PRIVACY POLICY

This Privacy Policy (“Privacy Policy”) is applicable to our website, www.miemirates.com (the “Website”), owned, operated and offered by INDIAWIN SPORTS MIDDLE EAST LIMITED (“ISMEL” or “us” or “we”).

ISMEL is the ‘data controller’, meaning that we decide the reasons why your data is used. We are also responsible for keeping your data safe and only using it for legitimate purposes. The term ‘you’ or ‘User’ refers to the user or viewer of our Website.

WHAT IS THE PURPOSE OF THIS PRIVACY POLICY?

This notice outlines how and why ISMEL collects and uses certain information from which you are personally identifiable (“Personal Information”). Certain of these pieces of information may not identify you on their own but when combined with other information, could lead to you being personally identifiable, so we will treat them as Personal Information.

This Privacy Policy explains:

• What information we may collect about you online, how we use it (including when we will contact you) and, where applicable, our basis of use;

• The use and role of cookies and similar technologies on our Website;

• The circumstances in which we might disclose your details to anyone else;

• How we will protect information we collect about and from you;

• What rights you may have concerning your data, including rights to ensure data is accurate.

At ISMEL, we respect the privacy of the Users of our Website and we are committed to protecting User privacy in all respects, with a view to offering an enriching, safe and enjoyable Website experience to Users. You are hereby advised to read this Privacy Policy carefully and fully understand the nature and purpose of gathering and/or collecting Personal Information and other information and the usage, disclosure and sharing of such information.

Please note that this Privacy Policy is only applicable to the users of the Website and the information and data gathered on the Website and not to any other information or website. Terms not defined herein will have the meaning ascribed to them in IMIL’s Terms and Conditions of Use for the Website, as available at https://www.mumbaiindians.com/terms-and-conditions.

CHANGES TO OUR PRIVACY POLICY

Please note that because of the changing nature of privacy laws and regulations, digital technologies, and our business, we may modify this privacy policy from time to time. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. However, we advise that you check this page regularly to keep up to date with any necessary changes.

This Privacy Policy was last modified on 27-12-2022.

DATA THAT WE MAY COLLECT ABOUT YOU

Information Gathered:

In general, you can visit our Website without telling us who you are or revealing any Personal Information about yourself. However, you may not be able to create a User Profile, or access certain areas or services on the Website that require registration, or need us to know who you are and/or other information about you.

The Personal Information that we collect from you will vary depending upon the activity you seek to engage in through our Website.

We collect Personal Information from you when you register and create your personal User Profile to interact on our Website, contribute User Content and participate in our Rewards Programme. We may also collect Personal Information from you when you purchase merchandise from our Website store, or register for any of our services or otherwise voluntarily provide such information. If you do not provide certain Personal Information, we may not be able to create your User Profile, and you may not be able to use all aspects of the Website, contribute to User Content, participate in our Rewards Programme or purchase merchandise from our Website store.

Personal Information collected in this way may include:

• Identity: name, social media account handle/username, birth date, age, gender, and photographs.

• Contact: email address, mobile number, and address.

• Profile: : your preferences for marketing, other website or technology preferences, your contact history and feedback on your Website experience (through surveys or online profiles).

• Financial: payment card details, billing address, purchase information, payment history.

We may also collect the following types of Personal Information from you when you use our Website, through the use of cookies and similar technologies:

• Technical: device IDs, browser type, IP address, operating system, central processing unit and other hardware types, network and software identifiers, location data, operating system and system configuration.

• Usage: visitor information e.g. feature usage, time spent on page, click paths, download errors, browsing patterns, and dates and times of access.

Please see the section on Cookies below for more information.

Except for User Profile passwords and any financial information, ISMEL does not collect any Sensitive Personal Information (“SPI”) via the Website. SPI has slightly different meanings in different countries, but generally means more sensitive Personal Information such as passwords; physical, physiological and mental health condition; racial or ethnic information; political opinions or associations; religious or philosophical beliefs; trade union memberships; medical records and history; biometric Information; sexual orientation; and, in some cases, financial information (such as bank account details or credit card numbers).

