Privacy Policy

1. Privacy Policy

This Privacy Policy applies to all personal data processed in our applications, websites, gaming services, and offline events. We act as a data controller and work with third parties, including data processors, to process data.

Data processed in connection with our services complies with the personal data protection laws of the countries in which we serve.

2. Processing of Personal Information: Scope of this Privacy Policy

We do not collect more data than is necessary and do not collect specific data without user consent.

As described below, depending on your specific use of our services, we may collect information from you, from third parties, and automatically through your use of our services. Some of this information is necessary, while some is optional.

To use the Service, we ask you to provide your email address or contact information to register, create an account directly on Kakaogames, or log in through a third-party account (hereinafter referred to as a "Third-Party Account"). When you perform these actions, Kakaogames collects the following necessary personal information:

Registration and Profile Information:

Google Account: Member Identifier, Profile Name

Facebook Account: Member Identifier, Profile Name

Apple Account: Member Identifier

X Account: Member Identifier, Profile Name

Kakao Account: Member Identifier, Profile Photo, Profile Name

Xbox Account: Member Identifier, Profile Name

PS: Member Identifier, Profile Name

Steam: Member Identifier

Epic Games: Member Identifier, Profile Name

Third-Party Account Information:

When you log in through a Third-Party Account, the personal information we collect may depend on the privacy settings you have set for that Third-Party Account.

We do not control how such third parties collect, use, and share your personal information. For more information, you should review the privacy policy of the relevant third party.

When you use the Service, the following information may be collected:

Character Name: We collect the names of user-generated characters in the game.

Age: For age verification purposes, we collect the user's date of birth before we authorize them to use the Service.

Purchase: If you purchase something through the store on the Service, we will collect and retain your purchase history and details; however, we will not receive your credit card number.

Customer Service: We may collect emails, chat logs, attachments, and customer feedback for customer inquiries, complaint handling and other operations, delivery notifications, and customer support tasks.

Security Authentication: We may collect country/region information and contact information for authentication purposes.

Other Automatically Collected Information: Device identification number. We may collect IP information, unique device identifiers, device IDs, advertising IDs, application IDs, or other identifiers; nicknames, activity and usage history, game scores, points, access logs, misuse history and fraud detection information, device information (model, service provider information, operating system information, language, and country/region information); precise geolocation data (GPS, with your consent); domain name, browser type and operating system type, and other statistical or technical information about your device or the version of our services you use.

3. Use and Legal Basis of Personal Information

Based on the following laws. Furthermore, users may withdraw their consent at any time.

We use your personal information for the following purposes and on the following legal bases:

3.1 To enter into and perform a contract with you:

Account registration

Provide and operate the Services

Process purchase details and confirm payment

Address your inquiries

3.2 For our legitimate business interests:

Respond to your requests, complaints, and communications, verify your identity, process transactions, provide technical support and troubleshooting, and for other customer service purposes

Develop new products and services

Identify members, prevent fraud, and detect misuse

Send event notifications to friends, search for users, and register users

To better understand how users access and use our Services and respond to their expectations and preferences

Administer contests

3.3 And for other research and analytical purposes

Protect the rights, health, and safety of others

Ascertain, exercise, and defend our legal rights and interests

Send you event information, marketing communications, and advertisements (applicable in Taiwan)

3.4 To comply with legal obligations

To comply with legal obligations as required by law or legal process

To comply with legal obligations in compliance with binding requests

To comply with legal obligations in compliance with child privacy laws

3.5 With your consent

To track your geographic location at the time of use of our services

Marketing communications (if not registered for the services)

Sending you information about events, marketing messages, and advertisements

To tailor the content and information sent or displayed to you, provide personalized content, and support advertising for our services.

4. Providing and Sharing Personal Information

We do not sell your personal information. We may share or provide user personal information with third parties under the following circumstances, and all such sharing will be done in accordance with the law and in a manner that protects the rights of users.

4.1. User Consent

Personal information may only be provided to third parties with the user's explicit consent, which may be withdrawn at any time.

4.2. Complying with Legal Obligations

When personal information is required by law, court order, or regulatory authority, it will be provided in accordance with applicable law.

4.3. Business Transfers and Mergers

When our company engages in corporate transactions such as mergers, acquisitions, and asset sales, personal information may be transferred to the transaction partner. In such cases, users will be notified appropriately after the transaction is completed.

4.4. Prevention and Protection of Illegal Activities

Personal information may be provided to relevant authorities as necessary to prevent fraud, illegal activities, security threats, etc.

