 11se this Mark iH a given locatioH ESRB may iH the eieroise of its diseretion l Formatted crwI permit use ofhypeFlink teit with the phrnse Kidsncar the link to the Privacy Statement The Kidf_ lt-i Formatted cmr] Privacy Polisy or its-approved equivalent middotn1e--l4-ies-~eal _lampLmust _link directly to_ Participants~ middotgt=Fo_r_m_a=tt=ed===============aak=lt lltrlampmembership confirmation page hosted at esrborg Formatted

)=F=o_r_m_a_tt_ed=======-=======-=~ ~5=0~-

lf the Monitored Product is an online app a link to the Privacy_ Statementef-the+- tgt-F=o=rm=a=tt=e=c1================ofuj=--==51=s portion ofPartieipantsmust be in the app store available prior to download_ [_Privacy Statement Formatted ~

5261l56fIBing-Partioipanls Online lHfunRaoon-Prootieos wilh respeet te Childreamp-Paflieipant 1H1Jst pro1de-ftt f=F=o=rm=bulltt=e=d==================~= middot 53Ite top andlor bottom of Partteipants Kids Privaey Statement a elearly labeled link to Partioifl-aHf5-Genoral- - Formatted _

~ilyp~~~~~~~Yeaa~~~-~~~-~-~~~~~~~-~o-nta_i_nin~-t-~~~~~-i~-~~~l~a~kmiddot-~~-~~-~~-------1~-~-~~-a=a=~-~-~-==~===~-==~-==~-==~===~===~-==~===~===~-==~-iscgoo~_-~=~-

-bullmiddott Formatted citiij

bull- -~v---D-1~~centi~~ii~~~~rigtARENTALCONSENTREQUIREM~~i~_-_______________~~~~~~ll Formatted ci65fl

9 of 13

bullli_tlle~notificationProcedures tobe utilized by Participant in the event of __ ( ormatted Font +Body(Calibri) 12 pt

a material change in its Online Information Practices andor Privacy Statement and

bullkh__disele5ureDisciosure of the effective date or last date on which the Privacy -middot Formatted Font +Body (Calibri) 12 pt Statement was updated(imiddotemiddotup~i~t~i~s of) _____________ ------middot-- i Formatted Font +Body (Calibri) 12 pt

Formatted font +Body (Calibri) 12 pt --------------- - - - ---- u - -- - -- _-~--

8 Content of Kids Privacy Statement Formatted Justified

If Participant is collecting fefseltftlly-Identifiable lnfermationPID from -middot- Formatted Font +Body(Calibri) 12pt

Children or if anyportion _ of _Participants MonitoredVcb _Sites or Molli~_-- formatted Font +Body (Calibri) 12 pt

AppProducts are_ directed toor target_ Children _then _Participant _either _must_ implement a _ -1 Formatted Font +Body(Callbrl) 12 pt

separate Kids Privacy Statement or incorporate into its General Privacy Statement a section specifically devoted to Participants Online Information Practices with respect to Children

Formatted Font +Body (Calibri) 12 pt

J11 ~9~~i~n__~()--~~l__~le_111e11ts__~~ f~~~if_ _~~~i~n_lA__a_~-~J-~~ ~~ ~~i~p~nts__Kids_--- Formatted JusUfted Indent First line 1

Privacy Statement or ifthere is no separate Kids Statement that portion of Participants General l formatted Justified

Privacy Statement reflecting its Online Information Practices with respect to Children must ~F=o=rm-att=e=d==Ju=s=trfi=e=d=N=u=m=be=r=ed-+=L=ev=e=l=l=+=N=u=m=be=r=in=g-~

contain the following elements Style 1 2 3 + Start at 1 + Alignment Lett+ Aligned at - l + Tab after 15 + Indent at 15

bull_1___Disclosure of the manner in which Childrens ~entma~ A Formatted Font +Body (Galibri) 12 pt

~o_nEQ_i~_ ~~~eel ~hr_~~~~~~~ ~it~~pMonit~~~9 f~~~~t ~-~- _- ~ ~~ Y ~~bull ~~ P ~~il~i~i~i~~-~~~~-~~~~~~~~~~~~~i~~~~~--_ Formatted Font +B~ (Galibrl) 12 t the purpose of marketing products or services to the Child ~f Formatted Font +Body (Galibri) 12 pt

Formatted font +Body (Gaibrl) 12 pt-Children etc)_ ___ ---middot -middot -----------------middot--middotmiddot _ _middot---------

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Gallbri) 12 ptbullb____Notice that a_Chids participation in a chat room bulletin board or otherbullgtlt Formatted Justified Numbered + level 1 + Numberingonline forum provlded by Participant may result in such Childs public Style 1 2 3 + Start at 1 + Alignment Left + Aligned at

disclosure of PeF5eHftlly--JdeffiHiable InfurmatiooEQL and_ notice __ of_ 1 + Tab after 15 + Indent at 15 Participants policy to remove any such Personally Identifiable nfeffililtiooEQ middot middot- middot Formatted Font +Body (Calibri) 12 pt if and when discovered----_ Formatted Font +Body (Gallbrl) 12 pt

