This privacy policy is issued by us, BANDAI CO.,LTD., a company registered in Tokyo, Japan. When we process your personal data, we are the data controller and are responsible for protecting your rights regarding personal data.

As we provide you with our services on our website, we collect, use, store, generate or disclose to third-parties (hereinafter collectively referred to as “process”) your personal data for the following purposes:

1. To manage our personalized advertising to those of you 16 years of age or older.
   
   1. Categories of your personal data we process: email address and your browsing history on our website collected by use of cookie(s) including your web browser identifier, IP address, timestamp and your interactions with our website.
   2. Lawful basis: your consent. You can withdraw your consent at any time here. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
   3. Period for which we store your personal data: We retain your browsing history for the duration specified separately in each privacy notice of our services, or until you withdraw your consent.
   4. Recipients we disclose your personal data to: We disclose your personal data to our advertising partners.
2. To analyze your use of our website in order to generate insight that is useful for improving our services, products and marketing:
   
   1. Categories of your personal data we process: your interactions with our website collected by use of cookie(s), including your browsing history on our website together with IP address and other information about your terminal device.
   2. Lawful basis: your consent. You can withdraw your consent at any time here. Your withdrawal of consent does not affect the lawfulness of our processing of your personal data based on consent before its withdrawal.
   3. Period for which we store your personal data: log data is deleted after the duration specified separately in each cookie notice of our services.
   4. Recipients we disclose your personal data to: our contractors that assist us in analyzing web traffic data.
3. To protect your privacy and security, integrity and availability of our website:
   
   1. Categories of your personal data we process: your browsing history on our website collected by web access logging, including your IP address, type and version of your web browser, web browser plugins, operating system and other information about your terminal device and technologies you use when accessing our website.
   2. Lawful basis: processing is necessary for the purpose of our legitimate interest, i.e. protecting your privacy and our website from fraudulent or unlawful access by monitoring web access traffic.
   3. Period for which we store your personal data: the duration specified separately in each privacy notice of our services.
   4. Recipients we disclose your personal data to: our contractors that assist us in monitoring web access traffic.
4. To provide on-line game services to you:
   
   1. Categories of your personal data we process: user ID, user agent, IP address, password, nickname, email address, avatar, login authentication history.
   2. Lawful basis: processing is necessary for the performance of a contract to which the data subject is party.
   3. Period for which we store your personal data: the duration specified separately in each privacy notice of our services.
   4. Recipients we disclose your personal data to: our contractors that assist us in providing on-line game services.
5. Partner Management:
   
   1. Categories of your personal data we process: company name, address, name, telephone, and email address of person in charge.
   2. Lawful basis: processing is necessary for the purpose of our legitimate interest, i.e. partner management is legal, realistic and concrete interest for our company, and it is the practice generally allowed in the society.
   3. Period for which we store your personal data: the duration specified separately in our privacy notice.
   4. Recipients we disclose your personal data to: service provider of CRM service and group company.

We usually do not collect and/or use sensitive categories of your personal data as defined in Articles 9 or 10 of GDPR on our website.

A cookie is a small text file that our website sends to your terminal device for the purpose of keeping certain records.
By using cookies:

1. Your terminal devices (e.g. browsers) remember your preferences (e.g. language used) and activities (e.g. login status, items in cart, etc.) on our website, so that we can deliver a personalized and better user experience on our website (essential cookies);
2. We keep track of your interactions with our website, giving us useful and important insight for improving our website (performance cookies); and
3. Based on your consent, our advertising partners keep track of your browsing history across the Internet, so that we can deliver personalized advertisement that is more likely to be of your interest (advertising cookies).

A cookie identifies your terminal device, typically your web browser, but it cannot identify your individual identity. You can choose whether to allow us or third-parties (our advertising partners) to set performance cookies and advertising cookies. When we use cookies for the purpose of personalizing our advertisement or analyzing web access, we request your prior consent thereto.
For more information and to change your cookie settings, including withdrawal of your consent, visit our Cookie Preference Center.
We do not set and use cookies for the purpose of advertisement or web access analytics for our users under 16 years of age.

We do not transfer your personal data to any entities located in any third countries outside of the European Economic Area (EEA) or Japan. In the event that we transfer your data to an entity located outside the EEA or Japan, we protect your rights with personal data by virtue of a data transfer contract with the relevant recipient in accordance with the GDPR, which imposes on such recipients contractual obligations to ensure an adequate level of data protection equivalent to those laid down by the GDPR.

Provided that certain conditions are met, you have legal rights to request from us the following:

• Revocation of previously given consent to our processing of your personal data
• Access to your personal data and to certain supplementary information covered by this policy;
• Rectification of your personal data if inaccurate or incomplete;
• Erasure of your personal data in certain circumstances;
• Suspension of using your personal data in certain circumstances;
• Stopping processing your personal data in certain circumstances; and
• Obtaining your personal data in a structured, commonly used, and machine-readable format.

