Terms of Use and Sale

0. Preamble, identity and definitions

These Terms of Use and Sale (the "Terms") govern access to and use of the website, the application and all products, features, games, competitions and services offered by CyLimit (the "Services"). By creating an account and ticking the acceptance box, you acknowledge that you have read and accepted these Terms, which form a legally binding contract between you (the "User" or "you") and CyLimit.

These Terms constitute the master agreement. They are supplemented by the following satellite documents, which form an integral part of them and, together, a single contractual whole: the Marketplace Terms, the Game Rules, the Referral Terms, the Privacy Policy, the Cookie Policy and the Responsible Gaming page. In the event of a conflict on a specific point, the satellite document dedicated to that point prevails.

For French tax residents, CyLimit operates a monetisable digital-object game (JONUM) within the meaning of French Law no. 2024-449 of 21 May 2024 (the "SREN" law), Decree no. 2026-60 and the Order of 4 February 2026. CyLimit's declaration to the French National Gaming Authority (ANJ) is in progress.

1. Account and eligibility

Creating an account is free. You may create an account with an email address and a password, or via a third-party identity provider (Google, Facebook). You undertake to provide accurate, complete and up-to-date information and to keep it current.

Age. An account used solely to play with non-NFT cards (white and free cards) is open without any age restriction. However, acquiring, holding and reselling NFT Cards, as well as taking part in JONUM Competitions, is strictly reserved for persons aged 18 or over. Age is verified during identity verification (KYC), based on the date of birth shown on your official document. Anyone identified as a minor is blocked from these activities.

Representations. By creating an account, you represent and warrant that you will use the Services in accordance with these Terms and all applicable laws, and that you are not located in a country subject to an embargo by the European Union, the United States or the United Nations, nor listed on any applicable financial-sanctions list (in particular the European Union's consolidated list of financial sanctions).

Account security. You are responsible for keeping your credentials confidential and for any activity carried out from your account. Choose a strong password, do not share it, and report any unauthorised access to us without delay at contact@cylimit.com.

• One account per person. Creating or managing multiple accounts, or managing a third party's account, is prohibited.
• No collusion. Acting in concert with other accounts to distort the Game, card values or to circumvent these Terms is prohibited.
• No re-creation. If your account has been deleted, or if you are under a JONUM self-exclusion (section 8), you may not create a new account. An identity-fingerprint mechanism detects and refuses such re-creations.
• Username. Your username must not be misleading, impersonate anyone, or contain abusive or offensive content or content infringing third-party rights.

2. Cards: ownership of the NFT and licence to the artwork

NFT Cards (blue, pink, yellow). These cards are backed by an ERC-721 non-fungible token (NFT) issued on the Base blockchain. When you acquire an NFT Card, you become the owner of the underlying token and may freely dispose of it (resale, transfer, gift), on the Marketplace or via a third-party marketplace, subject to these Terms and to the JONUM regulation applicable to French residents.

Licence to the artwork. Ownership of the token does not entail any assignment of intellectual property in the depicted work (the rider's image, name and attributes, and the card design). CyLimit holds the necessary licences to the riders' image and name and grants you, for the entire period during which you own the NFT, a personal, non-exclusive, non-commercial, worldwide and limited licence to use and display the work within the Services. This licence automatically terminates and transfers to the new acquirer upon any resale or transfer of the card; you undertake to inform the recipient. Any commercial use, modification, or claim of additional intellectual-property rights is prohibited.

Non-NFT Cards (white, free). These cards are not NFTs: they are game items recorded off-chain in our systems. They are not recorded on the blockchain, are not transferable on-chain and have no monetary value. They are provided to you under a limited, revocable licence, solely within the Services. CyLimit reserves the right to modify, suspend or withdraw them upon reasonable notice, without this giving rise to any compensation.

