Doubledown Interactive Co (DDI) Risk Analysis

Substantially all of the content and related intellectual property incorporated into our games are licensed from third parties, in particular IGT and DUG. Since June 2017, we have been party to a Game Development, Distribution and Services Agreement with IGT (which we refer to as the "IP License Agreement"), pursuant to which we are granted the right to develop and distribute certain IGT game titles and related intellectual property. Under the IP License Agreement, we expect, but cannot guarantee, that we will be able to continue to receive those rights on favorable or reasonable terms. In addition, although IGT has the right to terminate the IP License Agreement for cause, we will retain exclusive, perpetual, and irrevocable use of any IGT intellectual property already used by us for games launched before June 1, 2020 (excluding third party rights that IGT no longer has rights to itself), except in limited circumstances. For each slot game first launched in the social online game field starting on June 1, 2020, the license from IGT is non-exclusive, perpetual and irrevocable. See "Item 4B. Business Overview-Intellectual property." In addition, we have licensing arrangements with our controlling shareholder, DUG, since March 2018, pursuant to which we are granted an exclusive license to develop and distribute certain of their social casino game titles and sequels, subject to our payment of customary terms and license fees. As of December 31, 2023, we license approximately 49 game titles that are actively offered to players. We expect, but cannot guarantee, that we will be able to continue to receive those rights on favorable or reasonable terms. See "Item 4B. Business Overview-Intellectual property." The future success of our business will depend, in part, on our ability to retain or expand intellectual property licenses. We cannot assure that these third-party licenses will continue to be available to us on commercially reasonable terms, if at all. Further, existing and future license arrangements containing royalty provisions could cause us to incur impairment charges in connection with minimum guarantees. To address these risks, we have increased our research and development capabilities in order to create proprietary intellectual property, including content, although there is no guarantee we will be able to create content that receives sufficient acceptance from the market or that is developed in a timely manner. In the event that we are unable to create such content and, in addition, if we lose the benefit of, or cannot renew and/or expand existing licenses with IGT and DUG, we may be required to discontinue or limit our use of certain game titles and related technologies that include or incorporate the licensed intellectual property.

When our players use our games, we may process, store, use, and share data about our players, some of which contains personal information. We use some of this data to provide a better experience for the player by delivering relevant content and advertisements. As a result of new data protection laws, which expand the definition of "personal information" to include identifiers used for advertising purposes, our players in certain jurisdictions may decide not to allow us to collect some or all of this data or may limit our use of this data. Any limitation on our ability to collect data about players and game interactions would likely make it more difficult for us to deliver targeted content and advertisements to our players. Interruptions, failures or defects in our data collection, mining, analysis and storage systems, as well as privacy concerns and regulatory restrictions regarding the collection of data, could also limit our ability to aggregate and analyze player data. If that happens, we may not be able to successfully adapt to player preferences to improve and enhance our games, retain existing players and maintain the popularity of our games, which could cause our business, financial condition, or results of operations to suffer. Additionally, Internet-connected devices and operating systems controlled by third parties increasingly contain features that allow device users to disable functionality that allows for the delivery of advertising on their devices, including through Apple's Identifier for Advertising, or IDFA, or Google's Advertising ID, or AAID, for Android devices. More device and browser manufacturers are including these features as part of their standard device specifications. For example, Apple requires app developers to ask for permission before they can track an individual's activity across apps or websites they do not own in order to target advertising to the individual, measure an individual's actions due to advertising, or to share the individual's information with data brokers. Similarly, Android devices allow an individual to delete their advertising ID, which prevents such tracking. If players elect to utilize the opt-out mechanisms in greater numbers, our ability to deliver effective advertisements would suffer, which could adversely affect our revenues from in-game advertising.