Formatted Font +Body (Galibrl) 12 pt ~ Formatted Font +Body (Gallbil) 12 pt

l____Notice that_a parent has the option to_consent to Participants collectionbullmiddot-_ formatted list Pamgraph Justified Numbered + level 1 +

and use of their Childs ~ble lnfom1ai0nEQ_ without Numbering Style 1 2 3 + Start at 1 + Alignment left + AUgned at 1 + Tab after 15 + Indent at 15consenting to Participants disclosure of that information to third parties middot-

i formatted Font +Body (Galibri) 12 pt 7 bullmiddot middot middot middot middot middot -------------------middotmiddotmiddot middotmiddot middot middot middot middot middot middot middot middot middot- --------------middotmiddot middot middot middot middot middot middot middot middot middot -bull-------------bull middot-- middotmiddot middot middot middot bull- ----- Formatted Font +Body (Calibri) 12 pt

4A description_ of the procedures_pursuant to whlch parents can middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot-----middot---middotf Formatted Font +Body (Calbri) 12 pt

prevent __ Participants disclosure __ of __ their Childs __ Pesollally _lde11tifiable+-gtlt Formatted Font +Body (CaUbri) 12 pt

l11furmati0RpoundlQ to third partiesmiddot-middotmiddotmiddot __ ----middot-------------- ______________ Formatted Justified Indent Hanging 05 Formatted Font +Body (Calibri) 12 pt

Formatted Justified

8 of 13

( Formatted ciiifJ ( Formatted ~

(( Formatted t5fuj Formatted c=iwfi

5==Pisclos_ure_t_hat Participant may not condition a Childs (gt-F=o_rm=att_e_d=~==========~~~middot18=lt

p_articip~~~~filea~~~~1 t~~cnh is~= ~~~~~~~~ort~~nl~- fgt-__~=__============~secti ~=lt

such activity ea2=cil=( gt-F=o_rm=att_e_d============~CR~--~middot ( Formatted C]22)1_______________ ___________________ __________ ------------------middotmiddot-Formatted EtiitJ

~sect_____Notice that parents may viegtyen-Rlid eleot to remove their Childs ~ rF-o-rm=att_e_d============~~=-

Peroonaly Identifiable lnfunnation and may also-Jefuse to allow Participant te-fillQLQr-rF_o_rm=att_e_d============--===~ any third party from turther _eeleetcollectinR_cir_ HSeampiOamp_their_ Childs bull -F_o_rm_att_e_d_=======--==~=

Pef5onally ldenfiable InfurmaHon nnd gt=F=o_rm=att_e_d==============27~

flQ_ -------------------middot---------------- --------------- -------bullbull----middotmiddot--- _____________ AFF=o=rm=a=tt=e=d============c-aamiddotmiddotmiddot12ad Formatted [iii]

M--L_______j__de_s~_r)p_t_io_1_1_o_~~-~~-R~9ces_s_by_frac12_~l~~-9_J)ltlEl_1_~~~1_1_fo_r_an_y _________ ___30_(-)caF=o=rm=a=tt=e=d==========~EtimJ

-_--~~ii-~~~-~~6~~middot 9~~ect__ ~lt-~~l~ebull t~ei l~s ~~~~~ ~gtJgt------=====----===sectd

11furmatmu Formatted trifil 8 A description of the process by which third parties give parents access to (gt-=-=-========-====_Jb

d I h h Id I d ~ f Formatted lJ341 Jreview ~orr~ct or e ete t e1r C i s PID_)1_1_~-~-_i_rig_~~-t_he_2urJl~~~-deg---middotmiddotmiddot Formatted Cnill preventingd1sclosureto )cc_======--=========--~-

W~~---Jrr~~~~i~~~l~~~==l~~l~=~ti~~~lt~~ ~ E G------Pl~-~~-~~-~t-~f-Kid-Privacy Stateme~t-~-~d -ot-h~-rESRBMr-ks _____ -- - ----_- -----middot Formatted rmJj --- ------- --------------middot middot middot---- ----bull middotmiddot--------------------~_-bull--(Formatted fmiddot Mod

Participant must provide on its home page and on any pages where Personally middotmiddotlt~ Formatted tifuj TdenHiable InfurmationeJQ_i_s_ -~~)~-C~~ltJ_ fro1T1__Ql_l_c~)_rl~ _9_W~-~ ~ri~_n~_ a_ ncl _clearly la belecl J_i_ri~_ o__it_s__ _ __~ Formatted ~~ KWs-f rivacy Statement-or to thatportion _of its_Gem~ml _Privacy 8tateme11t _tllat_relleols PaRIBipants __ middotmiddot-_ Formatted ~ GnttnHHfoanation Practices middotbullifu respect to Childr-en-- If the Monitored Product is a website middotmiddot-- 1Formatted ~ participant should label_tllis linkwitaQQE_the KiesKig~Jrivacy Seal M~~k-i-de~tifi~cTon Scheelul~------ Formatted middotmiddot- 45

D_ Ifit is not possible to 11se this Mark iH a given locatioH ESRB may iH the eieroise of its diseretion l Formatted crwI permit use ofhypeFlink teit with the phrnse Kidsncar the link to the Privacy Statement The Kidf_ lt-i Formatted cmr] Privacy Polisy or its-approved equivalent middotn1e--l4-ies-~eal _lampLmust _link directly to_ Participants~ middotgt=Fo_r_m_a=tt=ed===============aak=lt lltrlampmembership confirmation page hosted at esrborg Formatted

)=F=o_r_m_a_tt_ed=======-=======-=~ ~5=0~-

lf the Monitored Product is an online app a link to the Privacy_ Statementef-the+- tgt-F=o=rm=a=tt=e=c1================ofuj=--==51=s portion ofPartieipantsmust be in the app store available prior to download_ [_Privacy Statement Formatted ~

