ZUFFA BOXING PRIVACY POLICY

Effective Date: December 1, 2025

Boxing OpCo, LLC dba Zuffa Boxing and its affiliates ("Zuffa Boxing," "we," "us," or "our") know that our fans are a key part of what makes the Zuffa Boxing community successful. Our commitment to our fans includes handling your data responsibly.

This Privacy Policy describes how we use the data (which may include your personal information) we collect from you through our websites ("Sites"), when you buy a ticket or other merchandise from us online, when you view Zuffa Boxing or other content on one of our online channels, when you use our mobile applications, or when you attend our events in person (collectively, our "Services").

The terms "Personal Data" and "Personal Information" shall have the meanings assigned to them under the data protection and privacy laws governing your relationship with us or applicable to your jurisdiction.

Please read this Privacy Policy carefully to understand how we will treat your information.

WHO WE ARE

We are Zuffa Boxing and are affiliated with TKO Group Holdings ("TKO"). Like any company, we use a variety of third-party businesses and partners to market and provide our Services to you. Some of those companies are part of the TKO group and some are third parties that we partner with or that support our operations so we can provide the best experience to you.

HOW WE COLLECT INFORMATION ABOUT YOU

Directly From You

You may provide us with personal information in a number of ways, such as when you:

Information We Collect From Other Sources

We work closely with third parties (for example, technical service providers, ticketing providers, promotions companies, advertising networks, analytics providers, and search information providers) and may receive information about you from them. Depending on the relationship and activity, they will provide us with certain information that helps us understand how you interact with Zuffa Boxing Services so we can tailor our marketing and provide better, more personalized Services to you. In some cases, third parties also provide us with information that helps us keep track of transactions, address technical or logistical issues, prevent fraud, or keep our Zuffa Boxing community safe from security threats. We may also obtain personal information from lead generation companies for marketing and sales purposes.

We may also receive and display information and content that you make publicly available on your social media account when you use social media logins for our Services, interact with any of our content such as contests, or post using one of our promoted hashtags.

Some of our key partners and service providers who may provide us with personal information about you are:

INFORMATION WE COLLECT AND HOW WE USE IT

Categories of personal information collected Categories of sources from which personal information is collected Business or commercial purposes for collection, use, and sharing Categories of third parties with whom some or all of the personal information may be shared We use this information because (Legal Basis)
Personal and online identifiers (such as first and last name, email address, phone number, usernames, or unique online identifiers) Directly from you
Marketing partners
Third party data providers (including lead generation companies)
To provide and improve the Services
To personalize the Services
To provide customer support
To provide marketing and targeted advertising
To conduct sales outreach
To ensure security and prevent fraud
TKO
UFC
Customer service partners
Marketing sponsors and partners
Ad networks
E-Commerce vendors
Third party data providers (including lead generation companies)
Sports and entertainment properties
You have consented to its use
It is necessary to enter into or perform our contract with you
We have a legitimate interest to understand how customers use our products and services, ensure personalization of offers, and research customer behavior
Financial Account Information (such as credit card numbers, bank account information, PayPal account information) Directly from you
Payment providers
E-Commerce vendors
To provide the Services
To sell you merchandise, tickets, or Zuffa content
TKO
UFC
E-Commerce vendors
Payment providers
Fraud and cybersecurity companies
You have consented to its use
It is necessary to enter into or perform our contract with you
It is necessary to comply with legal or regulatory requirements
Customer Profile Information (such as race, gender, age range, income range, ad demographics) Directly from you
Marketing partners
Advertising networks
Third party data providers (including lead generation companies)
To personalize the Services
To provide direct marketing
To provide targeted advertising
To conduct analytics
To conduct research and development
To ensure security and prevent fraud
TKO
UFC
Analytics services
Ad networks
Technology service Providers
Marketing sponsors and partners
Third party data providers (including lead generation companies)
You have consented to its use
We have a legitimate interest to understand how customers use our products and services, ensure personalization of offers, and research customer behavior
Transactional Information (such as purchase history, order details and numbers, payment transaction records, refund and return information, and service usage records) Directly from you
E-Commerce vendors
To provide customer support
To conduct analytics
To conduct research and development
TKO
UFC
Technology service providers
E-Commerce Vendors
You have consented to its use
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites, and research and analyze customer behavior
Communications with you (such as customer support messages, emails, social media posts) Directly from you
Customer support partners
To provide and improve the Services
To provide customer support
TKO
UFC
Technology service Providers
E-Commerce vendors
Customer service partners
You have consented to its use
It is necessary to enter into or perform our contract with you
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites, and research and analyze customer behavior
Online Activity Information (such as browsing history, search history, video viewing history, and other interactions with a website, email, application, or advertisement) Directly from you
Cookies and similar technologies
Marketing partners
Advertising networks
Third party data providers (including lead generation companies)
To provide and improve the Services
To personalize the Services
To provide direct marketing
To provide targeted advertising
TKO
UFC
Marketing sponsors and partners
Analytics services
Ad networks
Third party data providers (including lead generation companies)
You have consented to its use
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites, and research and analyze customer behavior
Non-Precise Geolocation information (such as zip or area code, state, country) Directly from you
Cookies and similar technologies
Marketing sponsors and partners
Technology service providers
Ad networks
To provide and improve the Services to you
To personalize the Services
To prevent fraud and ensure cybersecurity
To provide direct marketing
To provide targeted advertising
TKO
UFC
Technology service providers
Marketing sponsors and partners
You have consented to its use
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites
Precise Geolocation (such as full address or specific location while at an event) Directly from you
Marketing sponsors and partners
Technology service providers
To provide and improve the Services to you
To personalize the Services
To provide direct marketing
TKO
UFC
Technology service providers
Marketing sponsors and partners
Sports and entertainment properties
You have consented to its use
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites
Sensory information (such as audio, electronic, visual, or similar information) Directly from you (such as when you interact with certain apps at our events)
Technology service providers (such as apps and third party analytics platforms activating services at our events)
To provide and improve the Services
To personalize the Services
To enhance live event experiences
To conduct research and development
TKO
UFC
Marketing sponsors and partners
Technology service providers
Analytics companies
You have consented to its use
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites
Inferences drawn from the above information about your predicted characteristics and preferences TKO
Third party data providers
Marketing sponsors and partners
To provide and improve the Services
To personalize the Services
To provide direct marketing
To provide targeted advertising
To conduct analytic
TKO
UFC
Marketing sponsors and partners
Technology service providers
Analytics companies
Third party data providers (including lead generation companies)
We have a legitimate interest to understand and improve how customers use our products/services, apps, and websites
Other information about you that is linked to the personal information above Directly from you
TKO
Third party data providers (including lead generation companies)
Marketing sponsors and partners
To provide and improve the Services
To personalize the Services
TKO
UFC
Marketing sponsors and partners
Third party data providers
We have a legitimate interest to understand how customers use our products/services, ensure personalization of offers, and research and analyze customer behavior

We may also use the information we have about you as necessary if we believe there has been a breach of the Terms of Use or the rights of any third party, or to comply with legal and regulatory requirements.

Automated Decision-Making. We may use automated systems to analyze your information for purposes such as fraud prevention, security, and personalizing your experience. Where required by applicable law, we will provide you with information about such automated decision-making and give you the opportunity to request human review of decisions that significantly affect you.

We combine information we receive from other sources with information you give to us and information we collect about you. We use this combined information for the purposes set out above.

DISCLOSURE OF YOUR INFORMATION

We share data with third parties, including TKO (and subsidiaries), sponsors, content distributors, and the other categories of partners as listed above. Zuffa Boxing and TKO may disclose your information to non-affiliated third parties under the following circumstances:

Consent. If you consent, we may disclose your information to non-affiliated third parties to provide services or products that you have requested and/or services that we believe will interest you.

Service Providers. We may provide access to your information to select third parties who perform services on our behalf to provide you with a product or service and for any other legitimate business and operational purposes. These third parties provide a variety of services to us, including, without limitation, ticket processing, billing, sales, marketing, advertising, market research, fulfillment, data storage, analysis and processing, and legal services.

Other Third Parties. We may disclose your information to reputable third parties so that they may contact you to offer products, services, and promotions, such as sweepstakes and contests that you may find valuable. We may also disclose your information to third-party advertising networks or other parties with whom we have a contractual relationship, including analytics and search engine providers that assist us in the improvement and optimization of the Services.