There is certain opposition in some jurisdictions to interactive online gaming, including social casino games. In September 2018, the World Health Organization added "gaming disorder" to the International Classification of Diseases, defining the disorder as a pattern of behavior characterized by impaired control over gaming and an increase in the priority of gaming over other interests and daily activities. Some states or countries have anti-gaming groups that specifically target social casino games. Such opposition could lead these jurisdictions to adopt legislation or impose a regulatory framework to govern interactive social gaming or social casino games specifically and which could require us to comply with stringent regulations and/or require us to modify our operations in order to comply. These could result in a prohibition on interactive online gaming or social casino games altogether, restrict our ability to advertise our games, encourage our existing platform partners to restrict our ability to deploy our games through their media, or substantially increase our costs to comply with these regulations, all of which could have an adverse effect on our results of operations, cash flows, and financial condition. We cannot predict the likelihood, timing, scope, or terms of any such legislation or regulation or the extent to which they may affect our business. In addition, certain third-party distribution platforms on which we rely have had lawsuits brought against them for servicing social casino games, which may limit our access to such platforms. On September 17, 2018, 15 international gambling regulators, plus the Washington State Gambling Commission, signed a declaration expressing concern "with the risks posed by the blurring of lines between gambling and other forms of digital entertainments such as video gaming," including, among others, social casino gaming. The regulators committed to work together to analyze the characteristics of video games and social gaming, and to engage in an informed dialogue with the video game and social gaming industries to ensure the appropriate and efficient implementation of applicable laws and regulations. The regulators also indicated they would work closely with their consumer protection enforcement agencies. Several other gambling regulators have joined as new signatories to the declaration since its publication. We cannot predict the likelihood, timing, scope, or terms of any actions taken as a result of the declaration. Consumer protection concerns regarding games such as ours have been raised in the past and may again be raised in the future. These concerns include (i) whether social casino games may be shown to serve as a gateway for adolescents to monetary gambling, and (ii) a concern that social casino gaming companies are using big data and advanced technology to predict and target "vulnerable" users who may spend significant time and money on social casino games in lieu of other activities. Such concerns could lead to increased scrutiny, including the potential imposition of a regulatory framework, over the manner in which our games are designed, developed, distributed, and presented. It is difficult for us to monitor and enforce age or other jurisdictional restrictions with respect to players who download or play our games, as we rely on third-party distribution platforms such as Apple App Store, Facebook, Google Play Store, and Amazon Appstore. We cannot predict the likelihood, timing, or scope of any concern reaching a level that will impact our business, or whether, as a result, we would suffer any adverse impacts to our results of operations, cash flows, financial condition, and reputation.

Tax laws are dynamic and subject to change as new laws are passed and new interpretations of the law are issued or applied. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws and related regulatory guidance. However, the tax benefits that we intend to eventually derive could be undermined due to changing tax laws. In addition, the taxing authorities in Korea and the United States regularly examine income and other tax returns and we expect that we may become subject to examinations of our income and other tax returns from time to time. The ultimate outcome of these examinations cannot be predicted with certainty.

We collect, process, store, use, and share data, some of which contains limited personal information. Consequently, our business is subject to a number of U.S. and international laws and regulations governing data privacy and security, including with respect to the collection, storage, use, transmission, sharing, and protection of personal information. Data privacy protection laws are rapidly changing and likely will continue to do so for the foreseeable future and may be inconsistent from jurisdiction to jurisdiction. We are subject to U.S. federal and state and foreign laws related to the privacy and protection of player data. Such regulations such as the General Data Protections Regulation ("GDPR") from the European Union ("EU"), the United Kingdom's Data Protection Act of 2018, the UK GDPR, and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and newly enacted privacy laws in Virginia, Colorado, Connecticut and Utah, which went into effect in 2023, are new, untested laws and regulations that could affect our business, and the potential impact is unknown. See "Item 4B. Business Overview-Regulation of the industry." The U.S. government, including the Federal Trade Commission and the Department of Commerce, also continue to review the need for greater regulation over the collection of personal information and information about consumer behavior, and the U.S. Congress is considering a number of legislative proposals to regulate this area. Currently, there are various legislation related to data privacy and security pending before several legislative and regulatory bodies in the United States and worldwide that if passed could impact our operations. We are also subject to evolving laws and regulations that dictate under what circumstances we can transfer, process and/or receive personal information that is critical to our operations, including data shared between countries or regions in which we operate. For example, in July 2020, the European Union-U.S. Privacy Shield was invalidated by the Court of Justice of the European Union ("CJEU"). While the EU and the UK issued new Standard Contractual Clauses, such transfers of European personal information continue to be subjected to regulatory and judicial scrutiny. If we are unable to transfer data between and among countries and regions in which we operate, or if we are restricted from sharing data among our products and services, it could affect the manner in which we operate and require us to change our data processing policies and measures, which may be burdensome and difficult to undertake successfully, and could adversely affect our financial results. Due to the rapidly changing nature of these data protection laws, there is not always clear guidance from the respective governments and regulators regarding the interpretation of the law, which may create the risk of an inadvertent violation. Efforts to comply with these and other data privacy and security restrictions that may be enacted could require us to modify our data processing practices and policies and could significantly increase the cost of our operations. Failure to comply with such restrictions could subject us to criminal and civil sanctions and other penalties. In part due to the uncertainty of the legal climate, complying with regulations, and any applicable rules or guidance from self- regulatory organizations relating to privacy, data protection, information security, and consumer protection, may result in substantial costs and may necessitate changes to our business practices, which may compromise our growth strategy, adversely affect our ability to attract or retain players, and otherwise adversely affect our business, financial condition, and operating results. Any failure or perceived failure by us to comply with our posted privacy policies or terms of use, our privacy-related obligations to players or other third parties, or any other legal obligations or regulatory requirements relating to privacy, data protection, or information security may result in governmental investigations or enforcement actions, litigation, claims, or public statements against us by consumer advocacy groups or others, and could result in significant liability, cause our players to lose trust in us, and otherwise materially and adversely affect our reputation and business. Furthermore, the costs of compliance with, and other burdens imposed by, the laws, regulations, and policies that are applicable to us may limit the adoption and use of, and reduce the overall demand for, our games. Additionally, if third parties we work with violate applicable laws, regulations, or agreements, such violations may put our players' data at risk, or result in governmental investigations or enforcement actions, fines, litigation, claims, or public statements against us by consumer advocacy groups or others, and could result in significant liability, cause our players to lose trust in us, and otherwise materially and adversely affect our reputation and business. Further, public scrutiny of, or complaints about, technology companies or their data handling or data protection practices, even if unrelated to our business, industry, or operations, may lead to increased scrutiny of technology companies, including us, and may cause government agencies to enact additional regulatory requirements or to modify their enforcement or investigation activities, which may increase our costs and risks.