5261l56fIBing-Partioipanls Online lHfunRaoon-Prootieos wilh respeet te Childreamp-Paflieipant 1H1Jst pro1de-ftt f=F=o=rm=bulltt=e=d==================~= middot 53Ite top andlor bottom of Partteipants Kids Privaey Statement a elearly labeled link to Partioifl-aHf5-Genoral- - Formatted _

~ilyp~~~~~~~Yeaa~~~-~~~-~-~~~~~~~-~o-nta_i_nin~-t-~~~~~-i~-~~~l~a~kmiddot-~~-~~-~~-------1~-~-~~-a=a=~-~-~-==~===~-==~-==~-==~===~===~-==~===~===~-==~-iscgoo~_-~=~-

-bullmiddott Formatted citiij

bull- -~v---D-1~~centi~~ii~~~~rigtARENTALCONSENTREQUIREM~~i~_-_______________~~~~~~ll Formatted ci65fl

9 of 13

( Formatted ciiifJ ( Formatted ~

(( Formatted t5fuj Formatted c=iwfi

5==Pisclos_ure_t_hat Participant may not condition a Childs (gt-F=o_rm=att_e_d=~==========~~~middot18=lt

p_articip~~~~filea~~~~1 t~~cnh is~= ~~~~~~~~ort~~nl~- fgt-__~=__============~secti ~=lt

such activity ea2=cil=( gt-F=o_rm=att_e_d============~CR~--~middot ( Formatted C]22)1_______________ ___________________ __________ ------------------middotmiddot-Formatted EtiitJ

~sect_____Notice that parents may viegtyen-Rlid eleot to remove their Childs ~ rF-o-rm=att_e_d============~~=-

Peroonaly Identifiable lnfunnation and may also-Jefuse to allow Participant te-fillQLQr-rF_o_rm=att_e_d============--===~ any third party from turther _eeleetcollectinR_cir_ HSeampiOamp_their_ Childs bull -F_o_rm_att_e_d_=======--==~=

Pef5onally ldenfiable InfurmaHon nnd gt=F=o_rm=att_e_d==============27~

flQ_ -------------------middot---------------- --------------- -------bullbull----middotmiddot--- _____________ AFF=o=rm=a=tt=e=d============c-aamiddotmiddotmiddot12ad Formatted [iii]

M--L_______j__de_s~_r)p_t_io_1_1_o_~~-~~-R~9ces_s_by_frac12_~l~~-9_J)ltlEl_1_~~~1_1_fo_r_an_y _________ ___30_(-)caF=o=rm=a=tt=e=d==========~EtimJ

-_--~~ii-~~~-~~6~~middot 9~~ect__ ~lt-~~l~ebull t~ei l~s ~~~~~ ~gtJgt------=====----===sectd

11furmatmu Formatted trifil 8 A description of the process by which third parties give parents access to (gt-=-=-========-====_Jb

d I h h Id I d ~ f Formatted lJ341 Jreview ~orr~ct or e ete t e1r C i s PID_)1_1_~-~-_i_rig_~~-t_he_2urJl~~~-deg---middotmiddotmiddot Formatted Cnill preventingd1sclosureto )cc_======--=========--~-

W~~---Jrr~~~~i~~~l~~~==l~~l~=~ti~~~lt~~ ~ E G------Pl~-~~-~~-~t-~f-Kid-Privacy Stateme~t-~-~d -ot-h~-rESRBMr-ks _____ -- - ----_- -----middot Formatted rmJj --- ------- --------------middot middot middot---- ----bull middotmiddot--------------------~_-bull--(Formatted fmiddot Mod

Participant must provide on its home page and on any pages where Personally middotmiddotlt~ Formatted tifuj TdenHiable InfurmationeJQ_i_s_ -~~)~-C~~ltJ_ fro1T1__Ql_l_c~)_rl~ _9_W~-~ ~ri~_n~_ a_ ncl _clearly la belecl J_i_ri~_ o__it_s__ _ __~ Formatted ~~ KWs-f rivacy Statement-or to thatportion _of its_Gem~ml _Privacy 8tateme11t _tllat_relleols PaRIBipants __ middotmiddot-_ Formatted ~ GnttnHHfoanation Practices middotbullifu respect to Childr-en-- If the Monitored Product is a website middotmiddot-- 1Formatted ~ participant should label_tllis linkwitaQQE_the KiesKig~Jrivacy Seal M~~k-i-de~tifi~cTon Scheelul~------ Formatted middotmiddot- 45

D_ Ifit is not possible to 11se this Mark iH a given locatioH ESRB may iH the eieroise of its diseretion l Formatted crwI permit use ofhypeFlink teit with the phrnse Kidsncar the link to the Privacy Statement The Kidf_ lt-i Formatted cmr] Privacy Polisy or its-approved equivalent middotn1e--l4-ies-~eal _lampLmust _link directly to_ Participants~ middotgt=Fo_r_m_a=tt=ed===============aak=lt lltrlampmembership confirmation page hosted at esrborg Formatted

)=F=o_r_m_a_tt_ed=======-=======-=~ ~5=0~-

lf the Monitored Product is an online app a link to the Privacy_ Statementef-the+- tgt-F=o=rm=a=tt=e=c1================ofuj=--==51=s portion ofPartieipantsmust be in the app store available prior to download_ [_Privacy Statement Formatted ~

5261l56fIBing-Partioipanls Online lHfunRaoon-Prootieos wilh respeet te Childreamp-Paflieipant 1H1Jst pro1de-ftt f=F=o=rm=bulltt=e=d==================~= middot 53Ite top andlor bottom of Partteipants Kids Privaey Statement a elearly labeled link to Partioifl-aHf5-Genoral- - Formatted _

