Privacy Policy

Mayhem Arena LLC ("Mayhem Arena," "Company," "we," "us," or "our") is committed to protecting the privacy of individuals who visit our website located at mayhemarena.com (the "Site") and who otherwise interact with us in connection with our services, events, programs, and facilities (collectively, the "Services"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have regarding your personal information. This Privacy Policy is incorporated into and subject to our Terms of Service. By using the Site or our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Site and our Services.

We collect personal information in the following ways: 2.1 Information You Provide Directly We collect information you voluntarily submit to us, including: • Contact and inquiry forms: name, email address, phone number, and the content of your message or inquiry. • Waitlist and pre-registration forms: name, email address, and any optional information you choose to provide. • Newsletter subscriptions: email address. • Event registrations and ticket purchases: name, email address, billing address, and payment information. • Employment applications: resume, professional history, and contact details. • Investor interest forms: name, email address, phone number, company affiliation, and investment context. • STEM and educational program inquiries: name, institution, role, and contact details. 2.2 Information Collected Automatically When you visit the Site, we and our third-party service providers automatically collect certain technical information, including: • Log data: IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and access timestamps. • Device information: device type, unique device identifiers, and screen resolution. • Usage data: clickstream data, search queries entered on the Site, and interaction data. • Cookies and similar technologies: see Section 6 (Cookies and Tracking Technologies) below. 2.3 Information from Third Parties We may receive personal information about you from third parties, including social media platforms (if you interact with our social media pages), analytics providers, and marketing partners, in each case subject to their respective privacy policies.

We use the personal information we collect for the following purposes: • To respond to your inquiries, comments, and requests and to provide customer support. • To process registrations, reservations, and purchases and to fulfill our contractual obligations to you. • To send you transactional communications, such as booking confirmations, receipts, and event reminders. • To send you marketing communications, such as newsletters, promotional offers, and event announcements, where you have consented or where we have a legitimate business interest to do so and subject to your right to opt out at any time. • To administer our waitlist and pre-registration program and to notify you when spaces become available. • To analyze usage of the Site and our Services, improve our offerings, and develop new features and content. • To conduct surveys, research, and other data analysis activities. • To comply with legal obligations, enforce our Terms of Service, and protect the rights, safety, and property of Mayhem Arena and others. • To detect, investigate, and prevent fraudulent transactions and other illegal activities. Legal Bases for Processing (EEA/UK Visitors): To the extent applicable, we process your personal information on the following legal bases: (i) performance of a contract with you; (ii) your consent; (iii) our legitimate interests, provided they are not overridden by your interests or fundamental rights; and (iv) compliance with a legal obligation.

We do not sell your personal information to third parties. We may share your information in the following limited circumstances: 4.1 Service Providers We share information with vendors and service providers that perform services on our behalf, including payment processors, email and marketing automation platforms, cloud infrastructure providers (including Supabase, Inc. for database services), analytics providers, and customer support tools. These parties are authorized to use your personal information only as necessary to provide services to us and are contractually required to maintain the confidentiality and security of your information. 4.2 Business Transfers If Mayhem Arena is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements. 4.3 Legal Requirements and Protection of Rights We may disclose your information to: (i) comply with applicable law, regulation, legal process, or governmental request; (ii) enforce our Terms of Service or other agreements; (iii) respond to claims that content on the Site violates the rights of third parties; or (iv) protect the rights, property, or safety of Mayhem Arena, our users, or the public. 4.4 Aggregated or De-identified Data We may share aggregated or de-identified information — which cannot reasonably be used to identify you — with third parties for research, marketing, analytics, or other purposes without restriction.

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include: (i) the nature and sensitivity of the information; (ii) the purposes for which we collected and process it; (iii) applicable legal requirements; and (iv) whether we have a legitimate business need to retain the information. When information is no longer needed, we securely delete or anonymize it. If complete deletion is not immediately practicable (for example, due to backup storage), we will isolate and protect it from further processing until deletion is possible.

We use cookies, web beacons, pixel tags, and similar technologies ("Cookies") to collect information about your browsing activities and to distinguish you from other users of the Site. Cookies help us improve the Site, deliver more personalized experiences, and analyze how the Site is used. Categories of Cookies We Use: Necessary Cookies: These Cookies are essential for the Site to function and cannot be switched off in our systems. They are usually only set in response to actions made by you, such as setting your privacy preferences, logging in, or filling in forms. Analytics Cookies: These Cookies allow us to count visits and traffic sources so we can measure and improve the performance of the Site. They help us understand which pages are most and least popular and see how visitors move around the Site. Information collected by these Cookies is aggregated and therefore anonymous. Marketing Cookies: These Cookies may be set through the Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. Managing Cookies: You may control Cookie preferences through the cookie consent tool displayed on the Site. You may also configure your browser to refuse all or some browser Cookies or to alert you when Cookies are being sent. Note that disabling certain Cookies may affect the functionality of the Site. Do Not Track: Some browsers transmit "Do Not Track" signals. Because there is currently no industry-standard response to such signals, our Site does not currently alter its behavior in response to Do Not Track signals.

Depending on your jurisdiction, you may have the following rights with respect to your personal information: Right to Access: You may request confirmation of whether we process your personal information and, if so, a copy of that information. Right to Correction: You may request that we correct inaccurate or incomplete personal information. Right to Deletion: You may request that we delete your personal information, subject to certain exceptions (e.g., where retention is required by law or necessary to complete a transaction you have requested). Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances. Right to Data Portability: Where processing is based on your consent or the performance of a contract and is carried out by automated means, you may request a copy of your personal information in a structured, commonly used, machine-readable format. Right to Object: You may object to the processing of your personal information based on our legitimate interests, including for direct marketing purposes. Opt-Out of Marketing Communications: You may opt out of receiving marketing emails at any time by clicking the "unsubscribe" link in any such email or by contacting us as described in Section 11. California Residents (CCPA/CPRA): California residents have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, please contact us as described in Section 11. We will not discriminate against you for exercising your rights. To exercise any of the rights described above, please submit a verifiable request to us using the contact information in Section 11. We will respond to verified requests within the timeframes required by applicable law.

Mayhem Arena implements and maintains reasonable and appropriate administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include encrypted transmission (SSL/TLS), access controls, and vendor due diligence. However, no method of transmission over the Internet and no method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. In the event of a data breach that requires notification under applicable law, we will notify affected individuals and relevant authorities as required.

The Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at the address in Section 11. We will take steps to delete such information from our records promptly. Visitors between the ages of 13 and 17 should review this Privacy Policy with a parent or guardian.

The Site may contain links to third-party websites, applications, and services that are not operated or controlled by Mayhem Arena. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access. Our social media pages on platforms such as Instagram, Twitter/X, YouTube, and Facebook are governed by the respective privacy policies of those platforms.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: Mayhem Arena LLC Attn: Privacy Officer Northern Virginia (Exact address forthcoming upon facility opening) Email: privacy@mayhemarena.com We will endeavor to respond to all legitimate requests within 30 days. Occasionally it may take longer if your request is particularly complex or you have made multiple requests, in which case we will notify you and keep you updated.

We reserve the right to update or modify this Privacy Policy at any time. We will post the revised policy on this page with an updated "Last Updated" date. If we make material changes, we will provide additional notice (such as by posting a notice on the Site or sending an email notification to the address associated with your account or subscription). We encourage you to review this Privacy Policy periodically to stay informed about our information practices. Your continued use of the Site or our Services following the posting of any changes constitutes your acceptance of the revised Privacy Policy.