Gooda Platform Privacy Policy

GLOBAL KNOT (MALAYSIA) SDN. BHD. (hereinafter referred to as "we" or "this software") operates GLOBAL KNOT. We fully understand the importance of your personal information and will use it within the scope stipulated in the Personal Information Protection Law, and will do our best to protect the security of your personal information. Regarding your information when you use our products or services, we hope to explain to you through the " GLOBAL KNOT Platform Privacy Policy" (hereinafter referred to as "this Privacy Policy") how we collect, use, and protect this information when you use our products or services.
Before using our products or services, please carefully read and thoroughly understand this Privacy Policy. Use of the relevant products or services is only permitted after confirming full understanding and agreement. If you do not agree to any content of this Privacy Policy, you should immediately cease using our platform services. Your use of our products or services indicates that you have fully understood and agreed to the contents described in this policy.

Part One Definition
You: In this Agreement, "you" specifically refers to users and visitors of the Gooda platform products or services.
Use SDK name: Umeng+SDK.
Personal Information: In this Agreement, personal information refers to various information recorded electronically or otherwise that can, alone or in combination with other information, identify a specific natural person or reflect the activities of a specific natural person. The personal information involved in this Privacy Policy may include: basic information (including personal name, date of birth, gender, address, and personal phone number); personal identification information (including ID card, passport, etc.); personal image, voice, and picture; online identity information (including system account, IP address, and related passwords, passphrases, and password protection answers); personal digital property information (transfer and consumption records, and account information); and personal internet browsing records (including product browsing history, software usage history, and click history).

Part Two: Privacy Policy
This policy will help you understand the following:
I. The use and service of your personal information
II. How We Use Your Personal Information
III. How we encrypt and publicly disclose your personal information, including restrictions.
IV. How we use blockchain technology to store and protect your personal information
V. Use of Cookies
VI. Accessing, Modifying, and Deleting Information
VII. How do we handle the personal information of minors?
VIII. Special Terms of Privacy Policy
IX. Updates to the Privacy Policy
10. Jurisdiction and Application
XI. How to contact us

I. How We Collect Your Information
We collect and use your personal information in accordance with the principles of legality, legitimacy, and necessity in order to achieve the functions described below in this policy:
(a) The information you provide to us.
1. The information you submitted when registering an account on our platform or product
When you register or log in to your Gooda account, you can create an account using your mobile phone number /email . We will verify your identity by sending a verification code. You can proactively complete the relevant online identity information (such as nickname and password).
2. The information you fill in or submit when using our earnings withdrawal function includes your name, gender, date of birth, ID number, and bank account number.
(ii) Information collected during your use of the service.
To better serve you, we will collect your relevant information, including:
1. To ensure your normal use of Gooda 's basic functions and services, improve and optimize our service experience, and protect your account security, we automatically receive and record information from your browser, computer, and mobile device, including but not limited to your IP address, browser type, language used, access date and time, software and hardware characteristics, and your web browsing history. Please understand that this information is essential for us to provide services and ensure their normal operation.
2. Provide functions or services related to cash withdrawal for consumption.
When you use the Gooda platform products, we collect your participation and consumption records so you can check your certificate transfer history and protect your assets to the greatest extent possible. This information is sensitive, but collecting it is necessary to achieve the relevant functions; otherwise, subsequent use will be impossible.
3. In addition to the information mentioned above, to improve service quality, we may also collect other information from you, including but not limited to information you provide when contacting our customer service team, your responses to surveys, and information you provide when interacting with our affiliates and partners. At the same time, to enhance the security of your use of related services and more accurately prevent phishing website fraud and Trojan viruses, we may assess the risk of your account by understanding your internet usage habits and frequently used software information, and may record URLs that we deem risky.
(iii) When the APP is running, it requests permissions from the user such as phone, contacts, location, SMS, recording, camera, storage, and calendar. If the user refuses to grant permissions, the APP will not repeatedly request permissions, and the user can continue to use it.
(iv) When obtaining user information, the APP will clearly inform users of the purpose, method and scope of processing personal information through pop-up windows or other means, and will only obtain personal information with the user's consent.
(v) The permissions required for the application during installation or operation will be clearly stated in the APP via pop-up windows, including the content, purpose, method and scope of collecting and using personal information.
II. How We Use Your Information
To improve service quality, we may use your information for the following purposes:
1. To provide you with services;
2. Used for identity verification, customer service, security, fraud monitoring, archiving and backup purposes to ensure the security of the products and services we provide to you;
3. We must share information with our partners with your separate consent so that they can send you information about their products and services;
4. We may combine your personal information with other service information to provide you with more personalized services;
5. We invite you to participate in surveys and activities related to our products and services;
6. To help us better understand how you access and use our services, so that we can respond to your personalized needs in a targeted manner, such as language settings, location settings, personalized help services and instructions, or other responses to you and other users;
7. Other uses with your permission.

