Privacy Policy

PRIVACY POLICY 私隱政策

Last Updated: 10 June 2026 最後更新日期：2026年6月10日

In the event of any inconsistency between the English and Chinese versions of this Policy, the English version shall prevail.

如本政策的英文版本與中文版本有任何不一致之處，概以英文版本為準。

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. INTRODUCTION 引言

This Privacy Policy describes how the Platform ("we", "us", "our") collects, uses, stores, and protects your personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong ("PDPO").

本私隱政策說明平台（「我們」）如何根據香港法例第486章《個人資料（私隱）條例》（「私隱條例」）收集、使用、儲存及保護閣下的個人資料。

2. DATA WE COLLECT 我們收集的資料

We collect the following categories of data. Because the Platform operates under a pseudonymous identity framework, you are under no standard obligation to input legal credentials except for specific system access parameters:

我們收集以下類別的數據。由於平台在匿名身份框架下運作，除特定系統訪問參數外，閣下並無常規義務輸入法定身份憑證：

2.1 Account Information: Inputted profile name, email address, phone number, and account password (stored in securely hashed form). These metrics are processed purely for account creation, unique profile differentiation, and authentication.

帳戶資料：輸入的個人檔案名稱、電郵地址、電話號碼及帳戶密碼（以安全加密形式儲存）。處理此等指標純粹用於建立帳戶、獨特的個人檔案區分及認證。

2.2 Demographic and Verifiable Information (optional except for age restrictions): Age or age range, birthday, gender, location, country, spoken languages, and interests. Note: While general demographic parameters are entirely voluntary, you must provide your true, accurate chronological age if you intend to sign up for or access age-limited events.

人口統計及可驗證資料（除年齡限制外均為可選）：年齡或年齡範圍、生日、性別、位置、國家、語言及興趣。注意：雖然常規人口統計參數完全出於自願，但如果閣下擬報名或參與受年齡限制的活動，則必須提供真實、準確的實際年齡。

2.3 Platform Activity Data: Event registrations, weighted ticket allocations, coin transaction histories, platform attendance marks, event reviews, and internal notification logs.

平台活動數據：活動登記、加權門票分配、代幣交易歷史、平台出席標記、活動評價及內部通知日誌。

2.4 Technical Data: IP address, browser type, device profiles, hardware parameters, and access timestamps collected automatically through secure server infrastructure logs to defend against multi-account farming.

技術數據：透過安全伺服器基礎設施日誌自動收集的IP地址、瀏覽器類型、裝置描述、硬件參數及存取時間戳，以防範多帳戶惡意刷取。

2.5 Third-Party Authentication Data: If you choose to register or log in using third-party services (e.g., Google, Apple, Discord), we collect your unique identifier, email, and public profile name from that provider to facilitate account creation and authentication. We do not receive or store your third-party passwords.

第三方認證數據：如閣下選擇使用第三方服務（如Google、Apple、Discord）註冊或登入，我們將從該服務供應商收集閣下的唯一標識符、電郵及公開個人檔案名稱，以協助建立帳戶及認證。我們不會接收或儲存閣下的第三方密碼。

3. PURPOSE OF DATA COLLECTION 資料收集目的

3.1 Essential Purposes 核心目的

We collect and use your data for the following essential purposes:

我們收集及使用閣下的數據用於以下核心目的：

(a) Account registration, cross-profile differentiation, authentication, and management 帳戶註冊、跨個人檔案區分、認證及管理

(b) Event registration, algorithmic ticket allocation, entry age-threshold validation, and attendance verification 活動登記、算法門票分配、入場年齡門檻驗證及出席驗證

(c) Operation of the virtual coin economy (transactions, transfers, interest parameters, levelling updates) 虛擬代幣經濟的運作（交易、轉賬、利息參數、升級更新）

(d) Sending event-related notifications and critical system announcements 發送活動相關通知及關鍵系統公告

(e) Generating anonymised, aggregate statistics for event planning and platform framework improvement 生成匿名的匯總統計數據，用於活動策劃及平台架構改進

(f) Compliance with applicable laws, law enforcement inquiries, or regulatory demands 遵守適用法律、執法機關查詢或監管要求

3.2 Automated Decision-Making and Profiling 自動化決策及自動分析

The Platform's Standard Ballot and ticket allocation mechanisms utilize automated decision-making algorithms. By using the Platform and entering the ballot, you explicitly consent to your data (including XP, level, attendance history, and cancellation records) being used for automated profiling to determine ticket allocation priorities and probabilities.

