================================================================================

                    MANI X — OFFICIAL LEGAL DOCUMENTATION

              (PRIVACY POLICY & TERMS OF SERVICE / USER AGREEMENT)

                              OPERATED BY: ORENDA LABS

================================================================================

Founder & Data Fiduciary: Vijay Mali

Official Contact / Grievance Email: orendalabs0008@gmail.com

Entity: Orenda Labs (India)

Effective Date: July 3, 2026 / Last Updated: October 2026

Applicable Framework: Digital Personal Data Protection Act, 2023 (DPDP Act 2023)

                      Information Technology Act, 2000 (IT Act 2000)

                      Consumer Protection (E-Commerce) Rules, 2020

                      Google Play Developer Distribution Agreement & Policies

================================================================================

################################################################################

                             PART 1: PRIVACY POLICY

################################################################################

PRIVACY POLICY & DATA PROTECTION DISCLOSURE

1. INTRODUCTION & DATA FIDUCIARY

Welcome to Mani X ("Application" / "Service"), designed, owned, and operated by Orenda Labs ("we", "us", or "our"), with its registered founder Vijay Mali. This Privacy Policy outlines our uncompromising commitment to privacy, data security, and transparency pursuant to Section 43A of the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (DPDP Act 2023).

By downloading, installing, accessing, or registering an account on Mani X, you ("Data Principal" / "User") explicitly acknowledge and consent to the collection, processing, storage, and handling of your personal data as set forth in this Policy.

────────────────────────────────────────────────────────────────────────────────

2. CATEGORIES OF DATA WE COLLECT

We strictly adhere to the statutory principle of "Data Minimization" and collect only data essential for authentication, security attestation, fraud prevention, and reward fulfillment:

A. Identity & Authentication Data (Provided by User via Google Sign-In):

• Full Name and Email Address.

• Google Profile Avatar / Picture.

• Unique Google User ID (UID).

B. Unique Hardware & Anti-Fraud Identifiers:

• Android Hardware Device ID: Collected and cryptographically hashed to enforce our strict "One Account Per Physical Device" anti-abuse rule.

• Google Advertising Identifier (GAID / AD_ID): Used exclusively to verify legitimate advertising interactions and prevent fraudulent impressions.

• Device Hardware Telemetry: Device Manufacturer, Brand, Model, Operating System Version, CPU Architecture, and App Version for crash prevention and compatibility.

C. Network & Security Attestation Telemetry:

• IP Address & Network Connection Type (WiFi/Cellular): Analyzed for geographic legitimacy.

• Real-time Security Attestation Signals (via FreeRASP): Detection of Root/Jailbreak status, Android Emulators (e.g. BlueStacks, Nox), Virtual Spaces/App Cloning tools, and VPN/Proxy tunneling to ensure fair play.

D. Financial & Redemption Data (Voluntarily Provided for Payouts):

• UPI Virtual Payment Address (VPA / Handle) (e.g., PhonePe, Google Pay, Paytm UPI IDs) entered voluntarily when requesting a reward withdrawal.

• NOTE: We DO NOT collect, store, or process any banking passwords, debit/credit card numbers, CVVs, or UPI MPINs.

E. In-App Activity & Gameplay Telemetry:

• Virtual Points ("PTS") balance and transaction ledger.

• Daily login streak counters, spin wheel records, mystery box claims, and scratch card history.

• Arcade game high scores (Knife Hit Reborn, Cyber Slice) and Points Staking Vault records.

• Crash logs and performance diagnostics via Firebase Crashlytics and Firebase Performance Monitoring.

• Anonymous aggregated interaction telemetry via Firebase Analytics.

────────────────────────────────────────────────────────────────────────────────

3. LAWFUL PURPOSE OF DATA PROCESSING

All personal and device data is processed strictly under lawful, necessary grounds:

1. Account Lifecycle Management: Authenticating user identity and maintaining a secure, real-time points ledger.

2. Anti-Fraud & Ecosystem Integrity: Preventing multi-account bot farming, emulator exploits, and automated click fraud.

3. Reward Disbursement: Executing user-requested UPI cash redemptions through legitimate Indian banking channels (NPCI/UPI/IMPS).

4. Ad Monetization: Displaying policy-compliant interstitial, banner, and rewarded video ads via official Google Mobile Ads (AdMob) and Unity Ads SDKs.