We are incorporated in Korea and certain of our operations are located in Korea. As a result, we are subject to geopolitical uncertainties and risks involving Korea and North Korea. Relations between Korea and North Korea have been tense throughout Korea's modern history. The level of tension between the two Koreas has fluctuated over the years and may increase or change abruptly as a result of current and future events. In particular, there have been heightened security concerns in recent years stemming from North Korea's nuclear weapons and ballistic missile programs as well as its hostile military actions against Korea. Over the years, North Korea has also conducted a series of ballistic missile tests, including missiles launched from submarines and intercontinental ballistic missiles that it claims can reach the United States mainland. In response, the Korean government has repeatedly condemned the provocations and flagrant violations of relevant United Nations Security Council resolutions. Internationally, the United Nations Security Council has passed a series of resolutions condemning North Korea's actions and significantly expanding the scope of sanctions applicable to North Korea. Over the years, the United States and the European Union have also expanded their sanctions applicable to North Korea. North Korea's economy also faces severe challenges, including impact of COVID-19, which may further aggravate social and political pressures within North Korea. In recent years, a series of bilateral summit meetings were held between Korea and North Korea in April, May, and September 2018 and between the United States and North Korea in June 2018 and February and June 2019. The United States-North Korea meeting in February 2019 ended abruptly and without an agreement after the United States refused to lift sanctions until North Korea relinquished all of its nuclear weapons. In June 2019, the United States and North Korea had another one-day summit at the Korean Demilitarized Zone, following which both sides announced a resumption of denuclearization talks. Despite attempted new outreach to North Korea by the United States under the presidency of Joe Biden in early 2021, North Korea continued to launch its missile testing programs, and heightening tensions remains and the outlook of further discussions remains uncertain. Further tensions in North Korean relations may develop due to events such as North Korea's leadership crisis, breakdown in high-level inter-Korea contacts, or any military hostilities. Alternatively, tensions may be resolved through reconciliatory efforts, which include peace talks, alleviation of sanctions, or reunification. There can be no assurance that future negotiations will result in a final agreement on North Korea's nuclear program, including critical details such as implementation and timing, or that the level of tensions between Korea and North Korea will not escalate. Any increase in tensions, an outbreak in military hostilities or other actions or occurrences, could have a material adverse effect on the Korean economy and on our business, prospects, financial condition, and results of operations.

Our games are available to players for free, and we generate revenue from players only if they voluntarily purchase virtual chips above and beyond the level of free virtual chips provided periodically as part of the games. In particular, we monitor the number of players who make a purchase to assess any periodic changes in behavior and associated trends. Average MPUs, or the average number of players who made a purchase at least once in a month, decreased from 2022 to 2023, while our overall payer conversion rate has increased from 5.4% in 2022 to 6.4% in 2023. Our paying players may stop making purchases in our games or playing our games altogether at any time. In order to sustain or increase our revenue levels, we must increase the amount our players spend in our games and/or increase the number of players who purchase virtual chips. To retain paying players, we must devote significant resources so that the games they play retain their interest and motivate them to purchase virtual chips through incentives and engaging content. If the average amount spent by our paying players declines, if we fail to offer games that sufficiently incentivize players to purchase our virtual chips, or if we fail to properly manage the economics of free versus paid chips, our business, financial condition, and results of operations could be materially and adversely affected.