III. How we entrust the processing, sharing, transfer, and public disclosure of your information
(a) Entrusted processing
by Gooda is offered by external providers. For example, we may hire service providers to assist us in completing facial recognition or three-factor authentication (name, mobile phone number, ID card number) for real-name authentication users. We will sign strict confidentiality agreements with the companies, organizations, and individuals we entrust to process personal information, requiring them to process personal information in accordance with our requirements, this Privacy Policy, and any other relevant confidentiality and security measures.
(ii) Transfer
We will not transfer your personal information to any company, organization, or individual, except in the following circumstances: with explicit consent or upon your request.
(iii) Public disclosure
We will only disclose your personal information in the following circumstances, and only to specific individuals or groups:
1. With your explicit consent or based on your active choice, we may publicly disclose your personal information;
2. If we determine that you have violated laws and regulations or seriously breached the relevant agreements and rules of the Gooda software, or to protect the personal and property safety of other users or the public from harm, we may disclose your personal information, including but not limited to related violations and measures taken against you by this software, in accordance with laws and regulations or with your consent. Even so, we must use your information within the scope stipulated by the Personal Information Protection Law.

IV. How We Store and Protect Your Personal Information
(a) Storage of your personal information
1. Shelf life
you use Gooda products and services. If you cancel your account or voluntarily delete the above information, we will retain your information in accordance with the provisions of the Cybersecurity Law and other relevant laws and regulations. After you cancel your account or voluntarily delete the above information, we will no longer use your personal information for commercial purposes, but we may anonymize your personal information before using it.
2. Save the region
Your personal information is stored within the territory of the People's Republic of Malaysia, and we will not transfer your personal information across borders.
(ii) Protection of your personal information
1. To ensure the security of your information, we strive to take various reasonable physical, electronic, and managerial security measures to protect your information from leakage, damage, or loss, including but not limited to SSL, encrypted storage, and data center access control. We also implement strict management measures for employees or outsourced personnel who may have access to your information, including but not limited to different access controls based on their positions, signing confidentiality agreements with them, and monitoring their operations. We will provide appropriate security measures based on existing technologies to protect your information and provide reasonable security guarantees. We will do our utmost to ensure that your information is not leaked, damaged, or lost.
2. Your account has security protection features. Please keep your account and password information safe. We will take security measures such as backing up to other servers and encrypting user passwords to ensure that your information is not lost, misused, or altered. Despite the aforementioned security measures, please also understand that there is no such thing as "perfect security" on the internet.
3. When using our software for online certificate transfer, you will inevitably need to disclose your personal information to the platform, such as bank account information or contact information. Please protect your personal information carefully. If you discover that your personal information has been leaked, especially your account and password, please contact our customer service immediately so that we can take appropriate measures.

V. Use of Cookies
To provide you with a more convenient access experience, when you visit our platform website or use the services provided by our platform, we may identify you through small data files. This is to save you the step of repeatedly entering registration information or to help determine the security of your account. These data files may be cookies, Flash cookies, or other local storage provided by your browser or associated applications (collectively, "Cookies").
Please understand that some of our services can only be provided through the use of cookies. If your browser or browser add-ons allow, you can modify your cookie acceptance settings or refuse our cookies. However, this may affect your secure access to our platform's websites and use of the services we provide in certain situations.
VI. Accessing, Modifying, and Deleting Information
You can access, modify, and delete your registration information and other personal information while using our services. The scope and method by which you access, modify, and delete your personal information will depend on the specific service you use.
We will collect and use your information solely to enable the functionality of our products or services, as described in this policy. If you find that we have collected or used your personal information in violation of laws, administrative regulations, or the agreement between the parties, you can request that we delete it. If you find that the personal information we have collected or stored is incorrect, you can also request that we correct it.
(a) You can access, modify or delete your information through the following methods
1. Log in to the Gooda software, go to "My" - "Settings Center" to access or modify settings;
2. Log in to the Gooda app, go to "My" - "Wallet" - "Withdrawal" to access or modify the details;
3. Contact us using the publicly available contact information listed at the end of this policy document.
(ii) Changing the scope of your authorization and consent
Each business function requires some basic personal information to complete. You can give or withdraw your consent by changing the settings of your mobile phone, computer, or other devices, or through the methods listed above. Once you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw your consent will not affect the processing of personal information previously carried out based on your authorization.
(III) How we respond to your above request
When you access or modify related information or accounts, we may require you to verify your identity to ensure account security.
Please understand that due to technical limitations, legal or regulatory requirements, we may not be able to meet all your requests. We will respond to your requests within a reasonable timeframe. However, in accordance with relevant laws, regulations, and national standards, we may be unable to respond to your requests in the following circumstances:
1. Directly related to national security and defense security;
2. Directly related to public safety, public health, and major public interests;
3. Directly related to criminal investigation, prosecution, trial, and execution of judgments;
4. There is sufficient evidence to show that you acted with malicious intent or abused your rights;
5. Responding to your request would seriously harm the legitimate rights and interests of other individuals or organizations;
6. Involving trade secrets.
7. Your participation method is necessary for the platform's operational security.