4.5. Aggregated or De-Identified Information

Information may be aggregated so that it cannot identify individual users and shared with third parties for marketing, research, and analytical purposes.

4.6. Sharing with Service Providers

We may share personal information with trusted third-party service providers for purposes such as service operation, payment processing, and customer support. These third-party service providers process the information on our behalf, and we guarantee the security and confidentiality of the information through contracts.

5. Service providers with whom we may share your personal information include:

[Outsourced Processing of Personal Information]

6. Cookie Policy

1) Cookie Information

A cookie is a small text file sent to your browser by the server used to operate the website and stored on your computer.

2) Purpose of Cookie Use

We analyze the browsing history and time spent by members and non-members visiting our website. With user consent, we use this information to understand and track user attention, track website visits, and provide personalized services.

We and third-party analytics providers use tracking technologies such as cookies, web beacons, tags, or scripts to collect statistical data.

In addition to managing the website, we also obtain aggregated data from third-party analytics providers that use these technologies to understand how users use the website.

You have the right to prevent cookies from being stored on your hard drive. You can configure your browser options to allow all cookies, request permission each time a cookie is stored, or prevent all cookies from being stored. However, if you refuse to store cookies, some services may no longer be available.

[How to Use or Disable Cookies]

Chrome

(PC) Go to Settings > Privacy & Security > Cookies and Other Site Data in the upper-right corner of the browser menu and choose whether to accept or block cookies. (Mobile) In the top-right menu of the app screen, tap Settings > Advanced Settings > Switch to Cookies to turn the option to allow cookies on or off.

Edge

In the browser's options menu (e.g., Settings) > Settings > Click Cookies and Site Permissions in the left menu. Under Stored Cookies and Data, select Manage and Delete Cookies and Site Data. > Enable or disable cookie data storage and access (recommended).

Safari

(macOS) In Safari, tap Settings in the top-left menu bar > Switch to Privacy from the Settings window and turn "Block All Cookies" on or off.

(iOS) Settings > Select Safari from the app list > Under Privacy & Security, turn "Block All Cookies" on or off.

Internet Explorer

In the browser's Tools menu > Internet Options > Privacy > Advanced Settings

Google may use external web analytics tools (such as Google Analytics) to allow advertisers to display web ads and collect behavioral data.

Change Google Web Analytics settings: https://tools.google.com/dlpage/gaoptout/

*Other web analytics tools should be blocked in their own ways. Opting Out of Targeted Ads:

Online advertisers providing targeted ads: Google, Facebook, X

Behavioral data collected: Automatically collected when users visit our website or open our app.

* Online behavioral advertising: A marketing strategy that analyzes users' online behavior and search history to provide personalized services.

Android: Tap Privacy Settings, then Block Ads.

iOS: Tap Privacy Settings, then Limit Ad Tracking.

To change your cookie settings, please use the cookie settings menu at the bottom of our website.

7. Age Limits

Our services and personal data collection comply with laws regarding age limits.

7.1 Prohibition of Collection of Personal Data from Children

We do not intentionally collect personal data from children and do not provide services targeted to them.

If we determine that a child has provided personal data, we will immediately delete that data.

If we determine that a child's personal data is stored on our website, please exit the service the child is using or contact our Data Protection Department immediately.

7.2 Country-Specific Age Limits

We adhere to age limits in accordance with relevant laws in each country.

EU: According to GDPR, users under the age of 16 must obtain parental or legal guardian consent.

US: According to COPPA, personal information is not collected from children under the age of 13.

Japan: According to APPI, personal information is not collected from children under the age of 16.

Taiwan: According to PDPA, personal information is not collected from children under the age of 18.

Other countries: Comply with the applicable age restrictions in each country and implement restrictions in accordance with specific regional legal requirements.

Depending on the laws of the country where the service is used, additional confirmation procedures may be required, which are measures taken in accordance with the legal requirements of each country.

7.3 Limiting Interest-Based Advertising and Targeting

We do not display interest-based advertising or targeted advertising to children.

7.4 Data Deletion Procedures

When the Company confirms that it has collected personal information from a child, it will delete the information as promptly as possible.

Questions regarding deletion procedures can be directed to the following customer service channels.

7.5 Guidance for Parents and Guardians

We recommend that parents or guardians monitor and provide guidance to their children's online activities.

If a guardian discovers that a child is using our services, please unsubscribe immediately. If you need assistance, please contact us immediately.

This policy applies to all of our services. We strive to protect children's personal information by continuously improving our privacy protection measures.

When providing services to children, we process their personal information.

7.6 Age Verification Procedures

For children joining our services, we may implement user age verification procedures.

