Privacy Policy

Effective Date: August 27, 2026 Alchemist LLC (the "Company") hereby establishes this Privacy Policy (the "Policy") regarding the handling of personal information of users and tenants (business operators offering Gacha through the Service) in connection with the online gacha service "Ultima Gacha" (the "Service") provided by the Company. Article 1 (Basic Policy) The Company recognizes the importance of personal information and shall appropriately collect, use, manage, and protect personal information in accordance with the Act on the Protection of Personal Information and other applicable laws and regulations, as well as the policies set forth herein. Article 2 (Information We Collect) In providing the Service, the Company may collect the following information. 1. Information Collected from Users (Members) - Email address, password (stored in encrypted form), nickname, and date of birth for age verification purposes - Name, postal code, address, and telephone number required for Prize exchange and shipment - Information relating to the purchase of Coins and payment transactions. Please refer to Article 5 for details regarding payment processing. Credit card numbers themselves are not stored on the Company's servers - Records of Coin purchases and usage, Gacha usage history, and records of Prizes acquired - Name, email address, and inquiry details entered into inquiry forms - Push notification token information where the user has enabled push notifications 2. Information Collected from Tenants (Business Operators Offering Gacha) - Legal name, trade name, individual name, name of the person responsible for operations, telephone number, postal code, address, and email address - Corporate number, where the Tenant is a corporation - Bank account information for the settlement and transfer of sales proceeds - Information required for disclosures under the Act on Specified Commercial Transactions - Payment information relating to subscription agreements for additional functions such as avatars and visual effects. Please refer to Article 5 for details 3. Information Automatically Collected Through Use of the Service - IP address - Identifiers such as Cookies - Browser type - Date and time of access - Pages viewed - Other access log information Article 3 (Methods of Collecting Personal Information) The Company collects personal information directly from Users and Tenants when such information is entered during Member registration or Tenant registration, as well as through use of the Service, including participation in Gacha, applications for Prize exchange, purchase of Coins, and inquiries. Article 4 (Purposes of Use) The Company shall use collected personal information only within the scope necessary for the following purposes: 1. To provide the Service, including account registration, login authentication, provision of Gacha, and the drawing and granting of Prizes 2. To ship acquired Prizes, including providing names, addresses, and other necessary information to delivery service providers 3. To process payments for Coin purchases and to prevent fraudulent or unauthorized payment activity 4. To settle and transfer sales proceeds to Tenants 5. To respond to inquiries and communications 6. To provide notices regarding the Service, email newsletters, notifications from followed Tenants, and similar communications, only where the User has elected to receive such communications 7. To investigate and respond to violations of the Terms of Service and other fraudulent or unauthorized activities 8. To conduct statistical analysis for the maintenance and improvement of the Service and consideration of new features, provided that such information is processed in a manner that does not identify specific individuals 9. To fulfill disclosure, record-keeping, and other obligations required under the Act on Specified Commercial Transactions and other applicable laws and regulations Article 5 (Provision to Third Parties and External Service Providers) The Company shall not provide personal information to any third party without the prior consent of the individual concerned, except in the following cases: 1. Where such disclosure is required by law 2. Where disclosure is necessary for the protection of a person's life, body, or property and it is difficult to obtain the individual's consent 3. Where the Company provides a delivery service provider with a name, address, telephone number, or other information necessary for the shipment of Prizes 4. Where information necessary for payment processing is provided to a payment service provider, Square, Inc. and its affiliates ("Square"), for the processing of Coin purchases and Tenant subscription agreements. Credit card numbers and other card information are transmitted directly to Square through payment forms provided by Square and do not pass through or become stored on the Company's servers. The Company uses payment mechanisms provided by Square that comply with PCI DSS requirements 5. Where the Company entrusts the handling of personal information to service providers, including email delivery systems, push notification systems, server operation providers, and other contractors, to the extent necessary for the provision of the Service. In such cases, the Company shall enter into appropriate agreements with such service providers and exercise necessary and appropriate supervision over them Article 6 (Use of Cookies and Similar Technologies) The Service uses Cookies to maintain login sessions and improve user convenience. Users may disable Cookies through their browser settings. However, if Cookies are disabled, certain functions of the Service may become unavailable. Article 7 (Minors and Age-Restricted Content) The Service is intended for persons aged 18 or older. Certain Gacha may be subject to age restrictions, including labels such as "For Persons Aged 20 or Older" or "Adult Products." Eligibility to use such Gacha will be determined based on the date of birth registered by the User. Article 8 (Security Measures) The Company shall implement necessary and appropriate security measures to prevent leakage, loss, destruction, or damage of collected personal information, including password encryption, encrypted communications using SSL/TLS, and other appropriate technical and organizational safeguards. Article 9 (Retention Period) The Company shall retain personal information for the period necessary to achieve the purposes for which such information was collected. The handling of information following account withdrawal, as well as the retention periods for information that must be preserved under applicable laws and regulations, including transaction records, shall be governed separately by the Company. Article 10 (Requests for Disclosure, Correction, Suspension of Use, etc.) An individual may, in accordance with applicable laws and regulations, request disclosure, correction, addition, deletion, suspension of use, or other legally available measures with respect to their personal information held by the Company. To make such a request, please contact the inquiry desk specified in Article 12. The Company shall verify the identity of the requesting individual and respond within a reasonable period in accordance with applicable laws and regulations. Article 11 (Amendments to This Privacy Policy) The Company may amend this Policy as necessary. The amended Privacy Policy shall become effective when posted on the Service. If the Company makes any material amendment to this Policy, the Company shall notify Users by posting a notice on the Service or by another appropriate method. Article 12 (Contact Information) For inquiries regarding this Policy or requests relating to the disclosure or other handling of personal information, please contact the inquiry desk indicated below. For the Company's legal name, address, and contact details, please refer to the page titled "Information Required under the Act on Specified Commercial Transactions." Article 13 (Language) This Policy may be translated into languages other than Japanese for convenience. In the event of any inconsistency, discrepancy, or conflict between the Japanese version of this Policy and any translated version, the Japanese version shall prevail.