Supplemental Policies and Launch Controls

Supplemental Policies and Launch Controls

Cookies, legal requests, prohibited products and implementation

A. Cookie Policy

Arena Kingdom may use strictly necessary cookies for authentication, security, preferences and load balancing; analytics cookies to understand use; and advertising cookies only where implemented and lawfully authorised. The cookie interface must identify categories, providers, purposes and duration, allow non-essential choice where required, and record consent. Rejecting non-essential cookies must not block core paid services unless technically necessary and clearly explained.

B. Law-Enforcement and Safety Requests

Requests should be submitted through contact@nkiza.com, identify the authority, legal basis, account identifiers, scope and urgency, and be signed. Arena Kingdom will verify authority, assess jurisdiction, preserve data when legally appropriate, disclose only responsive data and notify users unless prohibited or unsafe. Emergency disclosure requires a good-faith basis involving imminent danger and must be documented.

C. Prohibited Marketplace Products

• Illegal drugs and controlled substances; weapons and explosives; counterfeit or stolen goods; sexual services; human organs; trafficking-related services; unsafe or recalled products; regulated financial products without approval; gambling products; unauthorised medicines; personal data; malware; and any product prohibited by applicable law or platform notice.

D. Responsible Spending Controls

• Clear local-currency display before purchase.
• Purchase confirmation and accessible transaction history.
• Configurable user spending limits and cooling-off tools.
• Enhanced verification and fraud review for unusual or high-value activity.
• No creator pressure, humiliation or retaliation based on gifting.
• Accessible support for suspected unauthorised purchases and vulnerable users.

E. Pre-launch legal and product gate

Control	Required evidence before launch
Corporate identity	Registration, address, contracting entity, bank and tax details
Territories	Approved country list and country supplements
Age safety	18+ gates, creator verification, minor-report workflow
Data protection	Controller registration if required, data map, vendors, transfer safeguards, retention and incident plan
Payments	Processor contracts, checkout disclosures, refunds, fraud and chargebacks
Creator payouts	Net-revenue definition, rate, threshold, reserve and statement process
Competitions	Published scoring, separate paid-gift award, prize and anti-cheat rules
Moderation	Report, emergency escalation, appeals, evidence and staffing
Intellectual property	Notice/counter-notice process and music-rights strategy
Marketplace	Seller verification, prohibited goods, buyer remedies and funds flow
Impact Fund	Exact formula, governance, verification and reporting
Acceptance	Versioned clickwrap records for each applicable policy

Controlled placeholders — all resolved

Every bracketed placeholder across all fifteen parts is resolved: registration number/registered office (deliberately omitted), operator (Nkiza Ltd), effective date (2 August 2026), territory (worldwide, no restriction), Creator Share (50%), payout threshold and timing (US$20, 5 business days, Creator bears payout processing fees), the reserve/hold review period (90 days, Part V §5), routine-log retention (90 days, Part II §7), Impact Fund percentage and distribution period (10%, quarterly), the default Arena scoring/winner threshold and consolation prize (10,000,000 Coins; US$5,000), the appeal window (30 days, Part XIII §3), the arbitration forum (KIAC, seated in Kigali, no value threshold, arbitrator count set by the KIAC Rules), and all legal/privacy/IP/child-safety/law-enforcement contact channels (contact@nkiza.com — one shared inbox for all of these was a deliberate choice, not an oversight; revisit if volume or subject-matter separation later warrants dedicated addresses).

Known deferred or ongoing items

These were never bracketed placeholders — they're described in general, principled terms by design and don't block the Suite taking effect, but are worth tracking separately:

• Country-specific legal supplements — worldwide access does not remove the need to check each jurisdiction's own consumer, tax and platform-liability rules; it only means Arena Kingdom does not itself gate access by country.
• Coin prices, refund workflow, subscription products and app-store treatment — the policy text describes the mechanism, not fixed prices, since no payment provider is active yet.
• Event-specific rules for individual Arenas (organiser, dates, entry method, judging criteria, tie-breaks, complaint period per Part VI §1) — the default scoring/winner/consolation-prize rule is set; each Arena still needs its own published Event Rules per the Suite's own hierarchy.
• Identity, payment, hosting, streaming, analytics and moderation providers — deliberately not named; Privacy Policy §5 discloses provider categories, treated as sufficient without naming specific vendors.
• Cross-border data-transfer safeguards and Impact Fund verification method — both committed to in principle (Part II §6, Part XIV §3) rather than tied to a specific named mechanism.

Reference architecture reviewed

The structure was informed by publicly available legal frameworks used by major livestreaming platforms, including TikTok Terms of Service and related policies, BIGO LIVE User Agreement and related policies, and Kick Terms of Service (modified 23 March 2026). No source text is adopted wholesale; provisions are tailored to Arena Kingdom's stated product model.

This document was checked against the following Rwandan legal framework as at the date of this version: Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (NCSA as supervisory authority); Law N° 011/2026 of 26/02/2026 relating to competition and consumer protection, which replaced Law N° 36/2012 and took effect with a six-month conformity period from 4 March 2026; Law N° 18/2010 of 12/05/2010 relating to electronic messages, electronic signatures and electronic transactions; Law N° 66/2018 of 30/08/2018 regulating labour in Rwanda, as amended by Law N° 027/2023 of 18/05/2023; Law N° 22/2018 of 29/04/2018 relating to the civil, commercial, labour and administrative procedure; and Law N° 51/2010 of 10/01/2010 establishing the Kigali International Arbitration Centre. This is a starting checklist, not a substitute for confirmation by qualified Rwandan counsel immediately before launch, since these and other applicable laws (including sector rules from the National Bank of Rwanda, the Rwanda Utilities Regulatory Authority, and tax and companies legislation) may be amended, and each launch territory outside Rwanda will have its own separate requirements.