Legal documentation

WANT-A-TOP — WEBSITE TERMS OF USE & LEGAL NOTICE Version 1.0 — Effective Date: August 19, 2026

1. Site Operator

This website, wantatop.com, including its subdomains other than the affiliate dashboard (the "Site"), is operated by:

SOHA Media Systems Corp, a corporation organized under the laws of the State of Wyoming, United States — EIN 42-2677063. Principal place of business: 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA. Contact: legal@wantatop.com

2. Scope

These Terms of Use govern access to and browsing of the public areas of the Site. Participation in the Want-A-Top affiliate network — including registration, use of the affiliate dashboard, promotion of Offers and payment of commissions — is governed exclusively by the Want-A-Top Master Affiliate Agreement, the Affiliate Compliance Guidelines and the applicable Offer Terms, which prevail over these Terms of Use for registered affiliates. By accessing the Site you accept these Terms of Use; if you do not accept them, do not use the Site.

3. Nature of the Service; Adult-Industry Notice

Want-A-Top is a business-to-business affiliate technology network. The Site is directed at professionals and businesses in the digital marketing industry, not at consumers. Certain programs promoted through the network relate to adult-entertainment platforms intended exclusively for adults; the Site itself does not host adult content, but references to such programs may appear. The Site and the network are not intended for, and may not be used by, anyone under 18 years of age (or the higher age of majority in their jurisdiction).

4. Programs and Third Parties

The platforms, products and brands promoted through the network ("Programs") are owned and operated by their respective operators, which may be companies related to SOHA or independent third parties. The presence of a Program on the Site or in the network does not imply that it is owned, operated or controlled by SOHA. SOHA is not responsible for the content, availability, policies or practices of any Program or of any third-party website linked from the Site.

5. Intellectual Property

The Site, its design, texts, graphics, logos, trademarks (including "Want-A-Top") and software are the property of SOHA or its licensors and are protected by intellectual-property laws. Browsing the Site grants no license or right over such elements. It is prohibited to reproduce, modify, distribute or publicly communicate any content of the Site without prior written authorization, and to register or use domains, keywords or identifiers confusingly similar to the Site's trademarks.

6. Acceptable Use

You may not: (a) use the Site for any unlawful purpose; (b) attempt to gain unauthorized access to restricted areas, accounts or systems; (c) introduce malware or perform scraping, crawling or automated data extraction without written consent; (d) interfere with the operation or security of the Site; or (e) impersonate SOHA, the network or any affiliate.

7. Disclaimers

THE SITE IS PROVIDED "AS IS" AND "AS AVAILABLE". SOHA does not warrant uninterrupted or error-free availability of the Site, nor the accuracy or completeness of the information published on it, which is provided for general information only and does not constitute legal, financial or professional advice, nor an offer binding SOHA. Commission rates, program availability and commercial conditions shown on the Site are indicative and are governed exclusively by the Master Affiliate Agreement and the applicable Offer Terms.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SOHA SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES ARISING FROM THE USE OF, OR INABILITY TO USE, THE SITE. Nothing in these Terms limits liability that cannot be limited under applicable law.

9. Privacy and Cookies

The processing of personal data in connection with the Site and the network is described in the Want-A-Top Privacy Policy, and the use of cookies and similar technologies in the Want-A-Top Cookie Policy, both available in the Site footer.

10. Reporting Abuse

To report piracy, trademark misuse, fraud, or content concerns relating to the network, contact abuse@wantatop.com. Reports are reviewed and escalated as appropriate.

11. Changes

SOHA may update these Terms of Use at any time by publishing the revised version on the Site with its effective date. Continued use of the Site after publication constitutes acceptance.

12. Governing Law and Jurisdiction

These Terms of Use are governed by the laws of the State of Texas, USA, excluding its conflict-of-laws rules. Any dispute arising from the use of the Site shall be submitted to the exclusive jurisdiction of the state or federal courts located in Harris County, Texas, without prejudice to mandatory protective rules that may apply in the user's jurisdiction.

© SOHA Media Systems Corp. All rights reserved.

WANT-A-TOP MASTER AFFILIATE AGREEMENT Version 2.2 — Effective Date: August 19, 2026 Operator: SOHA Media Systems Corp, a corporation organized under the laws of the State of Wyoming, USA — EIN 42-2677063 Principal place of business: 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA

1. Definitions

"Affiliate": the individual or legal entity that registers for, and is accepted into, the Network under this Agreement.

"Affiliate Guidelines": the affiliate marketing, compliance and program policies published or updated by SOHA from time to time pursuant to Clause 7, incorporated into this Agreement by reference.

"Agreement": this Master Affiliate Agreement, together with the Affiliate Guidelines and the applicable Offer Terms.

"Customer": an end user validly referred to a Program through the Affiliate's official tracking links and attributed to the Affiliate under Clause 8.

"Invalid Traffic": as defined in Clause 11.1.

"Net Revenue": as defined in Clause 8.2.

"Network" or "Want-A-Top": the affiliate technology network and marketplace operated by SOHA, through which Programs and Offers are made available to Affiliates.

"Offer": any website, digital platform, subscription service, digital product, online service, application, membership, campaign, promotion, or other product or service made available to Affiliates through the Network, together with its specific commercial conditions.

"Offer Terms": the specific conditions applicable to an Offer as published in the affiliate dashboard, which may include, without limitation: commission or revenue-share rates, territories, permitted and prohibited traffic sources, promotional methods, attribution rules, compliance requirements, creatives, landing pages, and campaign availability.

"Program": the product, platform or service to which one or more Offers relate.

"Program Operator": the entity that owns, operates or controls a Program, whether or not related to SOHA.

"SOHA", "we", "us": SOHA Media Systems Corp.

2. The Network; Role of SOHA and Program Operators

2.1. Want-A-Top is an affiliate technology network and marketplace. SOHA operates the affiliation infrastructure, tracking, attribution, reporting and, where applicable, commission settlement. Through the Network, Programs and Offers of third parties or of companies related to SOHA are made available to Affiliates.

2.2. The presence of a platform, product, brand, Program or Offer within the Network does not imply that it is owned, operated or controlled by SOHA, nor that any corporate relationship exists between SOHA and the relevant Program Operator.

2.3. Where the applicable Offer Terms or the arrangement between SOHA and the relevant Program Operator so provide, a Program Operator may establish specific admission, compliance, territorial, traffic-source and promotional requirements for its Programs, and may accept or reject an Affiliate for a specific Offer. SOHA may in any event accept or reject an Affiliate for any Offer at its own discretion. Acceptance into the Network does not create any automatic right to promote any or all Programs or Offers.

2.4. Where the applicable Offer Terms or the arrangement between SOHA and the relevant Program Operator grant it such rights, a Program Operator may request or require that an Affiliate cease promoting its Program, suspend specific campaigns, or stop sending specific traffic, and SOHA may implement any such decision by suspending or removing the Affiliate from the relevant Offer. SOHA may in any event suspend or remove an Affiliate from any Offer, and may suspend or remove an entire Offer or Program from the Network, at any time.

2.5. SOHA assumes no liability for commercial, compliance, admission, suspension or termination decisions adopted by a Program Operator, except to the extent mandatory applicable law provides otherwise.

2.6. Participation in the Network creates no contractual, corporate, employment, fiduciary, agency or representation relationship between the Affiliate and any Program Operator, unless expressly established otherwise in the Offer Terms of a specific Offer.

3. Acceptance, Eligibility and Account

3.1. This Agreement is a binding contract between SOHA and the Affiliate. Acceptance occurs through the electronic click-wrap mechanism upon registration or, for pre-existing affiliates, upon first access to the dashboard following publication of this Agreement. SOHA records the IP address, date, time and version of the Agreement accepted, which the parties acknowledge as conclusive evidence of consent.