These third parties may include lead generation companies that provide us with contact information used for sales and marketing purposes.

Protection of Zuffa Boxing and Others. We may access, preserve, and disclose your information (including user content) if required or allowed by law or if we believe in good faith that it is necessary to:

Business Transactions: We reserve the right to disclose and transfer all of your information, including your contact information, in connection with a proposed (including due diligence) or actual merger, acquisition, transfer of control, bankruptcy, reorganization, or receivership, distribution or sale of all, or components, of our business.

PERSONALIZED CONTENT AND ADVERTISING AND YOUR CHOICES

Online Analytics. We may use third-party web analytics services on our Services, such as those of Google Analytics. These service providers use the sort of technology previously described in the "Information We Collect" section to help us analyze how users use the Services, including by noting the third-party website from which you arrive. The information (including your IP address) collected by the technology will be disclosed to or collected directly by these service providers, who use the information to evaluate your use of the Services. We also use Google Analytics for certain purposes related to advertising, as described in the following section. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

Tailored Advertising. We use your personal information to tailor our marketing and advertising efforts. To do this, we provide your information to third-party advertising networks (such as Google DoubleClick) and social media companies (such as Facebook). When we provide data to agencies, ad networks, and other parties for targeted advertising, we do not provide them with your name, financial information, or any sensitive information (such as a government ID or date of birth, if we have collected that). We use online identifiers such as email, cookie addresses, and device identifiers to help us provide targeted advertising to you and others like you. We may also use aggregate information to help advertisers reach the kind of audience they want to target. We may make use of the personal information we have collected from you to enable us to display advertisements to target audiences.

To opt out of targeted advertising, you may use the following links provided by third parties that manage opt-outs for some ad networks:

Email Marketing. We may also add you to our mailing lists for email communications from Zuffa Boxing and our affiliates and partners, including TKO, when you sign up for our mailing lists, purchase a ticket or our merchandise, or subscribe to our content online. We may also use contact information obtained from lead generation companies to send marketing emails. If you provide us with your email address to receive marketing communications, you can opt out at any time by using the unsubscribe links at the bottom of our emails. Please note that we may send you certain transactional and informational emails based on services you have requested, such as your event registration details or updates to events you may be attending. You may not opt out of those emails.

Social Media. You may be able to use social media sharing features and other integrated tools on the Site such as the Facebook "Like" button. These features and tools may permit you to share actions you take on our Services with other media, and vice versa. Your use of such features enables the sharing of information with your friends or the public, depending on the settings you establish with the service that provides the social sharing feature. Please remember, though, that use of the information you share on social media sites will be governed by the privacy policies of the social media provider, and we are not responsible for how they treat the information.

You may also be able to use your account credentials on social media platforms like Facebook or Google to log in to certain services we offer. If you link your account with us to your social media log-in, please be aware that this means information such as your username, password, and some account activity may be shared between us and the social media provider.

Text Messaging (SMS). You may have the option to provide your mobile phone number to receive text messages from us. Depending on the consent you provide, these messages may relate to account activity, service updates, verification codes, or marketing offers.

For marketing text messages, we will obtain your express written consent prior to sending any messages. Consent to receive marketing text messages is not required as a condition of purchasing any goods or services.

You may opt-out of text communications at any time by texting STOP in reply to any message. For support, text HELP. Message frequency varies. Standard message and data rates charged by your mobile carrier may apply. We handle your phone number information as described in this Privacy Policy.

COOKIES AND OTHER TECHNOLOGIES

We may collect data about your use of the Services through web server logs, cookies, and tracking pixels. Web server logs store website activity, while cookies are small text files placed on your device to: (i) recognize your device, (ii) store preferences, (iii) track visited pages, (iv) enhance user experience, (v) perform analytics, and (vi) assist with security.

Tracking pixels (also known as web beacons or clear GIFs) are embedded in websites, ads, and emails to track usage, measure ad effectiveness, and access cookies. We may also use these technologies to collect device-related data, including IP addresses, browser details, operating systems, internet service providers, unique device identifiers, and browsing or video viewing history before and after visiting the Services. We or third parties may place cookies on your browser to deliver customized content, offers, and advertisements. These cookies may be linked to demographic or voluntarily provided data (e.g., email) and shared with vendors for targeted advertising.

