Privacy Policy

This Privacy Policy explains how MT Sports LLC, a Nevada limited liability company (“Company,” “we,” “us,” or “our”), collects, uses, discloses, stores, transfers, and otherwise processes personal information in connection with our websites, mobile applications, marketplace functionality, vaulting and storage services, authentication and grading facilitation, customer support operations, marketing activities, and any related products and services that link to or reference this Privacy Policy (collectively, the “Platform”).

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge the practices described in this Privacy Policy, subject to any rights you may have under Applicable Law.

If you do not agree with this Privacy Policy, you should not access or use the Platform.

This Privacy Policy applies to personal information we collect in connection with:

• your access to and use of the Platform;
• account registration, administration, and security;
• purchases, sales, listings, bids, offers, redemptions, vaulting, storage, shipping, authentication, grading facilitation, and marketplace activity;
• communications with our customer support, trust and safety, compliance, legal, finance, and operations teams;
• participation in promotions, waitlists, surveys, reviews, referrals, loyalty programs, events, or similar activities;
• interactions with our emails, SMS, advertising, social media pages, and other communications; and
• any other online or offline interaction where this Privacy Policy is linked, posted, or otherwise provided.

This Privacy Policy does not apply to:

• information processed solely on behalf of third-party sellers, service providers, or business customers where we act only as a processor, service provider, or similar intermediary;
• websites, apps, services, wallets, social platforms, payment services, grading companies, authentication providers, logistics providers, or other third parties not controlled by us;
• employment, contractor, or applicant data, unless specifically stated.

Third parties may maintain their own privacy notices and practices. We are not responsible for those third-party practices and encourage you to review their policies.

Depending on how you interact with the Platform, we may collect the following categories of personal information.

• name, display name, username, alias, or account handle;
• email address, phone number, billing address, shipping address, and country or region;
• account ID, customer number, seller ID, consignor ID, or similar internal identifiers.

• account credentials, password hashes, security settings, login history, multi-factor authentication settings, and account recovery information;
• profile details, avatar, biography, collection preferences, saved items, watchlists, wishlists, favorites, and communication preferences.

• product purchases, sales, listings, bids, offers, redemptions, refunds, cancellations, order history, shipment history, marketplace activity, vault requests, storage elections, and buyback activity;
• information relating to Collectables, including item descriptions, serial numbers, grading details, authentication information, provenance details, condition notes, images, and collection data;
• records relating to rewards, promotional credits, referral activity, discount usage, loyalty benefits, store credits, or other customer incentives.

• payment method information, transaction confirmations, billing records, limited payment card details, payout details, bank account information where needed for payouts, tax forms, and related financial administration data;
• fraud-screening outputs, payment risk indicators, chargeback history, settlement information, and processor response data.

We generally rely on third-party payment processors and financial partners to process full payment card information, although we may receive limited payment-related details and transaction metadata.

• date of birth;
• government-issued identification details, copies of identification documents, selfie or liveness-check results, proof of address, taxpayer identification information, and similar verification materials;
• sanctions screening data, watchlist results, source-of-funds information, source-of-wealth information, beneficial ownership data, business ownership information, resale or tax exemption data, and records needed for fraud prevention, anti-money laundering, export control, customs, tax, sanctions, or other legal compliance;
• documentation submitted in connection with disputes, suspicious activity reviews, enhanced due diligence, account restrictions, or trust and safety investigations.

• emails, chat logs, recorded calls where permitted by law, support tickets, complaint submissions, dispute materials, fraud reports, trust and safety submissions, and other communications with us;
• attachments, photographs, videos, affidavits, receipts, screenshots, device information, shipping documentation, unboxing footage, and other evidence you provide in connection with claims, disputes, returns, delays, authenticity concerns, or legal requests.

• IP address, browser type, operating system, device identifiers, hardware model, app version, language settings, time zone, network information, general location derived from IP, mobile carrier, and referring URLs;
• session data, log files, timestamps, crash reports, event logs, and performance diagnostics;
• information regarding how your device interacts with the Platform and our communications.

• pages viewed, links clicked, products viewed, time spent, searches performed, features used, search queries, queue participation, marketplace interactions, email open and click data, and interactions with drops, reveals, openings, storage flows, and redemption workflows;
• inferred preferences, likely interests, engagement profiles, audience segments, and similar analytics-based inferences derived from your interactions.