3.2. The Affiliate represents and warrants that: (i) all registration information is true, complete and current, and will be kept updated; (ii) the Affiliate is at least 18 years old (or the higher age of majority applicable in its jurisdiction) and has full legal capacity; (iii) if acting on behalf of an entity, the individual accepting this Agreement has authority to bind it; (iv) neither the Affiliate nor its beneficial owners appear on sanctions lists of OFAC, the EU or the UK, nor operate from embargoed territories.

3.3. SOHA may accept or reject applications, and suspend or terminate accounts, at its sole discretion, including where the Affiliate's channels are incompatible with applicable law, the requirements of card networks (Visa Global Brand Protection Program, Mastercard BRAM), or the requirements of SOHA's or any Program Operator's acquirers and processors.

3.4. One beneficial owner may not operate more than one (1) account without SOHA's prior written consent. Registration by bots or automated scripts is prohibited.

3.5. SOHA may amend this Agreement upon no less than fifteen (15) days' electronic notice (dashboard and/or email). Continued use of the Network after the effective date of an amendment constitutes acceptance. If the Affiliate does not accept an amendment, its sole remedy is termination with settlement of legitimately accrued commissions. Operational and commercial changes to Offers are governed by Clause 5 and do not constitute amendments to this Agreement.

4. Adult Content; Absolute Prohibitions

4.1. Offers available through the Network may include adult-entertainment platforms intended exclusively for adults. The Affiliate acknowledges this and represents that its participation and promotional channels are lawful in its jurisdiction of operation and in the jurisdictions to which it directs traffic.

4.2. The Affiliate shall: (i) not direct any promotion to minors or to audiences reasonably expected to include a significant presence of minors; (ii) label its adult-content sites with industry standards (e.g., the RTA meta-label); (iii) display adult-content warnings and age interstitials where required by local law; (iv) comply with any age-verification or age-assurance requirement applicable in the end user's jurisdiction; and (v) not circumvent, nor assist in circumventing, the age-verification systems of any Program.

4.3. Participation is absolutely prohibited for channels that host, link to, promote or monetize: (a) child sexual abuse material or any sexualization of minors, whether real, simulated or AI-generated; (b) non-consensual intimate imagery, content recorded or distributed without verifiable consent, or sexual "deepfakes" of real persons without their consent; (c) bestiality, necrophilia, real incest, real rape or depictions promoting real sexual violence; (d) human trafficking, illegal prostitution or facilitation of paid sexual encounters where illegal; (e) pirated content, including content stolen from any Program or its creators; (f) malware, phishing or fraud; (g) any category prohibited by Visa/Mastercard rules applicable to adult-content commerce.

4.4. Detection of content in category 4.3(a) or (b) will result in immediate termination, forfeiture of all commissions, reporting to competent authorities and to NCMEC or the equivalent body, and preservation of evidence.

5. Programs and Offers; Offer Terms; Changes and Traffic Redirection

5.1. The specific conditions of each Offer are set out in the Offer Terms published in the affiliate dashboard and form part of the conditions applicable to that Offer. In the event of conflict on a commercial matter specific to an Offer, the Offer Terms prevail over this Agreement for that Offer, without affecting the remainder of this Agreement.

5.2. SOHA may, at its discretion: add new Offers; modify, suspend or withdraw existing Offers; modify landing pages, creatives or territories; change commercial conditions prospectively; modify link destinations; and substitute one Offer for another.

5.3. Traffic redirection. SOHA may redirect incoming traffic to the Offer it considers most suitable or best available at any given time, based on criteria including availability, territory, device, compliance, conversion, performance, Program Operator restrictions or other commercial or technical criteria. The Affiliate acquires no permanent right to have any given link direct indefinitely to a specific platform, product, landing page or Offer.

5.4. Redirection and Offer changes apply to new and future traffic. They do not affect the attribution of existing validly attributed Customers, which is governed by Clause 8.5.

6. Marketing and Traffic Restrictions

Breach of any of the following prohibitions constitutes a material breach and generates Invalid Traffic (Clause 11):

6.1. Brand bidding and typosquatting. The Affiliate shall not bid on search-engine keywords incorporating the trademarks of SOHA, the Network or any Program (including variations, misspellings and combinations), use such marks as display or destination URLs in paid search, register domains, subdomains or social profiles confusingly similar to such marks, or cloak URLs.

6.2. Attribution manipulation. Cookie stuffing, injection of cookies or affiliate parameters without a genuine and voluntary user click, hidden iframes, automatic redirects, forced or simulated clicks, and any technique attributing to the Affiliate traffic or conversions not genuinely generated by it, are prohibited.

6.3. Media buying, audiences and remarketing. All media buying (display, native, push, pop, email, retargeting/remarketing networks or any other format) must be conducted on legitimate, identifiable and auditable inventory, and on audiences lawfully acquired by the Affiliate on its own assets, with the legal basis and consent required by applicable law (including, where applicable, the GDPR and ePrivacy rules). It is prohibited to: (i) target users already existing in, or already attributed within, any Program in order to re-attribute their activity to the Affiliate; (ii) use segments, pixels or audience data of SOHA or of any Program beyond what is expressly authorized in writing; (iii) acquire traffic through adware, browser extensions, pre-installed software or opaque, non-auditable inventory.

6.4. Software. The use or distribution of malware, spyware, adware, downloads without affirmative user action, and applications that overlay, hide or replace third-party or SOHA advertising or content, is prohibited.

6.5. Communications. Spam is prohibited. The Affiliate shall comply with the CAN-SPAM Act, GDPR/ePrivacy and equivalent rules of every jurisdiction to which it sends communications, and shall only use databases with demonstrable consent.

6.6. Incentivized traffic. Incentivized traffic (paying or rewarding users for clicks, sign-ups or purchases) is prohibited unless expressly permitted by the applicable Offer Terms.

6.7. Sub-affiliates prohibited by default. Sub-affiliates, affiliate networks, brokers, resellers and any redistribution of affiliate links are prohibited unless SOHA grants prior, express, written authorization, which will be exceptional and may be subject to additional conditions. Where exceptionally authorized: the principal Affiliate is fully responsible for all activity of its sub-affiliates; must identify them and maintain documentation on them; SOHA may audit them; and any breach by a sub-affiliate is deemed a breach by the principal Affiliate.

6.8. Advertising transparency. The Affiliate shall clearly and conspicuously disclose its material connection with SOHA and the Programs in accordance with the FTC Endorsement Guides (16 CFR Part 255) and, in respect of EEA audiences, Directive 2005/29/EC on unfair commercial practices and applicable advertising-transparency rules. All statements about any Program must be truthful and based on the official materials provided.

7. Affiliate Guidelines

7.1. SOHA may publish and update Affiliate Marketing Guidelines, Compliance Guidelines and Program Policies, which are incorporated into this Agreement by reference.

7.2. SOHA may: review campaigns and creatives; require modifications; prohibit specific claims; order the removal of advertising; require disclosures; impose age-assurance requirements; prohibit traffic sources or methods; and order the immediate suspension of any campaign where there is legal, regulatory, reputational, payment-processing or card-scheme compliance risk.

7.3. The Affiliate shall comply with such instructions within the period indicated or, where urgency or compliance so requires, immediately.

8. Commissions: Net Revenue, Lifetime Revenue Share and Attribution

8.1. Default commission. Unless the applicable Offer Terms expressly state otherwise, the Affiliate earns a revenue share equal to fifty percent (50%) of the Net Revenue generated by each validly attributed Customer, on a lifetime basis: the revenue share applies to all eligible spend of that Customer within the relevant Program — including initial purchases, subscriptions, renewals, rebills, upgrades and additional purchases — for as long as the Customer remains validly attributed to the Affiliate under this Agreement.

8.2. Net Revenue means one hundred percent (100%) of the amounts actually paid by and collected from the Customer, excluding only applicable taxes, and subsequently adjusted for refunds, reversals and chargebacks pursuant to Clause 10. For the avoidance of doubt, and unless the applicable Offer Terms expressly provide otherwise, payment-processing fees, acquiring fees, network fees, operational costs and other platform expenses are not deducted from the revenue base.