Zuffa Boxing generally treats data we collect using these cookies and similar technologies as non-personal data. However, to the extent that Internet Protocol (IP) addresses or similar identifiers are considered personal data by applicable local law, we also treat these identifiers as personal data in those regions. In addition, Zuffa Boxing sometimes combines non-personal data collected from these technologies with other personal data Zuffa Boxing holds. When we combine data in this way, we treat the combined data as personal data for purposes of this Privacy Policy.

Depending on the applicable law in your location, you may have the ability to opt in or out of cookies by interacting with the Cookie Banner on our Site. For more information, please see our Cookie Notice and the "Opting Out of the Sale or Sharing of Your Personal Information" section below.

Regardless of your location, you can adjust your browser settings to receive cookie notifications or block cookies entirely. Refer to your browser's Help section for details (e.g., Edge, Chrome, Firefox, Safari). Blocking cookies may limit access to certain features.

We work with third parties to serve ads, track anonymized site usage, and provide content-sharing services. These third parties may also use cookies and similar technologies, governed by their own privacy policies.

Global Privacy Controls. We recognize user-initiated opt-out preference signals sent by your web browser, such as the Global Privacy Control ("GPC"), as a valid request to opt out of the sale and sharing of personal information processed on this website (i.e., through cookies and tracking technologies). For more information about GPC and how to implement it on your browser, please visit globalprivacycontrols.org.

Do Not Track. Please note that certain web browsers may also transmit "do-not-track" signals to the websites with which the user communicates. Because there currently is no industry standard concerning what, if anything, websites should do when they receive such signals, we do not alter our practices when the website receives a "do-not-track" signal from a visitor's browser.

STORAGE AND TRANSFER OF INFORMATION

We operate the Services in and from a number of different jurisdictions, but the Site is primarily operated from the United States, which is where your information will likely be stored and processed. By using our Services, you acknowledge and consent to the transfer of your personal information to the United States and other countries where we or our service providers operate, which may have different data protection laws than your country of residence. Your information may be disclosed in response to inquiries or requests from government authorities or to respond to legal process in the countries in which we operate and/or store your information.

The information that we collect from you may be transferred to, and stored at, a destination outside the United Kingdom (UK) or European Economic Area (EEA), including the United States. It may also be processed by staff operating outside the UK/EEA who work for us, for one of our affiliated companies, or by our suppliers (permitted third parties) who have entered into a processing agreement with us. When we, or our permitted third parties, transfer your information outside the UK/EEA, we or they will impose obligations on the recipients of that information to protect the information to the standard required in the UK/EEA or otherwise require the recipient to subscribe to international frameworks intended to provide secure data sharing. In the case of transfers to us, we will put in place appropriate safeguards to ensure that your information remains protected under the standards required by both the sender's and our jurisdiction.

CHILDREN

The Services are not directed to children under the age of 13. If we discover we have received any "personal information" (as defined under the U.S. Children's Online Privacy Protection Act) from a child under the age of 13, we will take reasonable steps to delete that information as quickly as possible. If you believe Zuffa Boxing has any information collected from anyone under the age of 13, please contact us at the address listed below.

For residents of the EEA, where processing of personal information is based on consent, Zuffa Boxing will not knowingly engage in that processing for users under the age of consent established by applicable data protection law. If we learn that we are engaged in that processing with such users, we will halt such processing and will take reasonable measures to promptly remove applicable information from our records.

OPTING OUT OF THE SALE OR SHARING OF YOUR PERSONAL INFORMATION

Zuffa Boxing and our advertising partners collect and share certain information from visitors through cookies and similar technologies to advertise our services and other offerings as described in our Privacy Policy. Under certain applicable laws, this activity may be considered a sale, sharing, or processing of personal information for targeted advertising. Depending on your jurisdiction, you may opt out by clicking the "Your Privacy Choices" link at the bottom of the site, moving the toggle to the left (it will turn grey), and selecting "Confirm my choices."

We also may make certain contact information such as your name, email address, phone number, and mailing address available to other businesses in a way that may be considered a sale or sharing or use for targeted advertising. Depending on your jurisdiction, you may opt out of this activity by using the opt-out form below or the "Do Not Sell or Share My Information" link at the bottom of the webpage. Completing this form does not opt you out of information collected through cookies and similar technologies since we have no way of linking your contact information to your web visits. You can also call us at 1-866-983-0571.