In the event we collect Personal Information from you, or a third party, in circumstances where we have not requested or solicited that information (known as unsolicited information), and it is determined by us (in our absolute discretion) that the Personal Information is not required, we will destroy the information or ensure that the information is de-identified.

Children:

You must be at least 18 years of age to create a User Profile or purchase our products or services. We do not intentionally collect or process any Personal Information concerning children.

HOW WE USE YOUR INFORMATION

The table below sets out how we use your Personal Information and our lawful basis for doing so in each case.

CONTACTING YOU AND OPTING-OUT

We may contact you using the Personal Information you have given us:

• in relation to your User Profile, including its verification and use;

• in relation to the functioning of any service you have signed up for in order to ensure that we can deliver the services to you, including the Rewards Programme;

• where you have provided consent for the following:

• to invite you to participate in fan contests or surveys about the Team or related matters (participation is always voluntary);

• to provide you with information about our Team news, Team events, Team fixtures lists, Team promotional content, partner promotions, sale of Team-related products and services; and

• other marketing correspondence, including in relation to the Rewards Programme and our sponsors and partners.

Except for necessary service messages, you can choose to unsubscribe from these communications at any time in the manner described in any such communication.

COOKIES

To improve the effectiveness and usability of the Website for our Users, we may utilise “cookies” and other tracking technologies. A “cookie” is a small text file that may be used, for example, to collect information about your activity on our Website. Some cookies and other technologies may serve to recall Personal Information previously indicated by you.

All cookies (other than Strictly Necessary cookies) require User consent. Subject to your preferences, we use the following cookies:

• Strictly Necessary cookies. These are cookies that are required for the operation of our Website. They include, for example, cookies that enable you to log into secure areas of our Website, use a shopping cart or make use of e-billing services.

• Analytical or Performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our Website when they are using it. This helps us to improve the way our Website works, for example, by ensuring that users are finding what they are looking for easily.

• Functionality cookies. These are used to recognise you when you return to our Website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).

• Targeting cookies. These cookies record your visit to our Website, the pages you have visited and the links you have followed. We will use this information to make our Website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Most browsers allow you to control cookies, including whether or not to accept them and how to remove them. You may set most browsers to notify you if you receive a cookie, or you may choose to block cookies with your browser, but please note that if you choose to erase or block your cookies, you may need to re-enter your original User Profile ID, user name and password to gain access to certain parts of our Website.

DO WE DISCLOSE YOUR INFORMATION?

We may disclose your Personal Information to the following types of third parties:

• vendors and contractors who are performing services on our behalf to enable uses of the information we have describe above;

• our external consultants who assist with the development and delivery of our services;

• analytics and search engine providers that assist us in the improvement and optimisation of our Website;

• companies who assist with our marketing, customer surveys and feedback tools;

• third parties who help us detect fraud or criminal activity; and

• our group companies.

We may also need to disclose your Personal Information in the following circumstances:

• if we are required to do so by law or pursuant to a regulatory request;

• in the event that we sell or buy any business or assets we may be required to disclose certain of your Personal Information to the prospective seller or buyer of such business or assets; or

• in order to enforce or apply our terms of use and other agreements or in respect of other legal claims.

We do not sell any Personal Information of Users. We may provide aggregated and anonymised information to our sponsors and partners but this does not include Personal Information and you will not be identifiable. We may provide additional Personal Information to our sponsors and partners where you have consented to that sharing

When we use third parties to assist us in processing your Personal Information, we require that they comply with our Privacy Policy, applicable privacy laws and any other appropriate confidentiality and security measures.

If you choose to provide us with your Personal Information, we may transfer that Personal Information from your country or jurisdiction to other countries or jurisdictions around the world. Your Personal Information may be collected and stored on servers located in the territory of India and such other countries as we may disclose from time to time. If we transfer your Personal Information to another country, we will ensure a similar degree of protection is afforded to it by ensuring that appropriate safeguards are implemented, to the extent required by the applicable privacy laws. Please contact us using the details set out below if you want further information on the specific mechanism used by us when transferring your Personal Information.