5. Legal & Audit Compliance: Maintaining immutable digital compliance logs under Section 65B of the Indian Evidence Act / IT Act 2000.

────────────────────────────────────────────────────────────────────────────────

4. ZERO DATA SALE GUARANTEE & THIRD-PARTY DISCLOSURES

Orenda Labs maintains an absolute Zero-Sale Policy: We NEVER sell, rent, monetize, or trade your personal data to data brokers or advertisers. 

Data is shared exclusively with verified enterprise infrastructure partners:

• Supabase Inc. / PostgreSQL: Encrypted cloud database, user authentication, and server-side RPC logic.

• Google LLC: Firebase Suite (Analytics, Crashlytics, Remote Config, App Check) and Google Mobile Ads (AdMob).

• Unity Technologies: Unity Ads SDK for interactive video ad delivery.

• Banking Rails: Authorized Indian financial institutions for executing user-requested UPI payouts.

• Judicial Authorities: Disclosed only when strictly mandated by valid legal process or statutory law enforcement warrants in India.

────────────────────────────────────────────────────────────────────────────────

5. DATA SECURITY & ENCRYPTION PROTOCOLS

We implement enterprise-grade technical, operational, and physical security measures:

• In-Transit Protection: All API communication is strictly encrypted via HTTPS / TLS 1.3.

• At-Rest Protection: Database tables are secured via PostgreSQL Row-Level Security (RLS) and encrypted using AES-256 standards.

• Server-Side Computation: All point rewards, daily limits, staking yields, and spin outcomes are computed exclusively on secure server-side RPCs, preventing client-side memory manipulation.

────────────────────────────────────────────────────────────────────────────────

6. STATUTORY DATA PRINCIPAL RIGHTS (DPDP ACT 2023)

Under the Digital Personal Data Protection Act, 2023, you retain full ownership and control over your digital footprint:

• Right to Access (Legal Compliance Dossier): You can view your complete profile, registered device ID, and full transaction history directly inside the application or request an official Compliance PDF Dossier.

• Right to Correction: You may update your profile information at any time.

• Right to Erasure (Permanent Account Deletion): You have the absolute right to delete your account. You can execute this instantly by navigating to Profile -> Settings -> "Delete Account". Upon confirmation, all personal profile records, authentication credentials, device bindings, and UPI handles are permanently and irrecoverably purged from our live production databases within seconds.

• Right to Grievance Redressal: You have the right to file grievances directly with our designated Data Protection & Grievance Officer.

────────────────────────────────────────────────────────────────────────────────

7. AGE LIMITATION & CHILDREN'S PRIVACY

Mani X is designed and intended strictly for individuals aged 18 years or older. We do not knowingly solicit, collect, or process personal data from minors under the age of 18. Any account discovered to belong to a minor will be terminated immediately.

────────────────────────────────────────────────────────────────────────────────

8. STATUTORY GRIEVANCE REDRESSAL OFFICER

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act 2023, our Grievance Officer details are:

• Name: Vijay Mali

• Title: Founder & Grievance Redressal Officer / Data Fiduciary

• Entity: Orenda Labs

• Official Email: orendalabs0008@gmail.com

• Turnaround Time: All formal inquiries, data requests, and grievances are reviewed and resolved within 48 business hours.

################################################################################

                   PART 2: TERMS OF SERVICE & USER AGREEMENT

################################################################################

TERMS OF SERVICE & USER AGREEMENT

(Legally Binding Contract under the Information Technology Act, 2000)

1. ACCEPTANCE OF TERMS & LEGAL CAPACITY

By downloading, creating an account, accessing, or using Mani X ("Application" / "App"), you enter into a legally binding contract with Orenda Labs (Founder: Vijay Mali). If you do not accept these Terms in their entirety, you must immediately uninstall and cease using the App.

────────────────────────────────────────────────────────────────────────────────

2. USER ELIGIBILITY & STRICT SINGLE-ACCOUNT POLICY

• Legal Age: You must be at least 18 years of age and possess full legal capacity to enter into binding agreements.

• One Account Per Physical Hardware Device: To maintain ecosystem fairness and protect our reward pool, each user is strictly limited to exactly one (1) registered account per physical Android device. Attempting to create multiple accounts, utilizing device ID spoofers, parallel space cloning tools, or secondary profiles on the same hardware will result in permanent device-level blacklisting and forfeiture of all accumulated points.