• your subscription status for newsletters, SMS, or promotional communications;
• advertising IDs, campaign identifiers, attribution data, conversion data, cookie IDs, pixel tags, SDK outputs, and similar data used to measure, target, suppress, and optimize campaigns;
• social media interactions, ad engagement, and information received from advertising and analytics partners.

• reviews, comments, posts, messages, images, videos, collection showcases, seller listings, marketplace descriptions, and other content you choose to provide or publish on or through the Platform.

We may receive personal information from third parties, including:

• payment processors, financial institutions, fraud prevention vendors, and chargeback providers;
• identity verification, sanctions screening, and compliance vendors;
• grading, authentication, warehousing, vaulting, customs, insurance, shipping, and logistics providers;
• data analytics, attribution, communications, support, and advertising vendors;
• affiliates, referral partners, business partners, licensors, marketplace counterparties, and service providers;
• social networks or third-party login providers, where you choose to connect them;
• public records, law enforcement, regulators, and rights holders.

If the Platform includes wallet, token, or blockchain-linked features, we may collect public wallet addresses, on-chain transaction information, asset IDs, token identifiers, and related metadata associated with your use of those features.

Blockchain data may be public, immutable, and not fully erasable.

In limited circumstances, we may collect information considered sensitive under some privacy laws, such as:

• government-issued identification numbers or documents;
• financial account details used for payouts or compliance;
• date of birth and age verification information;
• account log-in credentials;
• sanctions, watchlist, source-of-funds, or source-of-wealth data; and
• biometric-adjacent verification inputs supplied to our verification vendors, such as selfie or liveness data, where applicable.

We do not use sensitive personal information to infer characteristics about you except as permitted by law and reasonably necessary for verification, fraud prevention, security, contract performance, customer support, legal compliance, or other legitimate operational purposes.

We and our vendors may use cookies, pixels, tags, web beacons, SDKs, local storage, session replay tools, device fingerprints, and similar technologies (collectively, “Cookies and Similar Technologies”) to collect information automatically.

We may use Cookies and Similar Technologies to:

• operate, secure, authenticate, and maintain the Platform;
• remember preferences and settings;
• analyze traffic, conversion, performance, and engagement;
• understand browsing, shopping, and transaction behavior;
• detect fraud, bots, abuse, or suspicious activity;
• personalize product recommendations, content, and offers; and
• deliver, target, or optimize advertisements where permitted by law.

Depending on your jurisdiction, you may be able to manage Cookies and Similar Technologies through a cookie banner, preference center, browser settings, device settings, or other controls. Blocking some Cookies and Similar Technologies may affect Platform functionality.

We use personal information for the following purposes, as permitted by Applicable Law.

• create, administer, and secure Accounts;
• process purchases, sales, listings, bids, offers, redemptions, refunds, cancellations, payouts, and marketplace transactions;
• facilitate authentication, grading, vaulting, warehousing, customs handling, insurance coordination, shipping, and fulfillment;
• provide customer support, resolve disputes, and respond to inquiries;
• maintain records of transactions, ownership, storage elections, and account history.

• analyze demand, trends, market activity, and product performance;
• conduct research, testing, quality assurance, debugging, and internal analytics;
• improve site functionality, search, recommendations, fraud controls, shipping flows, marketplace tools, and user experience;
• develop new products, services, promotions, loyalty features, storage products, resale tools, and operational capabilities.

• verify identities, payment methods, ownership rights, and account integrity;
• detect, investigate, prevent, and respond to fraud, bots, account abuse, counterfeit items, manipulation, chargebacks, theft, hacking, policy violations, or unlawful conduct;
• monitor for suspicious transactions, device risks, sanctions exposure, compliance concerns, and trust and safety issues;
• enforce our Terms and Conditions, marketplace rules, seller standards, storage terms, and other agreements.

• send transactional and service-related messages, including receipts, shipping updates, redemption notices, fraud alerts, account confirmations, policy updates, and customer support responses;
• send marketing emails, SMS, push notifications, and promotional communications where permitted by law;
• conduct surveys, seek feedback, manage waitlists, and administer promotions or referral programs.

• comply with Applicable Law, tax obligations, sanctions requirements, customs obligations, court orders, government requests, and regulatory expectations;
• establish, exercise, investigate, or defend legal claims;
• protect our rights, property, operations, personnel, users, service providers, and the public.