平台的標準抽籤及門票分配機制利用自動化決策算法。透過使用本平台及參與抽籤，閣下明確同意將閣下的數據（包括經驗值、等級、出席記錄及取消記錄）用於自動分析，以決定門票分配的優先次序及概率。

4. DIRECT MARKETING 直銷

4.1 We intend to use your personal data (specifically your profile name, email address, and phone number) to send you promotional materials, marketing communications, and updates regarding upcoming events, special priority ticket offers, platform reward incentives, and new features on the Platform.

我們擬使用閣下的個人資料（特別是閣下的個人檔案名稱、電郵地址及電話號碼）向閣下發送有關平台未來活動、特快優先門票優惠、平台獎勵機制及平台新功能的推廣材料、直銷通訊及更新。

4.2 We cannot use your personal data for direct marketing purposes without your explicit consent. You may indicate your consent by ticking the appropriate box during account registration.

未經閣下明確同意，我們不得將閣下的個人資料用於直銷目的。閣下可在帳戶註冊時透過勾選相應的方格以表示同意。

4.3 If you no longer wish to receive direct marketing communications, you may opt-out at any time, free of charge, by updating your account preferences or contacting the Platform administrator.

如閣下不再希望接收直銷通訊，閣下可隨時免費更新帳戶設定或聯繫平台管理員以選擇取消接收。

5. DATA SHARING AND DISCLOSURE 資料分享及披露

5.1 We do not sell, rent, or trade your data to any third party for commercial profits.

我們不會向任何第三方出售、出租或交易閣下的數據以謀取商業利益。

5.2 We may share your data with:

我們可能與以下各方分享閣下的數據：

(a) Event organisers (limited to your registered name, age category, attendance status, and ticket validation profile for events you have registered for, strictly for the sole purpose of event access control, legal age validation, crowd management, and entry verification). If Organisers export this attendee data, they are independently responsible for its security and PDPO compliance outside the Platform;

活動主辦方（僅限閣下的登記姓名、年齡類別、出席狀態及已登記活動的門票驗證檔案，且嚴格僅用於活動入場控制、法定年齡驗證、人流管理及入場核實之唯一目的）。如主辦方匯出此等參加者數據，其須獨立負責該等數據在平台以外的安全性及遵守私隱條例；

(b) Third-party service providers who assist in operating the Platform (e.g., cloud hosting, database services), subject to appropriate data processing and confidentiality agreements;

協助營運平台的第三方服務供應商（如雲端託管、資料庫服務），須受適當的數據處理及保密協議約束；

(c) Law enforcement, judicial bodies, or regulatory authorities when required by law or to protect the safety, security, and legal rights of the Platform, its structural integrity, and its users.

在法律要求或為保護平台、其結構完整性及其用戶的安全、保障及合法權益時，向執法機構、司法機關或監管機構披露。

5.3 As the Platform utilizes global cloud infrastructure, your personal data may be transferred to, stored, or processed outside the Hong Kong Special Administrative Region. By using the Platform, you consent to this cross-border transfer, and we will take all reasonable steps to ensure your data remains protected in accordance with this Policy.

由於平台使用全球雲端基礎設施，閣下的個人資料可能被轉移至香港特別行政區以外的地區進行儲存或處理。使用本平台即表示閣下同意此項跨境轉移，我們將採取一切合理措施確保閣下的數據根據本政策繼續獲得保障。

6. DATA RETENTION 資料保留

6.1 We retain your personal data for as long as your account remains active or as technically needed to provide you with the Platform's core structural services.

我們在閣下帳戶保持有效期間或在技術上向閣下提供平台核心結構服務所需的期間內保留閣下的個人資料。

6.2 Upon account deletion or profile banning due to multi-account policy violations, we will delete or permanently anonymise your personal details within a reasonable period, except where retention is strictly demanded for legal, regulatory, or audit obligations.

因違反多帳戶政策而導致帳戶被刪除或檔案被封禁後，我們將在合理期間內刪除或永久匿名化閣下的個人資料，除非法律、監管或審計義務嚴格要求保留。

6.3 General transaction parameters and system attendance logs may be retained in fully anonymised form for statistical and administrative optimization purposes.