VII. Special Provisions Regarding the Privacy Rights of Minors
We require parents or guardians to guide minors under the age of 18 in using our services after reading this Privacy Policy.
We do not knowingly collect personal information from minors. If we accidentally collect information about a minor, we will delete it as soon as possible after becoming aware of it. If you believe we may be improperly holding information about a minor, please contact us.

VIII. Special Terms of Privacy Policy
You fully understand that we do not need your authorization or consent to collect or use your personal information in the following circumstances:
1. Those related to national security and the public interest;
2. Those related to criminal investigation, prosecution, trial, and execution of judgments;
3. When it is necessary to protect the vital legitimate rights and interests of the data subject or other individuals, such as life and property, but it is difficult to obtain the consent of the individual;
4. The personal information collected is information that the individual has already disclosed to the public.
5. Your personal information collected from legally publicly disclosed information, such as legitimate news reports and government information disclosure channels;
6. You have violated laws or our platform rules, leading us to take necessary measures against you;
7. Necessary for signing a contract according to your requirements;
8. Necessary for maintaining the safe and stable operation of the products or services provided, such as detecting and handling product or service malfunctions;
9. Essential components necessary for legitimate news reporting;
10. When academic research institutions conduct statistical or academic research for the public interest and when providing the results of academic research or descriptions to the public, they shall de-identify the personal information contained in the results.
11. Other circumstances stipulated by laws and regulations.

IX. Changes to the Privacy Policy
We may revise the terms of this Privacy Policy from time to time, and such revisions will form part of this Privacy Policy. If such revisions result in a material reduction of your rights under this Privacy Policy, we will notify you by prominently displaying a notice on our homepage, sending you an email, or otherwise prior to the revisions taking effect. In such cases, your continued use of our services constitutes your agreement to be bound by the revised Privacy Policy.

10. Public Disclosure of Third-Party SDK Information
(1) Umeng SDK
Service type: Statistical analysis
Scope of personal information collection: Device information (IMEI/MAC/Android ID/IDFA/OpenUDID/GUID/IP address/SIM card IMSI information, etc.)
Collection frequency: during SDK initialization, during custom events, and during quantity statistics.
Purpose of data collection: To uniquely identify users for statistical purposes, such as new user registration. In special cases (e.g., when a user uses a tablet or TV box), where a unique device identifier cannot be used, we will use the device's MAC address as the user's unique identifier to provide normal statistical analysis services. The statistical analysis service has basic anti-fraud functions, eliminating fraudulent devices by obtaining user location information and IP addresses, and correcting user geographic distribution data to improve the accuracy of report data.
(2) Umeng+SDK
Service type: Social sharing
Scope of personal information collection: Device information (IMEI/MAC/Android ID/IDFA/OpenUDID/GUID/SIM card IMSI/IP/geolocation), application list
Personal information collection methods: during SDK initialization, QQ and WeChat sharing, and during authorized login.
Purpose of data collection: To enable one-click sharing service, one-click authorized login service, and social sharing service to have basic anti-fraud functions, eliminate cheating devices by obtaining location information, and identify valid sharing channels; at the same time, to correct user geographic distribution data and improve the accuracy of report data.
(III) WeChat Open Platform SDK
Types of personal information collected: Device identification information (IMEI/Mac/Android ID/IDFA/OPENUDID/GUID, SIM card IMSI information), MAC address
Collection frequency: During WeChat sharing and WeChat authorization login.
Purpose of collection: To integrate with the WeChat Open Platform SDK and support WeChat authorization login and WeChat sharing.

XI. Jurisdiction and Applicable Law
The formation, effectiveness, performance, interpretation and dispute resolution of this Privacy Policy may be subject to the provisions of Malaysia , with an express exclusion of its conflict of laws rules.
12. How to contact us
You can contact us in the following ways:
1. If you have any questions, comments or suggestions regarding the content of this policy, you can contact customer service.
Note: This version of the " Gooda Platform Privacy Policy" was updated on June 10, 2026 , and will officially take effect on June 10 , 2026 .