01INFORMATION THIS POLICY COVERS

This Privacy Policy applies to information collected through: • The VybeCity website; • VybeCity mobile or web applications, where applicable; • Ticket booking and event registration; • Account creation and login; • Event participation; • Customer support interactions; • Promotional campaigns conducted by VybeCity; • Communications between you and VybeCity; • Other digital services operated by or on behalf of VybeCity. This Policy does not automatically apply to websites, applications, or services operated independently by third parties, including Event Partners, payment providers, advertisers, or external websites linked from VybeCity.

02INFORMATION WE COLLECT

Depending on how you use VybeCity, we may collect different categories of information. 2.1 Account Information When you create an account, we may collect: • Name; • Mobile number; • Email address; • Login credentials or authentication information; • Date of birth or age information where necessary; • Profile information voluntarily provided by you. 2.2 Booking Information When you purchase or reserve an event ticket, we may collect: • Event selected; • Ticket type; • Number of tickets; • Booking date and time; • Attendee details; • Ticket or booking identification number; • QR-code or ticket information; • Transaction status; • Other information required for event entry. 2.3 Payment-Related Information Payments may be processed through third-party payment service providers. Depending on the payment method used, information such as transaction reference numbers, payment status, billing details, and limited payment-related information may be made available to us. Where payment processing is handled by an external payment provider, sensitive payment credentials such as complete card numbers, CVV numbers, UPI PINs, or banking passwords are generally handled directly by the relevant payment provider rather than stored by VybeCity. 2.4 Communications If you contact us, we may collect information contained in: • Emails; • Support requests; • WhatsApp or other support communications; • Feedback; • Complaints; • Other communications sent to VybeCity. 2.5 Device and Technical Information When you access the Platform, certain technical information may be collected automatically, including: • IP address; • Browser type; • Device type; • Operating system; • Approximate location derived from technical information, where applicable; • Device identifiers; • Language preferences; • Access time; • Pages or features accessed; • Referring or exit pages; • Error and diagnostic information. 2.6 Cookies and Similar Technologies VybeCity may use cookies, pixels, SDKs, local storage, and similar technologies to: • Keep users signed in; • Remember preferences; • Maintain booking sessions; • Improve Platform performance; • Understand Platform usage; • Detect suspicious activity; • Measure advertising or campaign performance, where applicable. You may be able to control certain cookies through your browser or device settings.

03HOW WE COLLECT INFORMATION

We may collect information: Directly from you, when you: • Create an account; • Book a ticket; • Register for an event; • Contact support; • Submit a form; • Participate in a promotion; • Provide feedback. Automatically, when you: • Browse or interact with the Platform; • Use our applications; • Open certain communications; • Access event or ticket-related features. From third parties, where appropriate, including: • Payment service providers; • Authentication providers; • Event Partners; • Technology service providers; • Fraud-prevention providers; • Analytics providers.

04WHY WE USE YOUR INFORMATION

We may use collected information for legitimate and necessary purposes, including: Platform Operations • Creating and maintaining accounts; • Processing bookings; • Generating tickets; • Delivering QR codes; • Confirming event registrations; • Providing customer support. Event Management • Sharing necessary attendee information with the relevant Event Partner; • Validating tickets; • Managing event entry; • Preventing duplicate or fraudulent ticket usage; • Communicating event-related updates. Payments • Processing transactions; • Confirming payment status; • Handling refunds where applicable; • Resolving payment-related disputes. Security • Detecting fraudulent or suspicious activity; • Preventing unauthorized access; • Protecting accounts and Platform infrastructure; • Investigating security incidents. Service Improvement • Understanding how users interact with VybeCity; • Identifying technical problems; • Improving features and functionality; • Developing new services. Communications We may use your contact information to send: • Booking confirmations; • Ticket information; • Event updates; • Important service notifications; • Security alerts; • Customer-service communications. Where required, promotional communications will be handled in accordance with applicable law and available user preferences.

05LEGAL BASIS FOR PROCESSING

We process personal information only where there is a lawful basis to do so. Depending on the circumstances, processing may be based on: • Your consent; • Performance of a service requested by you; • Compliance with applicable legal obligations; • Legitimate or lawful purposes permitted under applicable law; • Prevention of fraud, misuse, or security threats. Where processing is based on consent, you may have the right to withdraw that consent, subject to applicable law and any consequences of such withdrawal.

06INFORMATION SHARED WITH EVENT PARTNERS

VybeCity operates as an event discovery and ticketing platform. When you book an event, certain information may need to be provided to the relevant Event Partner or organiser so that they can: • Verify your booking; • Manage event attendance; • Validate your ticket; • Contact you regarding the event; • Provide services associated with your booking; • Meet legal or operational requirements. The information shared will depend on the requirements of the particular event. Event Partners may have their own privacy practices and policies. You should review the applicable terms or privacy information provided by the Event Partner where available.