~ilyp~~~~~~~Yeaa~~~-~~~-~-~~~~~~~-~o-nta_i_nin~-t-~~~~~-i~-~~~l~a~kmiddot-~~-~~-~~-------1~-~-~~-a=a=~-~-~-==~===~-==~-==~-==~===~===~-==~===~===~-==~-iscgoo~_-~=~-

-bullmiddott Formatted citiij

bull- -~v---D-1~~centi~~ii~~~~rigtARENTALCONSENTREQUIREM~~i~_-_______________~~~~~~ll Formatted ci65fl

9 of 13

A Direct Notlce to Parents to Obtain Prior Verifiable Parental Consent +------ Formatted Justified

1-__farticipant must make _reasonable efforts taking into account available ___ Formatted Font +Body ccanbrl) 12 pt

technology to ensure that a pa rent receives direct notice of_Participants Online _Information ____ Formatted Font +Body (cali1irt)112 pt

Practices wlth respect to Children including notice of any material change in the Online Information Practices of Participant to which the parent has previously consented With llmited exceptions Participant must provide direct notice_ to pa rents and obiain_ verifiable_ parental ____ -middot Formatted Foot +Body calibri) 12 pt

consent before collecting any Persenally ldentiliahle hlfurmaaonEQJrom a Child_ For exceptions to ___ -middot- Formatted Font +Body (caibriJ 12 pt

this requirement see Section VD below

2-~irect notice_ to _pa rents sent tomiddot obtain prior verifiable_ parental consent __ bullbull -- Formatted Font +Body (calibri) 12 pt

must contain (i) a hyperlink to Participants Kids Privacy Statement (or that portion of Partlcipants General Privacy Statement that reflects its Online Information Practices with respect to Children) and notice that Participant has colli=cted the parents address from the child in order to obtain consent (ii) disclosure -pf the_additional items of Persemttly-Mentifiable--lafeimatianeJQ_middotmiddotmiddot Formatted Font +Body (callbr1J 12pt

that the-farticipant_ intends _to _collect_ from_ the _Child as_well_ as_ potential _opportunities_ for ____ middot-- Formatted Fom +Body (calibri) 12pt

disclosure of the PID_ (iii)_ disclosure_ that_ Participant_ must obtain the parents permission_ to ____ middot-- Formatted Font +Body (calibri) 12pt

collect-ood_use_the Perso1111lly ldentifi11hle lnfom111tioaor disclose_the _PID collecteq_from the Child ____ middot-- Formatted Font +Body (callbri) 12pt

(iv) a description of the procedures by which a parent may give Participant such permission and ltmiddot- Formatted Font +Body ccanbri) 12 ptmiddot

(v) notlce that if the parent does not provide consent within a reasonable time Participant will _i Formatted Font +Body (calibri) 12 pt

delete the parents online contact information from its records

B Mechanisms for Obtaining Verifiable Parental Consent

Partidpant must take_ reasonable_ measures in_ light of available technology_ to-lt--- Formatted Font +Body calibri) 12 pt rrot Italic

ensure that the person providing consent is the Childs parent __Acceptable_ mechanisms_for_ --- Formatted Font +Body(calibrl) 12 pt

obtaining verifiable parental consent include (i) providing a consent form to be signed by the middot----- Formatted Font +Body(Qlllbrl) 12 pt

parent and returned to Participant by mail scan or fax (ii requl ring a parent to use a credit card in connection with a transaction on Participants siteMonitored Product (]ii) having a parent call_---middot- Formatted Font +Bodycallbrl) 12 pt

a toll-free telephone number staffed by trained personnel (iv) having a parent connect to trained personnel via video-conference (v) verifying the parents identity by checklng a form of government-issued identification against databases of such information provided that the identification information is deleted immediately after verification 61-jVi) _using_ e-mail_----- Formatted Font +Body cca11brl) 12 pt

accompanied by a PIN or password obtained by the parent through one of the verification methods descrlbed above or (vii) using an approved vendor such as Veratad Technologiese ______ ---middotmiddot Formatted Font +Body callbcl) 12 pt

C Information Collected for Participants Internal Use Only

Where Participants use of Perso1111lly ldentiii11hle hlfoHlflaeneQ__i~__f()__ fl~~~ri~L----middot Formatted Font +Body (callbri) 12pt

purposes only and there rs no disclosure to third parties or the public methods to obtain prior verifiable parental consent may also include use of email coupled with additional steps to provide assurances that the person providing the consent is the parent Such additional steps include ~ending a_delayed _confirmatory_ email to the parent_ after _receiving_consent orJill----obtaining a postal address or telephone number from the parent and_conflrmlng the paents ______ _

Formatted Font +Body (caibri) 12 pt

Formatted Font +Body (callbri) 12 pt

Formatted Font +Body (calibri) 12 pt -Formatted Font +Body (calibrl) 12 pt

10 of 13

consent by letter or telephone call If Participant implements such methods Partieipa11t must

pf6yentlle-HOiee in tile b~~ltDLrn1ai1~11-~g17_fll_rl~1~i_o_~ frac12i~ri- l_l_5_~ jD~lll=~- _(l11 the info_~l1)i_~i_o_11_ --- --- - Formatted Font +Body (Qilibri) 12 pt

contained in the earlier email notice and (bl instructions for how the parent can revoke aayt~------- Formatted Font +Body (calibrl) 12 pt

consent given In response to the earlier email-0011wed vfith iflstruetio1lS-el-how to revoke sueh --- Formatted Font +Body (callbrl) 12 pt