8.3. Eligible Customers. Commissions accrue only in respect of new, unique and legitimate Customers referred through the Affiliate's official tracking links. No commission accrues where: (i) the Affiliate is in breach of this Agreement at the time of the transaction; (ii) the transaction derives from Invalid Traffic; (iii) the Customer already existed in the relevant Program's databases or was attributed to another channel; (iv) compensation is prohibited by law; (v) the Customer or the Affiliate is subject to international sanctions.

8.4. Attribution windows. Unless the applicable Offer Terms provide otherwise: (a) prospecting traffic (users with no prior interaction with the relevant Program): seven (7) days from the click; (b) retargeting/remarketing traffic (users previously impacted or with prior interaction): twenty-four (24) hours from the click. The Affiliate must declare and correctly label the traffic type of each campaign and source in accordance with the technical parameters of the dashboard. The final classification of traffic type rests with SOHA on the basis of its technical records.

8.5. Lifetime attribution and Offer changes. Existing validly attributed Customers retain their lifetime attribution under the rules of the Offer through which they were acquired, notwithstanding any redirection of new traffic or modification of Offers under Clause 5, except in cases of fraud, Invalid Traffic, chargebacks, breach of this Agreement, or any other cause of loss of attribution provided for in this Agreement. Lifetime attribution subsists only for as long as both of the following conditions are met: (a) the relevant Program remains available through the Network and SOHA continues to receive the corresponding revenue and transaction data from the Program Operator; and (b) the Affiliate's account remains active and in good standing. If a Program is withdrawn from the Network, the Program Operator ceases to report or remit, or the Affiliate's account is terminated, closed, deleted or blocked for any reason, attribution-based commissions cease prospectively from that date, without affecting commissions already validly accrued and payable (which, in case of termination for fraud or material breach, remain subject to Clauses 11 and 13).

8.6. Canibalization. Inducing existing Customers of any Program to cancel and reactivate accounts in order to generate attribution to the Affiliate is prohibited.

9. Payments, Invoicing, Threshold and KYC

9.1. Payment cycle. Validated commissions for each calendar month are paid on the twentieth (20th) day of the following month (or the next business day), subject to the Affiliate requesting the corresponding invoice through its dashboard within the enabled period. Payment is made exclusively by bank wire transfer to an account whose ownership matches that of the registered Affiliate; bank fees of the payment method are deducted from gross commission.

9.2. Invoices must be issued to SOHA Media Systems Corp with the details published in the dashboard, match exactly the validated commission amount reflected in the dashboard, and comply with the tax requirements of the Affiliate's jurisdiction (including, where applicable, VAT or equivalent tax identification). Late, incorrect or discrepant invoices are processed in the next monthly cycle. Dashboard records constitute the sole valid source for commission computation.

9.3. Minimum payout threshold. The minimum payout is fifty US dollars (USD 50). Balances below the threshold accumulate and roll over until the threshold is reached. Failure to reach the threshold within any given period does not cause the loss of legitimately accrued commissions.

9.4. Dormant and unpayable accounts. Where payment is impossible for a continuous period of twenty-four (24) months due to the Affiliate's failure to provide or update required KYC, tax or banking documentation, despite at least two written notices from SOHA, the balance will be handled in accordance with applicable unclaimed-property law. Nothing in this Clause limits SOHA's rights under Clauses 10, 11 and 13 in respect of fraud, Invalid Traffic or breach.

9.5. KYC. As a condition for account activation and for the processing of any payment, the Affiliate shall provide through the dashboard, and keep updated: (i) official identification of the account holder or, for entities, incorporation documents, registered address and beneficial-ownership information; (ii) applicable tax forms (W-9 / W-8BEN / W-8BEN-E) and, where applicable, VAT number; (iii) verifiable payment details matching the registered Affiliate. SOHA may re-verify this documentation at any time and suspend payments — without interest or penalty — while verification is incomplete or discrepancies exist. SOHA will apply legally required withholdings.

10. Refunds, Chargebacks and Fraud Adjustments

10.1. Refunds, chargebacks, payment reversals, fraudulent transactions and any other amounts subsequently cancelled or returned are charged against the revenue generated by the Affiliate and may be deducted from pending or future commissions.

10.2. A fraud, chargeback or reversal ratio exceeding one percent (1%) of the Affiliate's transactions or volume may constitute grounds for review, suspension or termination of the account. The 1% figure is not a safe harbour and does not authorize the maintenance of fraud up to that level: SOHA retains the right to act below 1% where patterns, circumstances or evidence of fraud, Invalid Traffic, manipulation or compliance risk exist.

11. Invalid Traffic; Material or Systematic Fraud

11.1. "Invalid Traffic" means any click, registration, conversion or sale generated, in whole or in part, through: breach of Clause 6; bots, click farms or user emulation; self-referrals; stolen or fraudulent payment data; manipulation of attribution or of cookie windows; incorrect declaration or labelling of traffic type, including presenting retargeting/remarketing traffic as prospecting traffic in order to benefit from a longer attribution window; campaigns targeting existing users in breach of Clause 6.3; concealed, falsified or incorrectly declared traffic sources; or any other practice that a reasonable industry operator would classify as attribution or traffic fraud.

11.2. The determination of Invalid Traffic rests with SOHA, acting reasonably and on the basis of its technical records (server logs, anti-fraud systems, payment-processor data), which the parties accept as prima facie evidence.

11.3. Consequences of Invalid Traffic: (i) cancellation of associated unpaid commissions; (ii) SOHA's right to claw back commissions already paid deriving from Invalid Traffic detected within twenty-four (24) months of payment, by set-off against present or future balances or by reimbursement due from the Affiliate within thirty (30) days of demand; (iii) precautionary suspension of the account and of all payments during investigation; (iv) termination under Clause 17.

11.4. Material or systematic fraud. Where SOHA reasonably determines that an Affiliate, its account or its operation is materially or systematically fraudulent, SOHA is entitled to: immediate termination; cancellation and forfeiture of all pending commissions; clawback where applicable; account blocking; preservation of evidence; and notification to payment processors, Program Operators or authorities where appropriate. In such cases, SOHA is not obliged to reconstruct each conversion individually in order to separate allegedly legitimate traffic from fraudulent traffic. Clause 4.4 consequences remain unaffected and apply in addition where relevant.

12. Audit, Traffic-Source Disclosure and Third-Party Verification

12.1. The Affiliate shall declare upon registration, and keep updated in the dashboard, all its traffic sources (domains, applications, advertising networks, social networks, email lists, retargeting networks and intermediary providers). Sending traffic from undeclared sources constitutes a material breach.

12.2. The Affiliate shall retain for at least twenty-four (24) months, and deliver to SOHA within ten (10) business days of a written request, complete and verifiable documentation of its activity, including as applicable: (a) list of sources, placements and origin URLs; (b) creatives, landing pages and copy used; (c) impression, click and conversion logs with timestamps, IPs or equivalent identifiers and referrers; (d) acquisition methodology and, for retargeting campaigns, audience origin, legal basis for processing and evidence of user consent; (e) identity of sub-networks, sub-affiliates and inventory providers; (f) invoices and proof of media purchases.

12.3. Direct third-party verification. Where reasonably necessary for fraud, compliance, attribution or audit purposes, SOHA may verify the information provided by the Affiliate directly with advertising networks, traffic providers, media-buying platforms, Program Operators, payment processors, anti-fraud providers and other relevant third parties. The Affiliate authorizes such verifications and shall reasonably cooperate with them. Unjustified refusal to permit a reasonable verification constitutes a breach and justifies suspension of payments during the investigation.

12.4. During an audit or verification, SOHA may suspend payments to the Affiliate without accruing any interest or penalty.