• support audits, accounting, financial reporting, risk management, insurance, corporate governance, and internal administration;
• facilitate or evaluate mergers, acquisitions, financings, restructurings, asset sales, insolvency events, or other corporate transactions.

We may disclose personal information to the following categories of recipients, subject to Applicable Law.

We may disclose personal information to vendors and service providers that perform services on our behalf, including providers of:

• hosting, cloud storage, infrastructure, and security;
• payment processing, fraud prevention, and financial administration;
• identity verification, compliance, and sanctions screening;
• customer service, communications, and CRM systems;
• analytics, attribution, marketing, and advertising;
• shipping, customs, warehousing, vaulting, grading, authentication, insurance, and logistics;
• software development, bug tracking, productivity, and internal support tools.

We may disclose personal information to:

• marketplace counterparties where needed to facilitate a transaction;
• referral partners, promotional partners, licensors, or co-branded partners where relevant to the applicable service or campaign;
• insurers, financing providers, or commercial partners involved in transaction support or operational delivery.

We may disclose personal information to our affiliates, parent companies, subsidiaries, or related entities for purposes consistent with this Privacy Policy.

We may disclose personal information to lawyers, auditors, consultants, accountants, bankers, insurers, lenders, investors, acquirers, and counterparties in actual or potential corporate transactions.

We may disclose personal information where we believe disclosure is necessary or appropriate to:

• comply with Applicable Law, regulation, legal process, or government request;
• respond to subpoenas, court orders, or regulatory inquiries;
• cooperate with law enforcement, customs authorities, tax authorities, consumer protection authorities, or sanctions authorities;
• protect against fraud, abuse, illegal activity, or threats to safety.

We may disclose personal information where reasonably necessary to investigate or respond to alleged infringement, counterfeit activity, theft, chargeback fraud, or other disputes affecting rights holders, sellers, buyers, carriers, insurers, or other affected parties.

We may disclose personal information where you direct us to do so or where you otherwise consent.

Depending on your jurisdiction and how our advertising and analytics activities are configured, some disclosures involving cookie-based advertising, cross-context behavioral advertising, audience matching, or similar activities may be considered a “sale,” “sharing,” or use of personal information for targeted advertising under certain privacy laws.

We do not sell personal information for money in the ordinary sense. However, we may allow advertising, analytics, or social media partners to collect or receive certain identifiers, device information, usage data, and similar information for campaign measurement, attribution, audience creation, or advertising optimization.

Where required by Applicable Law, we will provide appropriate notice and opt-out rights relating to those activities.

We may work with third-party analytics and advertising providers that use cookies, pixels, SDKs, and similar tools to collect or receive information from the Platform and elsewhere over time in order to:

• understand how users discover and interact with the Platform;
• measure conversions, campaign performance, and attribution;
• prevent duplicate or irrelevant advertising;
• deliver more relevant advertising and content; and
• improve our marketing and product strategy.

These partners may combine data collected through the Platform with data they collect from other sources, subject to their own privacy practices.

If you use marketplace, review, comment, community, collection showcase, social, or similar features, information you choose to submit may be visible to other users or to the public. This may include usernames, profile information, listings, comments, ratings, images, transaction-related content, and similar materials.

Please use caution when deciding what information to share publicly or with other users.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• maintain your Account and provide requested services;
• complete transactions and associated operational processes;
• comply with tax, accounting, customs, shipping, legal, regulatory, anti-fraud, dispute-resolution, and recordkeeping obligations;
• investigate incidents, enforce agreements, and preserve evidence relevant to actual or potential claims; and
• support legitimate business operations, audits, security, and corporate recordkeeping.

Retention periods vary depending on the nature of the information, the sensitivity of the information, the context in which it was collected, whether the information is needed to provide services, and any legal or operational retention requirements.

When personal information is no longer reasonably required, we may delete it, de-identify it, aggregate it, or retain it only as necessary to comply with law, resolve disputes, enforce agreements, or maintain appropriate records.

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, destruction, and other unlawful or accidental processing.

However, no system, network, device, or method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your login credentials, devices, and communications with us.

We and our service providers may process personal information in the United States and other countries where we or our vendors operate. These jurisdictions may have data protection laws different from those in your country of residence.

Where required by law, we will implement appropriate safeguards for cross-border transfers, which may include contractual protections, adequacy mechanisms, or other legally recognized transfer tools.

The Platform is not directed to children under eighteen (18), and we do not knowingly collect personal information from children under eighteen (18).