常規交易參數及系統出席日誌可能以完全匿名形式保留，用於統計及行政優化目的。

7. DATA SECURITY 資料安全

7.1 We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to: password hashing, HTTPS encryption, restricted internal access controls, anti-bot parameters, and regular security parameter reviews.

我們實施適當的技術及組織措施以保護閣下的數據免受未經授權的存取、更改、披露或破壞。此等措施包括但不限於：密碼加密、HTTPS加密、受限的內部存取控制、反機器人參數及定期安全參數審查。

7.2 While we strive to protect your data, no method of electronic transmission or infrastructure storage is completely secure. We cannot guarantee the absolute security of your data from malicious or target system cracking attempts.

雖然我們致力保護閣下的數據，但沒有任何電子傳輸或基礎設施儲存方式是完全安全的。我們不能保證閣下數據免受惡意或針對性系統破解攻擊的絕對安全。

7.3 Data Breach Notification Protocol 資料外洩通知機制

In the unlikely event of a severe data breach that poses a real risk of significant harm to you, we will notify affected users and the relevant regulatory authorities (such as the Privacy Commissioner for Personal Data) as soon as reasonably practicable, in accordance with applicable legal guidelines.

在發生對閣下構成重大損害實際風險的嚴重數據外洩的罕見情況下，我們將根據適用法律指引，在合理切實可行的情況下盡快通知受影響的用戶及相關監管機構（如個人資料私隱專員公署）。

8. YOUR RIGHTS 閣下的權利

Under the PDPO, you have the right to:

根據私隱條例，閣下有權：

(a) Request access to your personal parameters held by us 要求存取我們持有的閣下的個人參數

(b) Request correction of any inaccurate or outdated structural data 要求更正任何不準確或過時的結構數據

To exercise any of these rights, please contact the Platform administrator. In accordance with the PDPO, we reserve the right to charge a reasonable administrative fee for processing any personal data access requests (DARs).

如欲行使上述任何權利，請聯繫平台管理員。根據私隱條例，我們保留就處理任何個人資料存取要求收取合理行政費用的權利。

9. COOKIES AND TRACKING 曲奇及追蹤

The Platform uses essential session cookies for core authentication, fraud deterrence, and security purposes. We do not use third-party behavioral advertising or cross-site tracking infrastructure.

平台使用必要的會話曲奇以作核心認證、欺詐防範及安全用途。我們不使用第三方行為廣告或跨網站追蹤基礎設施。

10. MINORS AND CHILDREN'S PRIVACY 未成年人及兒童私隱

The Platform is generally intended for individuals over the age of 18. We do not knowingly collect profiles from children. For certain events with dynamic age limits, age metrics provided are processed strictly to ensure entry qualification. If we find that an unauthorized minor has created an account outside permitted guidelines, we reserve the right to purge the data immediately.

本平台通常適用於18歲以上人士。我們不會故意收集兒童的檔案資料。對於某些具有動態年齡限制的活動，所提供的年齡指標將嚴格用於確保入場資格。如果我們發現未經授權的未成年人在允許的指引之外建立了帳戶，我們保留立即清除該數據的權利。

11. CHANGES TO THIS POLICY 本政策的變更

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of the Platform after any structural adjustments constitutes your formal acceptance of the updated Policy.

我們可能不時更新本私隱政策。任何變更將在本頁面發布並更新修訂日期。在任何結構調整後繼續使用平台即表示閣下正式接受更新後的政策。

12. GOVERNING LAW 管轄法律

This Privacy Policy shall be governed by and construed exclusively in accordance with the laws of the Hong Kong Special Administrative Region.

本私隱政策受香港特別行政區法律管轄並依其專屬詮釋。

13. CONTACT 聯繫方式

For any enquiries regarding this Privacy Policy or to submit a formal data access inquiry, please contact the Platform administrator through the active admin channels.

如對本私隱政策有任何查詢或欲提交正式的資料存取查詢，請透過有效的管理員渠道聯繫平台管理員。

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

By using this Platform, you acknowledge that you have read and understood this Privacy Policy.

使用本平台即表示閣下確認已閱讀並理解本私隱政策。