12.5. Failure to deliver, incomplete delivery, or delivery of falsified documentation within the deadline establishes the presumption that the affected traffic is Invalid Traffic, with the consequences of Clause 11.3, including definitive forfeiture of withheld commissions.

12.6. SOHA may engage external auditors or anti-fraud providers subject to confidentiality. The Affiliate shall cooperate in good faith.

13. Set-Off and Security

13.1. SOHA may set off against any balance of the Affiliate: cancelled commissions, clawback amounts, chargebacks, fines or penalties imposed on SOHA or any Program Operator by card networks, acquirers or processors as a result of the Affiliate's traffic, and reasonable investigation costs of substantiated breaches.

13.2. Pending balances constitute security for the Affiliate's obligations under this Agreement until settled.

13.3. Third-party settlement risk. In respect of Programs operated by Program Operators that are not members of SOHA's corporate group, SOHA's obligation to pay the corresponding commissions is conditional upon SOHA's actual receipt of the corresponding revenues and transaction data from the relevant Program Operator. This Clause does not affect SOHA's obligation to correctly calculate and pay commissions on amounts actually received.

14. Data Protection

14.1. Each party acts as an independent controller of the personal data it collects on its own assets. The Affiliate is solely responsible for compliance with data-protection law applicable to its acquisition activity (including GDPR and ePrivacy rules where it processes data of EEA/UK users), including publishing its own privacy policy and obtaining valid consents for cookies and tracking technologies.

14.2. SOHA will only return to the Affiliate pseudonymized or anonymized conversion indicators for attribution purposes. The Affiliate shall not attempt to re-identify users, extract or infer personal data of Customers, or transfer personal data of users to SOHA beyond what is strictly necessary for attribution.

14.3. The Affiliate shall indemnify SOHA for any fine, claim or cost arising from the Affiliate's breach of data-protection law.

15. Intellectual Property

15.1. SOHA grants the Affiliate a limited, revocable, non-exclusive, non-transferable and non-sublicensable license over the trademarks and official promotional materials of the Network and, as authorized per Offer, of the relevant Programs, for the sole purpose of promoting Offers in accordance with this Agreement. The license terminates automatically upon termination or suspension of the account or of the relevant Offer.

15.2. It is prohibited to register or use domains, trademarks, profiles or identifiers confusingly similar to the marks of SOHA, the Network or any Program; to alter official creatives without authorization; or to use Program content (videos, images, creator content) beyond the materials expressly provided.

15.3. Metrics data, click records, customer databases and Network configurations are the exclusive property of SOHA and constitute trade secrets.

16. Independent Contractors

The Affiliate and SOHA are independent contractors. Nothing in this Agreement creates a partnership, joint venture, agency, franchise or employment relationship. The Affiliate has no power to represent or bind SOHA or any Program Operator vis-à-vis third parties.

17. Term, Suspension and Termination

17.1. Either party may terminate this Agreement at any time, with or without cause, by written notice or account deactivation. SOHA may precautionarily suspend the account and payments with immediate effect upon reasonable suspicion of fraud, illegality or material breach.

17.2. Upon termination, the Affiliate shall immediately cease using, and remove from its channels within five (5) days, all links, marks and materials of the Network and the Programs.

17.3. Following termination, SOHA may withhold the final payment for up to ninety (90) days to absorb refunds, reversals and chargebacks attributable to the Affiliate's traffic.

17.4. Clauses 4.4, 10, 11, 12, 13, 14.3, 15.3, 18, 19, 20 and 22 survive termination.

18. Disclaimers; Limitation of Liability

18.1. THE NETWORK, THE PROGRAMS AND THE OFFERS ARE PROVIDED "AS IS" AND "AS AVAILABLE". SOHA does not warrant or guarantee: uninterrupted availability of tracking, links or the dashboard; the permanent availability of any Program or Offer; the acceptance of the Affiliate by any Program Operator; the continuity of any Offer; conversion rates; the permanence of any commercial conditions; the availability of any territory; or any revenue volume for the Affiliate. SOHA is not responsible for commercial or compliance decisions taken by independent Program Operators.

18.2. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SOHA SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE OR CONSEQUENTIAL DAMAGES, INCLUDING LOST PROFITS, LOSS OF DATA OR GOODWILL AND BUSINESS INTERRUPTION, EVEN IF ADVISED OF THEIR POSSIBILITY.

18.3. SOHA'S TOTAL AGGREGATE LIABILITY TO THE AFFILIATE SHALL NOT EXCEED THE LESSER OF: (i) THE COMMISSIONS ACTUALLY PAID TO THE AFFILIATE IN THE THREE (3) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (ii) ONE THOUSAND FIVE HUNDRED US DOLLARS (USD 1,500). Nothing in this Clause 18 limits SOHA's obligation to correctly calculate and pay commissions validly accrued and payable under this Agreement.

19. Indemnification

The Affiliate shall indemnify, defend and hold harmless SOHA, its parents, subsidiaries, affiliates, Program Operators, officers, employees and agents from and against any claim, penalty, damage, cost and expense (including reasonable attorneys' fees) arising from: (a) the Affiliate's breach of this Agreement; (b) the Affiliate's violation of any law or regulation (including FTC rules, data-protection law and card-network rules); (c) the Affiliate's promotional activity, traffic sources and data processing; (d) the Affiliate's fraud, willful misconduct or gross negligence.

20. Governing Law; Venue; Class Action Waiver

20.1. This Agreement is governed by the laws of the State of Texas, USA, excluding its conflict-of-laws rules.

20.2. The parties irrevocably submit to the exclusive jurisdiction of the state or federal courts located in Harris County, Texas, waiving any objection based on jurisdiction, venue or forum non conveniens. Nothing in this Agreement deprives the Affiliate of the protection of provisions of law that cannot be derogated from by agreement under the mandatory rules of the jurisdiction in which the Affiliate is established, to the extent such rules are imperatively applicable notwithstanding the choice of law and forum herein.

20.3. THE AFFILIATE WAIVES ANY RIGHT TO PARTICIPATE IN CLASS, CONSOLIDATED OR REPRESENTATIVE ACTIONS. All disputes shall be pursued exclusively on an individual basis.

20.4. Before initiating any litigation (except urgent injunctive relief to protect intellectual property, funds or evidence), the parties shall negotiate in good faith for thirty (30) days upon written request of either party.

21. Pre-Existing Affiliates and Prior Balances

21.1. For affiliates participating in the Network prior to the publication of this Agreement, acceptance of this Agreement is a condition for the maintenance of the account and for the processing of any pending payment.

21.2. Acceptance does not validate prior conduct: SOHA fully retains its rights and actions in respect of fraud, Invalid Traffic or breaches predating acceptance, including the right to audit historical traffic under Clause 12 in respect of balances not yet settled.

22. General Provisions

22.1. Entire agreement. This Agreement, together with the Affiliate Guidelines, the applicable Offer Terms, the Privacy Policy and the Cookie Policy incorporated by reference, constitutes the entire agreement between the parties and supersedes all prior communications or arrangements, oral or written.

22.2. Severability. The invalidity of any clause does not affect the remainder; the affected clause shall be reformed to the minimum extent necessary to preserve the parties' commercial intent.

22.3. No waiver. Failure to exercise a right does not constitute a waiver.

22.4. Assignment. The Affiliate may not assign this Agreement without SOHA's written consent. SOHA may assign it to group entities or in the context of a reorganization or business transfer.

22.5. Notices to SOHA: in writing, by hand delivery, certified mail or recognized courier to SOHA Media Systems Corp, 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA, with electronic copy to the legal address published in the dashboard.

22.6. Language. This Agreement is executed in English. Any courtesy translation provided is for information only; the English version is the sole binding version.

© SOHA Media Systems Corp. All rights reserved.

