CFC Fight Club — Privacy Policy

At CFC & ALTIS, we value your privacy. This Privacy Policy explains how CFC Entertainment LLC "CFC" collects, uses, stores, and protects your personal information when you register and interact with our digital platforms, including our fan engagement platform, landing page, WhatsApp, SMS, and through other interactions with individuals.

Altis provides the underlying fan engagement platform that powers CFC's digital experiences. This means CFC is the data controller (deciding how your information is used) and Altis acts as the data processor (managing and safeguarding the data on CFC's behalf).

Fans Data and the Fan Engagement Platform

When you register, we may collect and process:

• Full name
• Phone number (including country code)
• Email address
• Fan preferences and CFC-related interests
• Interaction data (clicks, message opens, responses, participation in surveys/contests)

We use this information exclusively to provide personalized fan experiences and relevant content from CFC. Your data will never be used for unrelated purposes beyond what is described in this Privacy Policy or what is legally permitted. Under the California Consumer Privacy Act ("CCPA"), CFC is considered the "business" that determines how data is used, while Altis Tech operates strictly as the "service provider" that manages and processes this data on CFC's behalf.

CFC chooses what personal information they wish to collect from fans through their website or any digital platform developed by ALTIS or integrated to ALTIS services.

In some cases, CFC may choose to import data into the Altis platform from trusted partners or third-party integrations (e.g., ticketing systems, CRM tools, or survey platforms). This may include ticket purchase details, sales information, fan lists, website interaction data, or survey responses. CFC may also use the Altis platform to send audience data to third-party services for remarketing purposes. Please note that Altis does not control how those third-party services handle personal information, and fans are subject to the privacy policies and terms of those providers when interacting with them.

How We Use Your Data

We use your information to:

• Send communications, promotional messages, news, surveys, tickets, events and general information and exclusive fan experiences via SMS and WhatsApp.
• Collect and analyze data derived from CFC and ATLIS websites, landing pages, digital platforms, Whatsapp or SMS including data related to visits, time spent, clicks.
• Personalize content, offers and fan experiences based on your preferences.
• Measure and improve the effectiveness of our fan engagement campaigns.
• Provide analytics and insights to CFC in aggregated/de-identified form.
• Ensure compliance with U.S. marketing and data privacy laws.

We will not use your personal information for unrelated purposes outside this Privacy Policy.

Legal Basis for Processing

• Your explicit consent when registering.
• Legitimate interest in providing fan engagement services.

Data Sharing

We may share your data with:

• Altis stores and processes data securely on behalf of CFC.
• Data may be shared with authorized service providers (SMS/WhatsApp delivery platforms, analytics providers, CRM systems, website hostings, payment processing, advertising and marketing services) solely to operate the service.
• Our service providers only receive the minimum amount of personal data necessary to perform the functions assigned to them (such as delivering SMS/WhatsApp messages or providing hosting). They are not permitted to use the information for their own purposes, including marketing, nor to disclose it beyond what is necessary to operate the service.
• CFC may receive anonymized or aggregated insights but does not directly manage your personal data.
• Authorized partners for fan-related offers.

We will never sell your personal data.

We may share personal information within Tradable Bits and with service providers to enhance services and application and platform development.

Cookies and Other Tracking Technology

Our websites may use cookies, which are small files placed on your device that help us recognize your browser when you return. Cookies allow us to remember preferences, improve your browsing experience, and analyze website performance. You can configure your browser to notify you when cookies are sent or to block them, but please note that some features of our websites may not function properly without them.

We may use cookies, pixels and similar technologies to remember fans when they visit CFC websites, analyze fan behaviour and personalize CFC websites. This information may include favourite sports teams, most-listened-to artists, or most-visited venues. To opt-out of the tracking cookie, please reply: stop cookies. We may also review and analyze fan interactions across CFC's digital properties in an aggregated and anonymized form. This helps us improve the Altis platform, run diagnostics, optimize performance, and support initiatives such as market research and product development.

Altis follows applicable data protection regulations when collecting or handling personal data on behalf of CFC. This includes ensuring fans have given valid consent to receive communications. If you wish to unsubscribe from CFC marketing messages, you can follow the opt-out instructions provided in the messages or contact CFC directly.

Your Rights

You have the right to:

• Access, correct, or delete your data.
• Opt out of communications at any time (by replying STOP or UNSUBSCRIBE).
• Request a copy of the data Altis holds on your behalf.

Data Security

Altis implements encryption, monitoring, and restricted access policies to safeguard your information.

Legal and Compliance

We may provide personal information in response to a search warrant to other legally valid inquiry or order, or to another organization for the purposes of investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise may be required or permitted by applicable U.S, Mexican, or other law or legal process, which may include lawful access by US or foreign courts, law enforcement or other government authorities. Personal information may also be disclosed where necessary for the establishment, exercise or defence of legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.

Website Activity Data

When you browse our websites, we may automatically collect technical information such as your IP address, pages viewed, type of browser, operating system, and average time spent. This data is used to monitor site traffic and enhance the user experience.

We may use tracking tools such as "web beacons" or "pixel tags" to better understand how fans interact with our website. These tools help us analyze which pages are visited and tailor future experiences for users.

To improve our website, we may rely on analytics providers (such as Google Analytics) that help us measure traffic, time spent on pages, search terms, and other engagement metrics. Fans who wish to opt out can do so by using the Google Analytics opt-out browser add-on or adjusting their browser settings. For more information or to opt-out using the Google Analytics opt-out browser add-on, see Google's page entitled "How Google uses information from sites or apps that use our services".

International Transfers

Data may be processed in the U.S. and in other countries where our service providers operate, always under contractual safeguards for data protection.

Retention

Data is retained only as long as necessary for fan engagement purposes or to comply with legal obligations.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to our privacy practices. Updates will be published on the CFC landing page. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy policy when it was most recently updated.

Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect or process personal data from minors. If we become aware that we have received such data, we will delete it promptly.