Natty Hatty, Inc. (“Natty Hatty”) complies with all applicable U.S. export control laws, sanctions regulations, and related international compliance obligations.

Use of Natty Hatty is subject to restrictions administered by:

• U.S. Department of Commerce — Bureau of Industry & Security (BIS)

• U.S. Department of the Treasury — Office of Foreign Assets Control (OFAC)

• U.S. Department of State — Directorate of Defense Trade Controls (DDTC)

• Applicable export and sanctions laws of other jurisdictions (as relevant)

Organizations and users accessing Natty Hatty must agree to comply with these regulations at all times.

1. Overview

As a cloud-based software platform, Natty Hatty is classified under the Export Administration Regulations (EAR) as EAR99, meaning it is generally allowed for export except to restricted destinations, restricted individuals, and prohibited end uses.

Natty Hatty may not be used, accessed, exported, or re-exported:

• In prohibited countries

• By restricted or sanctioned individuals or entities

• For prohibited activities

Natty Hatty enforces controls through automated checks, payment restrictions, IP-blocking, and account review.

2. Prohibited Countries & Regions

Natty Hatty may not be used in, by residents of, or on behalf of entities located in:

• Cuba

• Iran

• North Korea

• Syria

• The Crimea region

• The Donetsk and Luhansk regions (DNR/LNR) of Ukraine

• Any territory subject to comprehensive U.S. sanctions

Natty Hatty actively blocks IP addresses and payment routing from these jurisdictions.

3. Denied & Restricted Parties

Natty Hatty may not be used by individuals or organizations listed on:

• OFAC’s Specially Designated Nationals (SDN) List

• BIS Denied Persons List

• BIS Entity List

• BIS Unverified List

• U.S. State Department Debarred List

• Any equivalent foreign sanctions list

• Any organization owned 50% or more by a sanctioned party

Users must not attempt to:

• Create accounts using aliases

• Mask IP addresses

• Provide false identity or payment information

Natty Hatty may terminate any account linked to restricted persons.

4. Prohibited End Uses

Natty Hatty may not be used for:

• Military, defense, or weapons development

• Terrorism or extremist activity

• Money laundering or sanctioned transactions

• Human trafficking or exploitation

• Child endangerment

• Training, recruiting, or coordinating unlawful activity

• Any purpose prohibited by U.S. export laws

Natty Hatty enforces a strict zero-tolerance policy for any use involving harm to minors.

5. Payments & Financial Compliance

In compliance with OFAC and U.S. financial sanctions:

• Stripe automatically blocks payments from sanctioned individuals and countries

• Natty Hatty does not accept payments routed through sanctioned banks

• Payouts cannot be directed to sanctioned financial institutions

• Cards, ACH routes, and accounts linked to restricted persons are immediately rejected

Natty Hatty relies on Stripe’s PCI-DSS Level 1 infrastructure and compliance screening to prevent prohibited financial activity.

6. Responsibilities of Organizations

• Ensure no staff, coaches, volunteers, or administrators are sanctioned persons

• Not export or re-export the platform to prohibited regions

• Not use VPNs or proxies to bypass geographic restrictions

• Not use the platform for any defense or military-related activity

• Ensure compliance with OFAC, EAR, and BIS rules

• Not provide access to individuals or groups restricted under U.S. law

• Immediately report any suspected sanctions-related concerns to Natty Hatty

Organizations are fully responsible for ensuring lawful use by their team members.

7. Responsibilities of Parents & End Users

• Not access Natty Hatty from a sanctioned location or network

• Provide truthful identity information

• Not use VPNs or masking software to falsify location data

• Comply with all applicable export and sanctions laws

Natty Hatty may suspend accounts found violating these obligations.

8. Natty Hatty Internal Controls

Natty Hatty implements the following compliance measures:

• IP-based geofencing for sanctioned countries

• Stripe sanctions and identity checks for financial transactions

• Account review for high-risk activity

• Device fingerprinting to detect risky or masked logins

• Automatic rejection of payments routed through embargoed banks

• Internal compliance training for Natty Hatty staff

• Manual review of suspicious accounts or behavior

Natty Hatty does not provide the platform to any sanctioned regions or entities.

9. Prohibited Workarounds

Users may not attempt to:

• Access Natty Hatty via VPN or proxy from restricted countries

• Create fake or duplicate accounts to circumvent compliance

• Use third parties to route traffic from restricted regions

• Manipulate billing or routing information

• Export platform data to entities in sanctioned jurisdictions

Attempts to evade sanctions controls may result in immediate termination.

10. Enforcement

Natty Hatty may take one or more actions:

• Immediate account suspension

• Permanent termination

• Payment or payout freeze

• Reporting to OFAC, BIS, or federal authorities

• Legal action for violations

Natty Hatty reserves the right to investigate any suspected sanctions or export violation.