If you wish to exercise your rights, please contact us.

If you are from EEA and UK, You can lodge complaints about our way of processing your personal data with the data protection supervisory authorities of your country of residence.

For further information and inquiry, contact:

1. The CCPA states that you have the right to request us to disclose what personal information we collect, use, disclose, and sell.
2. You can exercise your above-mentioned rights unless you have exercised the rights within the preceding 12 months. We endeavor to respond to you within 45 days of receiving a verifiable request from you. If you intend to exercise such rights, please refer to section 6.
3. We use your information (name, email address, and Bandai Namco ID) to verify your request. You may be asked to provide additional information so that we can verify your request.
4. The categories of personal information we collected, business or commercial purpose, sources and category of third parties we shared within the preceding 12 months are as follows:

   	CATEGORY(as stipulated in CCPA 1798.140(o))	DETAIL	BUSINESS OR COMMERCIAL PURPOSE FOR PROCESSING	SOURCES OF COLLECTED PERSONAL INFORMATION	CATEGORY OF THIRD PARTIES WE SELL (stipulated in CCPA 1798.140(w))　or disclose
   1	Identifiers Internet or other electronic network activity information	Unique personal identifier (cookie(s)), Internet Protocol address, browsing history, information regarding a consumer’s interactions with an Internet website, application	To manage our personalized advertising to those who are 16 years of age or older	Your activity on our site, advertising partners	Advertising partners
   2	Identifiers	Unique personal identifier (cookie(s)), Internet Protocol address	To analyze your use of our website and generate insight to improve our service and marketing	Your activity on our site	Our contractors that assist us in analyzing web traffic data
   3	Identifiers Internet or other electronic network activity information	Internet Protocol address browsing history, information regarding a consumer’s interactions with an Internet website, application	To protect your privacy and security, integrity and availability of our website	Your activity on our site	Our contractors that assist us in monitoring web access traffic
   4	Identifiers	Unique personal identifier, internet protocol address, alias, email address	To provide on-line game service to you	Your activity on our site	Our contractors that assist us in providing on-line game services.
   5	Commercial information	Services history	To provide on-line game services to you	Your activity on our site	Our contractors that assist us in providing on-line game services.
   6	Identifiers	Company name, postal address, name, telephone, and email address	Partner Management	In-person communication etc.	Service provider of CRM service and group company

5. Disclosure or Sale of Personal Information
   1. We do not have actual knowledge that we sell personal information about residents who we know are younger than 16 years old.
      Under the CCPA, “sell” means disclosing by electronic or other means, a consumer’s personal information to a third party for monetary or other valuable consideration.

1. The CCPA states that you have the right to request us to delete your personal information collected by us.
2. You can exercise your above-mentioned right with your account with us, unless you have exercised the rights within the preceding 12 months. We endeavor to respond to you within 45 days of receiving a verifiable request. If you intend to exercise such rights, please refer to section 6.
3. We use your information (name, email address, and Bandai Namco ID) to verify your request. You may be asked to provide additional information so that we can verify your request.

1. The CCPA states that you have the right to opt-out of the sale of your personal information by us.
2. Under the CCPA, the activities, in which we share information collected from cookies or email address with advertising agencies to manage our personalized advertising to those of you 16 years of age or older based on your preferences, may be considered a “sale” of personal information.
   Opt-out rights can be exercised by visiting our Cookie Policy or by going directly to our Cookie Settings page and deleting or preventing cookies from being used. You can also click on the “Do Not Sell My Personal Information” link at the bottom of every webpage.

1. The CCPA states that you have a right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA.

1. When you use an authorized agent to submit a request to know or a request to delete, we may require that you:

   1. Provide the authorized agent with written permission to do so; and
   2. Verify your own identity directly with us.
   3. Directly confirm with us that you provided the authorized agent with permission to submit the request

   We may deny a request from an agent that does not submit a proof that they have been authorized by you to act on your own behalf.

Please contact us by email if you have any questions or concerns about this privacy policy or the information we hold about you.

Some web browsers incorporate a “Do Not Track” (DNT) feature that sends signals to websites you visit that you do not want to be tracked, when turned on. Our site responds to the DNT signals. You can confirm your settings by going directly to our Cookie Settings page. You can also click on the “Do Not Sell My Personal Information” link at the bottom of every webpage.

We do not collect and store personal information about Children (in this provision, we define Children as minors under 13 years of age) if this information is submitted by a Child without prior parental consent or by the parent or guardian of the Child.
If we discover that we’ve unintentionally collected information from a Child in a way that does not meet COPPA requirements, we will delete the information immediately.

Click here to see additional information for visitors from the countries of the European Union, Iceland, Norway, Lichtenstein and the United Kingdom.