Privacy Policy

1. Membership registration and management: Verifying intent to register, identifying and authenticating users for member services, maintaining and managing membership.

2. Service provision: Providing services, content, personalized services, and identity verification.

3. Payment processing: Subscription payments and refund handling.

4. Unified account operation: When you use multiple services provided by the Company with a single account, account information (such as email and nickname) is shared across those services to identify and authenticate members and to enable integration between services.

5. Operation of the game services: Preventing cheating, limiting one-time benefits (such as welcome bonuses) to one per device, and providing chat and handling reports (see Articles 4 and 5 for details).

6. Identity verification (adult check): checking the age requirement of age-restricted services, preventing duplicate sign-ups by the same person, and fulfilling age-verification duties under applicable laws and confirming that free benefits (1 developer app and a free notification allowance) are given once per person (see Article 6 for details)

Required: Email address, password, nickname

Optional: Profile image, phone number, contact

Automatically collected: IP address, cookies, service usage records, access logs

At payment: Payment information (card issuer, payment date/time, etc.), payment history

At social login: When you log in through an external authentication provider such as Google or Kakao, the Company receives basic profile information such as your email address, nickname, and profile image from that provider.

Service-specific additional items: Some services may collect additional information necessary to provide that service, in which case it is separately notified and consented to on that service's screen.

At in-app purchase: Purchase history, including the transaction ID issued by the app store operator, the purchased item, and the purchase date/time and amount

When using the game services: The items set out in Articles 4 and 5

For identity verification: the items set out in Article 6

1. Member information: Until membership withdrawal (destroyed immediately after withdrawal)

2. Payment information and in-app purchase records (transaction IDs, purchase history): Retained for 5 years under the Act on the Consumer Protection in Electronic Commerce

3. Service usage records: Retained for 3 years (except for records whose retention period is separately set out in Articles 4 and 5, which follow those Articles)

4. Identity verification records: the periods set out in Article 6 (the derived value used to prevent duplicate claims of free benefits follows Article 6, item 8)

5. Where retention is required by applicable laws, retained for the period specified by those laws

1. Items collected

- Device identifier: A random number generated on first access; only a value irreversibly transformed (cryptographically hashed) from it is stored.

- Access IP: The original address is not stored. The Company stores a transformed value and a transformed value that only indicates whether connections come from the same region or carrier range.

- Access environment: App or web, browser and operating system type, time zone, language, and login method

- Game usage records: Time, type, and result of commands (including rejection reasons), response times, room entry and exit, and disconnection and reconnection times

- Settlement flows and final rankings of matches in which chips are wagered

- Chat usage information: Information other than chat content, such as message counts and posting times

- For the purposes of this Article, the Company does not collect chat content, action content (such as bid amounts), passwords, or login tokens. The processing of chat content is governed by Article 5.

2. Purposes of use

- Detecting and preventing multi-account participation, collusion, chip dumping, intentional abandonment, use of automated programs, request tampering, and ranking manipulation

- Preventing accounts that connect from the same device from joining the same chip-wagered match together

- Withholding ranking updates for accounts suspected of misuse until review is complete

- The Company does not suspend use based on automated detection alone; any sanction is decided by an operator after confirming the evidence.

3. Retention period

- Access and usage records: Automatically destroyed 90 days after collection

- Detection results, review records, and sanction history: Retained for 1 year, then destroyed

- Restrictions in effect: Retained until lifted or until the restriction period ends

4. Per-device records of one-time benefits: To limit benefits granted only once, such as welcome bonuses, to one per device, the Company stores the identifier (irreversibly transformed) of each device that received the benefit, linked to the account, and retains this record until membership withdrawal.

5. Users can check their own access devices, access history, and any actions taken against them under "Security log" on the account screen.

1. Items processed: The content, posting time, and display name (ranking nickname or alias) of messages written by members in the public lobby chat of the game services, all of which are visible to every user who accesses the service. Profanity and other inappropriate expressions are masked before storage, and the original text is not stored.

