Privacy Policy

The Privacy Policy is part of the General Terms and Conditions governing the Golf 5 application and its related online services.

Version: 2.0

Last update: September 2, 2026

Data on the data controller

• Data Controller: AAA GAMES STUDIOS, S.L.
• Address: Calle Poeta Joan Maragall, 22, 1º, CP: 28020, Madrid.
• CIF: B-88246574

If you have any doubts or questions, you can contact us directly at the following address: users@aaagamestudios.com

We may update this Privacy Policy. We recommend reviewing it periodically. Registered users will be informed of material changes where required.

The following sections describe the personal data we collect or process:

CONTACT BY E-MAIL

We will collect your email address for the following purposes:

• Register as a user in the application.
• Respond to your inquiries or requests.
• Manage the requested service.
• Keep you informed about services or news where authorized.
• Send information about championships and raffles we organize.
• Notify you if you win a prize.
• Send championship results to participants.
• Send marketing communications about Golf 5 where expressly authorized.

The legal basis for account registration, responding to requests, managing the requested service and communicating tournament or prize information is the processing necessary to enter into or perform the Golf 5 service requested by the user. The legal basis for optional news, promotional messages, raffles and commercial communications is the user's consent where consent is required. Processing required by accounting, tax, consumer-protection or other applicable law is based on compliance with legal obligations.

PLAYERS

We will collect or process players' data for the following purposes:

• Player nickname provided when registering for Golf 5 and managing the registration.
• Linking the player's nickname to the email address to associate the account and communicate tournament results, prizes or relevant events.
• To maintain the player's account, settings, progress, handicap, inventory, virtual currencies, items, badges, achievements, rewards and access to courses or content.
• To manage results, statistics, records, tournaments, rankings, friend relationships and multiplayer activity.
• To operate, support and secure Golf 5.

The legal bases for this processing are as follows:

Account management, gameplay, progress, inventory, rankings, tournaments, friend relationships and multiplayer activity are processed as necessary to provide the Golf 5 service requested by the user. Security, fraud prevention, error diagnosis and service reliability are based on AAA Game Studios' legitimate interests in protecting users and operating Golf 5 safely. Purchase, accounting, tax and legally required records are processed to comply with applicable legal obligations. Consent is used for optional processing where required by applicable law.

META HORIZON AND META QUEST DATA

When Golf 5 is used through Meta Horizon or on a Meta Quest device, Golf 5 uses Meta Platform services and processes the data described below.

User ID and user profile

Golf 5 obtains the logged-in user's Meta user ID and Meta username. Golf 5 uses these data to:

• Create or retrieve the user's Golf 5 account.
• Identify the user across sessions.
• Associate progress, inventory, purchases, statistics, rankings and multiplayer activity with the correct account.
• Display the username within Golf 5, including in multiplayer and social features.
• Check that the user is entitled to use the application.

The Meta user ID and Meta username are transmitted to AAA Game Studios' backend. The user ID and nickname are also provided to a multiplayer networking service provider for multiplayer authentication and identification.

Golf 5 does not retrieve the user's Meta profile picture.

Invites, friends and deep linking

Golf 5 uses Meta Group Presence, Meta's roster interface, launch intents and join intents. For these functions, Golf 5 may process the destination name, lobby session ID, match session ID, joinable status and deep-link message.

These data are used to:

• Publish the user's Golf 5 presence.
• Display Meta's roster interface.
• Allow the user to invite eligible users to a multiplayer session.
• Allow a user to join a session through a Meta invitation.
• Open the Golf 5 destination or multiplayer session requested by the user.

Golf 5 does not directly retrieve or store the user's Meta friends or followers list. The eligible-user list shown in Meta's roster interface is handled through Meta's interface.

Golf 5 also maintains its own game-specific friends system, separate from Meta's roster. This system processes Golf 5 user IDs and nicknames, friend requests, accepted relationships, online status, invitations, invitation codes, friends-only matches and related results. These data are used to provide Golf 5 friend, invitation and multiplayer functions.