WANT-A-TOP PRIVACY POLICY Version 2.1 — Effective Date: August 19, 2026 Controller: SOHA Media Systems Corp, a corporation organized under the laws of the State of Wyoming, USA — EIN 42-2677063 Principal place of business: 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA Privacy contact: privacy@wantatop.com

1. Scope and Roles

1.1. This Privacy Policy explains how SOHA Media Systems Corp ("SOHA", "we", "us") processes personal data in connection with the Want-A-Top affiliate network (the "Network"). Want-A-Top is an affiliate technology network and marketplace through which promotional programs and offers ("Programs" and "Offers") of different products, websites, services and platforms may be made available to affiliates. Program Operators may be companies related to SOHA, independent companies, or other third parties with which Want-A-Top has commercial arrangements. Nothing in this Policy implies that SOHA owns, controls or operates the products or platforms promoted through the Network.

1.2. This Policy covers two distinct processing activities carried out by SOHA as operator of the Network:

• Affiliate Data: personal data of individuals who register for, participate in, or represent entities participating in, the Network — including account holders, authorized signatories and beneficial owners of corporate affiliates ("Affiliates").
• Referral and Attribution Data: certain technical data relating to end users who interact with affiliate links, which SOHA processes as a consequence of operating the Network's tracking and attribution system (Section 3).

1.3. Each Program Operator is independently responsible for the processing it carries out on its own platforms, including account registration, customer profiles, subscriptions, content consumption, billing and customer relationships, customer support and, where applicable, age verification. Such processing is governed by the Program Operator's own privacy policy. SOHA describes and assumes responsibility in this Policy only for the processing it actually performs in its role as operator of the Network.

1.4. Affiliates act as independent controllers of the personal data they collect on their own websites, applications and channels, and are responsible for their own privacy notices and consent management, as required by the Want-A-Top Master Affiliate Agreement (the "Agreement").

2. Affiliate Data We Collect

2.1. At registration

• Name or business name, country, email address and, where provided, telephone number and messaging handles used for commercial contact.
• Account credentials.
• Declared traffic sources (domains, applications, networks and channels through which the Affiliate intends to promote Offers).
• Evidence of contract acceptance: IP address, date, time and version of the Agreement accepted through the click-wrap mechanism.

2.2. When a payout is first requested (KYC verification)

Before processing any payment, we collect and verify:

Individuals: (a) official photo identification (passport or national ID); (b) recent proof of address (issued within the last 3 months); (c) applicable tax form (W-8BEN for non-U.S. persons; W-9 for U.S. persons); (d) proof of bank account ownership matching the registered Affiliate.

Entities: (a) certificate of incorporation or commercial-registry extract; (b) evidence of the signatory's authority; (c) beneficial-ownership declaration identifying every individual holding twenty-five percent (25%) or more, with official identification of each beneficial owner; (d) applicable tax form (W-8BEN-E or W-9) and, for EU entities, VAT number; (e) proof of bank account ownership in the entity's name; (f) proof of business address where different from the registered address.

Some of these elements respond to legal obligations applicable to SOHA (in particular tax documentation, withholding and reporting, and compliance with sanctions regimes where applicable); others are contractual risk controls that SOHA applies to protect payment integrity, verify identity, prevent duplicate or fraudulent accounts and protect the Network. Section 4 assigns the corresponding legal basis to each purpose.

2.3. Generated during participation

• Dashboard activity, campaign statistics, click and conversion data, commission and payment records, and invoices.
• Access and security data: login IP addresses, device and browser information, and cookies used on the dashboard (see Section 10).
• Results of sanctions screening (OFAC, EU, UK) and fraud- and compliance-related checks, risk assessments and account investigation records concerning the Affiliate's account.
• Support tickets and commercial correspondence.
• Where requested under the Agreement's audit provisions: traffic documentation provided by the Affiliate, including source lists, placements, creatives, traffic logs, audience-origin information and media-purchase invoices.

2.4. Personal data we receive from third parties

Depending on the circumstances, SOHA may receive information relating to an Affiliate from third parties, including: Program Operators; advertising networks; traffic providers; media-buying platforms; payment institutions and banks; fraud-prevention providers; identity/KYC verification providers; sanctions-screening providers; card schemes and payment processors where applicable; auditors; publicly available sources; and other third parties reasonably used for compliance, verification, security or fraud prevention.

Such information may relate to: traffic sources; campaign activity; attribution; conversions; payment events; refunds; chargebacks; fraud indicators; compliance incidents; sanctions matches; identity verification outcomes; and discrepancies detected during audits.

In particular, where reasonably necessary for fraud prevention, attribution verification, traffic-quality verification, contractual enforcement, compliance, security, payment integrity or the defense of legal claims, SOHA may verify information provided by an Affiliate directly with relevant third parties (advertising networks, traffic providers, media-buying platforms, Program Operators, payment providers, fraud-prevention providers and other relevant providers). These verifications may involve the exchange and receipt of personal data relating to the Affiliate, limited to what is reasonably necessary for those purposes.

3. Referral and Attribution Data (End Users)

3.1. When an end user clicks an affiliate link, the Network's tracking and attribution system processes certain technical data. Depending on the technical implementation, this may include: affiliate and campaign identifiers; click IDs; timestamps; source and referrer information; IP address where processed; device and browser information; the Offer or Program destination; conversion events and transaction or conversion values reported back for commission calculation; attribution information; and other technical identifiers necessary for tracking, attribution, fraud prevention and commission calculation.

3.2. This data identifies end users pseudonymously: SOHA does not receive names, contact details, payment credentials or account content of end users of the Programs, and does not seek to identify end users directly. Referral and Attribution Data is not anonymous where it includes online identifiers such as IP addresses or click IDs, and it is treated as personal data where applicable law so requires.

3.3. SOHA processes Referral and Attribution Data for the following purposes: affiliate attribution; determining commission eligibility; preventing duplicate attribution; distinguishing valid and invalid traffic; fraud prevention; campaign measurement; the technical operation of affiliate links; routing traffic to Programs and Offers; enforcing attribution windows; resolving attribution disputes; security; and generating aggregated or pseudonymized reporting.

3.4. Traffic routing. Certain technical and contextual data (country or approximate location, device, browser, traffic source, campaign, Offer availability, Program restrictions, compliance requirements and performance criteria) may be used to select or route the most appropriate available Offer for a given click. This routing determines the destination of a promotional link and does not produce legal or similarly significant effects concerning the end user.

3.5. The attribution windows applied by the Network are short by design (by default, seven (7) days for prospecting traffic and twenty-four (24) hours for retargeting traffic), which limits the duration of active tracking.

3.6. Where cookies or similar technologies are stored on or read from an end user's device for these purposes, the applicable consent requirements are addressed in the Want-A-Top Cookie Policy and through the consent mechanisms deployed on the affiliate's properties and on the Program landing environments, as allocated in the Agreement and the applicable Offer arrangements.

4. Purposes and Legal Bases

For individuals in the European Economic Area or the United Kingdom, the legal bases under the GDPR/UK GDPR are as follows:

Affiliate Data:

Purpose

	Legal basis (EEA/UK)
	Creating and managing the account; operating tracking, attribution, reporting and the dashboard; Network communications
	Performance of a contract (Art. 6(1)(b))
	Tax documentation, withholding and reporting (including IRS reporting such as Forms 1099/1042 where applicable)
	Legal obligation (Art. 6(1)(c))
	Sanctions screening of account holders and beneficial owners
	Legal obligation (Art. 6(1)(c)) where applicable; otherwise legitimate interest (Art. 6(1)(f)) in complying with international sanctions regimes
	Identity, authority, beneficial-ownership and bank-details verification (KYC); prevention of duplicate or fraudulent accounts; payment integrity
	Performance of a contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f)) in protecting the Network and its payment flows
	Fraud prevention and investigation; invalid-traffic detection; audit of traffic sources and third-party verification; monitoring compliance with the Agreement and the Affiliate Guidelines (including review of campaigns, disclosures, traffic sources and prohibited content); documenting suspension, termination, forfeiture and clawback decisions; preservation of technical evidence; defense of legal claims
	Legitimate interest (Art. 6(1)(f)) in protecting the Network, the Programs, payment integrity and SOHA's legal position
	Evidencing acceptance of the Agreement and its versions
	Performance of a contract (Art. 6(1)(b)); legitimate interest (Art. 6(1)(f))
	Dashboard security and prevention of unauthorized access
	Legitimate interest (Art. 6(1)(f))
	Compliance with court orders, regulatory requests and binding card-network requirements
	Legal obligation (Art. 6(1)(c)); legitimate interest (Art. 6(1)(f))

Referral and Attribution Data (end users): the purposes listed in Section 3.3 are based on SOHA's and the Affiliates' legitimate interest (Art. 6(1)(f)) in operating a reliable attribution and anti-fraud system for the Network. Performance of a contract is not relied upon in respect of end users, who are not party to the Agreement. Where the storage of or access to information on an end user's device requires consent under applicable ePrivacy rules, that consent is obtained through the mechanisms described in Section 3.6, and the processing described here applies to data collected consistently with those rules.