In addition, the Platform is intended only for users who meet the minimum age stated in our Terms and Conditions. If we learn that we collected personal information from a child in violation of Applicable Law, we may delete that information and take steps to disable the relevant account.

If you believe a child has provided personal information to us unlawfully, please contact us using the details below.

Subject to Applicable Law and technical availability, you may have the following choices and controls:

• access, update, or correct certain account information through your account settings;
• opt out of marketing emails by using the unsubscribe link in those emails;
• manage SMS preferences by following the instructions in the message or contacting us;
• manage cookie preferences through applicable consent tools, browser settings, device settings, or privacy controls;
• disable certain push notifications through your device or app settings; and
• close your account by contacting us, subject to any outstanding legal, compliance, storage, payment, or transactional obligations.

Even if you opt out of marketing communications, we may still send you transactional or service-related messages.

Depending on your state of residence, you may have rights under Applicable Law relating to personal information we process about you. Subject to legal exceptions, verification requirements, and any limitations under applicable law, those rights may include the right to:

• confirm whether we process your personal information;
• access personal information;
• correct inaccuracies in personal information;
• delete personal information;
• obtain a portable copy of certain personal information;
• opt out of the sale of personal information, sharing of personal information, targeted advertising, certain profiling, or certain sensitive data uses where applicable; and
• appeal a decision we make regarding a privacy request.

We will not unlawfully discriminate against you for exercising privacy rights.

To exercise privacy rights, please contact us at [email protected]. We may need to verify your identity before processing your request. Where permitted by law, you may designate an authorized agent to submit a request on your behalf.

For purposes of certain U.S. state privacy laws, the categories of personal information we collect, the purposes for collection and use, and the categories of recipients to whom we disclose personal information are described in Sections 2, 5, and 6 above.

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, delete, and opt out of certain disclosures or uses of personal information.

We may collect, use, retain, and disclose the categories of personal information described in this Privacy Policy for the business and commercial purposes described above. We may also use or disclose sensitive personal information for limited purposes permitted by California law, such as performing services, verifying identity, preventing fraud, securing systems, processing transactions, complying with legal obligations, and maintaining appropriate records.

If our practices constitute “selling” or “sharing” personal information under California law, we will provide a method for California residents to opt out, such as a “Do Not Sell or Share My Personal Information” link, consent management tool, or equivalent legally recognized mechanism.

If you are entitled to appeal a denial of a privacy request under applicable state law, you may do so by contacting us at [email protected] with the subject line “Privacy Rights Appeal.”

If you are a Nevada resident, you may have the right to direct a business not to make certain sales of covered information under Nevada law. We do not currently sell covered information for monetary consideration as contemplated by that law. Nevada residents may nonetheless contact us at [email protected] with questions.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection rights, and the applicable law applies to our processing, the following additional disclosures apply.

We may process personal data on one or more of the following legal bases:

• performance of a contract or to take steps at your request before entering into a contract;
• compliance with legal obligations;
• our legitimate interests or the legitimate interests of third parties, provided those interests are not overridden by your rights and freedoms;
• your consent, where required; and
• establishment, exercise, or defense of legal claims.

Subject to applicable law, you may have rights to:

• request access to personal data;
• request rectification of inaccurate personal data;
• request erasure of personal data;
• request restriction of processing;
• object to certain processing, including processing based on legitimate interests and certain direct marketing;
• request portability of certain personal data; and
• withdraw consent where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

You may also have the right to lodge a complaint with a supervisory authority in your place of residence, work, or where an alleged infringement occurred.

Where required, international transfers of personal data outside the EEA or UK will be subject to appropriate safeguards recognized by applicable law.

Some browsers offer “Do Not Track” settings, and some jurisdictions recognize browser-based privacy preference signals such as Global Privacy Control. We respond to such signals where and to the extent required by Applicable Law.

We may create, use, disclose, and retain de-identified, anonymized, or aggregated information that does not reasonably identify you, subject to Applicable Law. We may use such information for analytics, operational improvement, product development, benchmarking, commercial analysis, fraud prevention, and other lawful purposes.

We may revise this Privacy Policy from time to time to reflect changes in our practices, services, technologies, legal obligations, or business operations. If we make material changes, we may notify you by posting the updated policy, updating the effective date, emailing you, or using other reasonable means, as required by law.

Your continued use of the Platform after the effective date of the revised Privacy Policy constitutes acknowledgment of the updated Privacy Policy to the extent permitted by law.