XP and level. Each card has an experience level (XP) that can be increased by spending XP. Reselling a card halves its XP. CyLimit (via its master wallet) may technically mint, transfer, re-mint or burn cards in connection with the operation of the Services, regulatory compliance or incident resolution. CyLimit retains all intellectual-property rights in the artwork and in its proprietary content (design, logos, code, algorithms, database).

3. Virtual currencies and items (bidons, white bidons, XP)

Bidons, white bidons and XP are virtual, internal, closed-loop in-platform currencies and game points. They have the following characteristics:

• Non-purchasable: they cannot be bought with real money. There is no "buy bidons" product.
• Non-cashable: they cannot be converted into currency, withdrawn, or exchanged for anything of value outside the Services.
• No monetary value: they are not electronic money, a financial instrument or a means of payment within the meaning of the French Monetary and Financial Code.
• Non-transferable: they cannot be transferred between Users.
• Earned only through play: they are obtained through game rewards, the referral programme, pack bonuses or administrative grants.

CyLimit gives no warranty regarding these virtual items and may modify, suspend or withdraw them without compensation in the event of a breach on your part. Unlike these game currencies, only USDC and ETH have real value and can leave the platform.

4. Payment, price and right of withdrawal

Purchases within the Services (packs, NFT Cards) may be paid for using: (i) bidons or white bidons (virtual game currency); (ii) USDC, drawn from your USDC balance; or (iii) a bank card via our provider Stripe, in which case the debit is made in euros after conversion.

Price transparency. In accordance with Articles L111-1 and L112-1 of the French Consumer Code, the total price payable, including all applicable CyLimit service fees, is displayed to you before you confirm your order. No amount is charged to you without this prior display.

Funding with crypto-assets. Buying crypto-assets (on-ramp) and converting them back into currency (off-ramp) are handled by Coinbase, under its own terms and pricing. CyLimit charges no fee on these operations; any fees are those of Coinbase and are shown to you by Coinbase before validation. Network (gas) fees for the blockchain operations internal to the Services are borne by CyLimit (free of charge to you).

Right of withdrawal. NFT Cards and packs paid for with real money are digital content supplied immediately. In accordance with Article L221-28 of the French Consumer Code, at the time of your purchase you expressly consent to the immediate performance of the contract and you waive your 14-day right of withdrawal. This agreement and waiver are confirmed to you by email.

Refunds. As a result, no refund is owed under the right of withdrawal. A refund will be granted only exceptionally, after review, in the following exhaustively listed cases: a purchase made by a minor, proven fraud, or a technical failure attributable to the platform that prevented delivery of the item.

5. Wallet and blockchain

An embedded smart-account wallet (an ERC-4337 smart account) is associated with you through Coinbase (Coinbase Developer Platform). You activate and use it by authenticating directly with Coinbase using a one-time code (OTP) sent by email or SMS, in a session separate from your CyLimit login. The wallet private key is generated, held and secured by Coinbase within its infrastructure: CyLimit never has access to it and stores only the public address of the wallet.

USDC balance. The USDC balance shown in your account is used for your purchases within the application. A USDC deposit becomes usable once the transaction is confirmed on the blockchain.

On-chain approvals. To avoid signing every operation, you grant on-chain approvals from your wallet that allow the CyLimit contracts to carry out the operations you initiate (listing, buying, selling): moving your NFT Cards to the Marketplace contract and using a USDC allowance. This is the standard mechanism of any on-chain marketplace. These approvals do not transfer to CyLimit any ownership of, or free control over, your assets, are limited to that purpose, and can be revoked at any time via the dedicated revocation pages. A recovery tool is offered for funds sent to the wrong network by mistake, with no guarantee of success.

Crypto-asset and blockchain risks. You acknowledge and accept the following risks specific to the use of the Base blockchain and crypto-assets:

• Volatility: the value of crypto-assets and the resale value of an NFT Card may fluctuate sharply, or fall to zero; no value or capital gain is guaranteed.
• Irreversibility: a transaction recorded on the blockchain is final and cannot be reversed; losses may result from errors or fraudulent transactions.
• Security: wallets and online services may be exposed to hacking, phishing or network failures.
• Not an investment: NFT Cards are not an investment, a financial security or a savings product; they are sold without any investment or capital-gain purpose.
• Taxes: you are solely responsible for declaring and paying any taxes applicable to your transactions.