2. Purposes of use: Displaying chat, moderating inappropriate use such as abuse and spam, and receiving and handling reports

3. Retention period: Automatically destroyed 30 days after posting, including messages hidden by an operator.

4. Reported messages: A copy of the reported message content is kept in the report record for operator review, for up to 90 days, after which it is destroyed.

5. If chat is used during a match: The number of uses, time of use, match outcome, and hashed device/IP values are processed under the anti-cheating record standards set out in Article 4 (90 days from collection), and do not include the chat content itself.

6. Block lists are stored on the account, and "hide" settings are stored only on the user's device. Upon account withdrawal, chat messages, block lists, and mute records are all deleted.

7. An operator's message deletion, muting, and lifting of mutes are recorded, together with the reason, in the operational (audit) log.

1. Items confirmed during identity verification: name, date of birth, gender, mobile phone number, mobile carrier, connecting information (CI), duplicate sign-up verification information (DI), and whether the user is a foreign national

2. Purpose: verifying identity and adult status (checking the age requirement of the linked service), preventing duplicate sign-ups and multiple accounts by the same person, and fulfilling age-verification duties under applicable laws; confirming that free benefits are given once per person (preventing the same person from creating multiple accounts to claim them repeatedly)

3. Items not stored: Of the items above, the Company does not store the name, mobile phone number, gender, mobile carrier, foreign-national status, DI, the original CI, or the full date of birth. On receiving the verification result, the Company uses it only to determine adult status and to create the transformed value below, and discards it without storing it.

4. Items stored: the verification result (completed, failed or expired), adult status, year of birth, a value derived from the CI with a per-service secret key so that it cannot be restored (cryptographic hash), the service that requested the verification and that service's member identifier, and the request and completion times

5. Information passed to services: The service that requested the verification receives only whether the user was verified, adult status, year of birth, the transformed value above, and the verification time; it never receives the name, mobile phone number or original CI. The transformed value differs for each service, so the same person cannot be linked across different services.

6. Retention period: Completed verification records are automatically destroyed 1 year after the request date, and incomplete, failed or expired records 30 days after the request date.

7. Mobile phone identity verification is carried out through the entrusted parties listed in Article 8, and information the user enters on the verification screen is processed by those parties and the identity verification agencies (mobile carriers) under their own privacy policies.

8. Identity verification for free benefits: When a user completes identity verification in My Page to receive free benefits (1 developer app and a free notification allowance), the Company does not store the original name, mobile phone number or connecting information (CI), and discards them as described in item 3. The Company stores only a value derived from the CI with a one-way, non-reversible transformation (cryptographic hash), the year of birth, adult status and the time verification was completed. The derived value is used only to check for duplicate claims and, for the purpose of preventing duplicate claims, is kept after membership withdrawal with its link to the member information severed, until the service is discontinued (the retention period in item 6 does not apply to this derived value). The service can be used without identity verification, but free benefits are not provided and paid plans remain available.

1. When the user has consented in advance

2. When required by law, or when an investigative agency requests it in accordance with the procedures and methods prescribed by law for investigative purposes

To provide services smoothly, the Company entrusts personal information processing tasks as follows.

Payment processing: TossPayments

Cloud services: AWS, Supabase

Identity verification: Korea Port One Co., Ltd. (PortOne), NHN KCP Corp. (NHN KCP)

1. Users may view or modify their personal information at any time.

2. Users may withdraw consent to personal information processing at any time.

3. Users may withdraw consent to the collection and use of personal information by withdrawing membership.

1. When personal information becomes unnecessary due to the expiration of the retention period or achievement of the processing purpose, the Company destroys it without delay.

2. For information in electronic file form, technical methods that make the records irreproducible are used.

For reports or consultations regarding personal information infringement, please contact the agencies below.

- Personal Information Infringement Report Center (privacy.kisa.or.kr / 118)

- Supreme Prosecutors' Office Cyber Investigation Division (www.spo.go.kr / 1301)

- National Police Agency Cyber Bureau (cyberbureau.police.go.kr / 182)