Privacy Policy

LEGAL

Mahj In The City

Last Updated: August 14th, 2026

Mahj In The City, LLC ("Company," "we," "our," or "us") respects your privacy and is committed to protecting it through our compliance with this policy. This policy describes how we collect, process, retain, and disclose personal data about you when you visit www.mahjinthecity.com (the "Website"), create an account, register for or participate in the Bambird Scramble league and our other programs and events (the "League"), and use our online registration and player portal (the "Portal," and together with the Website, the League, and our related services, the "Services"). It also describes our practices for using, maintaining, protecting, and disclosing that information.

This policy applies only to information we collect:

• through the Services;

• in communications, including email, text, chat, and other electronic messages, between you and the Services; and

• when you register for, schedule, or participate in the League.

It does not apply to information collected by us offline or through any other means that does not link to this policy, or by any third party, including through any application, website, or content (such as a messaging application or social media platform) that may link to or be accessible from or through the Services. Those third parties have their own privacy policies, which we encourage you to read.

We may provide additional or different privacy notices that are specific to certain features, services, or activities. Please read this policy carefully. By using the Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this policy. If you do not agree, do not use the Services.

1. Children’s and Minors’ Data

Our Services are intended for adults and are not directed to children. You must be at least 18 years old to use the Services or provide us any information. We do not knowingly collect personal data from anyone under 18. If we learn we have collected personal data from a child under 18 without verified parental consent, we will delete it. If you believe a child under 18 may have provided us information, please contact us using the information in Section 12.

2. The Personal Data We Collect

"Personal data" is information that identifies, relates to, or describes, directly or indirectly, you as an individual, such as your name, email address, or telephone number. The types and categories of personal data we collect or process include:

• Account and contact information, including your first and last name, email address, telephone number, city or region of play, username, and account login credentials.

• League and play information, including your skill or experience level, ladder standing, match results and scores, availability and scheduling selections, teammate or partner preferences, and program or event selections.

• Payment information. When you pay a registration or program fee, our third-party payment processor collects and processes your payment card or account details. We do not store full payment card numbers. We receive limited transaction information, such as confirmation of payment and the last digits of the card.

• Communications and content, including messages, questions, survey responses, feedback, photographs, and other information you submit to us or post through the Services.

• Prize and fulfillment information, including a mailing address, if you win or claim a prize that we ship to you.

• Device and usage information, including your IP address, device identifiers, operating system, browser type and settings, and other device and connection information.

We also collect statistical or aggregated information, which does not directly identify a specific person (for example, the percentage of participants who use a particular feature), and technical information about your interactions with the Services, such as clickstream data, pages viewed, dates and times of access, page response times, and referring URLs. If we combine non-personal, statistical, or technical data with personal data so that it identifies you, we treat the combined information as personal data.

3. How We Collect Your Personal Data

You provide information to us.

We collect information you provide when you create or update an account, register for the League, schedule or report matches, pay a fee, enter a promotion, contact us, respond to a survey, or create, upload, or post content through the Services.

Automatically through the Services.

As you navigate through and interact with the Services, we and our service providers may use automatic data-collection technologies to collect device and usage information. These technologies help us operate and improve the Services and deliver a better experience. They may include:

• Cookies. A cookie is a small file placed on your device when you interact with the Services. You may refuse or disable cookies through your browser or device settings, but some features may not function properly if you do.

• Web beacons. Some parts of the Services and our emails may contain small electronic files (also called clear gifs, pixel tags, and single-pixel gifs) that let us count users, record the popularity of content, and verify system integrity.

Third-party collection.

When you use the Services, certain third parties (such as analytics providers and your internet or mobile service provider) may use automatic collection technologies to collect information about you or your device. We do not control these third parties’ technologies or how they use the information. If you have questions about a third party’s practices, contact that provider directly.

From service providers.

We may receive information about you from service providers that support the Services, such as our payment processor, hosting and software providers, analytics providers, and communications tools, and combine it with information we collect directly from you.

4. How We Use Your Information

We use the information we collect, including personal data, to:

• provide, operate, and administer the Services and register you for the League, programs, and events;

• facilitate self-scheduled matches, including by making your name, email address, telephone number, city or region, and ladder standing available to other participants as described in Section 5;

• administer ladders, leaderboards, scoring, standings, and league rules and policies, including the Playbook and the Player Code of Conduct;

• process payments and administer fees, and enforce the no-refund, no-show, and cancellation terms in our Service Terms;

• award, communicate about, and fulfill or ship prizes;

• communicate with you about your account, matches, schedules, results, and program updates, and, where permitted, send you marketing and promotional messages (you may opt out of marketing as described in Section 7);

• carry out our obligations and enforce our rights under our agreements with you, including for billing and collection;

• maintain the safety, security, and integrity of the Services and enforce our terms and policies;

• understand and improve the Services and develop new features, programs, and cities; and

• comply with law and legal process and establish, exercise, or defend legal claims.