OOHsen_ _______________________ ----------------------------------- ______________________________ _______________ Formatted font +Body (Calibri) 12 pt

D Exceptions to Obtaining Prior Verifiable Parental Consent

Participant may collect a Childs name or email address prior to obtaining parental consent under the following exceptions

1 Obtaining Consent Participant may collect the name or email address of a parent or shikChild _ for _the_ sole _purpose_ of_ obtaining_parental _consent _provided_gt---- Formatted Font +Body (Calibri) 12 pt

however that if Participant does not obtain parental consent after a reasonable time from the initial date of collection Participant shall permanently delete collected information from Participants records Participant must not use the collected_ name_o_r __ ---- Formatted Font +Body(Calibrl) 12 pt

email address to re-contact the parent or Child

2 One-Time Response Participant may collect an email address (or other online identifier) from a ehmChild for the sole purpose of responding directly on a one- ______ Formatted Font +Body ccai1brl) 12 pt

L-------------~- -- - bullbullbullbullbull ---------------------- bullbullbullbullbullbullbullbull ---------------bullbull bullbullbullbullbullbullbull --------~-

time_ basis_to a specific request from_the ehiklfbJk -- so _long_as such_ information is not_ -- Formatted Font +Body (calibri) 12 pt

used to re-contact the shikChilcj_or for_any other_purpose_and is subsequently deleted_middot~- Formatted Font +Body (caibri) 12 pt

from Participants records Under this exception Participant is not required to provide _- Formatted Font +Body (C8Hbrl) 12 pt

direct notice to a parent or to obtain verifiable parental consent Formatted Font +Body(calibri) 12 pt

3 Multiple Responses Participant may collect the online contact information of a Child and parent Hl--0ffieronly to respond _directly_ on_ more_than _one~------ Formatted Font +Body (callbrl) 12 pt

occasion to a specific request from the Child so long as such information is not used for any other purpose In such instances Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain to the parent that Participant has collected the Childs emall address to respond to the Childs request (iii) explain that the Childs request will require more than one contact with the Child (iv) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (v) expIain how a parent can refuse to perm it further contact and information collection from the Child and (vi) explain that if the parent does not respond Participant may use the collected information for the purposes stated in the direct notice This direct notice to parents must be sent immediately after Participants initial response to the Child and before sending any additional responses

4 Protecting Child Safety Where Participant has used reasonable efforts to provide notice to the parent Participant may collect a Childs name and email address

11 of 13

only_to the extent reasonably necessary to_protect the safety of the Child on a Monitored ___ - Formatted font +Body (Calibri) 12 pt

Wea Site er Meaile-AppProductt_ orovided such Information is used for the sole purpose of__ middotmiddot Formatted Font +Body (Callbrl) 12 pt

protecting the Childs safety and not used to re-contact the Child or for any other purpose nor disclosed on the Monitored lea Sites eF-Mebile-AppsProducts __ In such_ cases _ bullmiddot Formatted Font +Body (Calibri) 12 pt

Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain that Participant has collected the Chllds name and email address to protect the Childs safety (iii) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the_ Childs information (iv) explain how a parent can refuse to permit further contact and information collection from the Child and (v) explain that if the parent does not respond Participant may use the information for the purposes stated in the direct notice

5 Protecting Others Participant may collect a Childs name and email middot Formatted font +BodyCalibri) 12pt Notilallc 1pound ----- --- ---- - ~--amp-~~M~~--- -------- ---bullbullbullbullbull-bullbull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull amp MM ---=-

address onlyto _protect_the_integrity orsecurity of Participants Monitored WeaSites er -- Formatted font +Body (Calibri) 12 pt

Meaile AppsProducts~to take precautions against liability_to respond to judicial process __ middot---- Formatted Font +Body (Calibri) 12 pt

or to provicle information to law enforcement agencies or pursuant to authorized middotmiddot-middotmiddot Formatted font +Body (Calibri) 12 pt

investigations on matters related to public safety provided such information is not used for any other purpose pnder this exception_ Participant is_not required to provide direct_ -middotmiddot Formatted font +Body (callbri) 12 pt

notice to parents

VI PROVIDING PARENTS ACCESS TO AND CONTROL OVER CHILDRENS PERSONAlJY~-__

IDENTIFLBLEPERSONAb_lNFORMATION AND DATA_ ______ -------------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot~~middot~

Participant must provide parents with the following information andbullmiddot--- ~nities to control use of their Childs Persanally ldenHl-iaale lnfennatianfID__________________ ~middotbull -~--

bull th6Ih_specific_lnformation Participant has collected from the Child_including hisher----gt

name address telephone number hobbies etct_middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot----------------------middotmiddot--middot--------

bull anampJ opp-0rtunity for _the_ parent _to _prevent_ Participant _from collecting orusing~gt PeFsanally Identifiable Infernuttio1lem_about their ebiltillik_in the future and ___________ bull

bull anampJopportunity for theparent to direct Participant to delete their Childs Peffienally -z- denlifiaale lnlbrmatlaHEfil_from_Participants recordsmiddot--------------------------middot-middotmiddotmiddotmiddotmiddot middotmiddotmiddot-~middotbull

______________Participant must take_ reasonable_ measures _in_ light of available technology to~---bulllt ensure that the person requesting access to or providing instructions about the Childs Persettally - Jdenftffftelamp-lnfflfflHltienPID is the Childs parent For acceptable verification mechanisms refer to bullmiddot- ~----~ ~~- ---- --- -- ---- ---------------------------- -----------~------------------- ---~ ~ --- _