6. Marketplace and auctions (general framework)

CyLimit provides a Marketplace for acquiring and selling NFT Cards. The primary market operates through automatic auctions (you set a secret maximum amount, and the system bids on your behalf in increments). The secondary market operates between Users, through fixed-price sales. Any bid placed is firm and cannot be withdrawn or amended.

The detailed terms (durations, minimum amounts, escrow of funds, fees, settlement and delivery) are set out in the Marketplace Terms. For reference, no CyLimit fee is applied to primary-market auctions, and no royalty is charged. For sales between Users (secondary market), CyLimit acts as a technical intermediary and is not a party to the contractual relationship between buyer and seller beyond that role.

7. Game and rewards (general framework)

The CyLimit Game is a game of skill: you build teams from your cards and enter them in competitions whose scoring is based on riders' real-world performances, using weighted criteria and deterministic bonuses. Participation in the Game is free: there is no stake, the only cost being the acquisition of cards.

The full terms (scoring criteria, divisions, competition calendar, reward allocation) are set out in the Game Rules.

Rewards. Rewards may take the form of cards, USDC, USDC jackpots, bidons/white bidons or XP, and are credited after a claim step. For French residents, rewards with monetary value are paid in ETH on the Base blockchain, with their euro equivalent frozen at the time of distribution.

8. JONUM and responsible gaming (French residents)

This section applies only to Users whose tax residence is in France. Your jurisdiction is determined on your first connection and then confirmed by the address provided during identity verification, which prevails; a relocation procedure (with supporting evidence) allows this to be taken into account if you move.

Identity verification (KYC). Access by French residents to JONUM Competitions is conditional on identity verification, carried out via our provider Didit (Didit Identity Spain, S.L., Barcelona). This verification includes reading an identity document (OCR), a liveness check and a facial comparison, which involves the processing of biometric data within the meaning of Article 9 of the GDPR. It also confirms that you are 18 or over. The terms for processing this data are set out in the Privacy Policy.

Provisional access and locking. After you acquire your first coloured NFT Card, you have a thirty (30)-day provisional-access period to complete your identity verification. If verification is not completed within that period, the resale and in-game use of your NFT Cards are locked until your identity is verified. Your non-NFT cards and your bidons are never locked.

Gaming limits. In accordance with the JONUM regulation, you set your gaming limits:

• Spending limit: a cap, expressed in euros, on your NFT Card acquisitions over a rolling seven (7)-day period. Any decrease takes effect immediately; any increase takes effect no sooner than 48 hours after the last change. This cap is calculated on a gross basis (resales are not deducted) and applies to all your NFT Card acquisitions, whether paid in USDC or by bank card.
• Time limit: a maximum gameplay duration over seven (7) days. You are alerted at 75% of your time, then 30 minutes and 10 minutes before the deadline; when the limit is reached, you are logged out.

Self-exclusion. You may at any time request temporary self-exclusion, for a duration of between 48 hours and 12 months. Self-exclusion takes effect immediately and is irreversible for the chosen duration. During this period, you may neither take part in JONUM Competitions nor reopen an account; an identity-fingerprint mechanism prevents the re-creation of an account.

Reward caps. CyLimit contractually undertakes to comply with the regulatory reward caps applicable to verified accounts residing in France: €1,000 per year for in-kind rewards, €25,000 per year for crypto-asset rewards, within the limit of 20% of turnover. These caps are contractual commitments that CyLimit implements.