5. How We Share Your Information

We may disclose aggregated or de-identified information without restriction. We disclose personal data as described below.

Sharing with other participants.

The League depends on participants scheduling and playing matches directly with one another. By registering and providing your contact information to us, you understand and agree that we will share certain of your information (including your name, email address, telephone number, city or region, and ladder standing) with other participants in your league or city, and that you may receive the same information about them, including lists or rosters of participants’ contact information. This sharing is necessary to participate. If you do not want your contact information shared with other participants, you should not register.

Our Service Terms require participants to use other participants’ contact information only to arrange, confirm, and play League matches and for League-related communication, and not for any other purpose. However, we do not control, and we are not responsible for, how other participants actually use your information once it is shared. A participant may use it in ways that violate our terms and that we cannot prevent. We also do not provide in-app messaging, and participants often communicate directly by email, text, or third-party messaging applications (such as WhatsApp) that we do not own or control. Those communications are between the participants, and we are not responsible for them or for any resulting conduct, disputes, or harm. You share your information, and communicate with other participants, at your own risk.

Other sharing.

We also disclose personal data:

• to contractors, service providers, and other third parties that support the Services (such as website and Portal hosting, software development, payment processing, analytics, email and communications, customer support, and prize fulfillment and shipping) who are bound to keep the information confidential and use it only to perform services for us;

• to sponsors, prize providers, venues, and promotional partners, as needed to provide prizes, promotions, and events (where a promotion has separate official rules, those rules govern);

• to our affiliates and subsidiaries;

• to a buyer or successor in the event of a merger, financing, reorganization, sale of assets, or similar transaction, in which personal data is among the assets transferred;

• to comply with a court order, law, or legal process, or to respond to a government or regulatory request;

• to enforce our terms and agreements, including for billing and collection, and to protect the rights, property, or safety of the Company, our participants, or others;

• to fulfill the purpose for which you provide it; and

• for any other purpose disclosed by us when you provide the information, or with your consent.

No sale of personal data. We do not sell your personal data for money, and we do not share it for cross-context behavioral advertising or targeted advertising.

6. Your Choices About Your Information

(a) Account information. You may review and update your account information by logging into the Portal or contacting us. Some information is required to participate, and you may not be able to remove it while your account is active. We cannot delete your personal data except by also closing your account.

(b) Participant roster. Sharing your name, email, telephone number, city, and ladder standing with other participants is a necessary part of participation. If you do not want this information shared, please do not register.

(c) Marketing. You may opt out of marketing emails by using the unsubscribe link or contacting us. We may still send you non-promotional messages about your account and participation.

(d) Cookies and tracking. You can set your browser to refuse or alert you to cookies. If you disable cookies, some features may be inaccessible or may not function properly.

7. Your State Privacy Rights

Some U.S. states have comprehensive consumer privacy laws that give residents rights regarding their personal data, such as the right to access, correct, or delete it. Based on our current size and data practices, we do not believe these laws currently apply to us, and we do not sell personal data or use it for targeted advertising or profiling. We will monitor our obligations as the League grows across states, and if a state privacy law becomes applicable we will update this policy and honor the rights it requires. If you have questions or wish to make a request, contact us using the information in Section 12, and we will respond as required by applicable law.

8. How We Protect Your Personal Data

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal data from accidental loss and from unauthorized access, use, alteration, and disclosure. No system is completely secure, however, and we cannot guarantee the security of information transmitted to or through the Services. Email, text, and chat may not be secure, so please use care in deciding what to send us. The safety of your information also depends on you: you are responsible for keeping your account credentials confidential and for using care when sharing information with other participants.

9. How We Retain Your Personal Data

We keep personal data for as long as reasonably necessary to provide the Services, maintain your account and league history, operate our business, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete, destroy, or de-identify it.

10. Third-Party Links and Services

The Services may link to or integrate third-party websites and services, such as payment processors, messaging applications, and social media. We are not responsible for the privacy practices of those third parties, and their use of your information is governed by their own privacy policies.

11. Changes to This Privacy Policy

We may update this policy from time to time. When we do, we will revise the "Last Updated" date above and, if the changes are material, provide additional notice as required by law, such as by email or a notice on the Services. Your continued use of the Services after an update means you accept the updated policy. Please check this policy periodically.

12. Contact Information

To ask questions, make a request, or comment about this policy or our privacy practices, contact us at:

Mahj In The City, LLC

Email: bambirdscramble@mahjinthecity.com

Mailing address: 631 Colville Road, Charlotte, NC 28207