Section VB above middotmiddotmiddot-

12 of 13

Formatted Font +Body (catibrl) 12 pt

Formatted Justified Indent Hanging 025

Formatted Font +Body (callbri) 12 pt

formatted Font +Body (Cabtl) 12 pt

Formatted Justified

Farmattecl font +Body catibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Justified Bulleted + Level 1 + Allgned at 0S + Tab after 075 + Indent at 075

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted font +Body (Calibri 12 pt

formatted Font +Body Calibri) 12 pt

Formatted font +Body (calibrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted JusUfled

Formatted font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

consent by letter or telephone call If Participant implements such methods Partieipa11t must

pf6yentlle-HOiee in tile b~~ltDLrn1ai1~11-~g17_fll_rl~1~i_o_~ frac12i~ri- l_l_5_~ jD~lll=~- _(l11 the info_~l1)i_~i_o_11_ --- --- - Formatted Font +Body (Qilibri) 12 pt

contained in the earlier email notice and (bl instructions for how the parent can revoke aayt~------- Formatted Font +Body (calibrl) 12 pt

consent given In response to the earlier email-0011wed vfith iflstruetio1lS-el-how to revoke sueh --- Formatted Font +Body (callbrl) 12 pt

OOHsen_ _______________________ ----------------------------------- ______________________________ _______________ Formatted font +Body (Calibri) 12 pt

D Exceptions to Obtaining Prior Verifiable Parental Consent

Participant may collect a Childs name or email address prior to obtaining parental consent under the following exceptions

1 Obtaining Consent Participant may collect the name or email address of a parent or shikChild _ for _the_ sole _purpose_ of_ obtaining_parental _consent _provided_gt---- Formatted Font +Body (Calibri) 12 pt

however that if Participant does not obtain parental consent after a reasonable time from the initial date of collection Participant shall permanently delete collected information from Participants records Participant must not use the collected_ name_o_r __ ---- Formatted Font +Body(Calibrl) 12 pt

email address to re-contact the parent or Child

2 One-Time Response Participant may collect an email address (or other online identifier) from a ehmChild for the sole purpose of responding directly on a one- ______ Formatted Font +Body ccai1brl) 12 pt

L-------------~- -- - bullbullbullbullbull ---------------------- bullbullbullbullbullbullbullbull ---------------bullbull bullbullbullbullbullbullbull --------~-

time_ basis_to a specific request from_the ehiklfbJk -- so _long_as such_ information is not_ -- Formatted Font +Body (calibri) 12 pt

used to re-contact the shikChilcj_or for_any other_purpose_and is subsequently deleted_middot~- Formatted Font +Body (caibri) 12 pt

from Participants records Under this exception Participant is not required to provide _- Formatted Font +Body (C8Hbrl) 12 pt

direct notice to a parent or to obtain verifiable parental consent Formatted Font +Body(calibri) 12 pt

3 Multiple Responses Participant may collect the online contact information of a Child and parent Hl--0ffieronly to respond _directly_ on_ more_than _one~------ Formatted Font +Body (callbrl) 12 pt

occasion to a specific request from the Child so long as such information is not used for any other purpose In such instances Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain to the parent that Participant has collected the Childs emall address to respond to the Childs request (iii) explain that the Childs request will require more than one contact with the Child (iv) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the Childs information (v) expIain how a parent can refuse to perm it further contact and information collection from the Child and (vi) explain that if the parent does not respond Participant may use the collected information for the purposes stated in the direct notice This direct notice to parents must be sent immediately after Participants initial response to the Child and before sending any additional responses

4 Protecting Child Safety Where Participant has used reasonable efforts to provide notice to the parent Participant may collect a Childs name and email address

11 of 13

only_to the extent reasonably necessary to_protect the safety of the Child on a Monitored ___ - Formatted font +Body (Calibri) 12 pt

Wea Site er Meaile-AppProductt_ orovided such Information is used for the sole purpose of__ middotmiddot Formatted Font +Body (Callbrl) 12 pt

protecting the Childs safety and not used to re-contact the Child or for any other purpose nor disclosed on the Monitored lea Sites eF-Mebile-AppsProducts __ In such_ cases _ bullmiddot Formatted Font +Body (Calibri) 12 pt

Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain that Participant has collected the Chllds name and email address to protect the Childs safety (iii) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the_ Childs information (iv) explain how a parent can refuse to permit further contact and information collection from the Child and (v) explain that if the parent does not respond Participant may use the information for the purposes stated in the direct notice

5 Protecting Others Participant may collect a Childs name and email middot Formatted font +BodyCalibri) 12pt Notilallc 1pound ----- --- ---- - ~--amp-~~M~~--- -------- ---bullbullbullbullbull-bullbull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull amp MM ---=-

address onlyto _protect_the_integrity orsecurity of Participants Monitored WeaSites er -- Formatted font +Body (Calibri) 12 pt

Meaile AppsProducts~to take precautions against liability_to respond to judicial process __ middot---- Formatted Font +Body (Calibri) 12 pt

or to provicle information to law enforcement agencies or pursuant to authorized middotmiddot-middotmiddot Formatted font +Body (Calibri) 12 pt

investigations on matters related to public safety provided such information is not used for any other purpose pnder this exception_ Participant is_not required to provide direct_ -middotmiddot Formatted font +Body (callbri) 12 pt

notice to parents

VI PROVIDING PARENTS ACCESS TO AND CONTROL OVER CHILDRENS PERSONAlJY~-__

IDENTIFLBLEPERSONAb_lNFORMATION AND DATA_ ______ -------------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot~~middot~