Automated tools. SOHA may use automated tools for fraud scoring, sanctions screening, duplicate-account detection, traffic-quality scoring, anomaly detection and risk assessment. Significant decisions concerning an Affiliate's account — including suspension, termination, forfeiture or clawback — are reviewed and adopted with human involvement and are not based solely on automated processing.

5. Disclosures of Personal Data

We disclose personal data only as follows:

• Program Operators. The level of information available to each Program Operator depends on the structure of, and the arrangements applicable to, each Program or Offer. Depending on the Offer, a Program Operator may not know the identity of the Affiliate; may receive only an Affiliate ID or other identifiers; may receive performance and traffic information (campaign and Offer identifiers, click and conversion identifiers, conversion values, traffic-source information); may receive fraud indicators or compliance information; or, where the specific model so requires and a valid legal basis exists, may receive certain identifying information about the Affiliate. Where the conditions of an Offer or the arrangement with the relevant Program Operator grant it rights concerning Affiliate eligibility, compliance, traffic quality, suspension, restriction or termination, SOHA may process and communicate the information reasonably necessary for those purposes. The complete KYC file is not routinely shared with Program Operators and would only be disclosed where an exceptional legal or compliance need, consent where appropriate, or another valid legal basis exists. Data minimization and necessity principles apply to all such exchanges.
• Banks and payment institutions: the data required to execute wire transfers.
• Identity-verification, sanctions-screening and anti-fraud providers: acting as processors under contract with us.
• External auditors and legal advisors: where reasonably necessary for audits, investigations or the establishment, exercise or defense of legal claims, subject to confidentiality.
• Authorities, card schemes, acquirers and processors: where required by law, court order, regulatory request or binding scheme rules.
• Group companies and successors: entities of our corporate group for internal administration, and any successor in a reorganization or business transfer, under equivalent safeguards.

6. No Sale of Personal Data

SOHA does not sell personal data to third parties. The operation of the Network does not involve the sale of personal data to data brokers, advertisers or other third parties, including within the broad definitions of "sale" used by applicable U.S. state privacy laws. The disclosures described in Section 5 — to service providers and processors, Program Operators, payment institutions, verification providers and authorities — are operational disclosures necessary to run the Network and are not sales of personal data.

7. International Transfers

7.1. SOHA is established in the United States and processes personal data there. Where SOHA offers the Network to Affiliates in the EEA or the UK, it complies with the GDPR/UK GDPR in respect of that processing.

7.2. Where personal data is transferred from the EEA or the UK to recipients in countries without an adequacy decision — including onward transfers by SOHA to its processors and other recipients described in Section 5 — SOHA relies on valid transfer mechanisms for ongoing transfers, in particular the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum or applicable UK mechanism. Should SOHA certify under the EU-U.S. Data Privacy Framework (and its UK extension), that framework will apply to the transfers it covers and this Section will be updated accordingly. Derogations under Article 49 GDPR are relied upon only exceptionally, where legally appropriate for specific, non-repetitive situations, and not as a structural basis for the service.

7.3. This structure is designed so that, should Affiliates in the EEA be contracted or managed in the future by a separate European entity of the group, the transfer framework can be adapted without redesigning the system.

8. Retention

• Account and contract data (including click-wrap acceptance evidence): duration of participation plus applicable statute-of-limitations periods for contractual claims.
• KYC, tax and payment records: at least seven (7) years from the relevant payment or tax year, as required by applicable tax and accounting rules.
• Referral and Attribution Data: retained in identifiable (pseudonymous) form for as long as necessary for attribution, commission calculation, chargeback processing, fraud investigation and audit — and in any event for no less than the twenty-four (24) month clawback and audit period provided in the Agreement — after which it is deleted or aggregated/anonymized for reporting.
• Traffic, audit, fraud and compliance investigation documentation (including internal fraud records, risk assessments, investigation history, decisions and supporting evidence): at least twenty-four (24) months, and for as long as reasonably necessary to defend a suspension, termination, forfeiture or clawback decision or any related claim.
• Sanctions-screening results: duration of the relationship plus five (5) years.
• Security logs: up to twenty-four (24) months.

Retention periods are extended where an investigation, litigation, legal hold, regulatory requirement or pending dispute so requires. Upon expiry, data is deleted or irreversibly anonymized.

9. Your Rights

EEA/UK individuals have the rights of access, rectification, erasure, restriction, portability and objection (including to processing based on legitimate interest), and the right to lodge a complaint with a supervisory authority. Where processing is required by law or necessary for the contract (e.g., KYC before payment), exercising erasure or objection may make it impossible for us to process payments.

U.S. residents have the rights granted by applicable U.S. state privacy laws where their respective scope and thresholds are met — which may include confirmation of processing, access, correction, deletion, portability, opt-out rights and the right to appeal a refusal. Texas residents' rights under the Texas Data Privacy and Security Act are honored where that law applies.

To exercise any right, contact privacy@wantatop.com. We will verify your identity before responding and reply within the legally applicable period. End users wishing to exercise rights in relation to a Program should contact the relevant Program Operator; where a request concerns Referral and Attribution Data processed by SOHA, we will handle it or coordinate with the relevant parties as appropriate.

10. Cookies and Tracking Technologies

The Want-A-Top website and affiliate dashboard use cookies for authentication, session management, security, preferences and, where deployed, analytics. Separately, the Network's affiliate tracking system uses cookies and similar technologies for affiliate identifiers, attribution, referral tracking, conversion measurement, fraud prevention and the enforcement of attribution windows. Both categories are described in the Want-A-Top Cookie Policy, which forms part of this legal framework and should be read together with this Policy. This Policy governs the personal-data aspects of that tracking (Sections 3 and 4).

11. Minors

Affiliate accounts may only be held by individuals aged 18 or over (or the higher age of majority in their jurisdiction); accounts found to belong to minors will be closed. The Network's tracking services are not directed at minors, and the adult nature of certain Offers is subject to the age-assurance and audience restrictions established in the Agreement, the Affiliate Guidelines and the applicable Offer Terms.

12. Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls, segregation of the KYC repository, logging of administrative access, and contractual confidentiality and security obligations on all processors. We will notify affected individuals and competent authorities of personal-data breaches where legally required.

13. Changes to this Policy

We may update this Policy to reflect legal, technical or operational changes. Material changes will be notified through the dashboard and/or by email at least fifteen (15) days before taking effect. The version and effective date are indicated in the header.

14. Contact

SOHA Media Systems Corp — principal place of business: 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA — privacy@wantatop.com.

© SOHA Media Systems Corp. All rights reserved.