In-app purchases and downloadable content

Golf 5 uses Meta Platform services to display products, launch checkout, retrieve and consume purchases, check entitlements and obtain downloadable content. For these functions, Golf 5 may process product SKUs, purchase identifiers, product information, entitlement status, Meta user ID, Meta access token and downloadable-content identifiers or status.

The Meta user ID, Meta access token and product SKU are transmitted to AAA Game Studios' backend when a purchase is validated. They are used to verify the purchase and grant the corresponding item or content. The Meta access token is used only during validation and is not stored by AAA Game Studios.

Meta Horizon User Data and Device User Data are not sold or used for advertising.

The processing of Meta user IDs, usernames, entitlements, purchases, presence, invitations, deep links and multiplayer data is necessary to perform the Golf 5 service contract and provide the features requested by the user. Entitlement security, purchase validation and fraud prevention are based on AAA Game Studios' legitimate interests in protecting users, purchases and the service. Records required by accounting, tax, consumer-protection or other applicable law are processed to comply with legal obligations.

DEVICE, GAMEPLAY AND TECHNICAL DATA

Golf 5 processes data required to operate the VR and online experience, which may include:

• Position, orientation, velocity, acceleration and input of the headset and controllers.
• Play-area or boundary information used by VR functionality.
• Headset model or platform type.
• Application version, application identifier and language.
• Scores, strokes, game mode, course, hole, results, records, progress and tournament activity.
• Shot-performance data generated while playing.
• Lobby, room, online status, connection, diagnostic and error information.
• Locally stored settings such as handedness, controller preference, preferred course, preferred club set and preferred server.

These data are used to render and control the VR experience, operate gameplay and multiplayer functions, save settings and progress, provide rankings and tournaments, recover sessions, diagnose errors and maintain security.

Headset and controller position, orientation, velocity, acceleration and input are processed in real time to represent the player's actions in Golf 5. During a multiplayer match, these data are transmitted through the multiplayer service only to the other players participating in the same match so that their devices can represent those actions. AAA Game Studios does not store or retain these headset or controller movement data.

Golf 5 stores each player's shot-performance data in the player's account so that the player can consult this information in the player profile and observe progress and learning as a golfer. These individual records are processed as a player-facing gameplay and training feature.

The legal basis for processing device, gameplay, shot-performance and technical data needed to render the VR experience, retain the player's history and provide multiplayer features is the performance of the Golf 5 service requested by the user. Security, fraud prevention, error diagnosis and service reliability are based on AAA Game Studios' legitimate interests in protecting users and operating Golf 5 safely.

VOICE CHAT

Golf 5 requests microphone permission to provide real-time voice chat. If permission is granted and voice chat is used, microphone audio is processed and transmitted through a voice communication service provider to the users participating in the voice session.

Golf 5 does not record or store voice-chat audio for later playback.

The legal basis for processing voice audio is the provision of the optional voice-chat service requested by the user. Where applicable law requires consent, the user provides it by choosing to grant microphone permission and use voice chat, and may withdraw it by disabling Golf 5's microphone permission.

AVATARS

When the avatar function is used, Golf 5 may process an avatar identifier, avatar URL, avatar image and generated avatar assets. Golf 5 and its service providers may use these data solely to generate, retrieve, load and display the player's avatar within the game.

The legal basis for processing avatar data is the provision of the avatar functionality requested by the user.

Age requirements

Golf 5 is intended for users aged 13 years or older, or the applicable minimum age in the user's region. On Meta Horizon, Golf 5 is self-certified in the Teens and Adults (13+) age group.

Golf 5 is not intended for users below that threshold. Where applicable law requires parental or legal-guardian authorization for a minor who meets the applicable age threshold, that authorization must be obtained before registration or use.

What security measures do we apply?