07TECHNOLOGY SERVICE PROVIDERS

VybeCity may use third-party technology providers to operate and maintain parts of the Platform. These providers may assist with: • Website hosting; • Cloud infrastructure; • Database management; • Authentication; • Analytics; • Customer support; • Communications; • Security; • Payment processing; • Software maintenance. Technoziant may provide technology, development, maintenance, infrastructure, or technical support services to VybeCity. Where Technoziant processes personal information on behalf of VybeCity, such processing will be performed only for relevant business or technical purposes and subject to applicable contractual, security, and legal requirements.

08PAYMENT PROCESSING

VybeCity may work with third-party payment service providers to process payments. When you make a payment, you may be redirected to or interact with the payment provider's systems. The payment provider may independently process payment information according to its own privacy policy and applicable security standards. VybeCity does not request or require users to share sensitive payment credentials such as passwords, UPI PINs, or banking authentication codes through customer-support channels.

09QR CODES AND DIGITAL TICKETS

VybeCity may generate digital tickets containing QR codes or other machine-readable identifiers. A QR code may be used to: • Identify a booking; • Confirm ticket validity; • Verify event entry; • Prevent duplicate entry; • Associate a ticket with the relevant booking. The QR code itself should not necessarily be considered a complete representation of all personal information held by VybeCity. Users should avoid publicly sharing screenshots or copies of their tickets where doing so could allow another person to access or misuse the ticket.

10DATA SECURITY

We take reasonable technical and organisational measures to protect personal information against: • Unauthorized access; • Accidental loss; • Unauthorized disclosure; • Alteration; • Destruction; • Misuse. Security measures may include access controls, authentication mechanisms, encryption where appropriate, monitoring, and other safeguards. However, no internet-based system can be guaranteed to be completely secure.

11DATA RETENTION

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including: • Providing services; • Maintaining transaction and booking records; • Resolving disputes; • Preventing fraud; • Meeting legal requirements; • Enforcing applicable agreements; • Maintaining legitimate business records. When information is no longer required, it may be deleted, anonymised, or securely disposed of, subject to applicable legal or operational requirements.

12YOUR DATA RIGHTS

Subject to applicable law, you may have rights relating to your personal information, including rights to: • Request access to information held about you; • Request correction of inaccurate information; • Request deletion or erasure where legally applicable; • Withdraw consent where processing is based on consent; • Raise a grievance regarding the processing of your information; • Request information regarding the processing of your personal data. Certain requests may be subject to verification or legal limitations.

13HOW TO REQUEST DATA-RELATED ACTIONS

To make a privacy-related request, you may contact us using the details provided in the Contact & Grievance section below. Your request should, where possible, include: • Your name; • Registered email address or mobile number; • Description of the request; • Relevant booking or account reference, if applicable. We may request reasonable information to verify that the request relates to your account or personal information.

14CHILDREN AND MINORS

VybeCity's services may include events with different age requirements. Users should provide accurate age-related information where requested and should not misrepresent their age to access age-restricted events or services. Where applicable law requires parental or guardian involvement for the processing of a minor's personal information, VybeCity will follow the applicable requirements.

15MARKETING COMMUNICATIONS

With appropriate consent or where otherwise permitted by applicable law, VybeCity may send promotional communications regarding: • Events; • Offers; • New features; • Ticketing opportunities; • Partner promotions; • Other VybeCity services. You may opt out of promotional communications using the unsubscribe or preference mechanism provided in the communication. Service-related communications, such as booking confirmations and important event notifications, may still be sent where necessary.

16THIRD-PARTY SERVICES AND LINKS

The Platform may contain links, integrations, advertisements, or services operated by third parties. Examples may include: • Payment providers; • Event Partner websites; • Social media platforms; • Analytics services; • External promotional websites. VybeCity is not responsible for the privacy practices of independent third parties. You should review the privacy policies of those third parties before providing them with personal information.

17COOKIES AND SIMILAR TECHNOLOGIES

VybeCity and its service providers use cookies, local storage, pixels and similar technologies on the Platform. A cookie is a small text file placed on your browser or device. We use them to: • Keep you signed in and keep your session secure; • Remember preferences such as theme, city and recent selections; • Keep your ticket selection while you sign in or check out; • Measure how the Platform is used so we can improve it; • Detect fraud and abuse; • Show and measure advertisements, including personalised advertisements where permitted. Some cookies are set by VybeCity (first-party cookies) and others by third parties such as Google (third-party cookies). Essential cookies are needed for the Platform to work; analytics and advertising cookies can be controlled as described in “Your Advertising Choices”. You can also block or delete cookies in your browser settings, but parts of the Platform, such as signing in and booking, may not work without them.