Age verification may require users to provide information such as date of birth or age, age range, and age verification documents (if necessary).

Information collected during the age verification process will comply with legal requirements and will only be used to verify eligibility for service provision.

Once age is verified, the information used for verification will be promptly deleted or securely stored.

8. Data Retention Period

We adhere to the following standards for the retention period of personal information.

8.1. Data Retention During Service Provision:

Personal information will be retained for the minimum period necessary to provide the service, while the user maintains an account. During this period, the user's personal information will be used for service operation and will be deleted immediately upon account cancellation or termination of service.

8.2. Data Retention for Legal and Contractual Obligations

The Company may retain personal data as necessary to comply with legal requirements or fulfill contractual obligations. For example, if there are regulatory compliance obligations, dispute resolution, or other custody obligations, retention will be limited to the minimum period.

8.3. Data Deletion Procedure

If you request account deletion through "Settings" in the game app or "My Information" on the homepage, we will securely delete your data within a maximum of 7 days.

If you request deletion of personal data, it will be securely deleted and rendered irretrievable within a maximum of 14 days. Furthermore, the need for data retention will be regularly reviewed, and unnecessary data will be deleted or anonymized.

8.4. Data Retention for Business and Research Purposes

In addition to legal obligations, some data may be retained for a period of time for research and business analysis. Even in these cases, the data will be anonymized or de-identified to ensure that no individual can be identified.

9. Security of Personal Information

To protect the security of your personal information, our company implements the following security measures:

9.1. Technical Protection Measures

Your personal information is protected during processing using encryption technologies (such as TLS, AES, and SHA). Furthermore, access to personal information is minimized and limited to authorized employees.

9.2. Physical Protection Measures

Servers and databases are located in facilities with enhanced physical security and are protected by security cameras and access control systems.

9.3. Administrative Protection Measures

We provide regular employee privacy and security training, and a privacy officer oversees this work. When outsourcing personal information processing to a third party, we require the signing of a strict contract to ensure compliance with security measures.

9.4. Personal Information Leakage and Breach Response Plan

In the event of a personal information leak or breach, we will promptly notify the data subject through our immediate response plan and implement mitigating measures. We will expedite the recovery and replacement of leaked personal information and promptly report it to the relevant authorities.

9.5. Security Inspections and Audits

We conduct regular security audits to check our security systems and address security vulnerabilities. These measures ensure that privacy protection measures are effectively implemented.

10. User Rights

You may exercise the rights set forth in this Privacy Policy at any time. Your rights regarding your personal information are as follows:

10.1. Right to Access and Portability

You may request access to the personal information we collect and details of how we use it. You may also request a structured copy of your retained personal information for transfer to other service providers.

10.2. Right to Correction and Deletion

You may request correction or updating of your personal information if it is inaccurate or incomplete. Furthermore, under certain conditions, you may request deletion of your retained personal information. This right applies when your personal information is no longer necessary or is required to comply with a legal obligation.

10.3. Right to Restrict Processing

You may request restriction of processing of your personal information. For example, you may request restriction of processing if you dispute the accuracy of your personal information or object to its processing.

10.4. Right to Object to Processing

You can object to the processing of your personal information for specific purposes. In particular, you have the right to object to the processing of your personal information for the purpose of direct marketing.

- How to Withdraw Consent for Marketing

To withdraw consent for push advertising sent within the game app, go to Game > Settings > Notifications > Deactivate Push Notifications.

10.5. Right to Automated Decision-Making

You can object to decisions that legally affect you as a result of automated processing, and request human intervention in such decisions.

10.6. Withdrawal of Consent to the Processing of Personal Information

You can withdraw your consent to the processing of your personal information at any time. However, withdrawing consent may affect your use of the Services.

10.7. Right to Non-Discrimination

You have the right not to be discriminated against for exercising your personal information protection rights.

10.8. Modification of Information Provided to Third Parties

If your personal information has been provided to a third party, and you request the modification or deletion of your personal information, the third party will be notified immediately so that they can modify the information.

11. International Data Transfers

For the purposes set forth in this Privacy Policy, your personal information will be processed in your home country. However, to provide our services, your personal information may be transferred outside of your home country for processing.

When your personal information is transferred internationally, we will implement appropriate safeguards in accordance with the laws of those countries. For example, we will use legal mechanisms such as standard contractual clauses or privacy adequacy decisions to protect personal data.

Accordingly, you consent to the transfer of your personal information to these countries.

In addition, you have the right to object to the transfer of your personal information at any time, as expressly provided in this Policy.