WANT-A-TOP AFFILIATE COMPLIANCE GUIDELINES Version 1.0 — Effective Date: August 19, 2026 Issued by SOHA Media Systems Corp under Clause 7 of the Want-A-Top Master Affiliate Agreement

These Guidelines are incorporated by reference into the Master Affiliate Agreement (the "Agreement") and are binding on all Affiliates. Capitalized terms have the meaning given in the Agreement. SOHA may update these Guidelines at any time; the current version is always available in the affiliate dashboard. In case of conflict, the Agreement prevails, except where these Guidelines impose stricter operational requirements, which then apply.

1. General Principles

1.1. Promote only with materials, claims and methods that you would be comfortable showing to SOHA, the relevant Program Operator, a card network and a regulator at the same time. If you would not, do not run the campaign.

1.2. You are responsible for every property, campaign, creative and traffic source you use, including those operated by providers you engage. "My traffic provider did it" is not a defense under the Agreement.

1.3. When in doubt about whether a campaign, claim, source or placement is permitted, ask SOHA through the dashboard before launching. Prior review or approval of a campaign, creative or source by SOHA is not a safe harbour: it does not waive any provision of the Agreement or these Guidelines, does not validate information the Affiliate provided inaccurately or incompletely, and does not limit SOHA's rights under Clauses 10, 11 and 17 of the Agreement if the campaign as actually run is non-compliant.

2. Creatives and Claims

2.1. Only official materials. Use only the creatives, banners, landing pages and copy provided through the dashboard for each Offer, or materials you have submitted to SOHA for approval. Do not alter official creatives (cropping to remove labels, changing text, adding overlays) without written approval.

2.2. Prohibited claims. Never state or imply that: (a) content is "free" when a paid subscription or purchase is required; (b) a Program offers services it does not offer (e.g., dating, escort services, live meetings with performers); (c) specific individuals appear on a Program unless they verifiably do; (d) earnings, outcomes or experiences are guaranteed; (e) a Program is endorsed by a celebrity, brand or platform that has not endorsed it.

2.3. Prohibited framing. Do not use in any creative, ad text, domain, hashtag or targeting: terms, imagery or styling that suggests minors or "barely legal" framing (school uniforms, childlike settings, age-ambiguous descriptors); non-consent, coercion or incapacitation framing; content categories listed as absolutely prohibited in Clause 4.3 of the Agreement.

2.4. Deceptive formats. No fake system warnings, fake video players, fake messenger notifications, fake "you have won" prompts, misleading close buttons, or creatives designed to be confused with the user interface of another product.

3. Advertising Disclosures

3.1. United States (FTC). Where your audience includes U.S. users, disclose your material connection clearly and conspicuously per the FTC Endorsement Guides (16 CFR Part 255). The disclosure must be unavoidable, in the same language as the content, and placed before the affiliate link or interaction. Acceptable examples: "Ad", "Advertising", "#ad" at the beginning of a post, "This post contains affiliate links — I earn a commission from purchases", clearly visible at the top of the content. Not acceptable: "#sp", "#collab", disclosures buried below the fold, in a bio only, or in a wall of hashtags.

3.2. EEA/UK audiences. Commercial communications must be identifiable as such (Directive 2005/29/EC and national implementations; UK CAP Code where applicable). Editorial content that conceals its commercial intent ("advertorial" without labeling) is prohibited.

3.3. Disclosures are required in every format: websites, blogs, social posts, video (verbal or on-screen at the start), email (subject or header area), and push notifications where technically feasible.

4. Adult-Content Handling and Age Protection

4.1. Labeling. Every Affiliate website or property that displays adult content or adult creatives must include the RTA meta-label (RTA-5042-1996-1400-1577-RTA) and communicate its adult nature in metadata and site descriptions.

4.2. Warning pages. Where required by the law of a targeted jurisdiction, display an adult-content warning or age interstitial before adult content is visible.

4.3. Audience placement. Do not place adult creatives or links on: properties directed at or attractive to minors; general-audience platforms in violation of their content policies; school, gaming-for-kids, homework, or family-oriented environments; or any inventory where age-appropriate targeting cannot be reasonably assured.

4.4. Age assurance. Where an Offer or a jurisdiction requires age verification or age assurance at the landing environment, do not attempt to bypass, deep-link around, or otherwise circumvent it, and do not advertise circumvention.

4.5. Search and social. Comply with the adult-advertising policies of each platform you use. A platform ban resulting from your violation of its policies is your responsibility and may constitute a breach of the Agreement where it affects a Program.

5. Traffic Sources

5.1. Declared sources only. Route traffic only from sources declared in your dashboard profile (Clause 12.1 of the Agreement). Add new sources before using them.

5.2. Prohibited sources and methods (non-exhaustive; see also Clause 6 of the Agreement): undisclosed or unauditable inventory; adware, browser toolbars/extensions and pre-installed software; auto-redirect chains that conceal origin; domain parking on trademarked or typo domains; incentivized clicks/sign-ups unless expressly permitted by the Offer Terms; purchased email lists without demonstrable consent; peer-to-peer or piracy environments; traffic exchanges and bot marketplaces.

5.3. Pop and pop-under traffic. Pop and pop-under traffic is permitted, subject to the applicable Offer Terms, provided it comes from legitimate, identifiable and auditable inventory and is correctly declared as a source. Prohibited in all cases: session hijacking or navigation trapping; forced or simulated clicks; stacked or chained pops designed to inflate impressions or manipulate attribution; and any pop technique that injects affiliate parameters without a genuine user interaction.

5.4. Geographic restrictions. Each Offer may define Allowed and Restricted GEOs in its Offer Terms. Send traffic only from and to Allowed GEOs. It is prohibited to circumvent or assist users in circumventing geographic restrictions, including by masking, mislabeling or re-routing the origin of traffic (proxying, GEO spoofing of campaign parameters) or by deliberately targeting Restricted GEOs through intermediary inventory. Traffic from Restricted GEOs generates no commission and, where circumvention is deliberate, constitutes Invalid Traffic.

5.5. Retargeting/remarketing. Only over audiences you lawfully built on your own properties with valid consent. Label all retargeting traffic as such in the dashboard. Presenting retargeting traffic as prospecting is Invalid Traffic (Clause 11.1 of the Agreement).

5.6. Email. CAN-SPAM, GDPR/ePrivacy and local equivalents apply: accurate sender identity, truthful subject lines, functioning unsubscribe honored within the legal period, physical address where required, and adult-content labeling of the message where required by law.

6. Data Protection Duties of the Affiliate

6.1. Publish your own privacy policy and cookie policy on every property that collects personal data or sets tracking technologies.

6.2. Obtain valid consent for cookies and tracking on your properties where required (EEA/UK ePrivacy rules and equivalents), including for any pixels or tags related to your campaigns.

6.3. Never transmit end-user personal data (names, emails, payment data) to SOHA beyond the technical attribution parameters, and never attempt to re-identify users of any Program.

7. Campaign Review and Compliance Instructions

7.1. SOHA may at any time request copies of your live campaigns, creatives, landing pages, placements and targeting settings. Respond within the deadline stated in the request.

7.2. Urgent instructions. Where SOHA identifies a legal, regulatory, card-scheme, payment-processing or reputational risk, it may instruct you to pause or modify a campaign immediately. Compliance deadlines in urgent instructions may be as short as 24 hours or immediate effect. Failure to comply is a material breach.

7.3. Enforcement. SOHA determines the appropriate response to each finding at its sole discretion, taking into account gravity, intent, recurrence and risk. Depending on the circumstances, SOHA may require correction, suspend a campaign or an Offer, suspend payments, or proceed directly to account review, termination and the remedies of Clauses 10, 11 and 17 of the Agreement — including on a first violation where it is sufficiently serious (including, without limitation, prohibited-content findings, fraud, attribution manipulation, mislabeled traffic, undeclared sources or age-protection failures). Nothing in these Guidelines entitles an Affiliate to a warning or a cure period before enforcement action is taken.