CONFIDENTIALITY AND SECURITY

We follow generally accepted industry standards to protect the Personal Information submitted to us, both during transmission and, once we receive it, for storage and disposal. When you enter Personal Information on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). All information we gather is securely stored within databases controlled by us. The databases are stored on servers secured behind a firewall; access to the servers is password-protected and is strictly limited.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use generally acceptable industry means to protect your Personal Information, we cannot guarantee its absolute security

We limit access to Personal Information to employees/personnel who we believe reasonably need to come into contact with that information to provide products or services to you or in order to do their jobs.

Where we have given you (or where you have chosen) a password which enables you to access to your User Profile or the Rewards Program on our Website or other products and services, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

THIRD-PARTY WEBSITES

This Privacy Policy only applies to our Website. If you click on a link to a third party site or otherwise leave the Website you will go to a website that is outside our control. Because we cannot control the activities of third parties, we cannot accept responsibility for any use of your Personal Information by such third parties, and we cannot guarantee that they will adhere to the same privacy and security practices as we do. We encourage you to review the privacy policies of any other website and/or service provider from whom you request services. If you visit a third party website that is linked to our Website, you should consult that website’s privacy policy before providing any Personal Information.

HOW LONG WILL WE KEEP YOUR DATA?

We will keep your data for as long as required in connection with the original purpose for which that data was collected (e.g. where you are still happy to hear from us about our latest news and services).

Once you no longer wish to be engaged with us we may still need to keep hold of your data if there is a legal reason for doing so (e.g. for tax purposes or where we are resolving a dispute with you), but we will only retain the data which is strictly necessary for such reason and thereafter, will remove this data from our systems.

YOUR RIGHTS

We will provide you with the rights granted to you under applicable privacy laws, but these rights may differ depending on where you are.

For example, if you are in the United Kingdom or the European Economic Area, you may be entitled to various rights under the applicable privacy laws which entitle you, in certain circumstances, to:

• ask us for a copy of the Personal Information we hold about you;

• correct or update your Personal Information, which you can do yourself by logging into your account (if relevant) or if you would prefer, please contact us and we can assist;

• request that we delete your Personal Information;

• object to the handling of your Personal Information where we are relying on a legitimate interest (as set out in the above table);

• restrict the processing of your Personal Information;

• request the transfer of your Personal Information (or some of it) to a third party service provider; or

• where you have provided your consent for something, in certain circumstances, you may withdraw this consent (but note that we may continue to use your Personal Information if we have legal grounds for doing so).

If you are in Australia, you can:

• ask us for a copy of the Personal Information we hold about;

• correct or update your Personal Information, which you can do yourself by logging into your account (if relevant) or if you would prefer, please contact us and we can assist.

The Australian Privacy Principles set out the circumstances when we can refuse those requests. If we do refuse your request, we will provide you with a written notice that sets out the reasons (unless it would be unreasonable to provide them to you). Subject to our right to refuse access, we will provide you with a report that lists any Personal Information that we may hold about you.

If you live in California, you may also be entitled to rights to access specific types of Personal Information, to request its deletion, and not to be denied goods or services for exercising these rights.

All Users have the right to correction of inaccurate data.

Please contact us if you would like to exercise your rights, which most of the time you can do for free. In some circumstances, applicable privacy laws allow us to charge a fee or to refuse your request. If we wish to charge a fee, or refuse your request, we will inform you in writing and set out the reasons. Otherwise, we will always respond within one month (unless there is a legal reason for us to take longer).

If it is not clear to us who is making the request, we may ask you to confirm your identity before we proceed.

You may also contact the data protection authority where you live if you have any concerns about the way we are handling your Personal Information. However, where possible, please speak to us first as we would appreciate the opportunity to help with your concern.

Contact Us

For any questions regarding this policy, or to exercise your rights, please email us at MIEmirates.Contact@ril.com.