PRIVACY POLICY Last Updated: April 8, 2026 These Terms of Use ("Terms") are entered into by and between you ("User," "you," or "your") and Champs Only, LLC, a Florida limited liability company, with a principal place of business at 1100 Brickell Bay Dr, Miami, FL 33131 ("Company," "we," "us," or "our"). These Terms govern your access to and use of the arbs.xyz platform, including all content, functionality, software, analytics, and services offered through the platform (collectively, the "Services"). By accessing or using the Services, you agree to be bound by these Terms. If you do not agree, you must not use the Services. INTRODUCTION ChampsOnly LLC ("the Company," "we," "us," or "our") is committed to protecting and respecting Your privacy. This Privacy Policy explains how we collect, use, store, share, and protect Your personal data when You visit arbs.xyz (the "Website") or use the Arbs.xyz platform and associated services (the "Platform"). This Privacy Policy is provided in accordance with applicable United States privacy laws, including state privacy laws where applicable (such as the California Consumer Privacy Act (CCPA/CPRA)). ChampsOnly LLC is the company responsible for the personal data described in this policy. By accessing or using the Website or Platform, You agree to this Privacy Policy. If You do not agree, You must not use the Website or Platform. We reserve the right to update this Privacy Policy at any time. We will notify You of material changes by updating the "Last Updated" date above and, where appropriate, by email. Your continued use of the Platform after any update constitutes Your acceptance of the revised policy. 1. WHO WE ARE ChampsOnly LLC is incorporated in the United States. You can contact us regarding privacy matters at: Email: support@arbs.xyz Website: arbs.xyz If You are a U.S. resident, You may also have rights under the privacy laws of Your state. 2. WHAT PERSONAL DATA WE COLLECT We collect and process the following categories of personal data: Category Examples We do not collect any special categories of personal data (such as health data, racial or ethnic origin, political opinions, or biometric data). 3. HOW WE COLLECT YOUR PERSONAL DATA We collect personal data through the following means: Directly from You, when You: register for an account; subscribe to the Platform; contact us for support; post in the Community; or respond to surveys or communications. Automatically, when You use the Website or Platform, through cookies, web beacons, and similar tracking technologies that collect Technical Data and Usage Data. From third parties, including: Stripe, Inc. (payment processing); Discord, Inc. (community access); and analytics providers. 4. HOW WE USE YOUR PERSONAL DATA We use Your personal data for the following purposes and in accordance with applicable U.S. privacy laws: Identity Data Name, username Contact Data Email address Financial Data Payment card details (processed and stored by Stripe — we do not store full card details), billing address, transaction history Technical Data IP address, browser type and version, operating system, device identifiers, referring URLs, time zone Usage Data Pages visited, features used, session duration, click data, Platform activity Communications Data Emails, support messages, and other correspondence You send to us Community Data Content You post in the Asymmetric Discord community subscriber section Purpose Legal Basis 5. COOKIES AND TRACKING TECHNOLOGIES The Website uses cookies and similar tracking technologies to improve Your experience and to collect Usage Data and Technical Data. Cookies we use include: • Strictly necessary cookies: Required for the Website to function (e.g., session management, login state). These cannot be disabled. • Analytics cookies: Used to understand how visitors use the Website (e.g., Google Analytics or equivalent). These are only placed with Your consent. • Marketing cookies: Used to deliver relevant advertising. These are only placed with Your consent. You can manage Your cookie preferences through the cookie consent banner displayed when You first visit the Website, or through Your browser settings. Disabling certain cookies may affect the functionality of the Website. 6. HOW WE SHARE YOUR PERSONAL DATA To provide and manage Your subscription and access to the Platform Service delivery and account administration To process payments via Stripe Payment processing and billing To provide customer support Customer support and communications To send transactional communications (e.g., receipts, account notices) Service-related communications To send marketing communications (where You have consented or where permitted by law) Marketing and promotional communications To improve and develop the Platform Product development and analytics To detect and prevent fraud and abuse Security, fraud prevention, and legal compliance To comply with legal obligations Compliance with applicable law To enforce our Terms of Service Business operations and legal enforcement We do not sell Your personal data. We may share Your personal data with the following categories of third parties: Where we share data with third parties, including service providers in other jurisdictions, we use appropriate contractual and operational safeguards designed to protect personal data. 7. DATA RETENTION We retain Your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. In general: • Account and subscription data is retained for the duration of Your subscription and for up to six (6) years thereafter (subject to applicable U.S. legal and compliance requirements). • Financial transaction data is retained for at least six (6) years for tax and accounting purposes. • Marketing data is retained until You unsubscribe or withdraw consent. • Technical and usage data is typically retained for up to twenty-four (24) months. 8. YOUR PRIVACY RIGHTS (U.S.) Depending on Your U.S. state of residence, You may have the following rights in relation to Your personal data: Third Party Purpose Stripe, Inc. Payment processing Discord, Inc. Community access Analytics providers Website and Platform analytics Email service providers Transactional and marketing communications Legal and professional advisers Legal compliance and enforcement Law enforcement / regulators Where required by law Acquirers In the event of a merger, acquisition, or sale of assets Right Description To exercise any of these rights, please contact us at support@arbs.xyz. We will respond within one (1) month of receiving Your request. We may need to verify Your identity before processing Your request. If You are not satisfied with our response, You have the right to lodge a complaint with the appropriate regulator in Your jurisdiction, such as Your state Attorney General. 9. SECURITY We implement appropriate technical and organisational measures to protect Your personal data against unauthorised access, disclosure, alteration, or destruction. However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security of Your data. 10. CHILDREN The Platform is not directed at children under the age of eighteen (18). We do not knowingly collect personal data from children under 18. If You believe we have inadvertently collected data from a child under 18, please contact us at support@arbs.xyz and we will take steps to delete that data promptly. Right of access Request a copy of the personal data we hold about You Right to rectification Request correction of inaccurate or incomplete data Right to erasure Request deletion of Your data in certain circumstances Right to restrict processing Request that we limit how we use Your data in certain circumstances Right to data portability Receive Your data in a structured, machine- readable format Right to object Object to processing based on legitimate interests or for direct marketing Right to withdraw consent Withdraw consent at any time where processing is based on consent 11. LINKS TO THIRD-PARTY WEBSITES The Website and Platform may contain links to third-party websites, including prediction market platforms. This Privacy Policy does not apply to those third-party websites. We encourage You to review the privacy policies of any third-party websites You visit. 12. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time. We will notify You of material changes by posting the updated policy on the Website and updating the "Last Updated" date. Where required by law, we will seek Your consent to material changes. 13. CONTACT US For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: ChampsOnly LLC Email: support@arbs.xyz Website: arbs.xyz For complaints, You may also contact the appropriate regulator in Your jurisdiction, such as Your state Attorney General or the U.S. Federal Trade Commission (FTC). This Privacy Policy was last updated on 8 April 2026.