AAA Game Studios applies appropriate technical and organisational measures designed to protect personal data against loss, misuse, alteration, unauthorised access, disclosure or theft, taking into account the nature of the data, the risks of the processing and the state of the art.

Security vulnerabilities affecting Golf 5 may be reported to users@aaagamestudios.com with the subject "Golf 5 security vulnerability".

To which recipients will your data be communicated?

Your data will not be disclosed to third parties except as described in this Privacy Policy, when necessary to provide the requested service, or when legally required.

In particular, data may be processed by or communicated to:

• Meta Platforms Technologies and its applicable affiliates, to provide Meta Horizon platform services, entitlement checks, purchases, downloadable content, presence, roster, invitations and deep links.
• Multiplayer networking and voice communication service providers, which process the user ID and nickname supplied by Golf 5, the end user's IP address, real-time voice audio when voice chat is used, and the session data needed to provide multiplayer or voice functionality.
• Server-hosting and storage service providers, which process, on behalf of AAA Game Studios, the data transmitted to or stored in the Golf 5 backend. This processing is used to host, store, operate, secure and make the backend available.
• Avatar service providers, which may process avatar identifiers, avatar URLs, avatar images and generated avatar assets as needed to provide the avatar functionality.
• Email, support, content-delivery, development and maintenance providers needed to operate Golf 5 and its related services.
• The State Agency of Tax Administration, banks, financial institutions, courts, regulators or other public authorities when required for the collection of a service or product, compliance with a legal obligation or response to a lawful request.

What rights do you have?

• To obtain confirmation as to whether we are processing your personal data.
• To access your personal data.
• To request the rectification of your data if it is inaccurate.
• To request deletion of your personal data where applicable.
• To request the limitation of the processing of your data, in some cases, in which case we will only keep them in accordance with the regulations in force.
• To object to processing based on legitimate interests, where this right applies.
• To receive your personal data in a structured, commonly used and machine-readable format and, where technically feasible, have them transmitted to another data controller, where applicable.
• To file a complaint with the Spanish Data Protection Agency or another competent supervisory authority if you believe that we have not handled your personal data or your request correctly.
• To revoke consent to any processing for which you have consented, at any time.

How can you exercise your rights or request deletion of Golf 5 data?

To request access, rectification, deletion, restriction, portability or to object to processing, send an email to users@aaagamestudios.com indicating the right you wish to exercise. For a request to delete data associated with Golf 5, use the subject "Golf 5 data deletion request".

The request should include the information reasonably necessary to locate the Golf 5 account. We may request additional information when reasonably necessary to verify the requester and protect the account from unauthorized deletion.

Subject to data that must be retained by law, we will process a verified deletion request and delete the applicable personal data controlled by AAA Game Studios without undue delay. Where a service provider processes affected data on our behalf, we will instruct that provider to delete the data without undue delay in accordance with the applicable agreement and legal requirements.

We will also delete the Meta Horizon User Data and Device User Data described in this Privacy Policy without undue delay when the data are no longer necessary to provide Golf 5, when Meta requests deletion, or when deletion is otherwise required by applicable law.

How long will we keep your personal data?

• Personal data will be kept for as long as you remain associated with us and for as long as necessary to provide the Service.
• Once you unsubscribe or request account deletion, the personal data processed for each purpose will be deleted without undue delay unless they must be kept for a legally stipulated period, including the period in which a judge or court may require them in accordance with the statute of limitations for legal actions.
• Purchase and transaction information and related communications will be kept for applicable accounting, tax, consumer-protection, warranty and limitation periods.
• Optional commercial-communication data will be kept until the player withdraws consent or the data are no longer necessary for that purpose.
• Meta presence, roster, invite and deep-link data will be processed only for the applicable presence, navigation or multiplayer-session purpose and will not be retained after they are no longer needed for that purpose.
• Locally stored settings remain on the device until the applicable data are cleared or the application is uninstalled.