18ADVERTISING AND GOOGLE ADSENSE

The Platform displays advertisements served by Google AdSense and may in future use other advertising partners. In line with Google’s requirements: • Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to the VybeCity website or other websites; • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to VybeCity and/or other sites on the Internet; • These vendors may collect information such as your IP address, browser and device type, pages viewed and interactions with ads, using cookies, web beacons and similar identifiers. VybeCity does not share your name, email address, phone number or booking details with advertisers for this purpose. You can learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites, and about Google’s advertising cookies at https://policies.google.com/technologies/ads. Advertisements are provided by third parties; VybeCity does not endorse the products or services advertised and is not responsible for the content of third-party advertisements or the websites they link to.

19ANALYTICS

VybeCity uses Google Analytics and similar tools to understand how visitors use the Platform, for example which pages are visited, how long visits last, the device and browser used and the approximate region. This information is collected through cookies and similar technologies and is used in aggregated form to improve the Platform, its performance and our services. You can learn how Google uses this information at https://policies.google.com/technologies/partner-sites and can prevent your data from being used by Google Analytics by installing the Google Analytics opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.

20YOUR ADVERTISING CHOICES AND CONSENT

You can opt out of personalised advertising from Google by visiting Google Ads Settings at https://adssettings.google.com (My Ad Center). You can opt out of personalised advertising from other participating third-party vendors by visiting https://www.aboutads.info/choices or https://www.youronlinechoices.eu. If you opt out, you may still see advertisements, but they will not be personalised to your interests. Where required by law, including for visitors in the European Economic Area, the United Kingdom and Switzerland, we ask for your consent before cookies or similar technologies are used for personalised advertising, through a consent message shown on the Platform, and you can change or withdraw your choice at any time from that message. Where consent is not given, only non-personalised or limited advertisements may be shown. Our services are not directed at children under 13, and we do not knowingly use personalised advertising for them.

21INTERNATIONAL DATA PROCESSING

Depending on the technology providers used by VybeCity, personal information may be processed or stored using infrastructure located in India or other jurisdictions. Where information is transferred or processed outside India, VybeCity will take steps required under applicable law and contractual arrangements to address the protection of such information.

22FRAUD AND ABUSE PREVENTION

We may process information to identify and prevent: • Fraudulent bookings; • Ticket duplication; • Unauthorized account access; • Payment abuse; • Automated or malicious activity; • Misuse of promotional offers; • Other activity that may compromise the Platform or users. Information relevant to an investigation may be retained for an appropriate period where permitted by law.

23USER FEEDBACK AND CONTENT

If you voluntarily submit reviews, feedback, photographs, comments, or other content to VybeCity, the information you provide may be used to operate, improve, promote, or communicate about our services, subject to applicable law and any permissions required. Users should avoid including unnecessary personal or sensitive information in publicly visible reviews or comments.

24BUSINESS TRANSFERS

If VybeCity undergoes a merger, acquisition, restructuring, sale of assets, investment, or similar corporate transaction, personal information may be transferred as part of that transaction where legally permitted. Any such transfer will remain subject to applicable privacy and data-protection requirements.

25DATA DISCLOSURE REQUIRED BY LAW

VybeCity may disclose information where reasonably necessary to: • Comply with applicable law; • Respond to lawful governmental or regulatory requests; • Protect the rights, safety, or property of VybeCity or others; • Investigate fraud or security incidents; • Enforce applicable legal obligations. We will seek to limit such disclosures to what is reasonably necessary or legally required.

26CHANGES TO THIS PRIVACY POLICY

VybeCity may update this Privacy Policy from time to time to reflect: • Changes to our services; • Changes in technology; • Changes in legal requirements; • Changes in data-processing practices; • Improvements to our privacy practices. When we make material changes, we may provide an appropriate notice through the Platform or other suitable communication channels. The updated version will include a revised “Last Updated” date.

27CONTACT & PRIVACY GRIEVANCES

If you have questions, concerns, or requests relating to this Privacy Policy or your personal information, you may contact VybeCity through: Email: support@vybecity.com For privacy-related complaints or grievances, please clearly mention “Privacy Grievance” in your communication where applicable. We will review and address eligible requests in accordance with applicable law.

28GOVERNING PRIVACY REQUIREMENTS

This Privacy Policy is intended to operate in accordance with applicable privacy and data-protection laws and regulations governing VybeCity's activities. Where applicable, this includes requirements relating to the collection, processing, security, retention, disclosure, and rights associated with personal information. If any provision of this Privacy Policy conflicts with a mandatory requirement of applicable law, the applicable legal requirement will prevail to the extent of the conflict.

29ACKNOWLEDGEMENT

By using VybeCity, you acknowledge that you have had an opportunity to review this Privacy Policy and understand how information may be collected and processed in connection with the Platform. This Privacy Policy should be read separately from VybeCity's Terms & Conditions, which govern the use of the Platform and the relationship between VybeCity and its users. VYBECITY Your event. Your experience. Your city. Privacy Contact: support@vybecity.com