PRIVACY INFORMATION FOR CALIFORNIA AND OTHER UNITED STATES RESIDENTS

California and other U.S. states require disclosure of additional information regarding privacy practices and privacy rights. Below we provide additional notices about our privacy practices and consumer rights relating to your information.

We describe the categories of information we collect, our business purposes for collecting such information, the sources and uses of such information, and the entities with which we disclose such information in the "Information We Collect and How We Use It" chart and the "Disclosure of Your Information" section above.

How to Exercise Your Rights. To exercise any of the above rights, please follow the instructions below:

Authorized Agent. You may designate an authorized agent to make a request on your behalf. An authorized agent must have written documentation of their authority to act on your behalf, such as a Power of Attorney.

PRIVACY INFORMATION FOR INDIVIDUALS IN THE EEA OR UK

Your Privacy Rights and Choices. Applicable data protection laws provide you with specific rights related to your Personal Data (any information relating to an identified or identifiable natural person) that we process. Below, we outline these rights and how you can exercise them.

Access and Rectification: You have the right to access and receive a copy of your Personal Data and require us to rectify any incomplete or inaccurate Personal Data.

Right to Erasure: You have the right to request that we erase all of your Personal Data where certain legal conditions are met, such as when your Personal Data is no longer necessary for the purposes for which it was collected, and we do not need to retain the data information in order to comply with an European Economic Area (EEA) or United Kingdom (UK) legal obligation.

Restrict Processing: You have the right to restrict our processing of your Personal Data under certain circumstances. For example, you can request we restrict our use of your Personal Data if you contest its accuracy, or if the processing of your Personal Data is determined to be unlawful but you do not want it erased.

Data Portability: To the extent the Personal Data you provide us is processed based on your consent or to perform a contract, you have the right to request that we provide you (or a third party at your direction) with a copy of all or part of such Personal Data in structured, commonly used and machine-readable format.

Withdrawal of Consent: To the extent that our processing of your Personal Data is based on your consent, you may withdraw your consent at any time, for example by sending us an email to opt-out of marketing messages. Withdrawing your consent will not, however, affect the lawfulness of the processing based on your consent before its withdrawal, and will not affect the lawfulness of our continued processing that is based on any other lawful basis for processing your Personal Data.

Objection to Processing: You have the right to object to our processing of your Personal Data where we are relying on our legitimate interests (or those of a third party) to justify our processing, if you have grounds to object based on applicable law. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data that override your rights and freedoms. You have the right to object to our processing of your Personal Data at any time, for any reason or no reason, where we are processing your Personal Data for direct marketing purposes.

In your request, specify the Personal Data you want rectified, erased, or restricted. For your protection, we may only process requests related to the email address used to send the request and may need to verify your identity. We will comply as soon as reasonably practicable.

Note: We may retain certain information for recordkeeping or to complete transactions initiated before your request.

How to Exercise Your Rights

To exercise any of the above rights, please follow the instructions below:

SECURITY

We use a variety of administrative, physical, and technology solutions, including engaging with qualified cybersecurity companies, to protect your information from unauthorized access, loss, or misuse. Because there is always some risk in transmitting information over the internet and otherwise processing information, we cannot and do not guarantee or warrant the security of any information that you transmit on or through the Services or that we otherwise maintain.

RETENTION PERIOD

We will retain your personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you and provide the Services to you (typically for the duration of your account plus a reasonable period thereafter); (ii) whether there is a legal obligation to which we are subject (such as tax, accounting, or other legal requirements); or (iii) whether retention is legally advisable (for example, in regard to applicable statutes of limitations, actual or threatened litigation or regulatory investigations so that we can preserve evidence to protect or defend our rights).

LINKS TO THIRD-PARTY WEBSITES

Our Services, newsletters, email updates, and other communications may, from time to time, contain links to and from the websites of others, including our partner networks, retail partners, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.

UPDATES

Any updates we may make to our Privacy Policy will be posted on this page, and we may also provide a website notice of any material changes for a reasonable period of time. Please check back frequently to see any updates or changes to our Privacy Policy. If you do not agree or consent to these updates or changes, do not continue to use the Services.

CONTACT

Data Controller Contact

dataprivacy@tkogrp.com