8. Reporting

If you become aware of: piracy of Program content; misuse of Program or Network trademarks; another affiliate's fraudulent or prohibited conduct; or any content in the absolutely prohibited categories — report it to SOHA immediately through the dashboard or the abuse channel published on the Network website. Good-faith reporting will never be held against you.

9. Updates

SOHA may update these Guidelines at any time with effect upon publication in the dashboard, with notice for material changes as provided in the Agreement. Continued participation after the effective date constitutes acceptance.

© SOHA Media Systems Corp. All rights reserved.

WANT-A-TOP — ABUSE & CONTENT REPORTING Version 1.0 — Effective Date: August 19, 2026 SOHA Media Systems Corp — 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA

1. Purpose

Want-A-Top is a business-to-business affiliate network operated by SOHA Media Systems Corp ("SOHA"). We take reports of abuse, illegal content and fraudulent conduct seriously. This page explains what you can report, how to report it, and what happens next. This channel is available to anyone: affiliates, Program Operators, rights holders, payment partners, authorities and members of the public.

2. What You Can Report

Content concerns:

• Suspected child sexual abuse material (CSAM) or any sexualization of minors linked to the network's advertising or any promoted program.
• Non-consensual intimate imagery or content published without the consent of the persons depicted.
• Any content in the absolutely prohibited categories of the Want-A-Top Master Affiliate Agreement (Clause 4.3).

Intellectual property:

• Piracy or unauthorized redistribution of content belonging to a promoted program or its creators.
• Misuse of the Want-A-Top trademarks or of a promoted program's trademarks, including typosquatted domains and fake social profiles.

Advertising and conduct:

• Deceptive, misleading or non-compliant advertising run by an affiliate of the network (fake players, false "free" claims, missing ad disclosures, adult creatives placed in environments accessible to minors).
• Fraudulent affiliate conduct: attribution manipulation, bot traffic, cookie stuffing, spam campaigns, or circumvention of age-verification systems.

Anything else you reasonably believe violates the law, our Master Affiliate Agreement or our Affiliate Compliance Guidelines.

3. How to Report

Email abuse@wantatop.com with:

1. What you are reporting (category above, if identifiable).
2. Where: full URLs, domains, ad screenshots, campaign identifiers or affiliate identifiers if known.
3. When you observed it (date/time and timezone if possible).
4. Evidence: screenshots, copies of emails or messages, or any other supporting material.
5. Your contact details if you wish to receive follow-up. Reports may be submitted without identifying yourself, although anonymous reports may limit our ability to investigate or respond.

For intellectual-property complaints, please additionally identify the protected work, your ownership or authority to act, and include a good-faith statement that the reported use is unauthorized.

4. What Happens Next

• We acknowledge identified reports within seven (7) business days.
• Reports are reviewed by SOHA's compliance function. Where a report concerns a promoted program rather than the network itself, we escalate it to the relevant Program Operator, which is independently responsible for the content of its own platforms.
• Substantiated findings against an affiliate are handled under the enforcement provisions of the Master Affiliate Agreement and the Affiliate Compliance Guidelines, up to and including immediate termination and forfeiture of commissions.
• Reports involving suspected CSAM are treated with absolute priority: the material is not further disseminated, evidence is preserved, and the matter is reported to the competent authorities and to NCMEC or the equivalent body.
• We do not disclose the identity of good-faith reporters to the reported party, except where required by law.

5. Good Faith

Reports must be made in good faith. Knowingly false or abusive reports — including fraudulent IP claims — may result in liability for the reporter and, where the reporter is a network participant, action under the Master Affiliate Agreement. Good-faith reporting will never be held against an affiliate, even where the report is not ultimately substantiated.

6. Other Channels

• Privacy requests and data-subject rights: privacy@wantatop.com (see the Privacy Policy).
• General legal notices: legal@wantatop.com.
• Affiliates may also report through their dashboard.

© SOHA Media Systems Corp. All rights reserved.

WANT-A-TOP COOKIE POLICY Version 1.0 — Effective Date: August 19, 2026 SOHA Media Systems Corp — 1500 S Dairy Ashford Rd, Suite 207, Houston, TX 77077, USA Contact: privacy@wantatop.com

1. Scope

This Cookie Policy describes the cookies and similar technologies used on wantatop.com, including the public website, the affiliate dashboard and the affiliate click-redirect service operated at this domain. It should be read together with the Want-A-Top Privacy Policy.

This Policy does not cover the websites of the platforms promoted through the Network ("Programs"). Each Program is operated independently and applies its own cookie policy and consent mechanisms on its own sites.

2. What Cookies Are

Cookies are small files stored on your device by a website. We also refer here to similar technologies such as browser local storage. Cookies can be "first-party" (set by wantatop.com) or "third-party" (set by another provider whose service is embedded in our pages).

3. Cookies Set on wantatop.com

Cookie	Provider	Purpose	Duration	Category
PHPSESSID	wantatop.com	Session management for the website and affiliate dashboard	Session (deleted when the browser closes)	Strictly necessary
acceso_wantatop_com	wantatop.com	Encrypted persistent login for affiliates	36 hours (up to 1 year only where a "remember me" option is used)	Strictly necessary
data_wantatop_com	wantatop.com	Encrypted storage of interface data and preferences	1 year	Functional/preferences
__cf_bm, cf_clearance (where present)	Cloudflare	Security, bot mitigation and delivery of the site through Cloudflare's network	Set and controlled by Cloudflare (typically minutes to hours)	Security
_GRECAPTCHA and related Google cookies	Google	Google reCAPTCHA v2, used on the affiliate sign-up form to prevent automated registrations	Set and controlled by Google	Security

Notes: we do not use a dedicated CSRF or load-balancing cookie. Cloudflare and Google set and manage their own cookies under their respective privacy policies; we use these services for security purposes only.

4. Local Storage

The affiliate dashboard uses browser localStorage to cache interface language texts (keys of the form lang[..]). A UI library may store a technical key (swal-initiation). Neither is used for tracking or advertising. sessionStorage is not used.

5. Affiliate Click Tracking — No Cookies

When an end user clicks an affiliate link, the request passes through our redirect endpoint at wantatop.com/in/ and is immediately redirected (HTTP 302) to the landing page of the relevant Program. This redirect does not set or read any cookie or other identifier on the user's device. Attribution information (the affiliate identifier and campaign parameters such as af and utm_*) travels solely as parameters in the destination URL.

Whether and how the destination Program stores that information on its own site (for example in a first-party cookie of the Program's domain) is determined by the Program and governed by the Program's own cookie policy and consent mechanisms.

Conversions are reported back to Want-A-Top by the Programs server-to-server (no pixel or script runs in the user's browser for this purpose), containing pseudonymous attribution data such as affiliate identifier, transaction reference, product, amount and currency, as described in Section 3 of the Privacy Policy.

The click redirect does not store the end user's IP address as an attribution record. Standard, short-lived web-server and network-security logs (including Cloudflare's) may register the request as part of ordinary infrastructure operation.

6. Analytics and Advertising Cookies

wantatop.com does not use analytics tools (such as Google Analytics or similar) and does not set advertising, profiling or cross-site tracking cookies. Should this change, this Policy will be updated in advance and a consent mechanism will be deployed where legally required.

7. Consent and Managing Cookies

The cookies we set are strictly necessary for the operation and security of the site and the affiliate dashboard, or store functional preferences closely linked to the service requested; for this reason, wantatop.com does not display a cookie consent banner. Security services (Cloudflare, Google reCAPTCHA) operate on the sign-up and site-protection functions only.

You can manage or delete cookies at any time through your browser settings (blocking cookies for wantatop.com may prevent you from logging in to the dashboard). Information on the third-party cookies used for security is available in Google's and Cloudflare's own privacy documentation.

8. Changes

We may update this Policy to reflect technical or legal changes. The version and effective date appear in the header. Material changes affecting affiliates will be notified through the dashboard.

9. Contact

Questions about this Policy: privacy@wantatop.com.

© SOHA Media Systems Corp. All rights reserved.