Participant must provide parents with the following information andbullmiddot--- ~nities to control use of their Childs Persanally ldenHl-iaale lnfennatianfID__________________ ~middotbull -~--

bull th6Ih_specific_lnformation Participant has collected from the Child_including hisher----gt

name address telephone number hobbies etct_middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot----------------------middotmiddot--middot--------

bull anampJ opp-0rtunity for _the_ parent _to _prevent_ Participant _from collecting orusing~gt PeFsanally Identifiable Infernuttio1lem_about their ebiltillik_in the future and ___________ bull

bull anampJopportunity for theparent to direct Participant to delete their Childs Peffienally -z- denlifiaale lnlbrmatlaHEfil_from_Participants recordsmiddot--------------------------middot-middotmiddotmiddotmiddotmiddot middotmiddotmiddot-~middotbull

______________Participant must take_ reasonable_ measures _in_ light of available technology to~---bulllt ensure that the person requesting access to or providing instructions about the Childs Persettally - Jdenftffftelamp-lnfflfflHltienPID is the Childs parent For acceptable verification mechanisms refer to bullmiddot- ~----~ ~~- ---- --- -- ---- ---------------------------- -----------~------------------- ---~ ~ --- _

Section VB above middotmiddotmiddot-

12 of 13

Formatted Font +Body (catibrl) 12 pt

Formatted Justified Indent Hanging 025

Formatted Font +Body (callbri) 12 pt

formatted Font +Body (Cabtl) 12 pt

Formatted Justified

Farmattecl font +Body catibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Justified Bulleted + Level 1 + Allgned at 0S + Tab after 075 + Indent at 075

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted font +Body (Calibri 12 pt

formatted Font +Body Calibri) 12 pt

Formatted font +Body (calibrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted JusUfled

Formatted font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

only_to the extent reasonably necessary to_protect the safety of the Child on a Monitored ___ - Formatted font +Body (Calibri) 12 pt

Wea Site er Meaile-AppProductt_ orovided such Information is used for the sole purpose of__ middotmiddot Formatted Font +Body (Callbrl) 12 pt

protecting the Childs safety and not used to re-contact the Child or for any other purpose nor disclosed on the Monitored lea Sites eF-Mebile-AppsProducts __ In such_ cases _ bullmiddot Formatted Font +Body (Calibri) 12 pt

Participant must make reasonable efforts taking into consideration available technology to give direct notice to parents which must (i) include Participants Kids Privacy Statement or that portion of Participants General Privacy Statement that reflects its Online Information Practices with respect to Children (ii) explain that Participant has collected the Chllds name and email address to protect the Childs safety (iii) explain that the parent may refuse to permit further contact with the Child and may require Participant to delete the_ Childs information (iv) explain how a parent can refuse to permit further contact and information collection from the Child and (v) explain that if the parent does not respond Participant may use the information for the purposes stated in the direct notice

5 Protecting Others Participant may collect a Childs name and email middot Formatted font +BodyCalibri) 12pt Notilallc 1pound ----- --- ---- - ~--amp-~~M~~--- -------- ---bullbullbullbullbull-bullbull-bullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbullbull amp MM ---=-

address onlyto _protect_the_integrity orsecurity of Participants Monitored WeaSites er -- Formatted font +Body (Calibri) 12 pt

Meaile AppsProducts~to take precautions against liability_to respond to judicial process __ middot---- Formatted Font +Body (Calibri) 12 pt

or to provicle information to law enforcement agencies or pursuant to authorized middotmiddot-middotmiddot Formatted font +Body (Calibri) 12 pt

investigations on matters related to public safety provided such information is not used for any other purpose pnder this exception_ Participant is_not required to provide direct_ -middotmiddot Formatted font +Body (callbri) 12 pt

notice to parents

VI PROVIDING PARENTS ACCESS TO AND CONTROL OVER CHILDRENS PERSONAlJY~-__

IDENTIFLBLEPERSONAb_lNFORMATION AND DATA_ ______ -------------------------middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot~~middot~

Participant must provide parents with the following information andbullmiddot--- ~nities to control use of their Childs Persanally ldenHl-iaale lnfennatianfID__________________ ~middotbull -~--

bull th6Ih_specific_lnformation Participant has collected from the Child_including hisher----gt

name address telephone number hobbies etct_middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot----------------------middotmiddot--middot--------

bull anampJ opp-0rtunity for _the_ parent _to _prevent_ Participant _from collecting orusing~gt PeFsanally Identifiable Infernuttio1lem_about their ebiltillik_in the future and ___________ bull

bull anampJopportunity for theparent to direct Participant to delete their Childs Peffienally -z- denlifiaale lnlbrmatlaHEfil_from_Participants recordsmiddot--------------------------middot-middotmiddotmiddotmiddotmiddot middotmiddotmiddot-~middotbull

______________Participant must take_ reasonable_ measures _in_ light of available technology to~---bulllt ensure that the person requesting access to or providing instructions about the Childs Persettally - Jdenftffftelamp-lnfflfflHltienPID is the Childs parent For acceptable verification mechanisms refer to bullmiddot- ~----~ ~~- ---- --- -- ---- ---------------------------- -----------~------------------- ---~ ~ --- _

Section VB above middotmiddotmiddot-

12 of 13

Formatted Font +Body (catibrl) 12 pt

Formatted Justified Indent Hanging 025

Formatted Font +Body (callbri) 12 pt

formatted Font +Body (Cabtl) 12 pt

Formatted Justified

Farmattecl font +Body catibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Justified Bulleted + Level 1 + Allgned at 0S + Tab after 075 + Indent at 075