────────────────────────────────────────────────────────────────────────────────

3. NATURE OF SERVICE: FREE-TO-PLAY CASUAL REWARD ECOSYSTEM

• Zero Monetary Consideration: Mani X is 100% Free-to-Play. We DO NOT accept deposits, entry fees, wagers, bets, or real-money stakes. Mani X is NOT a gambling, betting, lottery, or investment platform.

• Virtual Points ("PTS"): In-game points ("PTS") earned through casual gameplay, daily login streaks, mystery boxes, and promotional activities represent virtual promotional loyalty tokens. Points hold zero intrinsic fiat currency value outside the Application and cannot be traded, transferred, or sold to third parties.

• In-App Platform Utility: Points can be utilized directly within the app to purchase in-game cosmetic skins (e.g. Knife Hit shop skins, Cyber Slice neon blades), participate in advanced game levels, and lock into the Points Staking Vault for extra promotional yield.

────────────────────────────────────────────────────────────────────────────────

4. REWARD REDEMPTION & WALLET POLICY

• Promotional Discretion: Users who accumulate sufficient virtual points may request promotional reward redemptions (e.g., UPI cash transfers or digital gift cards) subject to posted minimum withdrawal thresholds and daily limits.

• Fraud Verification & Anti-Cheat Audit: All withdrawal requests undergo rigorous automated security screening (device attestation, root analysis, VPN checks, and ad-view engagement telemetry). Fraudulent, artificially inflated, or bot-generated point balances will be rejected, and the associated user account permanently terminated without payout.

• Payment Processing: Payouts are executed via standard Indian banking payment channels (UPI/IMPS). Orenda Labs is not responsible for transaction failures resulting from incorrect user-entered UPI VPAs or downstream banking server outages.

────────────────────────────────────────────────────────────────────────────────

5. ZERO TOLERANCE PROHIBITED CONDUCT (ANTI-CHEAT POLICY)

Engaging in any of the following activities constitutes a material breach of this Agreement, leading to immediate account termination, complete forfeiture of points, and device banning:

1. Emulators & Virtual Machines: Running the app on PC emulators (BlueStacks, Nox, LDPlayer, MEmu) or cloned virtual apps.

2. Rooted / Jailbroken Hardware: Running the app with modified operating system kernels, Magisk, or root privileges.

3. Network Obfuscation: Utilizing VPNs, Proxies, Tor networks, or GPS spoofing applications.

4. Automation & Bots: Employing auto-clickers, macro recorders, memory editors, or automated script bots.

5. Ad Manipulation & Fraud: Artificially clicking ads, injecting false ad completion callbacks, or generating invalid ad traffic.

────────────────────────────────────────────────────────────────────────────────

6. INTELLECTUAL PROPERTY RIGHTS

All software code, graphics, game mechanics (Knife Hit Reborn, Cyber Slice, Scratch Card, Mystery Box), animations, sound designs, trademarks, and logos associated with Mani X are the exclusive intellectual property of Orenda Labs. Reverse engineering, decompiling, decompilation, or unauthorized asset copying is strictly prohibited and subject to prosecution under the Indian Copyright Act, 1957.

────────────────────────────────────────────────────────────────────────────────

7. DISCLAIMER OF WARRANTIES & LIMITATION OF LIABILITY

Mani X is provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express or implied. Orenda Labs does not guarantee uninterrupted uptime, ad server availability, or specific earning potential. Under no circumstances shall Orenda Labs, its founder, or affiliates be liable for any indirect, incidental, or consequential damages.

────────────────────────────────────────────────────────────────────────────────

8. GOVERNING LAW & JURISDICTION

These Terms shall be governed by and construed in accordance with the substantive laws of the Republic of India. Any legal disputes arising under these Terms shall be subject to the exclusive jurisdiction of the competent courts of India.

────────────────────────────────────────────────────────────────────────────────

9. CONTACT & STATUTORY NOTICES

For support, legal questions, or official notices:

• Entity: Orenda Labs

• Founder & Grievance Officer: Vijay Mali

• Email: orendalabs0008@gmail.com

• Response Window: 48 Business Hours

================================================================================

                           END OF OFFICIAL LEGAL DOCUMENT

================================================================================