9. Prohibited uses and anti-fraud

When using the Services, you undertake not to, in relation to other Users or the platform:

• Post or distribute misleading, abusive, defamatory, harassing or offensive content, or content infringing third-party rights;
• Impersonate anyone or suggest an affiliation with CyLimit;
• Manipulate card prices, or buy, sell or transfer cards or crypto-assets obtained fraudulently or stolen;
• Exploit a flaw or bug in the Services, or use non-public information for fraud or unfair advantage;
• Access non-public areas, use bots, scrape or extract the database, or overload the infrastructure;
• Distribute viruses or malware, or attempt to circumvent security measures;
• Decompile, disassemble, reverse-engineer, resell or sub-license any feature of the Services;
• Use the Services for unlawful purposes, in particular money laundering.

Investigations and measures. CyLimit may investigate any activity it considers suspicious and, where appropriate, restrict access, suspend an account temporarily or permanently, withhold rewards, or cancel pending operations. In the event of permanent suspension, you have a reasonable period to transfer your assets off the platform.

10. Warranties, liability and indemnification

Statutory warranty. As a consumer, you benefit from the statutory warranty of conformity applicable to digital content and services (Articles L224-25-1 et seq. of the French Consumer Code) and from the statutory warranty against hidden defects. No provision of these Terms may exclude or limit these statutory warranties.

Limitation of liability. To the fullest extent permitted by law, and except for any liability that cannot lawfully be excluded or limited (in particular in the event of wilful misconduct, gross negligence, personal injury or breach of the consumer's statutory warranties), CyLimit's total aggregate liability under these Terms is limited to direct damages and capped at the amount you actually paid to CyLimit during the twelve (12) months preceding the event giving rise to the claim.

Within that same limit, CyLimit cannot be held liable for losses resulting from crypto-asset volatility, failures of the Base blockchain or of third-party services, service interruptions, loss of access to your wallet due to your credentials, or an event of force majeure.

Indemnification. To the extent permitted by law, you undertake to hold CyLimit harmless against any third-party claim arising from your breach of these Terms or of the satellite documents, your infringement of third-party rights, or your non-compliant use of the Services.

11. Modification, suspension, termination and account deletion

CyLimit may modify, suspend or discontinue, temporarily or permanently, all or part of the Services, in particular for technical, security, regulatory-compliance or product-evolution reasons. In the event of a material change to these Terms, you will be informed in advance by an appropriate means (for example by email) and will have a reasonable period to review them. Continuing to use the Services after the changes take effect constitutes acceptance.

Deleting your account. You may at any time request the deletion of your account by sending your request to contact@cylimit.com. Deletion is currently handled manually, within an indicative period of approximately thirty (30) days from your request. Before any deletion, make sure to withdraw or transfer your assets of real value (USDC, ETH, NFT Cards) off the platform. In order to preserve the integrity of the history of cards recorded on the blockchain, your username is pseudonymised rather than purely deleted.

CyLimit may terminate the contractual relationship in the event of a serious breach on your part, subject to reasonable notice where required by law. CyLimit reserves the right to freeze an asset transfer where necessary to comply with its legal obligations (sanctions, anti-money-laundering).

12. Governing law and dispute resolution

These Terms, together with the satellite documents, are governed by French law. If you are a consumer residing in another Member State of the European Union, you retain the benefit of the mandatory protective provisions of the law of your country of residence.

Prior complaint. If you encounter a difficulty, first contact our customer service at contact@cylimit.com. We will endeavour to resolve your complaint amicably as soon as possible.

Consumer mediation. In accordance with Articles L611-1 et seq. of the French Consumer Code, if your complaint has not been satisfactorily resolved, and provided it is less than one year old, you may use the consumer mediator CM2C free of charge:

• CM2C, Centre de la Médiation de la Consommation de Conciliateurs de Justice
• 49 rue de Ponthieu, 75008 Paris, France
• https://www.cm2c.net

You may also use the European Commission's online dispute resolution (ODR) platform, available at https://ec.europa.eu/consumers/odr.

The publisher's legal notices are available on the Legal Notice page.