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted Font +Body (Calibri 12 pt

Formatted font +Body (Calibri 12 pt

formatted Font +Body Calibri) 12 pt

Formatted font +Body (calibrl) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted JusUfled

Formatted font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

VII DATA COLLECTION AND SECURITY ~- --middot -middot i Formatted Indent first line 025

A Participant shall upon ESRBs reasonable request provide details regarding how+------PeFleaally--ldentifillbe 11funnationlQ_ is _gathered_ from_ andor_ tra eked_ th rough _Participants ___ _ Monitored Wea Sires er Meaile AppsProducts~_as well as disclosure _regarding how such Peffielffll-ly ____ Mem-ifillble fufonnatienpoundJQJ~~-t_i)~~-lt- If PID is notbeJlg utilizeq~rt_i~_iR~-~~~~uld not Clt~C~L_lt__ _

_B__R---farticipant _Hti5tibfill_ establish_ implement __ and __mai_nta_in __ reasonablebull-middot--shyprocedures to protect the confidentiality security and integrity of PeFsom1Hy Identifiable lnfurffltltioopoundJQ_within _its_ control_ whether_ collected_ from_adults_ or_ middot eltiMre11Children__ from __ unauthorized_ access __ use__ alteration __distributionc_ormiddot- disclosure-__ __participant__ shall_ utillze__ appropriate _commercially__ reasonablegt methods (eg encryption) to protect any sensitive ffiffiffilation1Q it collects such -bull as social security numbers or transactional Information including but not limited - to financial information -

E--------f~1rtic-ipa-n1~~~1 -~j~-ke-reas-onable middotsteps-t~- middotrei~~-se_~ii-1~-~~ r~~-~ooHr~gtgt_ iaentffiabHHHfommtionChildrens PID only to service providers and third parties that are capable of maintaining the confidentiality security and integrity of such information

GD Participant shall take reasonable steps when collecting creating maintaining middot-- - - middot-middot middotmiddotmiddotmiddotmiddotmiddotmiddotmiddotmiddot--------------------- - - ------------------bull- - - --- using distributing_ or disclosing Peffiellally--kientifiali~onnatfot1f9__to _assur_e_ that the datagt- _

created utilized andor shared is up-to-date complete and accurate -

Elf_ _____ Participant __ must__ implement__ reasonable __and __ effective__ processes __ andor~ mecha nis ms whiehthat_ al low _users _to _correct_ mate ria I_inaccuracies__in_ Persooally--leen-tifi-able ~bull middot- lnfumiationpoundQ_ such as account or contact information These processes andor mechanisms middot-

Formatted Justified

Formatted Font +Body (Callbtl) 12 pt bullr~

Formatted Fant +Body (Calibri) 12 pt

Formatted Font +Body (calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body Calbrl) 12 pt

ltbulli Formatted Font +BodyCallbrl) 12 pt

Formatted Numbered + Level 1 + Numbering Style A B C + Start at 2 + Alignment Left + Aligned at 05 + Indent at l

Formatted font +Body (Calibri) 12 pt

formatted Font +Body (calibri) 12 pt

formatted Font +Body Calibri 12 pt

Formatted Font +Body (calibrl) 12 pt

Formatted Font +Body (callbrl) 12 pt

Formatted Font +Body (Calibrl 12 pt

f Formatted 1ndent Fir5t line OS Formatted Justified

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

Formatted Font +Body (Qilbtl) 12 pt

Formatted font +Body (Qillbri) 12 pt

Formatted font +Body (callbrl) 12 pt

Formatted font +Body (Qilibri) 12 pt

Formatted Font +Body (Calibri) 12 pt

must be easily ~~mprehended and user-friendly and oce utilized must confirm to users that~- Formatted Font +Body (Calibri) 12 pt

the cited inaccuracies have been corrected middot Formatted Font +Body (Calibri) 12 pt

f Formatted Font +Body (Qilibri) 12 pt

BfL _I_~ P~i~ip_an_t)_h]9_ri~ored_~~-~l_lt~f~~~~~jlJJSProd~-~S P~CY_i~~-i_~~go Formatted Font +Body (callbrl) 12 pt

third-party web sites~ PartlcipanttmlampfilQd)_gimplement exit messages or bumper _______ middot-- Formatted Font +BodyCallbri) 12 pt

pages wherever users travel via such links to a third-party site QLfilfiltO inform a user that (i) middot-- Formatted Font +Body (Calibri) 12 pt

heshe is leaving Participants web siteQ__[___g_Qp and (ii) Participants Terms of Use and Privacy middotbull Formatted Font +Body(Callbrl) 12 pt

Statement will no longer be applicable upon users departure from Participants web site or middotmiddot-_ Formatted Font +Body (Calibri) 12 pt j rn_ -~~~C to_i 111_JJlel_E_c_l~~~o_r11 ~_a_ ~i-~i_P~r1~11t~~-~_l_l~_s_ul)111it_~~e_ _s_pe_cfi~J~_flll_l_la_ge_ ~t_i_fl~ri~s_to__ ~ Formatted Font +Body (Calibri) 12 pt middot7 utilize for this purpose to ESRB for approval bullmiddotlt~ Formatted Font +Body (Calbrl) 12 pt l

bull--- ______ ___________________ _ ______________________ ______________- Formatted Font +Body (calibrl) 12 pt - -~- -

Formatted font +Body (Calibri 12 pt

Formatted Justified Indent First line 05

13 of 13